Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XoHxpOGdj1H0baG09Jpywm-bmjI.roa
File: XoHxpOGdj1H0baG09Jpywm-bmjI.roa (raw, json)
Hash identifier: WOD5EZIaoH57LHWokcMZyLe+KeSJ5wuvqL/BR0XNvss=
Subject key identifier: 5E:81:F1:A4:E1:9D:8F:51:F4:6D:A1:B4:F4:9A:72:C2:6F:9B:9A:32
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1372FA09
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XoHxpOGdj1H0baG09Jpywm-bmjI.roa
Signing time: Tue 18 Jan 2022 05:35:09 +0000
ROA not before: Tue 18 Jan 2022 05:35:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 82.115.8.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326302217 (0x1372fa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 18 05:35:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e81f1a4e19d8f51f46da1b4f49a72c26f9b9a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:d6:3d:e3:22:15:39:2a:f3:14:b3:e4:e2:
2c:65:85:3c:a4:ad:c3:78:95:f0:e9:5c:41:04:19:
c3:39:fa:b6:27:11:9e:91:3b:3a:97:9f:82:51:f8:
55:1e:13:49:24:ee:77:64:a7:18:56:08:07:78:25:
d9:19:cf:76:7b:db:59:92:8f:13:3a:27:f8:11:f8:
e6:fd:63:ba:68:29:90:83:91:18:9c:2f:85:4f:6e:
40:de:00:6d:79:42:5a:8d:cc:5d:b9:3e:a2:95:14:
fe:59:d6:84:f2:62:53:76:c1:4a:7b:b3:c3:8c:9f:
8c:21:2d:19:d0:9c:f5:53:70:b0:06:ea:62:05:cc:
d2:9a:f3:bf:87:18:48:b1:54:15:5c:6c:b6:24:d0:
a9:a3:0a:c8:b7:a7:b1:9f:6e:87:55:b9:2e:fd:70:
25:9b:f7:2a:04:9b:aa:89:50:8f:84:79:16:e0:02:
6d:c8:64:64:0e:44:17:96:39:9d:8b:d9:23:c6:20:
35:9a:93:cf:6b:50:15:34:b1:de:44:7d:65:1b:5f:
c4:46:5c:82:bc:a9:e3:43:e6:de:8d:d1:6b:55:b8:
5a:11:0c:07:f6:c4:62:43:0b:65:ce:dd:76:93:5f:
d1:a9:2a:f7:36:09:09:9a:c3:47:58:bb:5a:e3:63:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:81:F1:A4:E1:9D:8F:51:F4:6D:A1:B4:F4:9A:72:C2:6F:9B:9A:32
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XoHxpOGdj1H0baG09Jpywm-bmjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.8.0/22
185.129.108.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:f9:2d:ae:b8:ea:a0:e6:7d:8a:63:a2:87:e8:b6:8c:33:66:
58:74:d2:76:d9:c2:86:56:a1:35:cc:a4:06:2f:58:83:c3:c2:
b8:76:a5:83:80:d3:05:cd:ce:57:3b:8f:c8:c8:3d:f2:87:7c:
4b:42:03:29:25:05:15:1b:00:ea:3d:40:cf:e9:f6:d7:bc:e6:
98:bd:49:73:c0:2a:2f:32:b5:9a:1f:a3:91:15:30:42:12:4b:
8e:f1:81:d9:f7:e4:6f:72:89:21:51:81:39:0c:30:bc:dc:a0:
47:1a:95:a5:eb:18:90:e4:15:a0:9f:67:e7:88:7e:97:0a:d1:
16:61:48:e6:e1:5d:41:a1:91:eb:63:aa:82:c3:15:d0:93:d8:
38:68:5b:87:47:ab:06:7e:13:be:66:5f:9c:17:ad:73:11:9f:
71:d7:f8:34:10:73:2b:2e:5f:18:ba:70:08:45:75:3e:62:04:
75:86:9d:8c:a9:1c:58:2a:18:1e:53:81:61:4b:51:97:f9:38:
31:8a:15:70:31:4b:21:2e:12:5b:f0:86:2e:fd:72:74:f4:b0:
3f:a1:62:d0:db:15:ee:69:c2:7e:22:c4:3a:db:00:99:56:f2:
11:60:23:16:de:85:1f:92:0e:72:0f:a0:39:eb:d5:44:de:5b:
11:ee:05:cb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEE3L6CTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDEx
ODA1MzUwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWU4MWYxYTRlMTlk
OGY1MWY0NmRhMWI0ZjQ5YTcyYzI2ZjliOWEzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQE1j3jIhU5KvMUs+TiLGWFPKStw3iV8OlcQQQZwzn6ticR
npE7OpefglH4VR4TSSTud2SnGFYIB3gl2RnPdnvbWZKPEzon+BH45v1jumgpkIOR
GJwvhU9uQN4AbXlCWo3MXbk+opUU/lnWhPJiU3bBSnuzw4yfjCEtGdCc9VNwsAbq
YgXM0przv4cYSLFUFVxstiTQqaMKyLensZ9uh1W5Lv1wJZv3KgSbqolQj4R5FuAC
bchkZA5EF5Y5nYvZI8YgNZqTz2tQFTSx3kR9ZRtfxEZcgryp40Pm3o3Ra1W4WhEM
B/bEYkMLZc7ddpNf0akq9zYJCZrDR1i7WuNjWW0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRegfGk4Z2PUfRtobT0mnLCb5uaMjAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L1hvSHhwT0dkajFIMGJhRzA5SnB5d20tYm1qSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlJzCAMEAbmBbDANBgkqhkiG9w0B
AQsFAAOCAQEAu/ktrrjqoOZ9imOih+i2jDNmWHTSdtnChlahNcykBi9Yg8PCuHal
g4DTBc3OVzuPyMg98od8S0IDKSUFFRsA6j1Az+n217zmmL1Jc8AqLzK1mh+jkRUw
QhJLjvGB2ffkb3KJIVGBOQwwvNygRxqVpesYkOQVoJ9n54h+lwrRFmFI5uFdQaGR
62OqgsMV0JPYOGhbh0erBn4TvmZfnBetcxGfcdf4NBBzKy5fGLpwCEV1PmIEdYad
jKkcWCoYHlOBYUtRl/k4MYoVcDFLIS4SW/CGLv1ydPSwP6Fi0NsV7mnCfiLEOtsA
mVbyEWAjFt6FH5IOcg+gOevVRN5bEe4Fyw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org