Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fYeB7LigVRsifUFHtEqPv7gtWFU.roa
File: fYeB7LigVRsifUFHtEqPv7gtWFU.roa (raw, json)
Hash identifier: flpQey1dvWfyh1fwKRMN05jxK1e8tv+UUZfT6FhGfUo=
Subject key identifier: 7D:87:81:EC:B8:A0:55:1B:22:7D:41:47:B4:4A:8F:BF:B8:2D:58:55
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51CCF1A2A2DD6DFE74B517EC668A2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fYeB7LigVRsifUFHtEqPv7gtWFU.roa
Signing time: Mon 02 Jan 2023 00:15:15 +0000
ROA not before: Mon 02 Jan 2023 00:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41807
IP address blocks: 89.45.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1c:cf:1a:2a:2d:d6:df:e7:4b:51:7e:c6:68:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d8781ecb8a0551b227d4147b44a8fbfb82d5855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:56:35:d5:c5:4a:23:49:16:3a:ae:c3:11:
85:e1:3c:0c:96:52:86:83:b2:a6:a8:fc:d5:4b:23:
23:13:7b:f7:e6:a0:f9:52:d7:0d:41:36:d4:96:9a:
8c:b2:11:b5:16:f3:ba:ca:1c:e1:ec:99:c3:77:20:
21:1a:68:d1:ff:4b:00:50:67:8c:2f:cf:09:b3:ca:
9a:ba:b9:1b:56:64:36:b0:88:3e:7a:bb:70:00:d0:
9a:99:2e:32:43:5b:80:db:7c:63:8c:5e:2e:24:03:
b6:92:08:a3:c9:4e:eb:f8:33:3b:1d:85:ca:51:02:
cf:cb:6f:a9:62:dc:44:16:5e:ac:e1:f7:4e:07:2a:
dd:7a:6c:a7:75:5e:ab:5e:d0:9d:b6:9d:18:69:7d:
f7:5a:98:08:9c:60:00:53:02:ca:12:3e:dd:1e:4f:
72:ca:23:c3:12:ee:75:53:f7:6b:97:77:9d:4b:87:
10:55:fd:6d:fd:1e:1b:72:d0:bc:71:9b:ed:b9:4e:
ef:71:69:69:4f:92:f8:07:c4:33:b9:14:f7:eb:da:
c1:96:e3:3c:51:28:97:10:3f:e0:19:ec:5e:cc:46:
ac:6c:26:58:cb:d7:8c:3d:d8:3c:71:fb:a6:fc:38:
9e:89:85:da:00:0a:c9:ac:89:0c:cc:79:6b:ca:b8:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:87:81:EC:B8:A0:55:1B:22:7D:41:47:B4:4A:8F:BF:B8:2D:58:55
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fYeB7LigVRsifUFHtEqPv7gtWFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.166.0/23
Signature Algorithm: sha256WithRSAEncryption
84:9a:91:3a:44:7d:72:87:ef:39:db:85:8c:0e:b6:98:12:8c:
7b:bd:68:91:37:c2:d1:75:13:ee:2d:61:0b:c6:06:3b:6c:58:
38:f5:27:93:96:ae:0e:b5:a0:c6:3f:c9:ce:cd:0a:8e:2a:0b:
ab:81:e5:8c:fc:8d:a1:f2:8c:1f:14:eb:4d:91:4c:05:e5:85:
89:b3:5f:b1:a4:3a:67:9d:ec:f1:86:d7:96:55:db:a7:7f:a1:
3b:69:9c:4a:be:9e:60:c7:6e:77:32:4f:9d:ee:ce:50:21:6d:
56:a4:8f:2a:00:bd:53:c9:d4:80:69:92:80:69:7f:c4:97:dc:
10:34:7c:ce:aa:5b:e9:7d:89:bd:43:84:7b:76:a7:75:38:43:
bc:4c:05:74:6c:2e:69:bd:f8:6d:35:76:51:6b:29:cf:13:47:
d0:ee:b2:f3:dc:d8:cd:26:4a:7f:6c:e5:30:2b:47:68:24:57:
39:5a:9b:bf:14:3c:20:35:83:a8:3f:a2:6f:26:7d:13:15:5b:
73:1c:20:44:08:e9:eb:87:21:37:7e:9e:8f:07:8d:db:36:e0:
eb:c7:c8:d6:4c:3b:d8:9a:a1:54:23:9c:2c:54:a5:ec:c7:cd:
c1:1d:cd:3a:90:a7:47:be:08:23:53:ef:05:63:c1:26:12:e9:
6e:01:3d:91
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1RzPGiot1t/nS1F+xmiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDg3ODFlY2I4YTA1NTFiMjI3ZDQxNDdiNDRhOGZiZmI4MmQ1ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6hWNdXFSiNJFjquwxGF4TwMllKG
g7KmqPzVSyMjE3v35qD5UtcNQTbUlpqMshG1FvO6yhzh7JnDdyAhGmjR/0sAUGeM
L88Js8qaurkbVmQ2sIg+ertwANCamS4yQ1uA23xjjF4uJAO2kgijyU7r+DM7HYXK
UQLPy2+pYtxEFl6s4fdOByrdemyndV6rXtCdtp0YaX33WpgInGAAUwLKEj7dHk9y
yiPDEu51U/drl3edS4cQVf1t/R4bctC8cZvtuU7vcWlpT5L4B8QzuRT369rBluM8
USiXED/gGexezEasbCZYy9eMPdg8cfum/DieiYXaAArJrIkMzHlryrh+tQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH2Hgey4oFUbIn1BR7RKj7+4LVhVMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2ZZZUI3TGlnVlJzaWZVRkh0RXFQdjdndFdGVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFZLaYw
DQYJKoZIhvcNAQELBQADggEBAISakTpEfXKH7znbhYwOtpgSjHu9aJE3wtF1E+4t
YQvGBjtsWDj1J5OWrg61oMY/yc7NCo4qC6uB5Yz8jaHyjB8U602RTAXlhYmzX7Gk
Omed7PGG15ZV26d/oTtpnEq+nmDHbncyT53uzlAhbVakjyoAvVPJ1IBpkoBpf8SX
3BA0fM6qW+l9ib1DhHt2p3U4Q7xMBXRsLmm9+G01dlFrKc8TR9DusvPc2M0mSn9s
5TArR2gkVzlam78UPCA1g6g/om8mfRMVW3McIEQI6euHITd+no8Hjds24OvHyNZM
O9iaoVQjnCxUpezHzcEdzTqQp0e+CCNT7wVjwSYS6W4BPZE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:59 2025 by rpki-client