Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fvOWHbrXyBwni-bG4dj054y1RXw.roa
File: fvOWHbrXyBwni-bG4dj054y1RXw.roa (raw, json)
Hash identifier: KMyFzzH27yDY3kjvWb5rPPaP5Xsnoj1szG1efBwPZhM=
Subject key identifier: 7E:F3:96:1D:BA:D7:C8:1C:27:8B:E6:C6:E1:D8:F4:E7:8C:B5:45:7C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018466AC1751AE0B0A056D1967DFA2AFF8EE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fvOWHbrXyBwni-bG4dj054y1RXw.roa
Signing time: Fri 11 Nov 2022 12:31:04 +0000
ROA not before: Fri 11 Nov 2022 12:31:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212552
IP address blocks: 212.90.102.0/23 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.24.0/22 maxlen: 24
82.115.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:ac:17:51:ae:0b:0a:05:6d:19:67:df:a2:af:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 11 12:31:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ef3961dbad7c81c278be6c6e1d8f4e78cb5457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:23:e9:2b:fa:4e:1e:fd:f4:15:5c:9e:bd:
4c:be:51:0a:00:e1:0e:6d:d5:14:8b:2f:18:58:af:
f5:fd:a0:1e:d3:c1:31:97:1f:34:fa:02:89:07:5f:
94:81:8a:0d:a0:a6:cb:ca:a9:26:ac:51:6c:73:64:
05:11:5c:7d:e7:37:c7:67:8e:fd:5e:09:94:88:55:
7a:10:35:ce:d4:23:c7:24:4c:aa:c0:7f:2d:21:b8:
60:40:b3:93:66:38:b5:a0:d1:aa:e9:de:92:bd:23:
42:9d:d8:d6:3f:28:fc:2c:af:00:ea:e3:e7:ea:62:
bc:5e:a4:52:46:21:3e:b1:34:11:c1:9b:10:40:88:
78:29:21:92:1b:f1:3e:17:df:66:c4:00:40:83:1a:
c1:d3:f6:cf:86:ef:91:6c:6c:c8:e9:7c:75:3e:69:
3d:b3:96:4e:d6:f1:26:d6:5a:82:1f:ff:28:ec:3d:
2b:6e:b9:38:cb:70:c2:82:9d:0d:63:9e:a2:df:e5:
7a:47:0d:89:f1:56:36:80:f4:f4:b0:e3:8b:71:05:
b7:cd:a2:ed:fa:15:e3:01:69:5d:ef:2c:ff:b7:57:
ad:3b:42:6b:f4:49:b0:9d:af:12:34:e5:ef:2d:83:
68:ff:db:53:8b:83:a9:62:5f:41:d7:3b:50:fa:9b:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:96:1D:BA:D7:C8:1C:27:8B:E6:C6:E1:D8:F4:E7:8C:B5:45:7C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fvOWHbrXyBwni-bG4dj054y1RXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.16.0/24
82.115.20.0/23
82.115.24.0/22
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
85:aa:15:9c:d1:a5:df:b2:e8:b8:63:0c:16:3e:08:0f:13:8f:
3d:0a:a4:82:55:f4:0d:50:20:d0:44:ff:91:ca:37:b6:7c:14:
4c:d9:13:91:2f:34:09:52:88:66:6a:f8:df:93:ca:95:94:29:
97:5b:bf:15:b0:45:26:6a:92:22:ba:06:03:a8:52:e7:0d:de:
d2:27:bd:f5:72:d2:9a:60:6a:5d:85:13:ab:4d:6f:48:32:7f:
f7:2e:7c:fb:6f:3b:8a:28:6d:f1:02:78:f8:b3:87:61:ac:96:
fd:67:c1:89:fe:f3:77:41:1a:0f:e8:d4:ce:36:c5:ef:3f:f3:
fe:69:3e:57:6c:fb:7c:db:48:64:e1:57:08:3a:a3:04:10:23:
55:83:9c:e9:75:11:c1:90:36:88:81:fc:8d:cc:83:a4:69:55:
d5:e4:cc:0a:55:f1:b8:4a:24:97:31:e7:dd:8c:16:96:20:bb:
e2:94:f0:b8:c1:b5:c6:2f:e9:e6:5e:17:0e:31:e4:d6:5f:5d:
de:13:d2:69:39:e0:c7:51:f8:36:6f:8c:f6:3e:71:d7:f9:3b:
98:4e:ce:ef:41:d6:6f:a6:9b:5b:b0:86:3f:92:f3:2a:6a:5f:
6e:47:c8:20:dd:98:49:3f:1f:6c:41:db:cb:d7:9a:80:05:26:
ba:0b:0a:9b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYRmrBdRrgsKBW0ZZ9+ir/juMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjIxMTExMTIzMTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWYzOTYxZGJhZDdjODFjMjc4YmU2YzZlMWQ4ZjRlNzhjYjU0NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit0j6Sv6Th799BVcnr1MvlEKAOEO
bdUUiy8YWK/1/aAe08Exlx80+gKJB1+UgYoNoKbLyqkmrFFsc2QFEVx95zfHZ479
XgmUiFV6EDXO1CPHJEyqwH8tIbhgQLOTZji1oNGq6d6SvSNCndjWPyj8LK8A6uPn
6mK8XqRSRiE+sTQRwZsQQIh4KSGSG/E+F99mxABAgxrB0/bPhu+RbGzI6Xx1Pmk9
s5ZO1vEm1lqCH/8o7D0rbrk4y3DCgp0NY56i3+V6Rw2J8VY2gPT0sOOLcQW3zaLt
+hXjAWld7yz/t1etO0Jr9Emwna8SNOXvLYNo/9tTi4OpYl9B1ztQ+pv76QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH7zlh2618gcJ4vmxuHY9OeMtUV8MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvZnZPV0hiclh5QnduaS1iRzRkajA1NHkxUlh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUnMQAwQB
UnMUAwQCUnMYAwQB1FpmMA0GCSqGSIb3DQEBCwUAA4IBAQCFqhWc0aXfsui4YwwW
PggPE489CqSCVfQNUCDQRP+Ryje2fBRM2RORLzQJUohmavjfk8qVlCmXW78VsEUm
apIiugYDqFLnDd7SJ731ctKaYGpdhROrTW9IMn/3Lnz7bzuKKG3xAnj4s4dhrJb9
Z8GJ/vN3QRoP6NTONsXvP/P+aT5XbPt820hk4VcIOqMEECNVg5zpdRHBkDaIgfyN
zIOkaVXV5MwKVfG4SiSXMefdjBaWILvilPC4wbXGL+nmXhcOMeTWX13eE9JpOeDH
Ufg2b4z2PnHX+TuYTs7vQdZvpptbsIY/kvMqal9uR8gg3ZhJPx9sQdvL15qABSa6
Cwqb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org