Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/94kPmE5PSGleLpWVOH7PBsOz2ck.roa
File: 94kPmE5PSGleLpWVOH7PBsOz2ck.roa (raw, json)
Hash identifier: YI57BbqLL01HQLjeInAXTm8F5qc8kfCYd2meIH9Qm4g=
Subject key identifier: F7:89:0F:98:4E:4F:48:69:5E:2E:95:95:38:7E:CF:06:C3:B3:D9:C9
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 08340E54
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/94kPmE5PSGleLpWVOH7PBsOz2ck.roa
Signing time: Sat 01 Jan 2022 07:56:10 +0000
ROA not before: Sat 01 Jan 2022 07:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48108
IP address blocks: 212.22.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137629268 (0x8340e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7890f984e4f48695e2e9595387ecf06c3b3d9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:d8:a7:48:5b:e2:55:dc:de:50:6b:c9:bb:
3d:24:26:12:dd:c2:e4:2e:24:87:de:fd:c5:7f:7b:
31:2e:61:f5:d9:13:df:e0:7b:a0:08:e7:e0:b7:59:
68:9e:b7:7d:f3:d8:c6:1e:3d:2f:66:a2:39:22:ef:
1e:7c:63:10:df:20:76:6a:3b:98:db:4d:38:e3:ab:
79:21:12:5b:38:d4:33:22:ab:56:0d:60:f3:99:74:
4b:55:a2:19:02:a8:af:15:53:d9:6b:c3:5e:7a:68:
db:a3:ce:7b:90:21:6c:f4:16:02:c3:51:8f:1d:0c:
3c:07:7c:54:d8:19:c9:9e:4f:d3:8c:0d:3e:c6:d7:
26:8c:1c:99:dd:07:2f:f3:1d:54:e4:05:60:01:68:
cf:b1:52:c7:83:14:4b:94:07:36:96:d3:64:01:b4:
cb:65:d3:d8:3f:1a:37:ea:ec:5d:22:05:a7:c8:50:
04:22:e2:04:03:90:43:b5:c0:4b:f8:18:f1:af:ff:
7b:5f:8f:38:14:4b:d9:f2:2f:c8:6f:54:70:a8:d9:
15:5e:3c:ac:86:0a:44:ab:c7:6b:8c:07:36:ab:6d:
b8:a5:5d:05:2c:e3:87:85:45:3b:23:a5:33:46:83:
66:10:64:09:1f:43:0a:11:9e:94:c4:20:df:ae:d0:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:0F:98:4E:4F:48:69:5E:2E:95:95:38:7E:CF:06:C3:B3:D9:C9
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/94kPmE5PSGleLpWVOH7PBsOz2ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.75.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8c:43:4e:db:d4:41:55:7d:58:dd:ab:b3:d3:2d:d9:e2:86:
3b:c4:67:13:c0:66:e9:7e:b5:dc:69:97:73:2b:d4:e4:60:29:
f0:de:91:9a:9b:a7:54:ad:58:ab:9a:e6:44:3e:68:53:fc:22:
15:6b:54:74:1f:e1:55:2e:4c:7e:74:12:36:ec:ee:8f:f9:ed:
c1:7e:52:91:a3:fd:b8:04:50:91:2c:0c:13:1c:a6:85:75:0b:
a8:6b:49:7d:95:70:19:e1:4e:f8:31:17:37:d9:c9:92:af:44:
ce:a2:d2:9b:fd:f6:be:b6:79:de:5e:d3:26:d8:4f:9d:b4:07:
59:7f:36:ec:50:6a:bd:7e:41:e3:31:af:bf:28:d3:7d:7c:9b:
30:3b:2e:85:e7:d6:6c:95:82:19:69:c9:07:fe:10:86:57:bf:
e0:0e:e8:34:72:06:38:a5:72:c3:77:e9:70:57:10:4a:4a:84:
c0:0e:12:93:fd:2f:2a:87:78:d9:27:8a:48:da:fb:e1:54:04:
e6:66:3c:86:73:c5:bb:bd:8e:77:91:c0:5a:5d:0d:e0:3f:30:
d6:35:51:a6:50:8f:9b:2f:1c:ed:75:51:51:4f:85:b1:59:c8:
56:f1:b8:b7:62:62:41:ab:b8:c7:ce:bf:34:b2:0e:cf:dd:58:
02:19:58:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDQOVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDYzNjUzNTViNjY1NTY0YTIxMGMzNThjNjhhMDExN2I3ZmJlYjlhMB4XDTIyMDEw
MTA3NTYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc4OTBmOTg0ZTRm
NDg2OTVlMmU5NTk1Mzg3ZWNmMDZjM2IzZDljOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOFK2KdIW+JV3N5Qa8m7PSQmEt3C5C4kh979xX97MS5h9dkT
3+B7oAjn4LdZaJ63ffPYxh49L2aiOSLvHnxjEN8gdmo7mNtNOOOreSESWzjUMyKr
Vg1g85l0S1WiGQKorxVT2WvDXnpo26POe5AhbPQWAsNRjx0MPAd8VNgZyZ5P04wN
PsbXJowcmd0HL/MdVOQFYAFoz7FSx4MUS5QHNpbTZAG0y2XT2D8aN+rsXSIFp8hQ
BCLiBAOQQ7XAS/gY8a//e1+POBRL2fIvyG9UcKjZFV48rIYKRKvHa4wHNqttuKVd
BSzjh4VFOyOlM0aDZhBkCR9DChGelMQg367QSXUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT3iQ+YTk9IaV4ulZU4fs8Gw7PZyTAfBgNVHSMEGDAWgBR0Y2U1W2ZVZKIQ
w1jGigEXt/vrmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RHTmxOVnRtVldTaUVNTll4b29CRjdmNzY1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvYWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8x
Lzk0a1BtRTVQU0dsZUxwV1ZPSDdQQnNPejJjay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
YWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8xL2RHTmxOVnRtVldT
aUVNTll4b29CRjdmNzY1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQWSzANBgkqhkiG9w0BAQsFAAOC
AQEAQoxDTtvUQVV9WN2rs9Mt2eKGO8RnE8Bm6X613GmXcyvU5GAp8N6RmpunVK1Y
q5rmRD5oU/wiFWtUdB/hVS5MfnQSNuzuj/ntwX5SkaP9uARQkSwMExymhXULqGtJ
fZVwGeFO+DEXN9nJkq9EzqLSm/32vrZ53l7TJthPnbQHWX827FBqvX5B4zGvvyjT
fXybMDsuhefWbJWCGWnJB/4Qhle/4A7oNHIGOKVyw3fpcFcQSkqEwA4Sk/0vKod4
2SeKSNr74VQE5mY8hnPFu72Od5HAWl0N4D8w1jVRplCPmy8c7XVRUU+FsVnIVvG4
t2JiQau4x86/NLIOz91YAhlYrQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org