Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/85cnQKW_CKe9l9PPeXR2rClQCQQ.roa
File: 85cnQKW_CKe9l9PPeXR2rClQCQQ.roa (raw, json)
Hash identifier: I5wNp0aZMSPz/PF8qvv+eEjQxR4cu6AOw3hZJUHmzDc=
Subject key identifier: F3:97:27:40:A5:BF:08:A7:BD:97:D3:CF:79:74:76:AC:29:50:09:04
Certificate issuer: /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Certificate serial: 04DFDA5B
Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/85cnQKW_CKe9l9PPeXR2rClQCQQ.roa
Signing time: Sat 01 Jan 2022 12:59:15 +0000
ROA not before: Sat 01 Jan 2022 12:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 149.249.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81779291 (0x4dfda5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Validity
Not Before: Jan 1 12:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3972740a5bf08a7bd97d3cf797476ac29500904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:ab:89:05:a7:b3:8a:0e:cd:7b:7b:a5:a2:
b2:ce:36:f7:b1:11:eb:51:54:93:cc:c8:4b:b4:2a:
0b:17:d7:38:6e:14:ff:f1:12:c5:32:e8:ba:3f:18:
85:86:0a:df:ef:9e:d5:f9:af:79:56:fb:5c:09:45:
ef:db:00:2f:b2:f8:4a:18:a4:ee:d7:0b:5b:ea:95:
66:ed:59:c5:10:4c:be:11:31:40:a3:5a:45:ee:7e:
01:00:74:cc:50:47:70:2d:10:40:f0:66:74:53:aa:
fe:a3:21:7c:e0:88:f4:26:4b:e1:78:fd:f1:2e:8d:
18:e6:bc:40:96:38:4a:f8:27:f1:84:eb:f4:b2:94:
47:a3:86:ce:9c:bc:f3:e9:1d:65:01:85:3b:a0:9b:
6f:73:fb:2f:97:9b:1e:03:4c:41:63:2b:0c:f7:b1:
8c:cc:03:62:3e:0d:da:32:0a:c3:1a:07:71:bc:78:
1f:ab:e6:6c:8f:d2:e3:0f:37:ee:eb:10:8a:6d:c4:
ea:83:d4:1f:66:9c:0d:65:ce:ec:08:a7:c4:31:63:
9e:42:9a:59:96:65:cc:11:9b:03:17:d7:b9:7d:88:
f9:33:42:c4:a1:4a:57:aa:ec:1b:4d:a1:5f:92:04:
2e:7e:1f:8f:e1:12:bc:66:36:cc:91:e3:ab:d3:e5:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:97:27:40:A5:BF:08:A7:BD:97:D3:CF:79:74:76:AC:29:50:09:04
X509v3 Authority Key Identifier:
keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/85cnQKW_CKe9l9PPeXR2rClQCQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:30:f2:6f:5b:a7:67:6d:f1:d9:b6:78:7d:d2:36:38:78:8e:
d0:1c:fa:58:d6:0d:b6:83:3e:18:f1:06:3b:9f:90:20:46:4f:
a2:6f:ff:af:34:22:10:fb:fe:13:b2:aa:0d:82:9a:9f:e0:c2:
93:1e:81:33:a5:ba:9c:5c:42:b6:cb:90:f8:11:e7:9c:8f:fa:
03:7a:ae:83:08:41:61:29:86:61:f2:e8:bd:f2:2d:34:de:af:
04:9e:c3:f2:80:f1:99:03:f6:78:86:e6:5c:24:22:34:73:a0:
e7:83:57:50:48:7f:b0:34:61:4d:c0:a8:23:bb:48:6e:de:d0:
33:84:be:bd:23:a4:0b:3e:72:38:c6:a1:b9:da:73:64:93:43:
ca:8e:8e:64:05:c0:63:b4:1d:b6:f8:92:26:7f:77:b1:71:a4:
8a:46:76:4c:c4:c3:2a:61:6a:7b:82:76:11:cf:24:73:62:ca:
76:6d:7f:16:91:e0:ee:b3:4a:6b:f5:8f:01:f7:dd:9f:9e:b0:
1d:1b:7f:17:32:38:4f:b6:be:3f:48:14:fd:cd:97:33:6f:42:
22:5e:b7:27:0c:9c:4c:ec:d3:79:0b:0c:79:40:d3:dd:8d:3f:
19:92:c6:e8:be:62:3c:24:86:b6:07:ad:2f:7d:04:a5:34:05:
8b:15:8a:32
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBN/aWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTBhMDY1NjRkM2M3MTdkMmQ2ZGFhMWU4MzNjNDk1OTc2YjBiYWRhMB4XDTIyMDEw
MTEyNTkxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjM5NzI3NDBhNWJm
MDhhN2JkOTdkM2NmNzk3NDc2YWMyOTUwMDkwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/yq4kFp7OKDs17e6Wiss4297ER61FUk8zIS7QqCxfXOG4U
//ESxTLouj8YhYYK3++e1fmveVb7XAlF79sAL7L4Shik7tcLW+qVZu1ZxRBMvhEx
QKNaRe5+AQB0zFBHcC0QQPBmdFOq/qMhfOCI9CZL4Xj98S6NGOa8QJY4Svgn8YTr
9LKUR6OGzpy88+kdZQGFO6Cbb3P7L5ebHgNMQWMrDPexjMwDYj4N2jIKwxoHcbx4
H6vmbI/S4w837usQim3E6oPUH2acDWXO7AinxDFjnkKaWZZlzBGbAxfXuX2I+TNC
xKFKV6rsG02hX5IELn4fj+ESvGY2zJHjq9Plm/8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTzlydApb8Ip72X0895dHasKVAJBDAfBgNVHSMEGDAWgBR6CgZWTTxxfS1t
qh6DPElZdrC62jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Vnb0dWazA4Y1gwdGJhb2VnenhKV1hhd3V0by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvNmY1OThkLWE1YzUtNGM5OS1hMWYwLTU0ODI2M2ViNmZiNC8x
Lzg1Y25RS1dfQ0tlOWw5UFBlWFIyckNsUUNRUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
NmY1OThkLWE1YzUtNGM5OS1hMWYwLTU0ODI2M2ViNmZiNC8xL2Vnb0dWazA4Y1gw
dGJhb2VnenhKV1hhd3V0by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5X5ADANBgkqhkiG9w0BAQsFAAOC
AQEAXzDyb1unZ23x2bZ4fdI2OHiO0Bz6WNYNtoM+GPEGO5+QIEZPom//rzQiEPv+
E7KqDYKan+DCkx6BM6W6nFxCtsuQ+BHnnI/6A3qugwhBYSmGYfLovfItNN6vBJ7D
8oDxmQP2eIbmXCQiNHOg54NXUEh/sDRhTcCoI7tIbt7QM4S+vSOkCz5yOMahudpz
ZJNDyo6OZAXAY7QdtviSJn93sXGkikZ2TMTDKmFqe4J2Ec8kc2LKdm1/FpHg7rNK
a/WPAffdn56wHRt/FzI4T7a+P0gU/c2XM29CIl63JwycTOzTeQsMeUDT3Y0/GZLG
6L5iPCSGtgetL30EpTQFixWKMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:45 2024 by rpki-client on console-ams.rpki-client.org