Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/qWGYTLWphvrIGuRU4QvCeewDObo.roa
File: qWGYTLWphvrIGuRU4QvCeewDObo.roa (raw, json)
Hash identifier: +Y6MLHHvRRZl5TeiMO29FSpfAQyvjL82gB2cI8+/ITc=
Subject key identifier: A9:61:98:4C:B5:A9:86:FA:C8:1A:E4:54:E1:0B:C2:79:EC:03:39:BA
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 04831211
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/qWGYTLWphvrIGuRU4QvCeewDObo.roa
Signing time: Tue 22 Mar 2022 06:45:12 +0000
ROA not before: Tue 22 Mar 2022 06:45:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202513
IP address blocks: 87.239.52.0/22 maxlen: 24
185.147.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75698705 (0x4831211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Mar 22 06:45:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a961984cb5a986fac81ae454e10bc279ec0339ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:c5:33:1a:a8:fb:2f:5c:a9:78:b6:ee:99:
e7:02:5e:31:1b:51:71:2b:12:45:79:90:a0:7b:a9:
9a:cc:3d:25:ad:ba:0b:44:49:9c:0e:7c:65:e3:df:
50:a1:49:ab:f0:69:e2:f1:05:9c:f1:c8:be:af:c1:
9d:51:da:06:52:82:f1:c5:1a:ea:c5:44:98:18:e4:
f9:df:bd:8c:86:c5:60:19:32:25:6f:5d:fb:29:df:
00:aa:94:b1:26:97:f6:19:8a:e3:fb:d5:8b:ee:68:
37:08:1d:35:95:00:4b:7e:38:de:e5:b2:17:2b:63:
fc:ca:18:aa:bd:8b:80:60:8a:89:b5:ff:5c:f0:13:
f4:98:02:40:e0:a0:c6:cc:03:79:2d:0f:4f:a1:a1:
eb:c1:b5:3d:1c:9d:d9:60:62:d2:67:1d:52:d3:5f:
16:56:61:66:b2:76:fc:af:2d:59:7f:3a:3c:89:47:
b0:47:c3:e8:c7:15:56:5f:78:0b:14:e7:f0:2b:a9:
cd:3b:ab:19:8f:b5:43:15:17:1d:e8:4b:f4:e5:5d:
69:93:3d:63:c4:22:ec:a5:70:50:42:80:3a:20:f5:
dd:f8:f5:b5:54:59:5e:8c:6c:07:3c:6a:38:97:37:
e9:d9:00:3f:23:f3:58:a3:15:d0:34:6d:f1:d6:e4:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:98:4C:B5:A9:86:FA:C8:1A:E4:54:E1:0B:C2:79:EC:03:39:BA
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/qWGYTLWphvrIGuRU4QvCeewDObo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.52.0/22
185.147.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:40:8d:50:11:8f:10:13:4b:81:34:53:f9:6d:aa:dc:c7:59:
49:47:ec:e8:3c:f2:b0:2d:ad:38:1e:91:03:10:f5:a6:9e:d7:
3a:ca:f7:b8:6c:16:18:65:a7:12:19:73:c6:39:34:77:ce:3f:
cb:a7:cb:1a:16:18:60:4d:d6:2d:37:45:c7:82:47:d8:45:df:
d3:07:a7:85:64:5d:56:21:6e:65:8d:33:19:57:36:e8:e5:96:
48:85:2b:9e:64:40:be:7e:3c:a0:31:fb:c6:57:b8:11:f8:e6:
70:33:1e:04:06:5c:86:67:6b:94:25:0a:39:80:af:67:ce:d0:
11:b5:f0:7a:47:42:92:c2:a2:df:6a:c3:cd:ea:ea:52:3e:dc:
d1:8f:ba:72:dd:3f:94:e9:5f:53:be:4f:cc:20:4f:19:cd:61:
e3:3c:e6:5b:b2:08:6b:e1:b6:60:b6:42:56:05:96:b2:59:bf:
cf:66:5c:e8:ff:4d:cb:0f:bb:c2:d5:a1:2b:7f:0f:42:9a:83:
66:a4:b1:a1:de:a2:22:b6:b6:e7:6a:5c:32:0d:e4:07:c7:1e:
96:25:7e:f8:46:08:16:20:33:64:58:ee:33:27:7d:f7:b3:66:
6b:fc:f1:0d:07:c9:69:31:7c:39:3e:8b:18:42:32:8b:76:62:
16:44:f9:af
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBIMSETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YjRhMGFmMTU2MzMyZDNjN2VjYjU4NWZhZWUzYTkwZDliZjJhMDk2MB4XDTIyMDMy
MjA2NDUxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk2MTk4NGNiNWE5
ODZmYWM4MWFlNDU0ZTEwYmMyNzllYzAzMzliYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJFExTMaqPsvXKl4tu6Z5wJeMRtRcSsSRXmQoHupmsw9Ja26
C0RJnA58ZePfUKFJq/Bp4vEFnPHIvq/BnVHaBlKC8cUa6sVEmBjk+d+9jIbFYBky
JW9d+ynfAKqUsSaX9hmK4/vVi+5oNwgdNZUAS3443uWyFytj/MoYqr2LgGCKibX/
XPAT9JgCQOCgxswDeS0PT6Gh68G1PRyd2WBi0mcdUtNfFlZhZrJ2/K8tWX86PIlH
sEfD6McVVl94CxTn8CupzTurGY+1QxUXHehL9OVdaZM9Y8Qi7KVwUEKAOiD13fj1
tVRZXoxsBzxqOJc36dkAPyPzWKMV0DRt8dbkxOUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSpYZhMtamG+sga5FThC8J57AM5ujAfBgNVHSMEGDAWgBS7SgrxVjMtPH7L
WF+u46kNm/KgljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Uwb0s4Vll6TFR4LXkxaGZydU9wRFp2eW9KWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvMWIwOTk4LWFiODEtNGNjZS04YzQ2LWYyMTI2NjY3MjViNC8x
L3FXR1lUTFdwaHZySUd1UlU0UXZDZWV3RE9iby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
MWIwOTk4LWFiODEtNGNjZS04YzQ2LWYyMTI2NjY3MjViNC8xL3Uwb0s4Vll6TFR4
LXkxaGZydU9wRFp2eW9KWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlfvNAMEArmTEDANBgkqhkiG9w0B
AQsFAAOCAQEAoUCNUBGPEBNLgTRT+W2q3MdZSUfs6DzysC2tOB6RAxD1pp7XOsr3
uGwWGGWnEhlzxjk0d84/y6fLGhYYYE3WLTdFx4JH2EXf0wenhWRdViFuZY0zGVc2
6OWWSIUrnmRAvn48oDH7xle4EfjmcDMeBAZchmdrlCUKOYCvZ87QEbXwekdCksKi
32rDzerqUj7c0Y+6ct0/lOlfU75PzCBPGc1h4zzmW7IIa+G2YLZCVgWWslm/z2Zc
6P9Nyw+7wtWhK38PQpqDZqSxod6iIra252pcMg3kB8celiV++EYIFiAzZFjuMyd9
97Nma/zxDQfJaTF8OT6LGEIyi3ZiFkT5rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:35 2024 by rpki-client on console-fra.rpki-client.org