Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/XfaxgHk3pGTDr8gl1hdXYaTf6ic.roa
File: XfaxgHk3pGTDr8gl1hdXYaTf6ic.roa (raw, json)
Hash identifier: IkvjsU6pbzw21h4sCfXGEiYFi1M6hWLF1TS4AxeQPNY=
Subject key identifier: 5D:F6:B1:80:79:37:A4:64:C3:AF:C8:25:D6:17:57:61:A4:DF:EA:27
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 34FB40F3
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/XfaxgHk3pGTDr8gl1hdXYaTf6ic.roa
Signing time: Sat 01 Jan 2022 05:57:44 +0000
ROA not before: Sat 01 Jan 2022 05:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 666
IP address blocks: 84.205.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888881395 (0x34fb40f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 05:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5df6b1807937a464c3afc825d6175761a4dfea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:7f:de:6e:8e:2d:df:0f:bc:a8:97:6f:6a:
88:a9:7c:7e:82:f0:51:f7:c2:83:d6:6b:2a:f6:9d:
0b:6c:4f:fa:a6:72:fd:14:e1:59:dc:0e:c8:91:89:
20:c8:28:6d:dd:dd:da:8a:63:be:13:4f:4b:3b:a0:
b3:e9:76:3e:b7:66:ae:4a:d8:3e:56:aa:f1:e1:a9:
7c:e7:b8:cb:21:c4:4d:7a:d8:b8:09:6e:f7:e7:d1:
ed:fd:2e:b1:31:0e:69:a1:6c:c9:ae:71:ec:54:77:
d2:91:2f:fe:0d:a5:c3:4f:66:a1:05:2c:22:a2:a1:
5e:64:82:85:30:4d:1b:2e:e6:44:85:ef:85:74:87:
dd:ad:4d:0c:0d:f4:d0:24:67:cc:cd:4d:e2:e5:ae:
72:18:35:ff:45:1b:ce:cd:19:b4:77:92:ea:42:f6:
ec:bc:ea:21:8d:40:13:c8:f6:c2:cb:b3:3f:69:6c:
44:a5:f6:e8:a3:1a:ef:7c:ce:02:ee:78:79:69:24:
ed:c7:15:42:34:80:48:ca:c8:14:c8:37:29:8d:aa:
9a:a3:74:b9:5a:19:62:58:2e:53:0e:6e:03:01:54:
a4:75:84:e1:6e:95:d4:8f:2b:54:c2:da:8c:b3:59:
e5:fd:51:d5:f7:df:39:10:d9:58:eb:c8:0b:90:ed:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F6:B1:80:79:37:A4:64:C3:AF:C8:25:D6:17:57:61:A4:DF:EA:27
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/XfaxgHk3pGTDr8gl1hdXYaTf6ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.81.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9d:c1:92:eb:3d:98:86:c4:dd:93:8a:fc:bd:6c:6a:25:aa:
8c:3e:75:6d:80:8b:2e:a0:fb:f8:72:ba:e1:54:e0:5b:9e:8d:
a5:cb:db:42:f7:d6:7e:1e:e3:0f:cf:4a:1d:35:c5:9c:c2:a0:
43:df:b3:a9:5b:f5:01:80:a3:80:06:ed:a7:7a:77:b9:43:15:
bb:e1:05:64:3b:7c:b1:d8:12:f6:b5:c6:f9:4a:1c:b1:4e:8a:
5f:4f:ee:97:da:29:c8:de:d2:cc:ff:d3:fe:4f:d7:29:ff:6a:
7e:76:80:f6:31:f5:24:56:9a:6a:f6:c8:9e:73:d2:13:b5:d8:
58:a6:fa:5a:13:91:91:15:83:56:3b:b2:02:76:4f:9e:80:2e:
68:88:f1:56:4a:ed:68:17:1c:6d:91:05:c5:ca:d5:17:86:a0:
b0:91:61:23:3f:ca:37:25:70:f4:99:89:a7:98:1e:9c:d8:4b:
0b:a9:f2:c9:3f:85:14:4e:13:40:74:49:c1:f0:50:ab:50:13:
a4:be:cd:b5:18:ea:47:2e:18:14:75:8c:0d:0d:7e:14:81:5f:
66:df:e3:33:b5:a7:d1:2e:01:78:e9:30:dc:cf:51:d0:20:78:
68:e8:71:12:cf:f3:67:3e:c6:cf:00:02:ed:11:8c:55:85:e2:
54:b6:01:bb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENPtA8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODE3YWFmZWM2MWMzYTZiMDI0YjZhOWY1NGZmYjc2NGNhM2RmOTIyMB4XDTIyMDEw
MTA1NTc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRmNmIxODA3OTM3
YTQ2NGMzYWZjODI1ZDYxNzU3NjFhNGRmZWEyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALoif95uji3fD7yol29qiKl8foLwUffCg9ZrKvadC2xP+qZy
/RThWdwOyJGJIMgobd3d2opjvhNPSzugs+l2PrdmrkrYPlaq8eGpfOe4yyHETXrY
uAlu9+fR7f0usTEOaaFsya5x7FR30pEv/g2lw09moQUsIqKhXmSChTBNGy7mRIXv
hXSH3a1NDA300CRnzM1N4uWuchg1/0Ubzs0ZtHeS6kL27LzqIY1AE8j2wsuzP2ls
RKX26KMa73zOAu54eWkk7ccVQjSASMrIFMg3KY2qmqN0uVoZYlguUw5uAwFUpHWE
4W6V1I8rVMLajLNZ5f1R1fffORDZWOvIC5DtWV0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRd9rGAeTekZMOvyCXWF1dhpN/qJzAfBgNVHSMEGDAWgBSIF6r+xhw6awJL
ap9U/7dkyj35IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lCZXFfc1ljT21zQ1MycWZWUC0zWk1vOS1TSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvZmUyZDcyLWMyZGQtNDZjMS05NDI5LWU2NjM2OTY0OTQxMS8x
L1hmYXhnSGszcEdURHI4Z2wxaGRYWWFUZjZpYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
ZmUyZDcyLWMyZGQtNDZjMS05NDI5LWU2NjM2OTY0OTQxMS8xL2lCZXFfc1ljT21z
Q1MycWZWUC0zWk1vOS1TSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFTNUTANBgkqhkiG9w0BAQsFAAOC
AQEAWJ3Bkus9mIbE3ZOK/L1saiWqjD51bYCLLqD7+HK64VTgW56NpcvbQvfWfh7j
D89KHTXFnMKgQ9+zqVv1AYCjgAbtp3p3uUMVu+EFZDt8sdgS9rXG+UocsU6KX0/u
l9opyN7SzP/T/k/XKf9qfnaA9jH1JFaaavbInnPSE7XYWKb6WhORkRWDVjuyAnZP
noAuaIjxVkrtaBccbZEFxcrVF4agsJFhIz/KNyVw9JmJp5genNhLC6nyyT+FFE4T
QHRJwfBQq1ATpL7NtRjqRy4YFHWMDQ1+FIFfZt/jM7Wn0S4BeOkw3M9R0CB4aOhx
Es/zZz7GzwAC7RGMVYXiVLYBuw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:35 2023 by rpki-client on console-ams.rpki-client.org