Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/rC9iCf0r9erqBr-pJ0LaBTaTz_M.roa
File: rC9iCf0r9erqBr-pJ0LaBTaTz_M.roa (raw, json)
Hash identifier: eVypmzxNOrTNSgVBMbeV/uHlUZKi8UE7H6COAsgCrTo=
Subject key identifier: AC:2F:62:09:FD:2B:F5:EA:EA:06:BF:A9:27:42:DA:05:36:93:CF:F3
Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial: 083102E8
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/rC9iCf0r9erqBr-pJ0LaBTaTz_M.roa
Signing time: Sat 01 Jan 2022 12:57:27 +0000
ROA not before: Sat 01 Jan 2022 12:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202682
IP address blocks: 92.119.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137429736 (0x83102e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Validity
Not Before: Jan 1 12:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac2f6209fd2bf5eaea06bfa92742da053693cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:3c:76:6a:e4:72:e7:dc:d9:37:7c:c6:d8:
8e:27:72:40:55:b9:8e:6a:39:0d:a4:ef:16:77:20:
9b:88:e1:94:eb:7a:7d:1f:53:77:79:f6:c4:00:79:
24:25:77:06:f3:29:49:d8:21:4c:f1:6a:7d:92:e7:
e6:ad:38:0e:9d:5a:2a:c1:8e:0f:0c:0a:4d:cc:6e:
23:5d:70:58:35:01:f9:76:83:8c:62:b3:f2:53:24:
5c:63:01:3e:5f:ad:ee:5b:d5:2a:14:d5:f6:54:3b:
8b:c5:62:8f:41:4a:86:1d:d6:9a:76:c4:ba:38:a7:
6d:14:4b:64:7e:54:c2:7b:98:f4:1c:5e:02:09:45:
8f:2c:8a:32:5f:22:3b:74:7f:d0:ef:3e:05:d5:4c:
b0:6c:6f:92:05:a1:47:cf:13:bf:90:17:19:48:aa:
90:bd:e9:5e:30:dd:75:42:ac:56:6d:f3:9a:14:1a:
56:b9:e7:a5:b8:f4:a9:54:68:b9:2f:38:53:1f:a7:
d5:c5:aa:ec:26:a0:3b:81:59:b0:b5:19:9f:55:ef:
5c:4b:eb:6d:d3:50:f0:cc:2e:25:75:ca:01:9e:8a:
70:b7:64:1e:f9:58:b2:e7:75:62:d8:e0:24:b6:54:
6b:26:ef:96:e3:c6:ac:7d:b1:6d:bf:34:9b:8c:7d:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2F:62:09:FD:2B:F5:EA:EA:06:BF:A9:27:42:DA:05:36:93:CF:F3
X509v3 Authority Key Identifier:
keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/rC9iCf0r9erqBr-pJ0LaBTaTz_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:81:6f:70:74:38:8f:87:72:a7:a7:33:3c:27:e9:f0:8e:d7:
55:ac:45:92:33:e9:87:04:b9:8f:19:6d:6a:dc:76:91:97:b8:
7b:88:45:0f:60:3a:f6:a1:70:45:70:43:12:02:eb:ba:1b:85:
bc:55:5f:32:b3:89:e5:7f:81:ca:dc:f5:d8:a0:33:eb:21:6a:
df:f2:3c:2d:27:30:7f:5a:e3:6a:e5:c3:ed:aa:3e:85:32:e0:
23:e2:06:20:b7:1f:01:cc:6a:44:da:1d:60:8f:6b:dd:9b:fa:
5d:89:db:57:4d:ba:42:c8:a5:24:57:fe:46:d2:e5:63:51:ea:
30:3d:c0:b2:13:ca:04:4a:e0:43:9f:a3:72:46:96:e2:d6:a0:
60:a1:cc:24:4a:bf:bd:4c:d6:4e:b2:2c:22:ba:bc:04:f6:f6:
dc:e8:ff:1b:bb:f1:86:2d:21:4f:1c:97:33:84:c3:30:b6:f3:
07:68:90:b9:78:de:61:77:cd:4d:91:b1:68:6a:7c:2b:9e:26:
41:de:0a:d1:2b:e4:90:a8:eb:cc:39:82:e7:18:4d:7a:f4:08:
c8:e9:00:c7:cd:cb:29:12:e7:13:d7:e5:a1:28:1e:0b:19:7f:
7a:e9:e5:38:4a:e5:db:0d:0b:06:2e:5f:90:50:f3:b4:2b:8b:
e9:cc:d8:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDEC6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YWI3ODYxNmYzYjM5ZWQ0ODIwZDA0Y2UwOThlYTdjMjA2NTUzMTRiMB4XDTIyMDEw
MTEyNTcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWMyZjYyMDlmZDJi
ZjVlYWVhMDZiZmE5Mjc0MmRhMDUzNjkzY2ZmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANk1PHZq5HLn3Nk3fMbYjidyQFW5jmo5DaTvFncgm4jhlOt6
fR9Td3n2xAB5JCV3BvMpSdghTPFqfZLn5q04Dp1aKsGODwwKTcxuI11wWDUB+XaD
jGKz8lMkXGMBPl+t7lvVKhTV9lQ7i8Vij0FKhh3WmnbEujinbRRLZH5UwnuY9Bxe
AglFjyyKMl8iO3R/0O8+BdVMsGxvkgWhR88Tv5AXGUiqkL3pXjDddUKsVm3zmhQa
Vrnnpbj0qVRouS84Ux+n1cWq7CagO4FZsLUZn1XvXEvrbdNQ8MwuJXXKAZ6KcLdk
HvlYsud1YtjgJLZUaybvluPGrH2xbb80m4x9kdECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSsL2IJ/Sv16uoGv6knQtoFNpPP8zAfBgNVHSMEGDAWgBSqt4YW87Oe1IIN
BM4JjqfCBlUxSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FyZUdGdk96bnRTQ0RRVE9DWTZud2daVk1Vcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvYzM4YjZiLWFiMDktNDZhYS04N2VmLWViYWE2ZmY3ZDg4Ni8x
L3JDOWlDZjByOWVycUJyLXBKMExhQlRhVHpfTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
YzM4YjZiLWFiMDktNDZhYS04N2VmLWViYWE2ZmY3ZDg4Ni8xL3FyZUdGdk96bnRT
Q0RRVE9DWTZud2daVk1Vcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlx3QDANBgkqhkiG9w0BAQsFAAOC
AQEApoFvcHQ4j4dyp6czPCfp8I7XVaxFkjPphwS5jxltatx2kZe4e4hFD2A69qFw
RXBDEgLruhuFvFVfMrOJ5X+Bytz12KAz6yFq3/I8LScwf1rjauXD7ao+hTLgI+IG
ILcfAcxqRNodYI9r3Zv6XYnbV026QsilJFf+RtLlY1HqMD3AshPKBErgQ5+jckaW
4tagYKHMJEq/vUzWTrIsIrq8BPb23Oj/G7vxhi0hTxyXM4TDMLbzB2iQuXjeYXfN
TZGxaGp8K54mQd4K0SvkkKjrzDmC5xhNevQIyOkAx83LKRLnE9floSgeCxl/eunl
OErl2w0LBi5fkFDztCuL6czY3A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:30 2025 by rpki-client