Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/wOipTfC5F_w9ww6B-wMtMFlBLuA.roa
File: wOipTfC5F_w9ww6B-wMtMFlBLuA.roa (raw, json)
Hash identifier: iJzk+G/EI4YqQzC9RqMvAZ0qTtXNzNiis5miTn6Cbts=
Subject key identifier: C0:E8:A9:4D:F0:B9:17:FC:3D:C3:0E:81:FB:03:2D:30:59:41:2E:E0
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 06EAD90D
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/wOipTfC5F_w9ww6B-wMtMFlBLuA.roa
Signing time: Sat 01 Jan 2022 07:53:18 +0000
ROA not before: Sat 01 Jan 2022 07:53:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32787
IP address blocks: 141.93.0.0/16 maxlen: 24
141.93.16.0/24 maxlen: 24
141.93.12.0/24 maxlen: 24
141.93.17.0/24 maxlen: 24
141.93.18.0/24 maxlen: 24
141.93.19.0/24 maxlen: 24
141.93.32.0/24 maxlen: 24
141.93.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116054285 (0x6ead90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 1 07:53:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0e8a94df0b917fc3dc30e81fb032d3059412ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:46:93:25:25:72:f1:45:aa:92:4b:da:00:
f4:c6:54:1e:95:90:9a:85:87:f5:f6:0e:4b:91:83:
48:4e:0c:a9:c4:59:fd:aa:a1:cc:03:21:91:c5:83:
db:dd:69:93:e5:24:bc:b5:bc:92:fc:e4:63:bd:db:
be:65:a3:38:49:b4:f1:db:4f:b4:d8:5e:08:8b:ca:
90:9b:a3:97:53:fc:d2:e5:7f:39:61:90:61:18:8d:
52:d9:a5:12:fe:55:71:90:01:a8:e1:b3:99:ea:8c:
a7:1d:64:db:ad:e7:83:48:de:07:47:f2:1f:db:4e:
06:fd:6b:83:02:08:40:6c:f5:a0:ab:70:c0:f9:4a:
1c:76:ea:0f:9f:d1:0c:51:ca:63:3b:63:90:fa:44:
c1:9f:20:4c:e9:06:bd:ba:a2:b8:0d:7b:d5:32:9f:
d5:62:ba:31:28:8f:e3:23:81:a6:fc:a0:be:d6:67:
94:35:18:af:0e:1a:75:14:90:90:6c:55:7e:58:ee:
84:69:fc:a6:1e:7a:0d:62:13:74:45:e4:29:66:2b:
9b:f7:75:08:87:3e:4d:a1:30:f1:0d:4b:8e:e7:ee:
32:90:5f:59:8e:ea:a1:7e:c6:ef:f4:df:15:f4:92:
ab:e7:c6:71:61:9b:b9:e3:1a:8d:15:1a:1b:cf:46:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:A9:4D:F0:B9:17:FC:3D:C3:0E:81:FB:03:2D:30:59:41:2E:E0
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/wOipTfC5F_w9ww6B-wMtMFlBLuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:93:e4:19:a0:45:f4:dd:87:38:26:c0:72:b5:e7:43:15:6a:
95:c0:4b:d4:9f:33:d4:63:f0:e3:a6:b3:b2:28:f3:b9:e4:34:
50:88:33:de:ef:5f:0a:63:5e:7e:94:c6:2e:8f:ad:e4:9f:ad:
f3:87:b9:a8:90:fb:33:b1:fd:96:b2:3b:73:73:40:6b:e2:bd:
bf:b1:0b:c2:87:d7:4b:af:de:22:1e:b8:eb:54:f0:2c:4f:ae:
65:37:c2:0a:7e:8b:a4:91:cb:8f:b4:93:3c:ed:30:c4:8b:fc:
db:64:04:af:af:70:0d:07:20:c6:f2:23:bd:4c:14:90:02:be:
c3:5c:c3:86:8b:91:03:b8:38:e3:bb:f4:5a:c4:f9:7e:dc:ff:
f0:b1:7a:56:43:ef:a6:81:d4:11:0c:84:3c:de:25:3d:76:d9:
3b:ec:e1:67:80:ab:f2:89:4f:ee:f3:a9:95:e9:a2:3a:c9:a1:
e1:04:ea:87:9b:41:6f:f2:90:c3:bb:f1:ff:8d:09:44:f9:e4:
b5:74:1c:7c:3d:36:21:42:0c:9b:fe:d1:bb:2b:04:03:29:77:
10:0a:f6:08:54:2c:39:56:99:91:14:ff:36:f6:8a:ea:d4:88:
2d:d9:1f:bf:45:31:dd:fa:26:55:f7:dc:de:7f:dd:72:03:6b:
c1:49:d3:45
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIEBurZDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjExN2FkYTNjYjk1MTVhNmQ4YTZkY2MxNWYyYjBiMWE3ZDliZTFkMB4XDTIyMDEw
MTA3NTMxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzBlOGE5NGRmMGI5
MTdmYzNkYzMwZTgxZmIwMzJkMzA1OTQxMmVlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJj2RpMlJXLxRaqSS9oA9MZUHpWQmoWH9fYOS5GDSE4MqcRZ
/aqhzAMhkcWD291pk+UkvLW8kvzkY73bvmWjOEm08dtPtNheCIvKkJujl1P80uV/
OWGQYRiNUtmlEv5VcZABqOGzmeqMpx1k263ng0jeB0fyH9tOBv1rgwIIQGz1oKtw
wPlKHHbqD5/RDFHKYztjkPpEwZ8gTOkGvbqiuA171TKf1WK6MSiP4yOBpvygvtZn
lDUYrw4adRSQkGxVfljuhGn8ph56DWITdEXkKWYrm/d1CIc+TaEw8Q1LjufuMpBf
WY7qoX7G7/TfFfSSq+fGcWGbueMajRUaG89GHLkCAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBTA6KlN8LkX/D3DDoH7Ay0wWUEu4DAfBgNVHSMEGDAWgBQvEXraPLlRWm2K
bcwV8rCxp9m+HTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x4RjYyank1VVZwdGltM01GZkt3c2FmWnZoMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvZWZmNDRkLTI0ZmQtNDM4NC05NTA3LTdhMDM0ZDE3MGI4NS8x
L3dPaXBUZkM1Rl93OXd3NkItd010TUZsQkx1QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
ZWZmNDRkLTI0ZmQtNDM4NC05NTA3LTdhMDM0ZDE3MGI4NS8xL0x4RjYyank1VVZw
dGltM01GZkt3c2FmWnZoMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAI1dMA0GCSqGSIb3DQEBCwUAA4IB
AQAkk+QZoEX03Yc4JsBytedDFWqVwEvUnzPUY/DjprOyKPO55DRQiDPe718KY15+
lMYuj63kn63zh7mokPszsf2Wsjtzc0Br4r2/sQvCh9dLr94iHrjrVPAsT65lN8IK
foukkcuPtJM87TDEi/zbZASvr3ANByDG8iO9TBSQAr7DXMOGi5EDuDjju/RaxPl+
3P/wsXpWQ++mgdQRDIQ83iU9dtk77OFngKvyiU/u86mV6aI6yaHhBOqHm0Fv8pDD
u/H/jQlE+eS1dBx8PTYhQgyb/tG7KwQDKXcQCvYIVCw5VpmRFP829orq1Igt2R+/
RTHd+iZV99zef91yA2vBSdNF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-ams.rpki-client.org