Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/m68AtOsgerK-Cs67aKTYqprfRK0.roa
File: m68AtOsgerK-Cs67aKTYqprfRK0.roa (raw, json)
Hash identifier: Q6RMx8wMnSrpjqjS8Vd3lw0eOxefxgzfG48A3AkenNU=
Subject key identifier: 9B:AF:00:B4:EB:20:7A:B2:BE:0A:CE:BB:68:A4:D8:AA:9A:DF:44:AD
Certificate issuer: /CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Certificate serial: F811C7
Authority key identifier: EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/m68AtOsgerK-Cs67aKTYqprfRK0.roa
Signing time: Sat 01 Jan 2022 06:02:28 +0000
ROA not before: Sat 01 Jan 2022 06:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 188.95.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16257479 (0xf811c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Validity
Not Before: Jan 1 06:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9baf00b4eb207ab2be0acebb68a4d8aa9adf44ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:73:cd:58:66:b5:9a:e1:81:df:cc:9c:2d:
8a:9f:9b:d6:bd:76:3a:62:7d:0f:ca:23:ea:1c:c7:
fe:6c:f5:81:11:35:7b:e4:aa:dd:02:ba:32:26:85:
2a:3f:4c:f1:05:79:c7:6c:25:54:51:31:6d:41:13:
50:1d:6c:0e:05:a9:87:ad:5c:35:21:9e:25:bd:5d:
c2:39:93:ad:2a:50:b3:66:7c:33:7f:be:90:b5:3f:
48:89:24:e7:a3:94:bf:51:72:5b:28:68:81:95:42:
70:56:80:3a:1d:e7:3b:38:33:1d:bd:97:7c:7c:93:
c0:25:90:a8:07:e5:11:90:48:5f:44:e8:3f:72:46:
cf:5d:b8:b1:6e:ff:f9:13:41:9b:41:1e:2f:6d:64:
fb:32:f4:bb:66:65:98:d2:0e:2d:a1:81:ac:a7:df:
a0:78:7b:cd:8a:19:5f:e1:4f:95:24:37:28:e6:6b:
e1:16:37:84:2d:ce:db:e1:11:da:78:65:d8:a7:b8:
a8:3d:a2:65:9a:05:26:f6:1c:cf:ff:16:fb:b8:d0:
e5:57:4d:3f:ff:0c:66:3b:59:4e:a5:e0:36:0f:08:
cf:2d:76:8b:dd:1c:45:3e:85:95:71:ab:2b:19:d3:
77:e5:b9:14:16:4f:93:b4:16:7e:6f:bc:62:af:1a:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:00:B4:EB:20:7A:B2:BE:0A:CE:BB:68:A4:D8:AA:9A:DF:44:AD
X509v3 Authority Key Identifier:
keyid:EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/m68AtOsgerK-Cs67aKTYqprfRK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/7hpiB_6dsND36dFhq6Tl3eJUmi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
24:73:ca:e5:92:ac:de:1f:d4:9e:27:79:f6:13:f4:e4:d4:a1:
84:04:93:20:36:bf:9a:44:e1:88:8c:08:19:ab:04:33:84:de:
2d:cb:b9:3c:a1:3e:6e:4f:1d:98:93:e1:26:25:76:e0:f1:da:
61:3c:e8:58:b3:df:0d:ff:0a:d0:86:d9:8f:28:64:9e:f8:f9:
19:f7:83:6d:17:0d:f8:f5:90:eb:09:d2:8f:98:a8:6e:fe:6e:
38:68:6e:29:18:87:5a:6e:8b:9a:0d:0a:5e:55:dd:4b:5f:f2:
62:5b:ea:d0:b2:74:af:ed:3f:d5:44:e5:5f:fb:bf:2a:9a:77:
01:ff:e0:89:a8:3e:89:fd:9b:ba:d0:4a:e7:9e:f8:b0:fe:34:
04:18:71:e4:5f:a4:ec:45:65:60:e4:75:2d:74:55:bc:6a:36:
b1:4f:85:8f:c9:70:09:f5:77:31:00:2d:68:4f:2a:8a:2d:50:
43:1d:e3:21:52:72:2e:f9:9d:1d:8d:04:50:ba:a3:1a:4c:96:
91:ce:72:ac:d1:df:83:27:94:12:5d:e2:85:37:db:37:c7:e9:
c2:f6:ce:21:b9:5f:00:5c:2a:73:d7:b2:ee:15:2d:50:cc:58:
a7:14:aa:8d:8b:65:d9:dd:ef:0e:e3:0a:44:c6:d8:f2:0d:18:
b3:d5:57:d1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPgRxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTFhNjIwN2ZlOWRiMGQwZjdlOWQxNjFhYmE0ZTVkZGUyNTQ5YTJlMB4XDTIyMDEw
MTA2MDIyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJhZjAwYjRlYjIw
N2FiMmJlMGFjZWJiNjhhNGQ4YWE5YWRmNDRhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKn3c81YZrWa4YHfzJwtip+b1r12OmJ9D8oj6hzH/mz1gRE1
e+Sq3QK6MiaFKj9M8QV5x2wlVFExbUETUB1sDgWph61cNSGeJb1dwjmTrSpQs2Z8
M3++kLU/SIkk56OUv1FyWyhogZVCcFaAOh3nOzgzHb2XfHyTwCWQqAflEZBIX0To
P3JGz124sW7/+RNBm0EeL21k+zL0u2ZlmNIOLaGBrKffoHh7zYoZX+FPlSQ3KOZr
4RY3hC3O2+ER2nhl2Ke4qD2iZZoFJvYcz/8W+7jQ5VdNP/8MZjtZTqXgNg8Izy12
i90cRT6FlXGrKxnTd+W5FBZPk7QWfm+8Yq8aACMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSbrwC06yB6sr4KzrtopNiqmt9ErTAfBgNVHSMEGDAWgBTuGmIH/p2w0Pfp
0WGrpOXd4lSaLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdocGlCXzZkc05EMzZkRmhxNlRsM2VKVW1pNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNzE4MDA3LTk3MDMtNGZhYi05NGQ3LWQ1MzgzOGJjYjUwNS8x
L202OEF0T3NnZXJLLUNzNjdhS1RZcXByZlJLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NzE4MDA3LTk3MDMtNGZhYi05NGQ3LWQ1MzgzOGJjYjUwNS8xLzdocGlCXzZkc05E
MzZkRmhxNlRsM2VKVW1pNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALxfRTANBgkqhkiG9w0BAQsFAAOC
AQEAJHPK5ZKs3h/Unid59hP05NShhASTIDa/mkThiIwIGasEM4TeLcu5PKE+bk8d
mJPhJiV24PHaYTzoWLPfDf8K0IbZjyhknvj5GfeDbRcN+PWQ6wnSj5iobv5uOGhu
KRiHWm6Lmg0KXlXdS1/yYlvq0LJ0r+0/1UTlX/u/Kpp3Af/giag+if2butBK5574
sP40BBhx5F+k7EVlYOR1LXRVvGo2sU+Fj8lwCfV3MQAtaE8qii1QQx3jIVJyLvmd
HY0EULqjGkyWkc5yrNHfgyeUEl3ihTfbN8fpwvbOIblfAFwqc9ey7hUtUMxYpxSq
jYtl2d3vDuMKRMbY8g0Ys9VX0Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:03 2023 by rpki-client on console-ams.rpki-client.org