Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/iVXOw6rFeBS370KXGR-ZRzrJuBQ.roa
File: iVXOw6rFeBS370KXGR-ZRzrJuBQ.roa (raw, json)
Hash identifier: TnMEriG7172OjWu9YmmT6RWtZeP9ZjjfVoRi/ai8zfs=
Subject key identifier: 89:55:CE:C3:AA:C5:78:14:B7:EF:42:97:19:1F:99:47:3A:C9:B8:14
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0184CDAB0A4F729C770D1FB3708948DF52D1
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/iVXOw6rFeBS370KXGR-ZRzrJuBQ.roa
Signing time: Thu 01 Dec 2022 12:30:49 +0000
ROA not before: Thu 01 Dec 2022 12:30:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13259
IP address blocks: 193.37.70.0/24 maxlen: 24
80.66.70.0/24 maxlen: 24
80.66.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:ab:0a:4f:72:9c:77:0d:1f:b3:70:89:48:df:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Dec 1 12:30:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8955cec3aac57814b7ef4297191f99473ac9b814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:38:ee:f2:f1:92:66:96:08:a4:fa:48:1a:
3c:df:25:bb:ac:3e:f8:e1:04:ef:68:38:fa:c0:9b:
0f:33:4f:4c:46:be:e1:40:2c:ac:95:5d:c4:8e:4c:
1e:03:61:bf:50:94:23:20:68:f3:9e:1d:64:f9:f6:
20:b9:81:7b:6a:69:63:da:26:72:69:1c:d0:ae:70:
eb:ae:96:7d:93:99:3a:0f:7b:5c:01:13:90:04:02:
c7:ce:21:da:7f:59:1e:b3:71:78:4d:82:b5:72:3c:
b4:f3:7a:1a:88:e8:87:9d:d1:2b:53:c8:8e:21:a9:
e0:04:6d:f4:f4:10:3c:3c:fa:60:75:16:04:c3:31:
58:44:64:bd:1e:e2:ae:49:bd:c7:59:6d:0b:7e:25:
45:65:a3:df:1f:a7:8a:53:23:8b:3e:57:fd:ab:b2:
21:b1:1d:26:c6:87:8a:67:d7:1a:a1:5d:81:e7:49:
18:94:ad:d6:d2:a4:0a:03:be:b4:22:07:5c:70:93:
e2:fb:07:f9:48:0a:33:35:36:8e:24:0d:84:94:fe:
89:c5:7e:04:08:52:a6:41:4a:65:4a:1b:2e:f5:44:
45:f7:da:fd:47:a4:20:52:aa:07:d9:e5:88:4c:60:
64:9f:7d:46:e9:b7:15:e1:8f:c2:26:bb:14:01:d7:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:55:CE:C3:AA:C5:78:14:B7:EF:42:97:19:1F:99:47:3A:C9:B8:14
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/iVXOw6rFeBS370KXGR-ZRzrJuBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.69.0-80.66.70.255
193.37.70.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ab:c2:30:72:9e:a8:93:a3:70:4a:fe:6c:ac:83:9a:42:6d:
62:8a:5d:43:c7:67:04:91:47:9c:bc:b6:c6:7e:5c:f5:e9:92:
6d:58:c4:a0:b4:df:99:39:4d:bc:7a:01:fe:bb:71:fa:0e:12:
00:5b:7c:b3:d7:c0:5e:87:54:a7:97:bc:57:71:30:41:09:c0:
c8:4c:02:f3:10:99:ad:b2:ec:40:26:c4:91:8e:a4:5a:7c:f0:
a2:3d:d7:00:d4:10:78:ec:5c:89:fd:6a:cb:e0:99:e8:f4:92:
e7:d6:21:e5:76:87:7d:94:b0:2e:ef:ce:16:c3:be:bb:3d:05:
c6:35:d5:1a:9d:a6:99:22:a7:4a:54:25:2b:3f:1a:ea:32:8f:
41:e0:bd:a2:c6:ab:ce:79:fe:af:be:31:54:d6:34:08:30:54:
e0:7d:c9:8c:22:91:2e:02:1f:31:a8:3c:43:c3:5d:b4:a7:87:
3e:7b:e5:4f:3a:03:62:31:7a:d0:52:0b:07:f0:ff:9e:06:ad:
ab:69:d9:81:43:8c:f6:d3:40:07:07:32:e2:99:0a:16:52:f2:
db:67:ea:12:d6:ca:70:cf:50:ef:45:cd:0c:d7:ac:d9:f8:78:
a1:47:26:c7:d1:88:52:eb:52:81:e0:56:c0:ef:8f:64:39:f4:
e9:bb:c1:32
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYTNqwpPcpx3DR+zcIlI31LRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjIxMjAxMTIzMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTU1Y2VjM2FhYzU3ODE0YjdlZjQyOTcxOTFmOTk0NzNhYzliODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSY47vLxkmaWCKT6SBo83yW7rD74
4QTvaDj6wJsPM09MRr7hQCyslV3EjkweA2G/UJQjIGjznh1k+fYguYF7amlj2iZy
aRzQrnDrrpZ9k5k6D3tcAROQBALHziHaf1kes3F4TYK1cjy083oaiOiHndErU8iO
IangBG309BA8PPpgdRYEwzFYRGS9HuKuSb3HWW0LfiVFZaPfH6eKUyOLPlf9q7Ih
sR0mxoeKZ9caoV2B50kYlK3W0qQKA760IgdccJPi+wf5SAozNTaOJA2ElP6JxX4E
CFKmQUplShsu9URF99r9R6QgUqoH2eWITGBkn31G6bcV4Y/CJrsUAddIjQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIlVzsOqxXgUt+9ClxkfmUc6ybgUMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvaVZYT3c2ckZlQlMzNzBLWEdSLVpSenJKdUJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABQQkUD
BABQQkYDBADBJUYwDQYJKoZIhvcNAQELBQADggEBABerwjBynqiTo3BK/mysg5pC
bWKKXUPHZwSRR5y8tsZ+XPXpkm1YxKC035k5Tbx6Af67cfoOEgBbfLPXwF6HVKeX
vFdxMEEJwMhMAvMQma2y7EAmxJGOpFp88KI91wDUEHjsXIn9asvgmej0kufWIeV2
h32UsC7vzhbDvrs9BcY11Rqdppkip0pUJSs/Guoyj0HgvaLGq855/q++MVTWNAgw
VOB9yYwikS4CHzGoPEPDXbSnhz575U86A2IxetBSCwfw/54Gratp2YFDjPbTQAcH
MuKZChZS8ttn6hLWynDPUO9FzQzXrNn4eKFHJsfRiFLrUoHgVsDvj2Q59Om7wTI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org