Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/xRO8gBDvSoNGlFnQSIlVHGn5gSE.roa
File: xRO8gBDvSoNGlFnQSIlVHGn5gSE.roa (raw, json)
Hash identifier: 8Q8/pxqvB4Wi3U0vUkShT4fcDYf/QyAsTFIJWiNMOqU=
Subject key identifier: C5:13:BC:80:10:EF:4A:83:46:94:59:D0:48:89:55:1C:69:F9:81:21
Certificate issuer: /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial: 13929983
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/xRO8gBDvSoNGlFnQSIlVHGn5gSE.roa
Signing time: Sat 01 Jan 2022 10:03:38 +0000
ROA not before: Sat 01 Jan 2022 10:03:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328374659 (0x13929983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
Validity
Not Before: Jan 1 10:03:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c513bc8010ef4a83469459d04889551c69f98121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:ca:46:d6:ad:f1:b3:50:f0:0a:13:0b:a2:
24:98:dd:64:46:76:46:87:18:5c:01:54:48:9a:66:
16:64:ea:be:14:47:4e:1f:5e:d3:10:08:1b:2f:50:
e3:fc:b3:ec:05:04:51:1e:55:21:e4:af:e0:41:82:
36:52:d1:0f:a3:5d:dc:78:a3:11:5a:ae:d9:7e:39:
fc:78:2c:d5:19:e0:fe:33:31:1d:c8:17:0c:b1:d9:
69:a2:2e:5b:45:66:6d:28:f5:d0:c6:ba:47:1b:4f:
0d:9e:27:b3:1f:c5:b1:be:b6:cf:05:01:41:bd:82:
fe:48:ee:80:15:1d:29:e3:14:86:fb:d8:0d:e3:13:
28:f1:fc:af:2a:a5:03:9e:96:08:47:c9:bc:e0:25:
78:e5:6f:f4:95:d2:ef:08:eb:ab:bd:f7:8f:1d:aa:
f3:31:0c:96:50:6c:33:8b:53:a8:18:3a:b7:76:1b:
e0:93:77:47:57:5d:9a:50:fd:0d:19:83:c5:2e:e0:
42:d5:a1:84:e2:24:0d:09:69:60:e2:27:31:8b:da:
73:42:13:a1:fe:ad:82:33:6f:f0:4b:81:0c:ed:51:
bf:a4:f8:4a:eb:4e:72:fa:c4:a1:53:fb:d1:b6:be:
b6:86:db:80:7a:28:b2:26:43:ed:a7:c4:92:b1:8e:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:BC:80:10:EF:4A:83:46:94:59:D0:48:89:55:1C:69:F9:81:21
X509v3 Authority Key Identifier:
keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/xRO8gBDvSoNGlFnQSIlVHGn5gSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.146.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d7:7d:81:f8:49:65:ba:fe:7a:2f:db:44:c6:0d:49:66:e2:
97:12:bd:72:24:b8:55:57:2a:dc:b1:c0:03:37:44:3a:64:ad:
e2:56:47:32:12:6d:db:4d:f4:50:eb:68:49:da:a3:8a:23:d8:
85:70:7f:c7:dc:b6:46:99:d0:90:9f:44:ba:73:71:bf:42:3d:
1c:77:2a:13:5c:a4:e7:56:6b:1f:2e:2c:85:16:07:f2:c4:6b:
59:09:74:64:5b:65:d3:0a:6f:80:17:5d:44:17:50:3e:c1:3e:
ea:99:e9:3b:33:77:57:cd:e1:e2:74:57:d0:46:bc:71:57:4f:
93:22:6a:43:6b:f8:c2:d3:00:de:32:09:be:b1:fc:f8:68:0f:
c4:02:cc:51:e2:0e:da:23:62:1f:dd:38:4e:06:06:67:fe:85:
88:a5:f6:60:f4:49:a1:84:c9:de:a4:35:a8:b2:3d:4c:25:18:
e9:bf:22:35:88:a2:c3:b7:6e:ff:fd:c7:71:88:57:cb:15:b8:
17:46:22:6e:e8:b7:c5:bb:2d:6e:53:f6:d0:1f:b4:79:2c:21:
36:35:94:27:18:75:78:e1:14:d6:fd:c4:fa:04:52:3c:42:58:
90:0a:73:64:2e:5f:3e:98:9c:7f:27:51:7a:79:48:59:3b:44:
5e:c7:16:59
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEE5KZgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZmRhZWFjNmY4YTAzNzQ4Mzk3MzBmYzg1Njc5NTcwOWUxOGVkOTE2MB4XDTIyMDEw
MTEwMDMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzUxM2JjODAxMGVm
NGE4MzQ2OTQ1OWQwNDg4OTU1MWM2OWY5ODEyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTWykbWrfGzUPAKEwuiJJjdZEZ2RocYXAFUSJpmFmTqvhRH
Th9e0xAIGy9Q4/yz7AUEUR5VIeSv4EGCNlLRD6Nd3HijEVqu2X45/Hgs1Rng/jMx
HcgXDLHZaaIuW0VmbSj10Ma6RxtPDZ4nsx/Fsb62zwUBQb2C/kjugBUdKeMUhvvY
DeMTKPH8ryqlA56WCEfJvOAleOVv9JXS7wjrq733jx2q8zEMllBsM4tTqBg6t3Yb
4JN3R1ddmlD9DRmDxS7gQtWhhOIkDQlpYOInMYvac0ITof6tgjNv8EuBDO1Rv6T4
SutOcvrEoVP70ba+tobbgHoosiZD7afEkrGOqykCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTFE7yAEO9Kg0aUWdBIiVUcafmBITAfBgNVHSMEGDAWgBTv2urG+KA3SDlz
D8hWeVcJ4Y7ZFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzc5cnF4dmlnTjBnNWN3X0lWbmxYQ2VHTzJSWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvNmQzYTNlLTAwNTMtNDM1Ny1iMWI0LWY5OTJiYTA1OGUzMS8x
L3hSTzhnQkR2U29OR2xGblFTSWxWSEduNWdTRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
NmQzYTNlLTAwNTMtNDM1Ny1iMWI0LWY5OTJiYTA1OGUzMS8xLzc5cnF4dmlnTjBn
NWN3X0lWbmxYQ2VHTzJSWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBckjANBgkqhkiG9w0BAQsFAAOC
AQEAOdd9gfhJZbr+ei/bRMYNSWbilxK9ciS4VVcq3LHAAzdEOmSt4lZHMhJt2030
UOtoSdqjiiPYhXB/x9y2RpnQkJ9EunNxv0I9HHcqE1yk51ZrHy4shRYH8sRrWQl0
ZFtl0wpvgBddRBdQPsE+6pnpOzN3V83h4nRX0Ea8cVdPkyJqQ2v4wtMA3jIJvrH8
+GgPxALMUeIO2iNiH904TgYGZ/6FiKX2YPRJoYTJ3qQ1qLI9TCUY6b8iNYiiw7du
//3HcYhXyxW4F0Yibui3xbstblP20B+0eSwhNjWUJxh1eOEU1v3E+gRSPEJYkApz
ZC5fPpicfydRenlIWTtEXscWWQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:37 2023 by rpki-client on console-ams.rpki-client.org