Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/gZIzL0-u5FbQJVkDjQ7T3FCb6nM.roa
File: gZIzL0-u5FbQJVkDjQ7T3FCb6nM.roa (raw, json)
Hash identifier: 3l7dqRipjTWgj1W6vs+sxQYAKQPg5tTfVD5U0718SZw=
Subject key identifier: 81:92:33:2F:4F:AE:E4:56:D0:25:59:03:8D:0E:D3:DC:50:9B:EA:73
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 0841E5F3
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/gZIzL0-u5FbQJVkDjQ7T3FCb6nM.roa
Signing time: Sat 01 Jan 2022 12:56:15 +0000
ROA not before: Sat 01 Jan 2022 12:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31391
IP address blocks: 192.115.208.0/22 maxlen: 24
192.115.0.0/21 maxlen: 24
2a01:4280::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138536435 (0x841e5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Jan 1 12:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8192332f4faee456d02559038d0ed3dc509bea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:fe:22:2d:5a:1f:fa:ad:0a:1e:4b:ce:04:
52:3a:df:a3:ef:7e:23:6e:e4:4e:4e:31:7f:39:dc:
41:f8:2a:86:bd:6e:52:9d:6b:2a:61:9d:a8:b0:ab:
2d:8b:1b:08:5e:c5:06:d5:db:d2:d6:10:b0:b1:34:
26:58:4a:77:4e:d7:51:53:93:df:09:34:45:58:17:
bd:b9:9a:17:d7:ea:0c:9d:a2:40:36:0b:93:29:b0:
c3:3a:c7:18:b0:be:0a:5d:70:ba:9b:c9:5a:2e:51:
2b:91:51:9a:60:69:77:a3:af:11:a2:4e:1a:9e:9f:
a7:03:6c:06:a1:9b:e9:06:63:8c:30:5c:77:18:a1:
29:48:d1:e9:0f:fc:53:93:2b:ff:51:34:bd:f2:9a:
b3:8c:56:c3:cf:ab:ed:9c:4e:9d:1b:49:69:c6:73:
c4:3a:9f:59:f6:8e:f0:d4:c8:12:35:cb:d3:d1:7f:
40:16:2d:eb:89:2a:2d:5e:eb:56:7a:0b:c9:d3:b0:
3e:28:f7:2c:ce:97:f3:a2:29:7f:09:ae:bc:99:09:
88:8f:35:e5:f6:04:50:f6:6b:5c:28:d8:99:18:34:
be:e2:0f:ac:59:f1:51:52:e9:ee:cf:35:29:1f:50:
7c:de:f1:fc:45:43:90:15:43:c0:6c:e7:d2:be:85:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:33:2F:4F:AE:E4:56:D0:25:59:03:8D:0E:D3:DC:50:9B:EA:73
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/gZIzL0-u5FbQJVkDjQ7T3FCb6nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.0.0/21
192.115.208.0/22
IPv6:
2a01:4280::/32
Signature Algorithm: sha256WithRSAEncryption
7e:0d:d2:54:98:3f:56:a8:16:3e:7f:11:d5:2d:3f:63:6f:5e:
2b:05:8b:bb:06:11:ee:fb:cf:f3:51:5b:9b:61:6b:81:42:0d:
40:fe:bf:80:07:a1:3e:67:cc:84:52:e8:86:aa:fc:d6:46:f9:
7a:30:64:6b:91:31:4c:07:59:54:b8:b7:c4:40:37:9d:6e:96:
cf:22:63:e8:55:e2:e8:f9:be:2a:76:5a:8f:c0:7b:c2:11:78:
eb:ec:7a:e4:21:d2:0f:3c:6d:75:a4:a3:3d:4c:8b:fc:4f:e2:
80:69:98:58:32:30:30:79:40:df:c6:d5:03:2c:12:6c:f9:fb:
75:5e:a8:d7:b7:23:db:5c:93:ce:e2:8d:7f:3a:e4:a7:7a:e9:
95:84:c2:3b:31:65:c9:76:00:f1:f9:3c:87:d4:e2:8a:79:f8:
9d:15:80:c9:de:64:7e:bd:fa:52:b0:a7:0b:fe:1d:99:31:38:
0f:d3:39:7a:65:6f:83:1c:f2:f4:cd:14:e7:c2:30:b4:ac:5c:
d4:ca:39:84:e4:8e:cf:95:a7:c8:ea:37:c8:9d:a7:8d:20:4f:
b2:1d:78:35:99:76:92:2d:7d:d4:03:90:cb:8b:ca:ac:d9:f4:
0d:a0:cb:eb:cc:b0:a2:46:3f:c7:a5:1f:da:26:52:49:3e:b6:
b0:f1:94:a1
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECEHl8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MjA5NzIxZjQ1NDhjMjZjZjM2MmU5NDRhODFiMWFjZWU3YjI0YjUzMB4XDTIyMDEw
MTEyNTYxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODE5MjMzMmY0ZmFl
ZTQ1NmQwMjU1OTAzOGQwZWQzZGM1MDliZWE3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdV/iItWh/6rQoeS84EUjrfo+9+I27kTk4xfzncQfgqhr1u
Up1rKmGdqLCrLYsbCF7FBtXb0tYQsLE0JlhKd07XUVOT3wk0RVgXvbmaF9fqDJ2i
QDYLkymwwzrHGLC+Cl1wupvJWi5RK5FRmmBpd6OvEaJOGp6fpwNsBqGb6QZjjDBc
dxihKUjR6Q/8U5Mr/1E0vfKas4xWw8+r7ZxOnRtJacZzxDqfWfaO8NTIEjXL09F/
QBYt64kqLV7rVnoLydOwPij3LM6X86IpfwmuvJkJiI815fYEUPZrXCjYmRg0vuIP
rFnxUVLp7s81KR9QfN7x/EVDkBVDwGzn0r6FS6ECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSBkjMvT67kVtAlWQONDtPcUJvqczAfBgNVHSMEGDAWgBSyCXIfRUjCbPNi
6USoGxrO57JLUzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NnbHlIMFZJd216ell1bEVxQnNhenVleVMxTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvYTY3NDMyLWMwNjctNGNkYi1iNWFkLWRiYTVjMTgzNDYwMS8x
L2daSXpMMC11NUZiUUpWa0RqUTdUM0ZDYjZuTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
YTY3NDMyLWMwNjctNGNkYi1iNWFkLWRiYTVjMTgzNDYwMS8xL3NnbHlIMFZJd216
ell1bEVxQnNhenVleVMxTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA8BzAAMEAsBz0DANBAIAAjAHAwUA
KgFCgDANBgkqhkiG9w0BAQsFAAOCAQEAfg3SVJg/VqgWPn8R1S0/Y29eKwWLuwYR
7vvP81Fbm2FrgUINQP6/gAehPmfMhFLohqr81kb5ejBka5ExTAdZVLi3xEA3nW6W
zyJj6FXi6Pm+KnZaj8B7whF46+x65CHSDzxtdaSjPUyL/E/igGmYWDIwMHlA38bV
AywSbPn7dV6o17cj21yTzuKNfzrkp3rplYTCOzFlyXYA8fk8h9Tiinn4nRWAyd5k
fr36UrCnC/4dmTE4D9M5emVvgxzy9M0U58IwtKxc1Mo5hOSOz5WnyOo3yJ2njSBP
sh14NZl2ki191AOQy4vKrNn0DaDL68ywokY/x6Uf2iZSST62sPGUoQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:33 2023 by rpki-client on console-ams.rpki-client.org