Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/F-Y9EuLVwlrdqfmZccbuM0Tu_7k.roa
File: F-Y9EuLVwlrdqfmZccbuM0Tu_7k.roa (raw, json)
Hash identifier: NQV0typ1Iou5umYuXavyTBY/ct3dAr1Ch33ko+wqIRc=
Subject key identifier: 17:E6:3D:12:E2:D5:C2:5A:DD:A9:F9:99:71:C6:EE:33:44:EE:FF:B9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1450F8AE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/F-Y9EuLVwlrdqfmZccbuM0Tu_7k.roa
Signing time: Fri 25 Mar 2022 00:59:37 +0000
ROA not before: Fri 25 Mar 2022 00:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 212.87.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340850862 (0x1450f8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 25 00:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17e63d12e2d5c25adda9f99971c6ee3344eeffb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:51:c4:03:5d:9f:37:33:46:6b:3d:0e:ad:
6b:6e:4f:46:f4:1c:0f:69:cf:82:84:91:55:2e:e1:
83:96:4f:a1:8e:e0:09:c9:7c:16:1a:1b:ae:a4:f2:
e0:c2:07:53:96:bf:8f:5c:39:3e:89:c7:1f:82:db:
76:45:5b:37:25:70:99:2f:2c:7d:69:53:5e:83:48:
ad:34:6b:bb:67:b8:fd:15:16:a9:03:fc:8c:8d:1d:
3d:9a:87:db:7f:c6:81:de:f3:61:48:82:e6:89:29:
7c:87:97:51:9d:b5:39:62:c7:6f:a3:38:73:23:16:
4f:dd:ea:08:9d:5e:0d:db:a8:eb:30:e7:0c:b1:4e:
56:03:90:39:b7:7c:42:97:b8:db:f4:50:36:ca:4c:
4a:89:eb:49:42:bc:5a:79:cd:d0:d6:dd:71:e0:86:
f2:e3:b5:f4:b1:71:4f:e1:34:c9:16:c7:65:91:6d:
88:ae:e5:88:fd:3b:4d:6e:22:08:09:bc:89:40:2c:
45:53:7f:69:cf:a4:f5:2c:cb:ec:8a:43:7a:28:f0:
81:a1:aa:91:67:0b:ba:14:b6:33:d8:eb:99:1d:fe:
b1:78:47:d8:d3:9f:25:2a:a2:80:13:45:11:98:aa:
fa:5d:7c:02:8e:57:ef:bb:92:17:49:76:0c:95:29:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:3D:12:E2:D5:C2:5A:DD:A9:F9:99:71:C6:EE:33:44:EE:FF:B9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/F-Y9EuLVwlrdqfmZccbuM0Tu_7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
26:f4:00:f5:be:ee:93:eb:9d:61:32:75:1d:37:5d:49:29:9a:
0a:7d:d5:dc:af:86:82:7b:45:85:79:91:62:2d:3b:f5:9e:c5:
94:17:a7:b5:df:97:11:de:6f:41:80:7a:7f:a5:2d:d3:d5:92:
d5:de:03:ac:20:e8:6c:c6:69:37:73:3c:b9:75:8b:8e:a7:e7:
b5:a4:6d:0b:42:d2:c1:2b:21:7c:e9:18:7f:b9:ab:14:f4:b6:
e9:e0:b1:08:51:f0:89:03:03:0c:58:01:03:27:7f:94:9d:e5:
6d:ae:5e:c0:97:14:4f:37:f9:0e:a9:4a:fa:ea:a9:16:44:8d:
c7:26:a9:6b:1c:b1:87:f1:27:ed:c9:e9:20:94:28:32:c3:70:
4e:9c:1e:72:2a:80:07:6f:82:e4:49:06:b1:13:0f:b3:e0:db:
00:37:66:da:c8:ca:71:e9:30:1c:cc:2d:01:46:41:ea:81:05:
80:67:9d:cd:b7:ef:e6:ac:b4:7e:68:44:aa:df:90:4a:26:5f:
2f:dc:56:eb:dc:c8:f1:a2:d2:57:41:5d:cd:52:33:05:90:d9:
81:d4:be:1c:d9:6a:4c:02:3d:ce:09:c1:f6:bb:2d:79:98:d0:
16:a4:10:c7:89:49:03:fb:4d:1d:74:5a:72:d0:ba:1e:24:53:
c6:66:70:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFFD4rjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDMy
NTAwNTkzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTdlNjNkMTJlMmQ1
YzI1YWRkYTlmOTk5NzFjNmVlMzM0NGVlZmZiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJz3UcQDXZ83M0ZrPQ6ta25PRvQcD2nPgoSRVS7hg5ZPoY7g
Ccl8FhobrqTy4MIHU5a/j1w5PonHH4LbdkVbNyVwmS8sfWlTXoNIrTRru2e4/RUW
qQP8jI0dPZqH23/Ggd7zYUiC5okpfIeXUZ21OWLHb6M4cyMWT93qCJ1eDduo6zDn
DLFOVgOQObd8Qpe42/RQNspMSonrSUK8WnnN0NbdceCG8uO19LFxT+E0yRbHZZFt
iK7liP07TW4iCAm8iUAsRVN/ac+k9SzL7IpDeijwgaGqkWcLuhS2M9jrmR3+sXhH
2NOfJSqigBNFEZiq+l18Ao5X77uSF0l2DJUpN9MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQX5j0S4tXCWt2p+Zlxxu4zRO7/uTAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L0YtWTlFdUxWd2xyZHFmbVpjY2J1TTBUdV83ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtRXwDANBgkqhkiG9w0BAQsFAAOC
AQEAJvQA9b7uk+udYTJ1HTddSSmaCn3V3K+GgntFhXmRYi079Z7FlBentd+XEd5v
QYB6f6Ut09WS1d4DrCDobMZpN3M8uXWLjqfntaRtC0LSwSshfOkYf7mrFPS26eCx
CFHwiQMDDFgBAyd/lJ3lba5ewJcUTzf5DqlK+uqpFkSNxyapaxyxh/En7cnpIJQo
MsNwTpweciqAB2+C5EkGsRMPs+DbADdm2sjKcekwHMwtAUZB6oEFgGedzbfv5qy0
fmhEqt+QSiZfL9xW69zI8aLSV0FdzVIzBZDZgdS+HNlqTAI9zgnB9rsteZjQFqQQ
x4lJA/tNHXRactC6HiRTxmZwZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org