Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/8x-H_XafHu4mVMtzdG1rl0MwQKA.roa
File: 8x-H_XafHu4mVMtzdG1rl0MwQKA.roa (raw, json)
Hash identifier: 2c9Txk/eC+CoZkoOzW9X5blD47pIRZCe8b95ehJzpdQ=
Subject key identifier: F3:1F:87:FD:76:9F:1E:EE:26:54:CB:73:74:6D:6B:97:43:30:40:A0
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: B066B7
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/8x-H_XafHu4mVMtzdG1rl0MwQKA.roa
Signing time: Fri 03 Jun 2022 06:43:31 +0000
ROA not before: Fri 03 Jun 2022 06:43:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206570
IP address blocks: 66.22.239.0/24 maxlen: 24
66.22.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11560631 (0xb066b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jun 3 06:43:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f31f87fd769f1eee2654cb73746d6b97433040a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:90:f7:a9:04:49:62:1b:d2:d8:92:cf:cc:
2d:c1:44:57:36:92:67:64:05:0c:a1:83:62:74:de:
bf:bc:ec:fd:58:09:00:a3:38:5c:04:c4:23:b5:d4:
86:4a:f0:4f:a9:cc:0c:bd:48:51:2e:f7:c4:90:05:
34:19:71:b2:77:81:88:3d:7a:f6:48:a3:2b:2b:bf:
68:20:19:1f:28:3f:a6:fd:bd:99:65:e8:c5:e6:6d:
10:bc:59:77:26:d2:24:fc:94:65:cc:43:1a:86:16:
80:02:8f:a4:b1:6b:5f:22:7d:45:11:2b:29:87:45:
4a:85:80:aa:7b:1f:14:a5:12:40:ef:7e:33:80:50:
2f:80:db:4b:c2:4d:cc:29:19:f3:06:8d:7b:04:cb:
01:52:52:68:e7:79:38:73:4f:f9:45:cf:47:3d:bd:
ef:98:66:1c:fa:11:8c:b3:eb:1c:85:33:b5:3a:28:
a2:58:c3:c4:7b:c9:d1:17:2d:60:3a:35:64:e7:40:
a2:6d:6d:22:3a:9b:5e:a5:45:bb:44:cc:90:22:62:
0f:40:19:0f:74:d5:82:75:0c:09:c4:76:cf:f8:17:
ad:f6:a3:89:ad:04:7e:2a:53:e2:14:3f:92:18:3e:
a6:f9:d7:cd:ef:76:d2:5a:76:70:e4:d8:04:2d:98:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:87:FD:76:9F:1E:EE:26:54:CB:73:74:6D:6B:97:43:30:40:A0
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/8x-H_XafHu4mVMtzdG1rl0MwQKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.239.0-66.22.240.255
Signature Algorithm: sha256WithRSAEncryption
9c:7d:df:eb:14:fa:78:d4:bd:bb:ba:51:4d:a0:8c:10:aa:50:
92:81:8c:0c:86:4c:32:62:92:f7:3d:d8:db:88:ec:b9:ee:d3:
ca:f8:58:78:01:a9:0c:c0:f9:95:74:51:46:29:11:3f:5f:e5:
f7:6d:f8:3d:66:ba:ce:05:58:8e:79:e1:9d:5d:f6:53:3c:a2:
87:f9:f0:b0:ac:95:ad:40:55:f4:3f:10:02:6e:60:42:0c:ea:
62:d7:dc:8f:9a:f8:60:f0:02:89:88:62:ed:d4:fb:05:75:c9:
60:15:22:f1:ff:ee:c0:11:39:43:c0:3b:44:5a:4d:dc:65:0d:
5d:3b:fb:8e:2e:d4:fc:21:24:4e:f6:96:47:0c:6a:3e:0c:71:
00:5f:25:17:3d:0e:2f:44:d4:58:27:df:c9:73:29:67:5f:d2:
fb:23:ac:bf:a1:60:fd:9e:37:db:f0:95:85:ce:e7:2d:69:0a:
42:8b:62:74:74:ba:8f:77:e9:fe:98:3e:47:73:c5:08:70:a7:
65:19:de:d5:00:4c:0d:d7:43:96:df:ed:42:73:c7:66:b1:70:
a5:32:3e:c6:f1:3b:a8:ff:38:f7:19:5e:f2:fe:a7:5e:ef:a5:
50:b3:96:1d:4d:42:03:16:f0:5e:06:e8:64:bd:82:77:5d:bc:
32:72:3b:b3
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEALBmtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
M2MxMDNkNjVhNTRkNmFmMWVmYmE2YWMzZTYzNzIyMDI4YWYyYmIxMB4XDTIyMDYw
MzA2NDMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjMxZjg3ZmQ3Njlm
MWVlZTI2NTRjYjczNzQ2ZDZiOTc0MzMwNDBhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANRWkPepBEliG9LYks/MLcFEVzaSZ2QFDKGDYnTev7zs/VgJ
AKM4XATEI7XUhkrwT6nMDL1IUS73xJAFNBlxsneBiD169kijKyu/aCAZHyg/pv29
mWXoxeZtELxZdybSJPyUZcxDGoYWgAKPpLFrXyJ9RRErKYdFSoWAqnsfFKUSQO9+
M4BQL4DbS8JNzCkZ8waNewTLAVJSaOd5OHNP+UXPRz2975hmHPoRjLPrHIUztToo
oljDxHvJ0RctYDo1ZOdAom1tIjqbXqVFu0TMkCJiD0AZD3TVgnUMCcR2z/gXrfaj
ia0EfipT4hQ/khg+pvnXze920lp2cOTYBC2YJ30CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTzH4f9dp8e7iZUy3N0bWuXQzBAoDAfBgNVHSMEGDAWgBSDwQPWWlTWrx77
pqw+Y3IgKK8rsTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2c4RUQxbHBVMXE4ZS02YXNQbU55SUNpdks3RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvMDgxYmQ0LTEyMTAtNDAyMS1hODY0LWI1MGNmNWYyYWEyMi8x
Lzh4LUhfWGFmSHU0bVZNdHpkRzFybDBNd1FLQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
MDgxYmQ0LTEyMTAtNDAyMS1hODY0LWI1MGNmNWYyYWEyMi8xL2c4RUQxbHBVMXE4
ZS02YXNQbU55SUNpdks3RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAQhbvAwQAQhbwMA0GCSqGSIb3
DQEBCwUAA4IBAQCcfd/rFPp41L27ulFNoIwQqlCSgYwMhkwyYpL3PdjbiOy57tPK
+Fh4AakMwPmVdFFGKRE/X+X3bfg9ZrrOBViOeeGdXfZTPKKH+fCwrJWtQFX0PxAC
bmBCDOpi19yPmvhg8AKJiGLt1PsFdclgFSLx/+7AETlDwDtEWk3cZQ1dO/uOLtT8
ISRO9pZHDGo+DHEAXyUXPQ4vRNRYJ9/JcylnX9L7I6y/oWD9njfb8JWFzuctaQpC
i2J0dLqPd+n+mD5Hc8UIcKdlGd7VAEwN10OW3+1Cc8dmsXClMj7G8Tuo/zj3GV7y
/qde76VQs5YdTUIDFvBeBuhkvYJ3Xbwycjuz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org