Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9vNXlzxJJz4uyqDn1iTHDpCjNek.roa
File: 9vNXlzxJJz4uyqDn1iTHDpCjNek.roa (raw, json)
Hash identifier: e4T31pKexpA8Ow3Q96WflRaL2vCrgruJ+MSMg0SSXIg=
Subject key identifier: F6:F3:57:97:3C:49:27:3E:2E:CA:A0:E7:D6:24:C7:0E:90:A3:35:E9
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0184C88A0C0550C3E0D6AC0B2E119DC1E291
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9vNXlzxJJz4uyqDn1iTHDpCjNek.roa
Signing time: Wed 30 Nov 2022 12:36:40 +0000
ROA not before: Wed 30 Nov 2022 12:36:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 80.71.229.0/24 maxlen: 24
81.29.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:8a:0c:05:50:c3:e0:d6:ac:0b:2e:11:9d:c1:e2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Nov 30 12:36:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6f357973c49273e2ecaa0e7d624c70e90a335e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:37:00:f0:65:7f:9f:a3:2b:19:9b:b3:88:
7a:57:93:08:d4:b7:ca:fa:95:ad:a4:5f:07:4a:e7:
d5:ed:2c:cb:8b:df:73:e7:50:fb:8b:ae:da:00:46:
2d:2e:c8:0a:de:8a:d6:07:49:f2:11:c0:c8:e7:ef:
ec:03:e5:18:50:4c:af:25:de:c7:83:2f:d9:db:85:
21:5b:b7:01:36:20:f8:f8:66:eb:36:2e:ee:1e:ee:
b5:2c:32:86:4a:35:ab:b3:f0:f6:9c:24:82:78:37:
e3:37:9e:e0:b2:34:1b:6e:fe:5c:7d:49:3c:f1:47:
83:e8:fb:13:61:13:09:9b:92:ca:fd:6b:f7:e9:64:
e6:60:a3:05:8b:21:dd:bc:9d:72:06:8e:85:75:d4:
69:6a:f1:42:25:06:f6:cc:e7:8d:33:d9:7d:ff:a9:
60:69:3a:ec:3b:8e:6f:8b:b8:3c:a5:55:44:3d:29:
22:52:00:ca:98:12:c6:47:fe:97:ed:74:ce:1a:19:
12:2a:39:12:c2:6c:c3:d5:51:6c:65:e4:25:e4:d4:
8c:ad:38:01:fe:bc:eb:5e:e2:eb:f8:93:fa:a8:20:
7f:46:6b:cd:25:2f:3d:6a:4a:e2:f4:a6:12:49:d6:
98:11:92:c4:ae:3f:11:b4:67:39:4b:74:ee:96:75:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F3:57:97:3C:49:27:3E:2E:CA:A0:E7:D6:24:C7:0E:90:A3:35:E9
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9vNXlzxJJz4uyqDn1iTHDpCjNek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
81.29.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1e:b0:8f:d2:88:3f:5a:9b:99:8f:45:51:0b:3c:3e:b6:da:
20:34:4b:89:8a:2d:3d:35:71:12:45:33:d2:96:11:39:31:6e:
cc:ed:bc:bf:0a:f8:47:91:2f:68:2e:d2:0c:2b:d3:2b:5a:52:
cb:62:c7:99:ad:c9:b7:f2:ff:80:2d:bd:cb:a0:49:ff:ae:a9:
0e:77:38:0d:7e:65:a9:40:a1:c9:42:a0:75:5d:84:75:62:52:
53:b2:26:e5:79:47:96:f8:c2:fb:df:cc:b6:e1:07:99:ca:ab:
43:7b:d7:1f:9d:30:ec:c1:c4:6a:06:4b:5b:67:67:78:6c:9f:
59:65:42:f9:98:70:d7:7f:d2:06:52:c4:27:65:d6:6b:c8:b9:
21:d0:f2:92:de:c2:8b:0f:61:f4:42:7d:c3:2a:09:0c:b2:f9:
45:1f:cc:b4:7a:37:19:6e:47:62:e0:61:7c:4d:85:49:f0:af:
26:8d:01:58:14:16:37:58:5c:35:96:24:f2:3c:e3:64:77:f3:
a5:da:88:a1:0e:d6:ea:07:99:b4:5b:63:bb:3a:65:4e:df:57:
78:07:08:f7:9b:ff:47:cd:da:fe:e4:7a:27:77:f4:75:1e:83:
02:7e:60:ec:59:3c:78:7b:7f:bb:b0:52:b6:6b:a1:e1:90:a4:
7a:ba:27:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTIigwFUMPg1qwLLhGdweKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjIxMTMwMTIzNjQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmYzNTc5NzNjNDkyNzNlMmVjYWEwZTdkNjI0YzcwZTkwYTMzNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU83APBlf5+jKxmbs4h6V5MI1LfK
+pWtpF8HSufV7SzLi99z51D7i67aAEYtLsgK3orWB0nyEcDI5+/sA+UYUEyvJd7H
gy/Z24UhW7cBNiD4+GbrNi7uHu61LDKGSjWrs/D2nCSCeDfjN57gsjQbbv5cfUk8
8UeD6PsTYRMJm5LK/Wv36WTmYKMFiyHdvJ1yBo6FddRpavFCJQb2zOeNM9l9/6lg
aTrsO45vi7g8pVVEPSkiUgDKmBLGR/6X7XTOGhkSKjkSwmzD1VFsZeQl5NSMrTgB
/rzrXuLr+JP6qCB/RmvNJS89akri9KYSSdaYEZLErj8RtGc5S3TulnUvMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPbzV5c8SSc+Lsqg59Ykxw6QozXpMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvOXZOWGx6eEpKejR1eXFEbjFpVEhEcENqTmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEflAwQA
UR2ZMA0GCSqGSIb3DQEBCwUAA4IBAQAOHrCP0og/WpuZj0VRCzw+ttogNEuJii09
NXESRTPSlhE5MW7M7by/CvhHkS9oLtIMK9MrWlLLYseZrcm38v+ALb3LoEn/rqkO
dzgNfmWpQKHJQqB1XYR1YlJTsibleUeW+ML738y24QeZyqtDe9cfnTDswcRqBktb
Z2d4bJ9ZZUL5mHDXf9IGUsQnZdZryLkh0PKS3sKLD2H0Qn3DKgkMsvlFH8y0ejcZ
bkdi4GF8TYVJ8K8mjQFYFBY3WFw1liTyPONkd/Ol2oihDtbqB5m0W2O7OmVO31d4
Bwj3m/9Hzdr+5Hond/R1HoMCfmDsWTx4e3+7sFK2a6HhkKR6uidQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org