Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7Mt6BjLPDF2H-SczbDcqs6P8HcA.roa
File: 7Mt6BjLPDF2H-SczbDcqs6P8HcA.roa (raw, json)
Hash identifier: kQ/vxEohE4It66h4LxBy6JL8jsuYlWEByJMNCuzjzk8=
Subject key identifier: EC:CB:7A:06:32:CF:0C:5D:87:F9:27:33:6C:37:2A:B3:A3:FC:1D:C0
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 42A8EA78
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7Mt6BjLPDF2H-SczbDcqs6P8HcA.roa
Signing time: Tue 26 Apr 2022 06:31:06 +0000
ROA not before: Tue 26 Apr 2022 06:31:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59735
IP address blocks: 89.46.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118366328 (0x42a8ea78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 26 06:31:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eccb7a0632cf0c5d87f927336c372ab3a3fc1dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:79:b4:9f:da:f6:77:7f:c2:74:f8:d0:99:
65:c0:3c:18:ba:92:10:99:2e:6e:97:23:8b:ac:d8:
2d:d7:5a:4e:7e:06:b4:65:d1:90:55:7e:06:08:22:
50:f4:49:57:26:e2:05:e3:65:e7:c7:4f:a9:fb:14:
c8:ec:a1:c8:fd:08:ec:fa:51:c8:53:37:03:3f:c8:
52:c0:78:3c:8d:85:87:67:06:76:0f:b0:f7:59:01:
1f:71:a4:b5:8d:94:57:c9:c8:23:bd:e7:f1:20:e3:
9d:2a:a3:54:9e:e6:ec:20:a9:a2:1d:81:7c:ac:3b:
05:f2:e8:a5:0b:da:a8:70:3b:80:60:c5:ff:2d:a2:
9d:88:ec:d4:07:d4:9e:4d:b6:12:af:0b:64:bb:be:
d7:97:ec:a8:f9:39:dc:a5:ab:74:da:dd:20:be:79:
d6:07:41:0e:fe:e1:89:59:2e:2d:cd:6f:da:7d:f6:
67:e4:be:f7:1d:7e:a9:dd:99:3a:00:49:61:94:e3:
29:8c:26:50:16:99:95:03:7c:99:1d:8a:25:65:e4:
7e:f5:81:cd:04:f1:c8:b4:9d:87:1b:62:2a:8b:1b:
14:1a:53:58:1d:06:92:b8:0f:67:14:5f:68:0b:3e:
35:a2:b8:69:c5:af:77:f9:71:90:bc:ec:5c:d4:18:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:7A:06:32:CF:0C:5D:87:F9:27:33:6C:37:2A:B3:A3:FC:1D:C0
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7Mt6BjLPDF2H-SczbDcqs6P8HcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:58:db:e4:4b:04:67:87:84:6e:18:05:66:f8:1e:cb:0d:68:
6b:74:4c:41:98:94:95:2e:87:2f:b3:60:70:33:b3:3e:40:72:
29:86:19:79:13:e7:1b:ca:4e:40:f9:ec:12:8f:db:d4:39:bb:
f3:7d:93:68:49:cd:ba:41:80:5c:ae:af:3f:45:7b:4a:b7:22:
ea:f3:93:6d:d0:2a:e8:99:44:f9:c1:bf:5b:d5:60:62:4b:87:
77:63:ca:82:f1:4e:e2:5c:63:a8:ef:5e:31:87:2d:f1:1d:bf:
af:31:a5:eb:8a:32:96:78:9c:65:e3:f4:98:43:6b:cc:9d:4a:
75:ee:88:3d:21:75:4d:e5:a8:08:0c:a9:f8:5d:b8:48:62:9a:
15:76:0d:ba:83:43:88:a7:7e:a3:3a:c1:ad:fc:00:c3:b0:2c:
b5:f0:b5:7a:cd:60:bc:20:f1:a4:ba:98:03:f6:a1:e5:4b:75:
36:e4:76:58:3c:1b:c8:ff:87:81:84:c5:d9:43:54:46:ae:e3:
9a:16:45:b6:2c:63:40:18:df:c0:0f:0b:6d:d0:dd:5f:0e:3a:
dc:4b:17:e5:84:a4:79:98:c1:e7:4d:d3:ce:58:00:8d:40:c4:
70:94:df:31:9d:b3:24:f7:2a:5b:d6:15:f5:8b:27:d0:9c:2c:
99:ae:92:33
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEQqjqeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDQy
NjA2MzEwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWNjYjdhMDYzMmNm
MGM1ZDg3ZjkyNzMzNmMzNzJhYjNhM2ZjMWRjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANBJebSf2vZ3f8J0+NCZZcA8GLqSEJkubpcji6zYLddaTn4G
tGXRkFV+BggiUPRJVybiBeNl58dPqfsUyOyhyP0I7PpRyFM3Az/IUsB4PI2Fh2cG
dg+w91kBH3GktY2UV8nII73n8SDjnSqjVJ7m7CCpoh2BfKw7BfLopQvaqHA7gGDF
/y2inYjs1AfUnk22Eq8LZLu+15fsqPk53KWrdNrdIL551gdBDv7hiVkuLc1v2n32
Z+S+9x1+qd2ZOgBJYZTjKYwmUBaZlQN8mR2KJWXkfvWBzQTxyLSdhxtiKosbFBpT
WB0GkrgPZxRfaAs+NaK4acWvd/lxkLzsXNQYt78CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTsy3oGMs8MXYf5JzNsNyqzo/wdwDAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS83TXQ2QmpMUERGMkgtU2N6YkRjcXM2UDhIY0Eucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS4FMA0GCSqGSIb3DQEBCwUA
A4IBAQAtWNvkSwRnh4RuGAVm+B7LDWhrdExBmJSVLocvs2BwM7M+QHIphhl5E+cb
yk5A+ewSj9vUObvzfZNoSc26QYBcrq8/RXtKtyLq85Nt0CromUT5wb9b1WBiS4d3
Y8qC8U7iXGOo714xhy3xHb+vMaXrijKWeJxl4/SYQ2vMnUp17og9IXVN5agIDKn4
XbhIYpoVdg26g0OIp36jOsGt/ADDsCy18LV6zWC8IPGkupgD9qHlS3U25HZYPBvI
/4eBhMXZQ1RGruOaFkW2LGNAGN/ADwtt0N1fDjrcSxflhKR5mMHnTdPOWACNQMRw
lN8xnbMk9ypb1hX1iyfQnCyZrpIz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org