Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/YR7g6ZbR4vIon02_8XnAPGW8zjw.roa
File: YR7g6ZbR4vIon02_8XnAPGW8zjw.roa (raw, json)
Hash identifier: 5HNqpwyK81HyTYlgEU7n3uqM7DHU44jdb8UTMkgCmK8=
Subject key identifier: 61:1E:E0:E9:96:D1:E2:F2:28:9F:4D:BF:F1:79:C0:3C:65:BC:CE:3C
Certificate issuer: /CN=8d503c0f530346bd3bd91ae28f64442f6796e7bf
Certificate serial: 7E8DEE
Authority key identifier: 8D:50:3C:0F:53:03:46:BD:3B:D9:1A:E2:8F:64:44:2F:67:96:E7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVA8D1MDRr072Rrij2REL2eW578.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/YR7g6ZbR4vIon02_8XnAPGW8zjw.roa
Signing time: Sat 01 Jan 2022 00:53:03 +0000
ROA not before: Sat 01 Jan 2022 00:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 146.19.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8293870 (0x7e8dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d503c0f530346bd3bd91ae28f64442f6796e7bf
Validity
Not Before: Jan 1 00:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=611ee0e996d1e2f2289f4dbff179c03c65bcce3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:5f:d6:17:54:7f:e1:ee:71:09:ec:c3:93:
3b:63:95:f7:8b:36:84:7b:a8:ec:19:c8:5a:60:ef:
ce:80:04:a2:47:de:00:ec:1c:ed:04:57:6b:e4:5d:
f6:84:f8:81:82:96:81:c0:75:f9:d4:fd:62:5b:d6:
15:7f:f3:b3:e6:7d:0b:2b:b3:25:7f:55:35:bc:56:
29:2c:0a:41:5f:74:cb:73:7a:30:0f:59:23:be:b6:
6f:47:34:eb:82:8d:52:77:75:2c:84:88:65:75:09:
e1:1f:8d:53:0e:87:9c:57:3c:5e:95:71:87:9e:ec:
58:f2:5a:06:41:1b:7e:1d:1a:0a:35:cb:a9:85:05:
b5:08:5c:76:8a:9a:38:68:64:af:22:88:87:70:64:
8d:de:c4:bf:19:97:39:28:6d:9c:7d:d0:97:68:30:
c9:5d:39:63:fc:82:84:a7:e0:79:1c:b5:85:d3:59:
cd:d1:f5:db:33:25:5a:75:96:3c:aa:22:93:3f:60:
0d:63:a6:af:0e:30:44:88:3f:d6:52:bb:8c:c8:74:
50:0a:40:b9:cc:03:54:a6:7a:98:b4:92:62:f3:03:
c2:28:be:63:a1:74:d0:f8:44:b5:40:1c:96:bd:a1:
86:61:20:4d:da:ec:bc:8d:7a:97:f7:2d:72:fa:d8:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1E:E0:E9:96:D1:E2:F2:28:9F:4D:BF:F1:79:C0:3C:65:BC:CE:3C
X509v3 Authority Key Identifier:
keyid:8D:50:3C:0F:53:03:46:BD:3B:D9:1A:E2:8F:64:44:2F:67:96:E7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVA8D1MDRr072Rrij2REL2eW578.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/YR7g6ZbR4vIon02_8XnAPGW8zjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8ac500-eb7d-4ad5-9443-aa22639bd22a/1/jVA8D1MDRr072Rrij2REL2eW578.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.43.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c9:1d:6c:7e:a0:c3:a0:e9:a3:e9:3e:71:c9:6e:27:64:3d:
