Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/XqZY3ERrrE3jSUr8Re6wpOJkX2o.roa
File: XqZY3ERrrE3jSUr8Re6wpOJkX2o.roa (raw, json)
Hash identifier: zbv1iGTuWzucF19bsuEaqnV/waFRUYrwfPfNVdpGqh8=
Subject key identifier: 5E:A6:58:DC:44:6B:AC:4D:E3:49:4A:FC:45:EE:B0:A4:E2:64:5F:6A
Certificate issuer: /CN=dd8f49c733880ae8fa1d322614bc5ed3fd0f5ac3
Certificate serial: 8990BD
Authority key identifier: DD:8F:49:C7:33:88:0A:E8:FA:1D:32:26:14:BC:5E:D3:FD:0F:5A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Y9JxzOICuj6HTImFLxe0_0PWsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/XqZY3ERrrE3jSUr8Re6wpOJkX2o.roa
Signing time: Sat 01 Jan 2022 02:59:58 +0000
ROA not before: Sat 01 Jan 2022 02:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209235
IP address blocks: 212.18.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9015485 (0x8990bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8f49c733880ae8fa1d322614bc5ed3fd0f5ac3
Validity
Not Before: Jan 1 02:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ea658dc446bac4de3494afc45eeb0a4e2645f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:6e:8f:2c:37:5f:06:77:1f:af:9f:65:a9:
4a:88:31:33:ca:aa:5a:80:13:3e:ed:61:80:40:ca:
d9:bb:65:e1:d5:3b:dd:96:0e:35:02:2a:c3:12:3b:
a4:74:4f:a0:79:5d:6a:1b:e5:61:dd:76:bd:6a:00:
6d:f8:af:85:7a:8a:82:07:dc:0b:dd:d3:6b:2b:9d:
1f:c8:b1:a8:c1:20:c3:e3:eb:9f:88:58:f1:63:04:
6b:e2:15:b6:c1:f9:67:b7:ff:50:75:dd:18:e9:6b:
1a:c3:19:12:0a:41:82:97:30:61:c9:3c:8f:72:f8:
fe:24:b2:c2:e7:30:74:4e:10:2d:af:2b:4a:8c:e1:
7f:93:6a:6e:7c:ac:39:8e:24:b7:5a:b3:28:d6:d9:
7e:7d:98:a9:e3:2b:55:2f:2e:93:dc:4a:de:ba:b7:
c2:3b:f5:c9:31:23:5d:2c:5a:db:64:3f:1c:5b:dc:
f0:d5:eb:1e:f9:81:fd:cb:5d:fd:e6:0c:0d:fc:ff:
ca:71:11:4a:dd:ec:6b:c1:b1:dc:83:0a:5d:02:64:
a7:96:7b:73:20:1f:3b:7f:ff:92:24:79:26:5d:15:
d3:c9:92:51:20:79:3a:a9:2e:f2:45:c8:d2:61:f0:
f4:1c:51:9d:bb:de:25:39:d6:66:e0:e0:b1:54:d1:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A6:58:DC:44:6B:AC:4D:E3:49:4A:FC:45:EE:B0:A4:E2:64:5F:6A
X509v3 Authority Key Identifier:
keyid:DD:8F:49:C7:33:88:0A:E8:FA:1D:32:26:14:BC:5E:D3:FD:0F:5A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Y9JxzOICuj6HTImFLxe0_0PWsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/XqZY3ERrrE3jSUr8Re6wpOJkX2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/3Y9JxzOICuj6HTImFLxe0_0PWsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1f:48:6c:7a:c9:d1:d2:eb:d4:79:e5:c2:d6:18:3f:53:02:
