Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/8ZncOv-MjiHM0G0YBL_e1__P2Ko.roa
File: 8ZncOv-MjiHM0G0YBL_e1__P2Ko.roa (raw, json)
Hash identifier: tkF7gdnW06wG1ORV+DFW+yb5K0IOPNO5zL5Br3a2jEk=
Subject key identifier: F1:99:DC:3A:FF:8C:8E:21:CC:D0:6D:18:04:BF:DE:D7:FF:CF:D8:AA
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 0181CF5785E5C924BB33E205BBFB6F40E53B
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/8ZncOv-MjiHM0G0YBL_e1__P2Ko.roa
Signing time: Tue 05 Jul 2022 17:10:28 +0000
ROA not before: Tue 05 Jul 2022 17:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202193
IP address blocks: 37.200.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:57:85:e5:c9:24:bb:33:e2:05:bb:fb:6f:40:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jul 5 17:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f199dc3aff8c8e21ccd06d1804bfded7ffcfd8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:e7:bc:75:7c:ad:74:1b:1e:ee:90:8e:86:
da:a8:bf:6c:a8:53:16:9a:9e:53:67:06:e7:d0:b3:
6b:32:b4:11:ec:10:04:72:c5:ad:d2:21:c9:79:42:
75:27:2b:e3:9b:b3:37:d0:d8:40:2b:55:31:7c:18:
b1:ad:f2:e6:34:65:51:50:0e:89:1e:c9:8a:9f:50:
47:72:39:5c:79:fb:f5:80:e8:8a:61:4d:0a:bc:bd:
a8:8a:41:76:5b:6e:27:1c:f1:b6:20:61:83:a8:b9:
d9:e0:f9:fb:c8:7a:67:05:88:52:a3:e6:34:e5:e1:
44:f8:b7:30:d2:81:d4:36:23:c6:eb:7a:8a:b6:75:
01:88:95:da:5f:34:67:81:b3:9e:89:cb:fa:d7:22:
80:30:c8:06:ee:e3:43:fc:bc:11:4e:65:dc:62:62:
69:94:51:c9:a4:d7:a3:6b:f4:58:4e:e8:33:e5:40:
f7:01:84:66:53:f4:85:d7:bd:c3:c2:a7:fe:a2:af:
08:13:19:9b:d3:74:ad:05:1e:7d:d5:e4:39:8d:07:
7c:5d:64:61:65:01:3f:9f:f8:b3:e8:45:d5:71:a0:
67:60:ef:36:fc:69:14:1a:3a:26:71:4d:ef:34:d3:
48:b6:7d:37:2c:54:83:5d:5c:bb:c2:11:18:d5:e0:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:DC:3A:FF:8C:8E:21:CC:D0:6D:18:04:BF:DE:D7:FF:CF:D8:AA
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/8ZncOv-MjiHM0G0YBL_e1__P2Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.80.0/22
Signature Algorithm: sha256WithRSAEncryption
16:c7:12:fc:f9:41:3b:f8:e9:50:18:c7:6b:1d:15:1a:66:a2:
21:09:30:7c:4a:06:46:6f:be:4e:dd:03:0e:d1:38:49:f4:58:
e9:37:1b:23:60:ef:9d:71:14:41:43:fd:93:db:2f:ef:9f:6f:
f9:03:a9:97:93:e0:3b:96:df:27:d8:e4:9e:9a:2f:10:1e:59:
ea:da:1d:6f:a9:b4:6b:0d:89:41:7a:65:1c:fa:96:84:53:6f:
b7:94:c6:b2:74:3f:63:51:ff:56:2d:7d:89:36:85:00:56:31:
47:fc:85:ef:8b:98:72:dd:50:68:3b:8c:ba:14:f3:60:3c:c5:
a5:d2:8e:be:89:cd:5b:63:51:b8:8f:65:a7:a6:ef:63:8f:1f:
9f:16:25:9e:93:f7:c4:ee:87:2c:57:1e:7f:56:00:8f:b1:b2:
0e:98:bd:0c:c1:2a:5c:e7:2f:ee:29:29:bf:7b:1a:95:28:af:
db:89:a7:51:5c:6a:ad:fc:c4:15:2c:03:c3:5e:21:bc:d6:9b:
5a:3c:14:e6:fa:38:ad:a2:0d:e7:33:73:fe:40:4a:f4:87:8b:
49:c2:6e:c1:76:f8:9c:c1:37:eb:0b:70:01:58:d5:f7:bf:d5:
8d:e4:e7:02:7b:24:bd:2f:96:d1:c5:c7:20:95:9c:01:b9:e7:
ee:a5:e3:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHPV4XlySS7M+IFu/tvQOU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh
OGIxODQwHhcNMjIwNzA1MTcxMDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTk5ZGMzYWZmOGM4ZTIxY2NkMDZkMTgwNGJmZGVkN2ZmY2ZkOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkrnvHV8rXQbHu6QjobaqL9sqFMW
mp5TZwbn0LNrMrQR7BAEcsWt0iHJeUJ1Jyvjm7M30NhAK1UxfBixrfLmNGVRUA6J
HsmKn1BHcjlcefv1gOiKYU0KvL2oikF2W24nHPG2IGGDqLnZ4Pn7yHpnBYhSo+Y0
5eFE+Lcw0oHUNiPG63qKtnUBiJXaXzRngbOeicv61yKAMMgG7uND/LwRTmXcYmJp
lFHJpNeja/RYTugz5UD3AYRmU/SF173Dwqf+oq8IExmb03StBR591eQ5jQd8XWRh
ZQE/n/iz6EXVcaBnYO82/GkUGjomcU3vNNNItn03LFSDXVy7whEY1eA+LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGZ3Dr/jI4hzNBtGAS/3tf/z9iqMB8GA1UdIwQY
MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt
ZDQyYTgxYjgxZTIzLzEvOFpuY092LU1qaUhNMEcwWUJMX2UxX19QMktvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz
LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJchQMA0G
CSqGSIb3DQEBCwUAA4IBAQAWxxL8+UE7+OlQGMdrHRUaZqIhCTB8SgZGb75O3QMO
0ThJ9FjpNxsjYO+dcRRBQ/2T2y/vn2/5A6mXk+A7lt8n2OSemi8QHlnq2h1vqbRr
DYlBemUc+paEU2+3lMaydD9jUf9WLX2JNoUAVjFH/IXvi5hy3VBoO4y6FPNgPMWl
0o6+ic1bY1G4j2Wnpu9jjx+fFiWek/fE7ocsVx5/VgCPsbIOmL0MwSpc5y/uKSm/
exqVKK/biadRXGqt/MQVLAPDXiG81ptaPBTm+jitog3nM3P+QEr0h4tJwm7Bdvic
wTfrC3ABWNX3v9WN5OcCeyS9L5bRxccglZwBuefupePn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:35 2024 by rpki-client on console-ams.rpki-client.org