Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WFiIhpzZ8ExSDIga6k5diHQbcBk.roa
File: WFiIhpzZ8ExSDIga6k5diHQbcBk.roa (raw, json)
Hash identifier: bjQXuUk3NIO1lJyNqa/jkkKS//3B5PE1Qls5T4jcb24=
Subject key identifier: 58:58:88:86:9C:D9:F0:4C:52:0C:88:1A:EA:4E:5D:88:74:1B:70:19
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0182D5C05A62616C441A18C09B20E561F323
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WFiIhpzZ8ExSDIga6k5diHQbcBk.roa
Signing time: Thu 25 Aug 2022 16:05:29 +0000
ROA not before: Thu 25 Aug 2022 16:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 80.71.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:c0:5a:62:61:6c:44:1a:18:c0:9b:20:e5:61:f3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 25 16:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585888869cd9f04c520c881aea4e5d88741b7019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:cf:f8:64:ed:b7:5e:e9:8a:61:36:7d:74:
ff:8d:58:f1:5b:66:9d:02:e0:ec:8e:25:f7:10:bd:
6b:55:5c:f6:90:4c:87:a2:e0:44:77:2c:e2:2c:fb:
f5:4a:28:08:f0:e4:f5:6c:84:5a:30:9a:af:ab:0f:
e1:f8:4c:2a:3c:e1:34:4c:4c:1a:eb:ef:79:d3:5c:
91:6e:b7:68:7d:88:6e:41:d5:46:f5:77:4c:5f:be:
d3:03:a6:dd:e1:39:2a:52:a5:63:a1:33:ed:e4:f1:
3d:ff:6c:d9:4d:60:f0:81:90:c3:a0:46:45:ab:16:
18:5e:32:5b:4b:2c:4e:19:63:fa:2c:18:2c:e5:99:
94:f7:1b:18:c7:07:7e:43:98:3a:54:b2:ed:7b:f8:
87:f1:db:02:5a:5f:32:f7:f1:89:fb:b9:40:0c:72:
84:2d:0a:70:77:29:65:22:53:50:96:e1:1f:48:d2:
60:10:44:35:fe:de:12:50:0a:7d:4e:21:b2:1f:fd:
16:2e:c9:fd:90:4d:20:dd:ec:a4:30:9b:80:a4:6c:
3e:9e:f2:36:a4:25:70:d7:08:09:38:bd:a1:7c:19:
84:de:22:b0:07:bc:c2:fd:56:e7:15:b4:d4:a7:ec:
79:3f:19:e5:e6:b1:01:d3:d4:0f:7d:ec:f0:d5:4e:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:88:86:9C:D9:F0:4C:52:0C:88:1A:EA:4E:5D:88:74:1B:70:19
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WFiIhpzZ8ExSDIga6k5diHQbcBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
82:45:1d:00:f2:9f:42:af:c9:be:51:73:21:e0:9a:29:a7:3c:
de:70:d8:c4:04:5b:46:b0:12:4d:c5:84:1e:28:80:fa:74:83:
57:fa:f0:a7:67:71:d5:11:1a:f6:d8:a5:f2:ec:a1:26:86:4f:
6c:c5:9d:d6:50:2b:8d:b9:97:b5:4f:b5:73:4e:e7:69:a9:70:
75:44:ae:46:86:c1:89:e8:92:39:e5:3a:1f:84:2b:e8:55:6f:
9b:05:f8:ba:95:eb:6b:35:89:82:aa:11:a5:f5:58:b4:f4:44:
8d:12:d4:1b:75:1a:9d:ec:a0:9f:bb:6c:3c:92:c4:a0:62:f9:
da:9f:bf:c5:fe:c5:75:ca:da:87:42:05:05:3c:59:fa:b2:99:
1b:a3:63:15:60:91:fd:1e:96:52:a3:9b:60:a9:e1:1c:88:a9:
71:0d:6c:c7:f8:af:84:2e:89:31:b9:81:d2:84:5f:9e:6d:9d:
a5:c0:c0:ac:d7:bc:d6:74:ac:b5:55:7f:b2:b7:47:f6:c6:bf:
8b:fa:c5:8e:0a:69:45:0c:7a:81:fc:79:12:2b:f1:c9:dc:67:
40:3c:1e:1a:56:56:fb:8b:7d:d1:2d:34:bf:9d:96:14:2c:43:
1a:7e:10:af:de:90:59:93:11:0e:f5:d4:81:a8:5b:ba:c8:c4:
c9:c6:5b:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLVwFpiYWxEGhjAmyDlYfMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjIwODI1MTYwNTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODU4ODg4NjljZDlmMDRjNTIwYzg4MWFlYTRlNWQ4ODc0MWI3MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zrP+GTtt17pimE2fXT/jVjxW2ad
AuDsjiX3EL1rVVz2kEyHouBEdyziLPv1SigI8OT1bIRaMJqvqw/h+EwqPOE0TEwa
6+9501yRbrdofYhuQdVG9XdMX77TA6bd4TkqUqVjoTPt5PE9/2zZTWDwgZDDoEZF
qxYYXjJbSyxOGWP6LBgs5ZmU9xsYxwd+Q5g6VLLte/iH8dsCWl8y9/GJ+7lADHKE
LQpwdyllIlNQluEfSNJgEEQ1/t4SUAp9TiGyH/0WLsn9kE0g3eykMJuApGw+nvI2
pCVw1wgJOL2hfBmE3iKwB7zC/VbnFbTUp+x5Pxnl5rEB09QPfezw1U4ozwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhYiIac2fBMUgyIGupOXYh0G3AZMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvV0ZpSWhwelo4RXhTRElnYTZrNWRpSFFiY0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfvMA0G
CSqGSIb3DQEBCwUAA4IBAQCCRR0A8p9Cr8m+UXMh4JoppzzecNjEBFtGsBJNxYQe
KID6dINX+vCnZ3HVERr22KXy7KEmhk9sxZ3WUCuNuZe1T7VzTudpqXB1RK5GhsGJ
6JI55TofhCvoVW+bBfi6letrNYmCqhGl9Vi09ESNEtQbdRqd7KCfu2w8ksSgYvna
n7/F/sV1ytqHQgUFPFn6spkbo2MVYJH9HpZSo5tgqeEciKlxDWzH+K+ELokxuYHS
hF+ebZ2lwMCs17zWdKy1VX+yt0f2xr+L+sWOCmlFDHqB/HkSK/HJ3GdAPB4aVlb7
i33RLTS/nZYULEMafhCv3pBZkxEO9dSBqFu6yMTJxlsU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org