1b:81:7e:e8:23:a5:53:df:97:0f:7e:28:f4:2c:4b:c0:d8:78:
cb:49:d3:7f:c3:3b:46:cc:8f:42:ed:05:1c:36:5d:c1:d5:51:
1e:7f:80:db:73:55:76:ac:ad:de:7c:e6:06:aa:23:df:d9:da:
88:5e:92:72:7e:88:7c:01:75:0a:c2:91:ab:85:b8:db:e3:82:
74:af:3b:29:c3:59:3d:86:9c:b1:fd:8f:fd:6c:8c:70:a0:e4:
af:90:0b:cd:43:6d:9c:f5:ec:51:62:8b:4f:26:37:80:f6:92:
16:a6:86:b1:2a:15:cc:57:2f:8d:2b:57:fe:c3:a4:91:1d:fd:
0f:4f:b2:9a:64:f4:2b:34:2b:32:8c:fb:ca:84:d2:b4:b0:6c:
28:41:c6:cf:cd:2c:d0:88:9e:2c:1b:b0:45:2e:86:21:18:b4:
3b:3b:7d:f5:ca:6b:31:e4:a5:6b:88:d3:14:71:e3:b1:76:fe:
f3:b1:d2:52:06:c0:0b:71:a9:16:22:55:4c:04:cc:33:58:8e:
07:6e:00:db:bd:24:6e:f0:89:6c:61:37:82:15:4d:37:c4:63:
3b:c9:1d:25:8e:c3:d6:2a:a4:12:83:43:18:22:d7:9a:91:cc:
01:73:0d:c2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAImQvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZDhmNDljNzMzODgwYWU4ZmExZDMyMjYxNGJjNWVkM2ZkMGY1YWMzMB4XDTIyMDEw
MTAyNTk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWVhNjU4ZGM0NDZi
YWM0ZGUzNDk0YWZjNDVlZWIwYTRlMjY0NWY2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALMIbo8sN18Gdx+vn2WpSogxM8qqWoATPu1hgEDK2btl4dU7
3ZYONQIqwxI7pHRPoHldahvlYd12vWoAbfivhXqKggfcC93TayudH8ixqMEgw+Pr
n4hY8WMEa+IVtsH5Z7f/UHXdGOlrGsMZEgpBgpcwYck8j3L4/iSywucwdE4QLa8r
Sozhf5NqbnysOY4kt1qzKNbZfn2YqeMrVS8uk9xK3rq3wjv1yTEjXSxa22Q/HFvc
8NXrHvmB/ctd/eYMDfz/ynERSt3sa8Gx3IMKXQJkp5Z7cyAfO3//kiR5Jl0V08mS
USB5Oqku8kXI0mHw9BxRnbveJTnWZuDgsVTRCEcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRepljcRGusTeNJSvxF7rCk4mRfajAfBgNVHSMEGDAWgBTdj0nHM4gK6Pod
MiYUvF7T/Q9awzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNZOUp4ek9JQ3VqNkhUSW1GTHhlMF8wUFdzTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvY2I4MmYzLWQ1N2ItNDFkZi1iMTlkLTk3OGM3NjMxNGFmNi8x
L1hxWlkzRVJyckUzalNVcjhSZTZ3cE9Ka1gyby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
Y2I4MmYzLWQ1N2ItNDFkZi1iMTlkLTk3OGM3NjMxNGFmNi8xLzNZOUp4ek9JQ3Vq
NkhUSW1GTHhlMF8wUFdzTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQSYzANBgkqhkiG9w0BAQsFAAOC
AQEATh9IbHrJ0dLr1HnlwtYYP1MCG4F+6COlU9+XD34o9CxLwNh4y0nTf8M7RsyP
Qu0FHDZdwdVRHn+A23NVdqyt3nzmBqoj39naiF6Scn6IfAF1CsKRq4W42+OCdK87
KcNZPYacsf2P/WyMcKDkr5ALzUNtnPXsUWKLTyY3gPaSFqaGsSoVzFcvjStX/sOk
kR39D0+ymmT0KzQrMoz7yoTStLBsKEHGz80s0IieLBuwRS6GIRi0Ozt99cprMeSl
a4jTFHHjsXb+87HSUgbAC3GpFiJVTATMM1iOB24A270kbvCJbGE3ghVNN8RjO8kd
JY7D1iqkEoNDGCLXmpHMAXMNwg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:18 2023 by rpki-client on console-fra.rpki-client.org