Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3vdyBd4qVqTA2iZ7D-oAc-OrvGw.roa
File: 3vdyBd4qVqTA2iZ7D-oAc-OrvGw.roa (raw, json)
Hash identifier: D8YlQilyqcid7pn7uCiLCCxQZt4NUQCEwcontGqJj5Q=
Subject key identifier: DE:F7:72:05:DE:2A:56:A4:C0:DA:26:7B:0F:EA:00:73:E3:AB:BC:6C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0183A35D06561D7AC5CD482FD2332FB482BB
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3vdyBd4qVqTA2iZ7D-oAc-OrvGw.roa
Signing time: Tue 04 Oct 2022 14:18:46 +0000
ROA not before: Tue 04 Oct 2022 14:18:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 80.71.232.0/24 maxlen: 24
81.29.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:5d:06:56:1d:7a:c5:cd:48:2f:d2:33:2f:b4:82:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 4 14:18:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=def77205de2a56a4c0da267b0fea0073e3abbc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:c6:70:f6:63:59:5e:0d:a0:00:67:c1:07:
24:5b:60:e1:9f:3c:2f:71:f2:5c:ee:b6:48:a4:4d:
7c:bd:0c:49:59:d0:97:61:ee:11:ed:17:cf:6c:c4:
8f:e2:8c:31:df:ef:3e:c3:58:58:3b:81:33:4f:25:
49:f7:9e:98:88:5a:22:ef:97:23:fb:51:12:fa:3a:
e8:c8:34:7b:71:95:0d:1a:15:9b:4e:68:15:19:e3:
89:94:58:5a:75:ea:6d:84:6f:72:4a:e5:d5:bd:bc:
8d:da:13:ce:05:59:57:35:73:48:1a:5b:4d:4d:7a:
14:b2:f1:44:2f:0c:cb:5f:07:f4:21:9f:25:6e:a6:
0a:e3:69:03:44:31:fc:75:61:2e:e9:31:13:72:a5:
7d:27:2f:c4:2c:d2:cd:53:b2:a9:1f:b7:e2:dc:e6:
47:b4:fd:82:52:29:5c:54:f6:71:f8:68:14:e8:62:
f0:e3:7d:2d:71:7f:55:24:52:8d:9e:e0:d9:bc:81:
03:7b:b7:93:78:c3:98:25:65:bd:16:26:75:b0:b2:
e6:51:d0:68:b9:fe:8e:6e:aa:bc:b3:46:ba:aa:dc:
3a:36:10:6c:71:57:68:55:45:37:98:3b:bb:9a:56:
c9:00:5a:af:93:8d:37:0c:25:d7:d4:45:ad:08:76:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:72:05:DE:2A:56:A4:C0:DA:26:7B:0F:EA:00:73:E3:AB:BC:6C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3vdyBd4qVqTA2iZ7D-oAc-OrvGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.232.0/24
81.29.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a1:e6:8b:c9:4a:1c:52:e4:99:c9:90:75:3b:a9:eb:f0:53:
06:df:64:96:e6:27:fa:ac:4e:4e:d2:63:e5:32:2c:51:a2:82:
da:4c:88:42:26:17:6e:fe:0b:a2:4c:e5:7f:d1:2a:54:f2:cb:
b0:38:e8:c2:c9:1c:66:81:19:de:1e:46:8a:bf:cf:e1:b3:44:
3c:fc:f4:9b:41:f1:47:ba:bb:2e:d5:88:08:50:e2:ee:ea:2f:
40:1a:d8:6e:37:78:fb:12:13:e6:d4:99:0a:f0:93:30:d1:64:
ca:f1:f7:6a:e2:24:21:4b:fa:71:1d:2b:82:63:f5:0f:cf:1a:
3a:3b:97:6d:c2:fb:e0:40:14:b1:a2:b5:79:12:27:cb:fb:1b:
e9:05:2c:7d:55:d0:3c:54:46:00:ce:91:e7:b9:c8:aa:94:47:
47:6b:b8:24:81:f4:95:21:18:d2:0a:a0:e8:f0:84:bc:a4:20:
cb:9c:82:07:03:38:55:78:48:28:9d:19:d8:6a:f7:62:cd:15:
c6:ce:9b:f7:06:df:c1:75:a5:c6:a7:26:29:0b:33:42:46:63:
7d:23:ae:35:0f:d7:8c:ea:46:21:f4:43:64:c0:7e:c8:2b:15:
81:5c:ce:8e:ec:ba:11:09:f9:96:71:cb:58:39:47:38:f0:b1:
e6:95:18:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOjXQZWHXrFzUgv0jMvtIK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjIxMDA0MTQxODQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWY3NzIwNWRlMmE1NmE0YzBkYTI2N2IwZmVhMDA3M2UzYWJiYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyfGcPZjWV4NoABnwQckW2Dhnzwv
cfJc7rZIpE18vQxJWdCXYe4R7RfPbMSP4owx3+8+w1hYO4EzTyVJ956YiFoi75cj
+1ES+jroyDR7cZUNGhWbTmgVGeOJlFhadepthG9ySuXVvbyN2hPOBVlXNXNIGltN
TXoUsvFELwzLXwf0IZ8lbqYK42kDRDH8dWEu6TETcqV9Jy/ELNLNU7KpH7fi3OZH
tP2CUilcVPZx+GgU6GLw430tcX9VJFKNnuDZvIEDe7eTeMOYJWW9FiZ1sLLmUdBo
uf6Obqq8s0a6qtw6NhBscVdoVUU3mDu7mlbJAFqvk403DCXX1EWtCHYEGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN73cgXeKlakwNomew/qAHPjq7xsMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvM3ZkeUJkNHFWcVRBMmlaN0Qtb0FjLU9ydkd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEfoAwQA
UR2aMA0GCSqGSIb3DQEBCwUAA4IBAQCaoeaLyUocUuSZyZB1O6nr8FMG32SW5if6
rE5O0mPlMixRooLaTIhCJhdu/guiTOV/0SpU8suwOOjCyRxmgRneHkaKv8/hs0Q8
/PSbQfFHursu1YgIUOLu6i9AGthuN3j7EhPm1JkK8JMw0WTK8fdq4iQhS/pxHSuC
Y/UPzxo6O5dtwvvgQBSxorV5EifL+xvpBSx9VdA8VEYAzpHnuciqlEdHa7gkgfSV
IRjSCqDo8IS8pCDLnIIHAzhVeEgonRnYavdizRXGzpv3Bt/BdaXGpyYpCzNCRmN9
I641D9eM6kYh9ENkwH7IKxWBXM6O7LoRCfmWcctYOUc48LHmlRhB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org