02:bc:65:84:46:23:bd:94:41:d7:b0:53:51:0c:e3:b0:80:d1:
68:74:86:87:8e:0d:19:70:2d:4f:d1:3c:1c:e8:9b:34:b7:a5:
bd:9b:66:7b:42:27:76:0f:e9:05:76:05:a5:79:8f:28:c2:87:
72:2a:d1:5e:ce:04:8c:d2:9b:8a:62:be:ac:d0:d9:83:d3:05:
63:63:c0:01:ff:55:06:e6:9c:53:e2:08:5a:80:a6:7a:1a:c1:
39:bb:00:b1:85:42:b5:44:a6:98:2f:5c:4c:ac:7d:14:7a:a3:
5c:ab:aa:c7:d9:46:62:26:17:9f:4c:9a:c0:22:32:70:a0:54:
11:81:24:1d:72:d8:ff:11:e9:ac:25:16:33:36:22:42:5d:b6:
47:2e:45:1e:c7:4a:a3:df:46:42:ae:d2:b4:c0:71:b5:83:e5:
35:7f:fa:a8:7e:93:e1:d0:dd:83:81:be:4e:57:68:a1:0f:e5:
24:ea:a4:61:22:8f:68:0b:6b:83:fc:82:af:60:f0:24:71:05:
8e:c2:b7:88:80:fb:86:d3:dd:81:54:f1:fa:a8:1e:63:78:48:
8b:05:04:c2:f1:e7:03:7b:76:50:8d:04:5f:d0:31:15:a5:e8:
12:df:64:54
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDfo3uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
NTAzYzBmNTMwMzQ2YmQzYmQ5MWFlMjhmNjQ0NDJmNjc5NmU3YmYwHhcNMjIwMTAx
MDA1MzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2MTFlZTBlOTk2ZDFl
MmYyMjg5ZjRkYmZmMTc5YzAzYzY1YmNjZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArltf1hdUf+HucQnsw5M7Y5X3izaEe6jsGchaYO/OgASiR94A
7BztBFdr5F32hPiBgpaBwHX51P1iW9YVf/Oz5n0LK7Mlf1U1vFYpLApBX3TLc3ow
D1kjvrZvRzTrgo1Sd3UshIhldQnhH41TDoecVzxelXGHnuxY8loGQRt+HRoKNcup
hQW1CFx2ipo4aGSvIoiHcGSN3sS/GZc5KG2cfdCXaDDJXTlj/IKEp+B5HLWF01nN
0fXbMyVadZY8qiKTP2ANY6avDjBEiD/WUruMyHRQCkC5zANUpnqYtJJi8wPCKL5j
oXTQ+ES1QByWvaGGYSBN2uy8jXqX9y1y+tj7+wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGEe4OmW0eLyKJ9Nv/F5wDxlvM48MB8GA1UdIwQYMBaAFI1QPA9TA0a9O9ka
4o9kRC9nlue/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
alZBOEQxTURScjA3MlJyaWoyUkVMMmVXNTc4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84NC84YWM1MDAtZWI3ZC00YWQ1LTk0NDMtYWEyMjYzOWJkMjJhLzEv
WVI3ZzZaYlI0dklvbjAyXzhYbkFQR1c4emp3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84
YWM1MDAtZWI3ZC00YWQ1LTk0NDMtYWEyMjYzOWJkMjJhLzEvalZBOEQxTURScjA3
MlJyaWoyUkVMMmVXNTc4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMrMA0GCSqGSIb3DQEBCwUAA4IB
AQCCyR1sfqDDoOmj6T5xyW4nZD0CvGWERiO9lEHXsFNRDOOwgNFodIaHjg0ZcC1P
0Twc6Js0t6W9m2Z7Qid2D+kFdgWleY8owodyKtFezgSM0puKYr6s0NmD0wVjY8AB
/1UG5pxT4ghagKZ6GsE5uwCxhUK1RKaYL1xMrH0UeqNcq6rH2UZiJhefTJrAIjJw
oFQRgSQdctj/EemsJRYzNiJCXbZHLkUex0qj30ZCrtK0wHG1g+U1f/qofpPh0N2D
gb5OV2ihD+Uk6qRhIo9oC2uD/IKvYPAkcQWOwreIgPuG092BVPH6qB5jeEiLBQTC
8ecDe3ZQjQRf0DEVpegS32RU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org