Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/CHK3Xflay3239ESjsE3mRB2CKGQ.roa
File: CHK3Xflay3239ESjsE3mRB2CKGQ.roa (raw, json)
Hash identifier: 7QK/ycsYqBu4+QcOU8W1ylQB9Yv+CUr9OGGOLnfW4nM=
Subject key identifier: 08:72:B7:5D:F9:5A:CB:7D:B7:F4:44:A3:B0:4D:E6:44:1D:82:28:64
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 01837EED4D160E4789D5C5CC23BB4DD2080A
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/CHK3Xflay3239ESjsE3mRB2CKGQ.roa
Signing time: Tue 27 Sep 2022 12:30:24 +0000
ROA not before: Tue 27 Sep 2022 12:30:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 37.143.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:ed:4d:16:0e:47:89:d5:c5:cc:23:bb:4d:d2:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Sep 27 12:30:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0872b75df95acb7db7f444a3b04de6441d822864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:8e:88:ba:e4:ab:4c:a1:6d:d5:cf:3d:a5:
2d:fb:c5:e2:1c:b0:d4:d2:51:43:06:5c:3b:c0:35:
e7:75:4d:5d:29:33:62:fc:de:51:31:86:0e:fe:f1:
b5:72:3d:4d:19:e6:56:30:ce:38:3e:59:49:7b:a7:
5e:6f:1c:cf:b1:35:12:d5:fc:63:0e:2f:2f:c2:9e:
9e:19:3b:b7:5e:cf:e0:5f:d4:ee:0e:0a:50:fc:23:
14:8d:93:ce:ad:53:f5:8b:08:9e:25:43:d9:cc:0d:
31:7e:c4:43:a1:98:d4:2f:cb:f6:db:0c:77:1e:3a:
8d:f4:18:ae:ea:37:5f:63:32:63:42:f6:16:46:b7:
77:5a:23:42:16:4b:e5:41:e2:f5:5f:21:98:f5:33:
69:51:62:02:76:00:77:1a:b4:df:66:a7:65:d4:d0:
21:86:b1:5b:44:50:db:6a:91:44:90:7b:2d:66:73:
aa:65:b9:54:0d:ee:d5:30:95:82:6c:fa:da:fe:44:
90:5f:c6:62:4f:8e:dc:d5:eb:cd:fd:cb:32:fa:ca:
26:1d:e3:3c:57:df:3a:94:fa:80:48:c1:5d:0a:5e:
0a:78:c1:4f:b5:5a:9c:2a:fb:2c:0c:c4:1d:3f:5e:
db:36:85:77:6d:69:4b:fa:ab:06:d2:17:94:32:31:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:72:B7:5D:F9:5A:CB:7D:B7:F4:44:A3:B0:4D:E6:44:1D:82:28:64
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/CHK3Xflay3239ESjsE3mRB2CKGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2d:09:ff:bb:92:71:76:4b:0e:52:a2:4d:f8:63:04:d4:88:
0e:bf:b5:0b:7d:22:65:b2:dd:47:61:63:45:ea:66:4c:85:40:
e5:db:3b:8d:f7:40:2f:23:27:78:cf:3f:22:c3:f8:fa:71:8c:
90:be:b6:51:73:66:c2:fd:71:38:36:18:be:15:fb:e5:fd:eb:
32:08:58:b4:18:96:b1:ef:e2:fb:9e:90:30:02:ee:ae:1a:99:
91:fb:31:28:16:aa:1f:d6:aa:6c:b4:6b:11:d6:14:fb:0c:bd:
5d:b3:85:6f:1b:24:80:05:31:41:79:ae:9f:1a:db:bb:c5:26:
29:9d:a7:36:e3:9c:c7:0f:d2:5a:ea:d8:36:40:78:dc:71:16:
f7:2a:c4:eb:49:1e:c3:aa:72:54:bf:df:b5:cf:f2:b1:9f:88:
eb:ee:56:79:1f:9f:68:91:d1:69:d7:30:58:9c:a4:c7:36:88:
a0:54:be:eb:86:82:ba:59:9d:6a:1e:f7:b2:52:55:62:07:18:
bb:29:ec:3e:6e:b4:89:cd:8b:f1:34:05:d2:45:ad:96:88:6a:
cc:f9:81:74:49:53:61:fc:e9:2c:c4:c2:e4:45:87:e5:9a:dd:
52:1d:48:ef:ae:a7:e4:90:9a:11:b1:20:64:38:32:98:e0:a5:
fc:7e:a3:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN+7U0WDkeJ1cXMI7tN0ggKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWMxNDk4ODYwZTJiYjA5NTgxNzM4NTRiZDA0Yzg2OWEz
NjkwMTcwHhcNMjIwOTI3MTIzMDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODcyYjc1ZGY5NWFjYjdkYjdmNDQ0YTNiMDRkZTY0NDFkODIyODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJOOiLrkq0yhbdXPPaUt+8XiHLDU
0lFDBlw7wDXndU1dKTNi/N5RMYYO/vG1cj1NGeZWMM44PllJe6debxzPsTUS1fxj
Di8vwp6eGTu3Xs/gX9TuDgpQ/CMUjZPOrVP1iwieJUPZzA0xfsRDoZjUL8v22wx3
HjqN9Biu6jdfYzJjQvYWRrd3WiNCFkvlQeL1XyGY9TNpUWICdgB3GrTfZqdl1NAh
hrFbRFDbapFEkHstZnOqZblUDe7VMJWCbPra/kSQX8ZiT47c1evN/csy+somHeM8
V986lPqASMFdCl4KeMFPtVqcKvssDMQdP17bNoV3bWlL+qsG0heUMjFFVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhyt135Wst9t/REo7BN5kQdgihkMB8GA1UdIwQY
MBaAFBmsFJiGDiuwlYFzhUvQTIaaNpAXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAt
N2FhMjkwZTg1N2U5LzEvQ0hLM1hmbGF5MzIzOUVTanNFM21SQjJDS0dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAtN2FhMjkwZTg1N2U5
LzEvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJY+BMA0G
CSqGSIb3DQEBCwUAA4IBAQCtLQn/u5JxdksOUqJN+GME1IgOv7ULfSJlst1HYWNF
6mZMhUDl2zuN90AvIyd4zz8iw/j6cYyQvrZRc2bC/XE4Nhi+Ffvl/esyCFi0GJax
7+L7npAwAu6uGpmR+zEoFqof1qpstGsR1hT7DL1ds4VvGySABTFBea6fGtu7xSYp
nac245zHD9Ja6tg2QHjccRb3KsTrSR7DqnJUv9+1z/Kxn4jr7lZ5H59okdFp1zBY
nKTHNoigVL7rhoK6WZ1qHveyUlViBxi7Kew+brSJzYvxNAXSRa2WiGrM+YF0SVNh
/OksxMLkRYflmt1SHUjvrqfkkJoRsSBkODKY4KX8fqO/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-ams.rpki-client.org