Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/guKQnd4YutfLq02yUW1eDjODiqs.roa
File: guKQnd4YutfLq02yUW1eDjODiqs.roa (raw, json)
Hash identifier: Z1cfLr3LfPYbYImIV81298KYV4VJ0psv5HPAtRWkMqY=
Subject key identifier: 82:E2:90:9D:DE:18:BA:D7:CB:AB:4D:B2:51:6D:5E:0E:33:83:8A:AB
Certificate issuer: /CN=166dcaf076c3ec103117deaa67990c968bcd644d
Certificate serial: 0181EE863D28A8F9A86DA1F4A706599B435B
Authority key identifier: 16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/guKQnd4YutfLq02yUW1eDjODiqs.roa
Signing time: Mon 11 Jul 2022 18:29:43 +0000
ROA not before: Mon 11 Jul 2022 18:29:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 213.109.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:86:3d:28:a8:f9:a8:6d:a1:f4:a7:06:59:9b:43:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166dcaf076c3ec103117deaa67990c968bcd644d
Validity
Not Before: Jul 11 18:29:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82e2909dde18bad7cbab4db2516d5e0e33838aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:dc:ee:76:13:2d:08:61:57:af:5e:1f:d1:
36:51:71:70:95:04:22:d6:7d:ba:cf:31:28:03:8d:
23:a9:ee:b1:41:b1:4a:f1:81:51:db:6f:39:7a:a6:
d9:9c:13:13:76:b9:32:4f:64:44:dc:8f:22:d0:a6:
85:63:71:cc:d7:4c:7c:a3:d2:11:2d:20:78:d3:31:
2f:48:36:5a:39:d5:df:ec:0f:c8:62:5e:6c:c6:25:
a8:b1:a1:67:d9:50:f5:64:8e:e8:ba:bb:d6:e5:9b:
b3:8e:1c:4e:c1:18:0d:68:92:31:82:8c:c4:5d:fb:
10:a1:43:45:de:c5:00:14:d4:3e:52:50:64:24:63:
bc:ad:43:de:5b:9f:ad:cb:fa:00:9b:7b:01:c2:76:
b0:84:ff:0e:1b:c7:f2:00:9c:59:bc:4f:b6:c9:cc:
5d:7e:47:d5:36:fc:4e:30:e2:ed:08:c5:fe:a1:5d:
52:b1:43:81:3f:44:7a:cb:d0:65:fd:a5:45:33:b3:
7f:01:62:3a:58:1d:87:32:ab:f1:c0:a0:83:90:a9:
10:38:37:35:69:08:98:bd:75:a3:fe:e1:25:90:09:
bc:01:4b:47:08:02:ae:02:7c:5d:82:a6:21:a5:53:
d7:8f:06:7d:e1:e0:08:3f:95:a2:80:8e:01:b6:e1:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:90:9D:DE:18:BA:D7:CB:AB:4D:B2:51:6D:5E:0E:33:83:8A:AB
X509v3 Authority Key Identifier:
keyid:16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/guKQnd4YutfLq02yUW1eDjODiqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/Fm3K8HbD7BAxF96qZ5kMlovNZE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:80:b7:d8:8f:f2:54:e7:01:9b:81:31:a1:d8:74:a4:84:e8:
05:a0:8b:96:3a:cc:9f:1f:bf:9e:7d:38:29:16:99:9e:fd:ac:
7f:1d:f7:98:89:a7:42:4a:15:42:8a:52:83:5b:3c:13:d3:53:
48:47:c2:24:37:dc:f8:9c:6f:37:d5:72:69:9a:90:05:79:2a:
fa:43:5f:4b:e1:87:cd:90:0a:56:96:d8:6f:fc:07:c9:b9:2c:
01:b1:7e:fc:b7:c2:33:f4:90:76:2f:49:7f:66:8c:2e:09:65:
b5:09:23:90:a9:a4:9e:4c:50:02:7e:c1:da:64:5f:88:24:c9:
4a:d2:c4:15:7c:fc:2d:76:aa:ba:d5:ca:04:1e:2c:5a:b9:ea:
58:81:d8:ed:28:eb:72:5e:5e:62:3a:48:65:24:e0:60:2c:a8:
ec:aa:e0:ee:c0:e3:78:bc:0d:47:6d:33:40:a8:44:ac:32:3a:
b4:27:ad:23:69:28:ea:53:ef:e9:69:63:9c:47:88:51:77:9c:
2c:93:8e:40:00:d0:cb:1a:f4:aa:c2:82:57:be:3f:8c:60:11:
3f:c4:56:c3:d8:ee:e7:ff:28:2d:e8:f9:3f:5f:c6:44:f7:35:
43:f9:d6:b1:21:07:d2:8b:8b:ff:cf:67:04:58:aa:ca:7c:a0:
69:83:06:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHuhj0oqPmobaH0pwZZm0NbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmRjYWYwNzZjM2VjMTAzMTE3ZGVhYTY3OTkwYzk2OGJj
ZDY0NGQwHhcNMjIwNzExMTgyOTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmUyOTA5ZGRlMThiYWQ3Y2JhYjRkYjI1MTZkNWUwZTMzODM4YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz/c7nYTLQhhV69eH9E2UXFwlQQi
1n26zzEoA40jqe6xQbFK8YFR2285eqbZnBMTdrkyT2RE3I8i0KaFY3HM10x8o9IR
LSB40zEvSDZaOdXf7A/IYl5sxiWosaFn2VD1ZI7ourvW5ZuzjhxOwRgNaJIxgozE
XfsQoUNF3sUAFNQ+UlBkJGO8rUPeW5+ty/oAm3sBwnawhP8OG8fyAJxZvE+2ycxd
fkfVNvxOMOLtCMX+oV1SsUOBP0R6y9Bl/aVFM7N/AWI6WB2HMqvxwKCDkKkQODc1
aQiYvXWj/uElkAm8AUtHCAKuAnxdgqYhpVPXjwZ94eAIP5WigI4BtuG3rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFILikJ3eGLrXy6tNslFtXg4zg4qrMB8GA1UdIwQY
MBaAFBZtyvB2w+wQMRfeqmeZDJaLzWRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm0zSzhIYkQ3QkF4Rjk2cVo1a01sb3ZOWkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zYWYxZTYtN2Y2ZC00YWM4LWEwMjIt
ZmFiOWJhYjJmODk0LzEvZ3VLUW5kNFl1dGZMcTAyeVVXMWVEak9EaXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zYWYxZTYtN2Y2ZC00YWM4LWEwMjItZmFiOWJhYjJmODk0
LzEvRm0zSzhIYkQ3QkF4Rjk2cVo1a01sb3ZOWkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2aMA0G
CSqGSIb3DQEBCwUAA4IBAQBNgLfYj/JU5wGbgTGh2HSkhOgFoIuWOsyfH7+efTgp
Fpme/ax/HfeYiadCShVCilKDWzwT01NIR8IkN9z4nG831XJpmpAFeSr6Q19L4YfN
kApWlthv/AfJuSwBsX78t8Iz9JB2L0l/ZowuCWW1CSOQqaSeTFACfsHaZF+IJMlK
0sQVfPwtdqq61coEHixauepYgdjtKOtyXl5iOkhlJOBgLKjsquDuwON4vA1HbTNA
qESsMjq0J60jaSjqU+/paWOcR4hRd5wsk45AANDLGvSqwoJXvj+MYBE/xFbD2O7n
/ygt6Pk/X8ZE9zVD+daxIQfSi4v/z2cEWKrKfKBpgwZg
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:16 2023 by rpki-client on console-ams.rpki-client.org