Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/AQojAfFIMl4PQA1uTIwdcZi94ZA.roa
File: AQojAfFIMl4PQA1uTIwdcZi94ZA.roa (raw, json)
Hash identifier: 4GmaGgfPYnzGB0BmWtZPqMjIqN0D9TLt5biQ2uHanNs=
Subject key identifier: 01:0A:23:01:F1:48:32:5E:0F:40:0D:6E:4C:8C:1D:71:98:BD:E1:90
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01845CEA34659310207FE78514EDF8889989
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/AQojAfFIMl4PQA1uTIwdcZi94ZA.roa
Signing time: Wed 09 Nov 2022 15:02:43 +0000
ROA not before: Wed 09 Nov 2022 15:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140403
IP address blocks: 81.199.96.0/23 maxlen: 24
81.199.98.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:ea:34:65:93:10:20:7f:e7:85:14:ed:f8:88:99:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Nov 9 15:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=010a2301f148325e0f400d6e4c8c1d7198bde190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:be:8a:95:21:95:d1:22:cc:42:87:b2:0a:
df:bc:1e:b8:3f:30:a6:08:36:d6:6e:2f:5d:25:50:
0a:90:f3:c0:c8:aa:99:59:aa:e5:1a:e5:28:31:cf:
88:94:1b:95:c0:5c:1c:70:52:e3:55:14:21:36:16:
ff:6e:0d:6e:86:6e:de:98:17:2a:e6:8b:73:70:c8:
9b:36:9b:2a:68:ff:ca:1f:bb:35:63:50:f6:9e:b8:
67:5b:fd:d7:5d:d6:25:be:f5:e9:9e:d7:77:4c:dc:
a9:0f:e0:c5:84:ed:61:9b:bc:22:ea:84:6c:1f:01:
5d:af:01:ed:76:57:40:e1:01:8c:e5:b6:d0:f2:fc:
dd:b4:83:b4:38:f9:18:f9:ad:15:30:02:66:a9:2c:
a1:52:b7:fb:4d:ba:d6:80:16:54:4b:0f:dd:26:ab:
a4:4f:b6:24:b6:c6:e7:5c:13:e4:cd:92:38:4b:fa:
21:53:29:e4:dd:70:0a:0c:b3:3d:58:f3:1a:d0:41:
f1:6f:e0:55:df:ee:0b:2a:81:93:57:ab:37:83:77:
00:09:36:17:3d:8c:e7:11:36:36:bf:79:7b:db:a1:
8d:d6:e0:5f:76:f1:c1:02:8b:a6:d9:be:c8:ef:64:
39:c7:68:a4:cc:8e:ee:49:6a:32:cc:f8:e8:61:13:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:23:01:F1:48:32:5E:0F:40:0D:6E:4C:8C:1D:71:98:BD:E1:90
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/AQojAfFIMl4PQA1uTIwdcZi94ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.96.0/22
Signature Algorithm: sha256WithRSAEncryption
21:02:e7:ab:a8:1a:98:9d:73:f9:3c:57:56:cf:3b:4b:c4:91:
61:56:bf:e3:62:e9:1d:08:60:f3:c1:d6:4b:40:74:7a:34:b0:
68:3d:35:44:03:d0:dd:4f:36:f1:ed:32:8c:85:ec:92:86:50:
49:9b:eb:f9:e1:6d:8a:7c:f3:fe:b8:e5:08:0c:2b:93:8f:6a:
5b:b6:b7:f4:e9:c7:72:94:97:f0:b6:74:9f:49:1f:ce:5d:03:
e3:ef:bd:db:b3:93:04:b5:f4:fc:c3:e3:1a:f0:48:79:4f:f5:
3b:8c:27:1f:a8:3e:3b:4d:de:10:e3:72:14:f1:1e:6c:4f:a9:
12:7a:fc:b4:c7:40:01:26:85:5f:d2:41:76:d5:0d:ba:f9:e6:
cb:f4:7b:d9:d3:44:83:09:76:1a:10:59:32:2b:05:df:0a:45:
c1:25:e9:8d:ae:b3:03:b0:b8:0d:c1:bc:78:38:aa:ce:0c:4a:
92:bc:8d:fd:96:bd:dc:1c:d5:c0:d2:e6:42:c6:5f:03:0d:5d:
d1:42:56:ee:ac:f5:8a:8a:9f:a2:e4:25:40:50:4b:54:10:59:
df:a0:ea:63:9c:b4:83:c7:30:c4:9f:36:31:af:14:33:d3:f3:
43:8c:94:c3:10:b4:e2:82:b4:0c:14:90:08:d2:e3:69:ea:54:
e8:5e:d0:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRc6jRlkxAgf+eFFO34iJmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjIxMTA5MTUwMjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTBhMjMwMWYxNDgzMjVlMGY0MDBkNmU0YzhjMWQ3MTk4YmRlMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr2+ipUhldEizEKHsgrfvB64PzCm
CDbWbi9dJVAKkPPAyKqZWarlGuUoMc+IlBuVwFwccFLjVRQhNhb/bg1uhm7emBcq
5otzcMibNpsqaP/KH7s1Y1D2nrhnW/3XXdYlvvXpntd3TNypD+DFhO1hm7wi6oRs
HwFdrwHtdldA4QGM5bbQ8vzdtIO0OPkY+a0VMAJmqSyhUrf7TbrWgBZUSw/dJquk
T7YktsbnXBPkzZI4S/ohUynk3XAKDLM9WPMa0EHxb+BV3+4LKoGTV6s3g3cACTYX
PYznETY2v3l726GN1uBfdvHBAoum2b7I72Q5x2ikzI7uSWoyzPjoYRPsIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAEKIwHxSDJeD0ANbkyMHXGYveGQMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvQVFvakFmRklNbDRQUUExdVRJd2RjWmk5NFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUcdgMA0G
CSqGSIb3DQEBCwUAA4IBAQAhAuerqBqYnXP5PFdWzztLxJFhVr/jYukdCGDzwdZL
QHR6NLBoPTVEA9DdTzbx7TKMheyShlBJm+v54W2KfPP+uOUIDCuTj2pbtrf06cdy
lJfwtnSfSR/OXQPj773bs5MEtfT8w+Ma8Eh5T/U7jCcfqD47Td4Q43IU8R5sT6kS
evy0x0ABJoVf0kF21Q26+ebL9HvZ00SDCXYaEFkyKwXfCkXBJemNrrMDsLgNwbx4
OKrODEqSvI39lr3cHNXA0uZCxl8DDV3RQlburPWKip+i5CVAUEtUEFnfoOpjnLSD
xzDEnzYxrxQz0/NDjJTDELTigrQMFJAI0uNp6lToXtBw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org