Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/00CwKF9J1b7qoYnve3BkGXGEEFU.roa
File: 00CwKF9J1b7qoYnve3BkGXGEEFU.roa (raw, json)
Hash identifier: DyDLTreGo2/2afpP+HMVGvY1ESbKBd+xd0zvzUv1GbM=
Subject key identifier: D3:40:B0:28:5F:49:D5:BE:EA:A1:89:EF:7B:70:64:19:71:84:10:55
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 2FD58A
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/00CwKF9J1b7qoYnve3BkGXGEEFU.roa
Signing time: Sat 01 Jan 2022 00:58:13 +0000
ROA not before: Sat 01 Jan 2022 00:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210463
IP address blocks: 146.19.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134858 (0x2fd58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Jan 1 00:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d340b0285f49d5beeaa189ef7b70641971841055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:f6:e7:e2:9f:cb:20:9e:96:b2:4d:d4:2e:
ed:27:12:48:27:e7:ea:5f:f3:63:af:a4:ca:57:73:
64:78:ec:aa:49:fc:b3:60:50:e5:08:71:df:b6:94:
d0:11:e7:d4:6f:fa:de:19:de:50:3d:45:b0:1b:48:
4c:d2:48:42:18:ec:4b:c4:7f:2b:c6:96:b0:ef:0d:
74:8e:7e:0d:c0:5e:d6:7e:39:6a:5b:bb:c2:1a:9b:
9b:9a:76:9e:f2:b5:c6:69:37:34:1c:2e:22:a0:d4:
41:ab:28:d1:16:14:ff:a1:5e:49:39:db:05:b1:87:
4f:a3:5b:84:5b:d2:70:a3:23:ef:e5:b7:fb:35:8f:
ee:41:04:10:e2:9a:0c:42:78:93:46:f8:83:8b:e6:
69:b2:b1:71:b7:5c:2a:05:ae:a4:72:39:1b:1b:72:
e4:6c:1f:bc:0d:76:a6:4a:64:af:a6:84:a4:16:89:
6a:11:3b:7d:9b:c7:53:f6:63:88:8e:92:7c:54:97:
81:47:e3:15:76:5d:c0:7b:06:87:6a:12:94:df:a6:
e3:0d:2e:64:88:9b:b6:13:47:7a:b7:f9:7c:94:92:
76:0b:42:42:b2:c5:28:94:02:b7:d9:c1:8c:c5:b6:
ca:58:53:a1:57:90:a1:84:c6:72:54:51:c9:05:33:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:B0:28:5F:49:D5:BE:EA:A1:89:EF:7B:70:64:19:71:84:10:55
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/00CwKF9J1b7qoYnve3BkGXGEEFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d8:14:2d:ca:aa:c2:05:8e:93:0a:18:c6:dc:9a:88:27:9d:
18:5d:cc:7b:d2:da:da:ae:b0:3e:51:5c:62:0d:8f:1c:a4:98:
d7:09:12:16:e1:63:42:c2:3b:2e:e0:2a:cd:7a:9e:c5:8f:52:
62:a9:f6:10:50:ed:63:e3:da:f1:68:87:5f:33:a7:35:ec:79:
2f:71:b7:3b:22:e7:9d:f9:e3:32:20:24:9f:e1:af:6e:e6:41:
f3:08:bc:fd:a1:33:9f:56:04:de:69:de:33:2c:66:6e:a1:b7:
9d:8d:45:3d:88:e3:d8:f7:5f:81:b2:82:26:03:22:e2:d9:4e:
3b:b2:41:51:c7:aa:0a:57:6b:53:d2:4f:60:5e:8f:d5:fa:43:
50:e2:7a:25:88:9d:99:32:89:b6:df:84:9e:0f:40:37:ef:f5:
61:ee:66:57:b4:35:a1:14:13:c9:93:bb:49:9e:96:4c:20:f0:
5e:24:e4:2f:1d:cb:4f:24:83:6e:1f:dd:ec:49:c9:7e:52:0c:
fa:c1:1b:3a:c4:c0:62:ba:ed:48:88:e0:bb:ba:e1:6a:f4:79:
e4:59:7d:22:ff:4c:de:02:f7:6a:19:c8:40:67:ae:2e:65:8c:
7f:57:f4:09:6c:03:f3:37:73:40:76:e3:2a:ac:b6:ce:09:96:
df:c2:46:cf
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDL9WKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
ODQ4MTYyODkyODMxYWRkNWEwN2Q0MzAyZTdmY2ZmZjUyZjAyZmQwHhcNMjIwMTAx
MDA1ODEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMzQwYjAyODVmNDlk
NWJlZWFhMTg5ZWY3YjcwNjQxOTcxODQxMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1If25+KfyyCelrJN1C7tJxJIJ+fqX/Njr6TKV3NkeOyqSfyz
YFDlCHHftpTQEefUb/reGd5QPUWwG0hM0khCGOxLxH8rxpaw7w10jn4NwF7Wfjlq
W7vCGpubmnae8rXGaTc0HC4ioNRBqyjRFhT/oV5JOdsFsYdPo1uEW9JwoyPv5bf7
NY/uQQQQ4poMQniTRviDi+ZpsrFxt1wqBa6kcjkbG3LkbB+8DXamSmSvpoSkFolq
ETt9m8dT9mOIjpJ8VJeBR+MVdl3AewaHahKU36bjDS5kiJu2E0d6t/l8lJJ2C0JC
ssUolAK32cGMxbbKWFOhV5ChhMZyVFHJBTPU6QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNNAsChfSdW+6qGJ73twZBlxhBBVMB8GA1UdIwQYMBaAFJSEgWKJKDGt1aB9
QwLn/P/1LwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYtMTE5YzNlNzQ3OWQ5LzEv
MDBDd0tGOUoxYjdxb1ludmUzQmtHWEdFRUZVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8w
ODczNTMtNzZhMC00MDY4LTk2ZGYtMTE5YzNlNzQ3OWQ5LzEvbElTQllva29NYTNW
b0gxREF1ZjhfX1V2QXYwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNNMA0GCSqGSIb3DQEBCwUAA4IB
AQBu2BQtyqrCBY6TChjG3JqIJ50YXcx70trarrA+UVxiDY8cpJjXCRIW4WNCwjsu
4CrNep7Fj1JiqfYQUO1j49rxaIdfM6c17Hkvcbc7Iued+eMyICSf4a9u5kHzCLz9
oTOfVgTead4zLGZuobedjUU9iOPY91+BsoImAyLi2U47skFRx6oKV2tT0k9gXo/V
+kNQ4noliJ2ZMom234SeD0A37/Vh7mZXtDWhFBPJk7tJnpZMIPBeJOQvHctPJINu
H93sScl+Ugz6wRs6xMBiuu1IiOC7uuFq9HnkWX0i/0zeAvdqGchAZ64uZYx/V/QJ
bAPzN3NAduMqrLbOCZbfwkbP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-fra.rpki-client.org