Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2b89RnzJjB7AV07GT8nWM7wK7wE.roa
File: 2b89RnzJjB7AV07GT8nWM7wK7wE.roa (raw, json)
Hash identifier: aL+imkVCB8eXGgxJ8TakW4QU+Juz3WYWhNH3Tctr2aA=
Subject key identifier: D9:BF:3D:46:7C:C9:8C:1E:C0:57:4E:C6:4F:C9:D6:33:BC:0A:EF:01
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E1A8A83
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2b89RnzJjB7AV07GT8nWM7wK7wE.roa
Signing time: Sat 01 Jan 2022 03:02:54 +0000
ROA not before: Sat 01 Jan 2022 03:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27399
IP address blocks: 82.98.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236620419 (0xe1a8a83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9bf3d467cc98c1ec0574ec64fc9d633bc0aef01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:eb:e6:fc:12:3a:25:d8:a3:22:80:af:04:
a9:f4:45:46:3e:01:8e:26:83:b3:96:33:35:f1:75:
25:ec:ae:65:ce:2c:36:2a:8b:ba:68:67:00:48:a2:
54:b2:da:04:4b:5d:05:94:ef:35:16:58:51:a2:f8:
8d:aa:33:41:e9:71:76:94:23:90:1e:63:46:75:5b:
0d:d6:be:cf:ea:e6:09:60:19:f2:a0:71:66:75:51:
27:f6:f0:57:ac:e4:d7:71:ce:68:83:13:6a:c6:39:
af:d2:2a:5f:fc:b7:99:dd:79:0f:ad:a9:47:f8:d0:
0f:dd:be:d2:23:ae:98:4b:32:e4:a9:b1:0a:11:d6:
47:d9:f4:f6:a8:8c:b7:96:09:69:4b:74:ec:b8:fc:
e3:67:74:8b:ee:29:3c:f1:9b:a8:00:e7:34:8e:88:
1b:f9:32:a7:f5:a5:f4:ef:76:f5:7f:fb:0f:a5:cf:
7e:d9:c8:69:e0:2c:d2:23:c6:4d:8b:b2:a8:42:fd:
6f:ec:1c:a3:9c:18:e2:44:f3:bd:04:00:5f:cf:bc:
38:27:e2:a6:55:07:2f:13:3f:b1:6c:2a:67:66:a5:
74:bd:63:f6:8a:b7:91:55:c4:21:7e:29:51:25:ad:
60:4b:f4:24:cc:a0:3b:9c:43:b1:2b:6f:a3:14:1b:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BF:3D:46:7C:C9:8C:1E:C0:57:4E:C6:4F:C9:D6:33:BC:0A:EF:01
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2b89RnzJjB7AV07GT8nWM7wK7wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9b:34:4a:76:ae:4c:df:7a:50:70:5b:30:26:b3:fd:3d:c6:
11:4e:b4:6c:d8:b9:0d:35:e4:ae:46:13:89:74:77:a1:15:56:
61:96:64:e1:de:f6:bf:c4:5a:b2:36:43:f6:2b:73:cb:d1:3c:
21:65:2c:2b:34:e2:f5:50:2c:8d:37:78:97:5d:3e:7a:d6:1d:
b5:ac:ba:2a:2d:10:12:82:72:98:90:c3:67:ea:6b:f2:17:7d:
ad:b2:6c:d2:1e:5d:e7:ef:68:ae:05:c8:1b:be:12:ad:a6:43:
d8:9e:3c:f4:79:1f:c9:62:b3:25:f8:29:c8:0d:4b:55:cb:bf:
5e:87:5b:9f:be:10:67:c4:bb:9d:9a:f0:bb:73:38:87:5b:d7:
2f:dd:c3:a5:a2:e7:66:d6:f4:9e:c0:92:69:18:00:4f:a3:5e:
35:87:88:d1:9f:46:42:07:37:a2:45:bf:1d:b4:6e:a0:ea:87:
75:c1:c6:62:cc:8e:95:f8:2f:6a:76:4f:40:ce:2b:34:71:42:
33:6a:20:6b:07:f1:42:4d:84:86:58:2c:5b:a4:32:c2:19:2c:
62:45:c3:60:fd:dd:28:00:dc:31:0f:1a:45:48:65:81:e3:e1:
ad:49:29:a9:6f:cf:47:46:98:6b:28:0f:14:a5:05:e5:76:dc:
dc:8e:22:3a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDhqKgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzBjYzk0MjliNjMzODJlOWIxNzE0ZDIxYjNjOTZkMmU1ZWJlMjU3MB4XDTIyMDEw
MTAzMDI1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDliZjNkNDY3Y2M5
OGMxZWMwNTc0ZWM2NGZjOWQ2MzNiYzBhZWYwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMd76+b8Ejol2KMigK8EqfRFRj4BjiaDs5YzNfF1JeyuZc4s
NiqLumhnAEiiVLLaBEtdBZTvNRZYUaL4jaozQelxdpQjkB5jRnVbDda+z+rmCWAZ
8qBxZnVRJ/bwV6zk13HOaIMTasY5r9IqX/y3md15D62pR/jQD92+0iOumEsy5Kmx
ChHWR9n09qiMt5YJaUt07Lj842d0i+4pPPGbqADnNI6IG/kyp/Wl9O929X/7D6XP
ftnIaeAs0iPGTYuyqEL9b+wco5wY4kTzvQQAX8+8OCfiplUHLxM/sWwqZ2aldL1j
9oq3kVXEIX4pUSWtYEv0JMygO5xDsStvoxQbt5kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZvz1GfMmMHsBXTsZPydYzvArvATAfBgNVHSMEGDAWgBTjDMlCm2M4LpsX
FNIbPJbS5eviVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR3ekpRcHRqT0M2YkZ4VFNHenlXMHVYcjRsYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvYzczMjg3LWIxYjEtNGFjYS1iZDJlLWRiNGYzNTJlOWFkMy8x
LzJiODlSbnpKakI3QVYwN0dUOG5XTTd3Szd3RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
YzczMjg3LWIxYjEtNGFjYS1iZDJlLWRiNGYzNTJlOWFkMy8xLzR3ekpRcHRqT0M2
YkZ4VFNHenlXMHVYcjRsYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFJiwjANBgkqhkiG9w0BAQsFAAOC
AQEAj5s0SnauTN96UHBbMCaz/T3GEU60bNi5DTXkrkYTiXR3oRVWYZZk4d72v8Ra
sjZD9itzy9E8IWUsKzTi9VAsjTd4l10+etYdtay6Ki0QEoJymJDDZ+pr8hd9rbJs
0h5d5+9orgXIG74SraZD2J489HkfyWKzJfgpyA1LVcu/Xodbn74QZ8S7nZrwu3M4
h1vXL93DpaLnZtb0nsCSaRgAT6NeNYeI0Z9GQgc3okW/HbRuoOqHdcHGYsyOlfgv
anZPQM4rNHFCM2ogawfxQk2EhlgsW6QywhksYkXDYP3dKADcMQ8aRUhlgePhrUkp
qW/PR0aYaygPFKUF5Xbc3I4iOg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org