Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2PfzFbF2Rv3eimbCdBOzjW-PDNk.roa
File: 2PfzFbF2Rv3eimbCdBOzjW-PDNk.roa (raw, json)
Hash identifier: N+WBpvgv5+0Cl8mZgSycYAT1Zu1Mmb5roeTK/QaCk34=
Subject key identifier: D8:F7:F3:15:B1:76:46:FD:DE:8A:66:C2:74:13:B3:8D:6F:8F:0C:D9
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01845EB4E35BDE05203A853B406DD1EEEECF
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2PfzFbF2Rv3eimbCdBOzjW-PDNk.roa
Signing time: Wed 09 Nov 2022 23:23:43 +0000
ROA not before: Wed 09 Nov 2022 23:23:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 194.169.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:b4:e3:5b:de:05:20:3a:85:3b:40:6d:d1:ee:ee:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Nov 9 23:23:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8f7f315b17646fdde8a66c27413b38d6f8f0cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:ab:e0:31:0e:c4:c3:e3:ad:86:92:bf:40:
ef:5b:04:2e:72:31:2e:ff:65:f4:5b:17:65:62:39:
2d:e3:9a:8a:45:54:23:5e:ce:e0:fc:a9:45:d8:43:
e3:bc:e1:45:54:4d:7e:2c:9f:b8:a3:cd:e0:f8:8d:
85:4f:04:0f:f2:21:bf:dd:b9:6c:d0:d8:e2:df:53:
07:8d:f4:69:18:6a:85:89:59:0b:d0:a1:28:90:a8:
1e:fa:b0:da:b8:8d:20:41:72:f3:84:b3:6a:33:85:
de:68:e8:8b:ce:77:11:e5:20:5b:c8:89:73:91:91:
cb:fe:72:42:c9:13:cb:2a:0b:91:72:46:64:16:ad:
f9:1b:a9:b7:0e:30:37:a7:8b:39:f5:b1:ec:1d:8b:
17:35:c6:3d:be:cb:0f:6b:9b:54:87:67:6e:9b:de:
f8:d9:8c:f5:eb:94:bc:c6:c4:dc:76:3e:50:69:15:
70:da:6d:46:b5:3c:df:bd:18:e7:68:a4:73:e9:90:
c7:31:93:d6:eb:20:6b:57:9e:e1:44:5c:b4:d1:1f:
bf:f0:0c:90:34:4b:db:a2:08:f8:01:a2:41:1f:34:
65:b8:72:cc:42:23:16:fb:c9:1c:42:d9:5d:7c:80:
1d:75:06:75:8e:e4:ca:d3:67:44:9e:62:15:8d:a0:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:F3:15:B1:76:46:FD:DE:8A:66:C2:74:13:B3:8D:6F:8F:0C:D9
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2PfzFbF2Rv3eimbCdBOzjW-PDNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:07:c9:f4:a2:5d:82:8b:aa:35:b3:04:16:33:76:c6:ee:fd:
74:cc:d1:c3:4b:30:5f:c2:4b:ab:87:32:78:db:1a:62:e0:3c:
9a:92:4b:88:82:e6:65:79:06:0f:d4:1d:db:49:55:ed:08:d4:
82:b2:85:0f:55:89:e8:15:52:de:c1:14:cb:dc:d2:7e:05:92:
d7:18:26:da:f6:98:59:18:ea:c9:f1:2e:d8:03:37:02:79:4c:
40:b6:60:8a:da:7e:43:a0:37:10:3c:10:62:aa:40:e5:fd:6f:
57:b4:71:98:45:18:d5:07:2d:a3:aa:ea:5e:c2:f9:c2:6c:03:
23:6f:0c:56:c0:65:b5:cb:1d:fd:7c:09:cc:d8:94:6f:74:41:
4f:f9:89:da:e5:93:54:19:70:e7:97:4e:1e:35:f2:e8:f9:12:
2e:07:f7:a3:fe:b2:5c:8c:4d:9c:e8:1b:bf:c1:33:f4:bd:95:
bf:fb:81:95:1e:57:90:f7:36:c9:47:13:45:8b:58:78:aa:6e:
18:a5:4a:93:8e:e5:5f:ee:b2:cc:a4:d1:05:a1:9a:55:de:c3:
9a:70:a9:8a:8c:e5:24:2f:f1:7b:cf:9d:c6:9e:fd:70:e4:6a:
7c:c9:85:bf:30:9a:09:57:91:12:5f:c9:44:98:0f:d6:84:90:
3a:7a:09:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRetONb3gUgOoU7QG3R7u7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjIxMTA5MjMyMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGY3ZjMxNWIxNzY0NmZkZGU4YTY2YzI3NDEzYjM4ZDZmOGYwY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBCr4DEOxMPjrYaSv0DvWwQucjEu
/2X0WxdlYjkt45qKRVQjXs7g/KlF2EPjvOFFVE1+LJ+4o83g+I2FTwQP8iG/3bls
0Nji31MHjfRpGGqFiVkL0KEokKge+rDauI0gQXLzhLNqM4XeaOiLzncR5SBbyIlz
kZHL/nJCyRPLKguRckZkFq35G6m3DjA3p4s59bHsHYsXNcY9vssPa5tUh2dum974
2Yz165S8xsTcdj5QaRVw2m1GtTzfvRjnaKRz6ZDHMZPW6yBrV57hRFy00R+/8AyQ
NEvbogj4AaJBHzRluHLMQiMW+8kcQtldfIAddQZ1juTK02dEnmIVjaDAuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNj38xWxdkb93opmwnQTs41vjwzZMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvMlBmekZiRjJSdjNlaW1iQ2RCT3pqVy1QRE5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqkwMA0G
CSqGSIb3DQEBCwUAA4IBAQAcB8n0ol2Ci6o1swQWM3bG7v10zNHDSzBfwkurhzJ4
2xpi4DyakkuIguZleQYP1B3bSVXtCNSCsoUPVYnoFVLewRTL3NJ+BZLXGCba9phZ
GOrJ8S7YAzcCeUxAtmCK2n5DoDcQPBBiqkDl/W9XtHGYRRjVBy2jqupewvnCbAMj
bwxWwGW1yx39fAnM2JRvdEFP+Yna5ZNUGXDnl04eNfLo+RIuB/ej/rJcjE2c6Bu/
wTP0vZW/+4GVHleQ9zbJRxNFi1h4qm4YpUqTjuVf7rLMpNEFoZpV3sOacKmKjOUk
L/F7z53Gnv1w5Gp8yYW/MJoJV5ESX8lEmA/WhJA6egmg
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org