Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/7YZKEr9WlkSrGsGf_6aeq0Ewges.roa
File: 7YZKEr9WlkSrGsGf_6aeq0Ewges.roa (raw, json)
Hash identifier: L2rqmwlXOeKQVOFrcu9istz1++TGIP09b1Nu4O9eyu8=
Subject key identifier: ED:86:4A:12:BF:56:96:44:AB:1A:C1:9F:FF:A6:9E:AB:41:30:81:EB
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 018353AC09FA327C4F1B7D644731D3F1C8F0
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/7YZKEr9WlkSrGsGf_6aeq0Ewges.roa
Signing time: Mon 19 Sep 2022 02:55:27 +0000
ROA not before: Mon 19 Sep 2022 02:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197190
IP address blocks: 92.119.213.0/24 maxlen: 24
92.119.212.0/22 maxlen: 24
92.119.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:53:ac:09:fa:32:7c:4f:1b:7d:64:47:31:d3:f1:c8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Sep 19 02:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed864a12bf569644ab1ac19fffa69eab413081eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:cd:d9:ab:18:0b:0c:fb:ad:76:bc:2d:49:
82:76:64:e8:b9:61:89:47:24:da:b9:0b:9d:83:91:
7a:00:5d:3e:f8:e8:2f:ae:2a:f8:8a:4d:0f:4b:38:
62:ae:93:95:1c:94:d5:74:6d:3a:e6:9c:7e:b8:f8:
c6:cc:a4:bf:61:42:fd:68:7a:67:32:be:25:35:aa:
d8:de:6f:df:31:f6:7d:3a:1f:38:60:a1:cd:96:b3:
53:7d:0b:f6:ae:a7:06:ce:b6:06:8d:8c:60:8e:4c:
2a:14:81:3c:94:59:21:43:a2:0d:9c:03:7e:a6:33:
d1:b1:4c:50:6a:10:cc:c6:90:9d:0f:bb:6d:7f:1a:
e0:00:00:d2:ca:6e:4a:91:1a:01:e1:f4:8c:81:93:
70:bb:b2:14:28:69:d4:7b:4c:0d:6a:15:7f:d1:80:
8d:ca:5f:28:29:d0:b3:bb:29:9a:db:ea:25:ae:64:
1f:2c:00:49:5b:20:fc:84:19:67:b4:a7:07:95:60:
cb:81:06:c0:da:bf:a9:ee:2d:ec:89:d3:c0:87:26:
41:97:55:90:9a:40:fd:e5:c8:53:2d:19:24:70:3a:
4f:c5:54:60:f7:bc:08:a8:2f:b7:5f:21:42:67:39:
0a:e7:49:d9:22:2a:2a:c0:fd:00:f0:2b:86:0a:7d:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:4A:12:BF:56:96:44:AB:1A:C1:9F:FF:A6:9E:AB:41:30:81:EB
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/7YZKEr9WlkSrGsGf_6aeq0Ewges.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
98:46:9a:b2:55:5f:34:a3:ae:61:20:23:c8:04:22:21:21:de:
51:c4:6d:0a:8f:7d:99:c8:67:ed:53:f0:37:44:00:f2:ee:43:
da:2d:06:ed:f5:dc:cc:1a:10:1b:98:1d:23:4a:12:44:06:1b:
6a:d3:38:2c:a9:1d:6b:1f:ef:18:79:90:ee:97:23:8c:67:19:
48:ac:8e:64:4c:44:24:14:3c:04:83:a7:64:fd:0c:1d:07:f1:
d5:0c:8e:7c:95:7b:7b:18:79:17:95:e1:cf:3c:cd:e2:c3:1b:
ba:4a:6c:13:d3:49:b3:0f:1c:fc:29:b1:18:f6:0b:af:4b:63:
bd:ad:e2:62:19:84:64:45:03:5f:4e:06:b1:de:15:96:be:8e:
6f:5a:12:21:de:8b:e5:30:03:e5:c4:e1:4b:37:7b:68:4f:42:
1a:21:bf:c2:39:41:81:20:7b:45:f5:1d:59:0d:1c:2b:2d:f1:
4e:0b:fb:2f:72:5b:ed:11:8f:f6:3d:2d:9f:a0:30:3d:bc:31:
b3:4b:f7:e7:05:f7:e3:77:08:48:ac:40:6e:75:6e:73:6c:44:
53:de:1d:fb:2e:6d:2b:e0:dd:6b:91:47:a8:d7:9a:36:0b:f6:
15:7f:48:35:ae:68:28:d1:a2:e9:7f:0b:20:79:1b:d8:0d:6c:
ee:2c:76:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNTrAn6MnxPG31kRzHT8cjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2EwZWRmMTIyZjRjZjk4YjA4MmRkNGNjMGQ4NGY1ZWRl
ODA0YjkwHhcNMjIwOTE5MDI1NTI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg2NGExMmJmNTY5NjQ0YWIxYWMxOWZmZmE2OWVhYjQxMzA4MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/LN2asYCwz7rXa8LUmCdmTouWGJ
RyTauQudg5F6AF0++Ogvrir4ik0PSzhirpOVHJTVdG065px+uPjGzKS/YUL9aHpn
Mr4lNarY3m/fMfZ9Oh84YKHNlrNTfQv2rqcGzrYGjYxgjkwqFIE8lFkhQ6INnAN+
pjPRsUxQahDMxpCdD7ttfxrgAADSym5KkRoB4fSMgZNwu7IUKGnUe0wNahV/0YCN
yl8oKdCzuyma2+olrmQfLABJWyD8hBlntKcHlWDLgQbA2r+p7i3sidPAhyZBl1WQ
mkD95chTLRkkcDpPxVRg97wIqC+3XyFCZzkK50nZIioqwP0A8CuGCn374wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2GShK/VpZEqxrBn/+mnqtBMIHrMB8GA1UdIwQY
MBaAFIvKDt8SL0z5iwgt1MwNhPXt6AS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hZWYwZWEtOTQwMy00N2ZiLWFkODAt
MWVkYTUzYWViZTUxLzEvN1laS0VyOVdsa1NyR3NHZl82YWVxMEV3Z2VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hZWYwZWEtOTQwMy00N2ZiLWFkODAtMWVkYTUzYWViZTUx
LzEvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHfUMA0G
CSqGSIb3DQEBCwUAA4IBAQCYRpqyVV80o65hICPIBCIhId5RxG0Kj32ZyGftU/A3
RADy7kPaLQbt9dzMGhAbmB0jShJEBhtq0zgsqR1rH+8YeZDulyOMZxlIrI5kTEQk
FDwEg6dk/QwdB/HVDI58lXt7GHkXleHPPM3iwxu6SmwT00mzDxz8KbEY9guvS2O9
reJiGYRkRQNfTgax3hWWvo5vWhIh3ovlMAPlxOFLN3toT0IaIb/COUGBIHtF9R1Z
DRwrLfFOC/svclvtEY/2PS2foDA9vDGzS/fnBffjdwhIrEBudW5zbERT3h37Lm0r
4N1rkUeo15o2C/YVf0g1rmgo0aLpfwsgeRvYDWzuLHbc
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:48 2023 by rpki-client on console-ams.rpki-client.org