Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YDjvEEubHJzksVHcF8lQ9s9789Q.roa
File: YDjvEEubHJzksVHcF8lQ9s9789Q.roa (raw, json)
Hash identifier: DvcX4A2yLrw6JlgnNZLv/EePrw1G5YmcUCqaNpeD1pE=
Subject key identifier: 60:38:EF:10:4B:9B:1C:9C:E4:B1:51:DC:17:C9:50:F6:CF:7B:F3:D4
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A994B15
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YDjvEEubHJzksVHcF8lQ9s9789Q.roa
Signing time: Sat 01 Jan 2022 04:52:20 +0000
ROA not before: Sat 01 Jan 2022 04:52:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209200
IP address blocks: 81.15.203.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983124757 (0x3a994b15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6038ef104b9b1c9ce4b151dc17c950f6cf7bf3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:4c:36:32:08:b5:19:e9:9d:45:57:1c:8d:
15:ec:75:05:fb:28:36:7f:ce:32:98:c1:07:23:a5:
c6:e3:66:ec:e1:aa:20:f5:97:f2:8c:02:53:f7:fd:
92:56:f1:cd:5f:17:24:95:09:b5:65:ef:92:b7:2b:
60:0c:bb:0f:51:f0:fa:d6:12:65:4c:ea:1e:d0:6c:
16:9a:9c:fc:7f:35:cf:3a:0e:73:b3:bc:55:ad:5a:
e5:51:95:ba:d8:af:2d:97:c3:ff:dd:c1:70:c6:94:
36:fc:3e:8a:65:f8:01:ca:07:10:f8:1d:3f:10:b9:
62:e7:f1:cc:1c:ba:6b:f1:1c:4b:9d:9d:98:e6:2e:
96:85:0a:25:93:1a:b0:8a:e0:06:f9:65:3b:d5:f4:
93:e3:26:1e:61:64:20:a5:be:51:a7:f0:2a:91:e6:
81:84:b8:1b:87:77:b7:a8:02:5b:82:fa:77:ef:dc:
69:64:52:d4:81:20:ff:01:9e:00:83:33:9f:9a:8d:
7a:6a:75:a8:08:c7:e2:bf:98:86:86:99:16:d8:4d:
c0:61:a5:4e:bf:11:22:c5:fc:57:90:52:c8:66:ab:
98:55:4d:ee:60:00:6b:01:e0:bc:e2:96:18:51:2d:
ff:90:ff:8e:a9:3f:ed:98:cc:0d:e7:32:cb:f1:a2:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:EF:10:4B:9B:1C:9C:E4:B1:51:DC:17:C9:50:F6:CF:7B:F3:D4
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YDjvEEubHJzksVHcF8lQ9s9789Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.203.0/24
81.15.237.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5e:45:a1:d2:e9:6f:f4:0d:f9:ce:88:69:d1:92:e0:19:20:
0d:44:06:24:ad:9f:c0:a7:c6:17:b4:5a:54:af:15:7e:a3:be:
e3:01:f1:3b:ac:04:bf:2a:3d:f6:ff:eb:c9:ea:44:7e:f7:8d:
c0:62:66:24:b3:85:52:08:3f:09:78:d2:d6:7d:c4:28:1a:04:
9a:b4:ee:e3:d1:ec:10:0c:7e:79:ec:09:36:2e:bb:0c:c0:04:
9c:b4:a8:92:1d:a2:4e:98:de:50:70:a1:90:36:c6:5c:fb:ee:
5b:ce:50:c4:f1:b3:a9:02:74:6d:4d:01:94:e2:e6:26:ad:fb:
29:4d:bb:95:6b:68:c7:60:33:54:a4:eb:66:78:4e:a6:32:3a:
62:8f:cf:be:db:df:d0:e7:f5:be:34:a8:65:88:16:40:0a:bd:
1f:3c:2f:ac:f7:27:62:70:67:ca:24:5d:7a:43:71:57:38:b3:
d3:d3:ff:82:26:4d:96:fb:41:8d:f6:f2:cf:2d:c0:3f:9f:5c:
12:16:7a:da:bf:eb:84:f1:ad:ec:93:b5:88:86:4f:32:19:f3:
23:dd:32:c5:ba:36:fb:4c:de:c2:bf:44:50:fa:9f:4d:27:5a:
85:90:11:64:9e:bd:61:05:3c:56:36:e0:00:52:34:79:36:30:
5c:9f:f5:68
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOplLFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTIyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjAzOGVmMTA0Yjli
MWM5Y2U0YjE1MWRjMTdjOTUwZjZjZjdiZjNkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3JTDYyCLUZ6Z1FVxyNFex1BfsoNn/OMpjBByOlxuNm7OGq
IPWX8owCU/f9klbxzV8XJJUJtWXvkrcrYAy7D1Hw+tYSZUzqHtBsFpqc/H81zzoO
c7O8Va1a5VGVutivLZfD/93BcMaUNvw+imX4AcoHEPgdPxC5YufxzBy6a/EcS52d
mOYuloUKJZMasIrgBvllO9X0k+MmHmFkIKW+UafwKpHmgYS4G4d3t6gCW4L6d+/c
aWRS1IEg/wGeAIMzn5qNemp1qAjH4r+YhoaZFthNwGGlTr8RIsX8V5BSyGarmFVN
7mAAawHgvOKWGFEt/5D/jqk/7ZjMDecyy/Gi2KMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRgOO8QS5scnOSxUdwXyVD2z3vz1DAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L1lEanZFRXViSEp6a3NWSGNGOGxROXM5Nzg5US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFEPywMEAFEP7TANBgkqhkiG9w0B
AQsFAAOCAQEAeV5FodLpb/QN+c6IadGS4BkgDUQGJK2fwKfGF7RaVK8VfqO+4wHx
O6wEvyo99v/ryepEfveNwGJmJLOFUgg/CXjS1n3EKBoEmrTu49HsEAx+eewJNi67
DMAEnLSokh2iTpjeUHChkDbGXPvuW85QxPGzqQJ0bU0BlOLmJq37KU27lWtox2Az
VKTrZnhOpjI6Yo/Pvtvf0Of1vjSoZYgWQAq9HzwvrPcnYnBnyiRdekNxVziz09P/
giZNlvtBjfbyzy3AP59cEhZ62r/rhPGt7JO1iIZPMhnzI90yxbo2+0zewr9EUPqf
TSdahZARZJ69YQU8VjbgAFI0eTYwXJ/1aA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org