Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/_EiMDJ0Wxnqhm0y5YtqutfqUUUQ.roa
File: _EiMDJ0Wxnqhm0y5YtqutfqUUUQ.roa (raw, json)
Hash identifier: Q/dKBgTx2Juit1rDiEt3BkJ+CTc9I/EtZ0kVWlz2/Ig=
Subject key identifier: FC:48:8C:0C:9D:16:C6:7A:A1:9B:4C:B9:62:DA:AE:B5:FA:94:51:44
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01138A87
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/_EiMDJ0Wxnqhm0y5YtqutfqUUUQ.roa
Signing time: Fri 15 Apr 2022 09:18:33 +0000
ROA not before: Fri 15 Apr 2022 09:18:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 37.19.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18057863 (0x1138a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Apr 15 09:18:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc488c0c9d16c67aa19b4cb962daaeb5fa945144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:20:7b:ec:86:f8:5f:84:e4:e1:37:42:ea:
55:ad:e4:34:47:bf:9e:c5:6c:ba:b8:99:b6:f0:96:
b8:ac:32:76:05:34:60:dd:58:d8:25:0f:ca:2f:d2:
94:eb:eb:1e:20:55:01:60:5c:3a:19:a6:24:f6:18:
b1:c4:53:7f:16:76:c7:d8:18:8d:df:04:e3:10:4e:
fc:29:c2:47:b8:09:9a:44:e4:e0:59:38:86:b5:f8:
92:a4:9d:8f:92:a2:8a:5c:60:11:92:f2:7e:36:88:
ef:35:5d:8b:2f:d7:89:cc:22:3c:83:ac:63:cd:45:
c0:d6:5b:3d:fe:26:b7:a5:80:88:bc:e4:fb:25:1a:
35:67:66:74:f7:f8:34:43:12:5c:00:28:ae:eb:1f:
85:59:71:f8:e6:4c:d3:b2:55:7b:57:0f:cf:05:0d:
33:30:12:a5:12:9d:2a:ec:0c:33:f9:77:b3:26:3a:
ae:77:72:6c:7e:19:dc:05:45:c4:20:95:5e:05:4f:
69:68:59:80:0b:ac:04:30:0b:f8:bc:a6:05:c6:1c:
41:07:e2:b2:e5:a8:58:e8:ed:59:1d:b5:ed:2e:80:
88:f3:07:d8:67:1d:57:a1:31:00:58:19:ae:48:a2:
3c:0f:5b:21:5e:f0:c0:31:6b:ce:cb:f7:a9:7c:38:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:8C:0C:9D:16:C6:7A:A1:9B:4C:B9:62:DA:AE:B5:FA:94:51:44
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/_EiMDJ0Wxnqhm0y5YtqutfqUUUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:1b:99:47:84:b9:a8:6b:05:1c:46:e2:b0:c4:f5:ed:09:ae:
a7:92:90:81:63:1e:6f:85:12:3a:4e:a4:2b:e2:51:c0:f4:1b:
53:05:f9:2d:22:4b:b7:4f:93:eb:95:29:5d:dc:07:64:e1:1b:
11:d2:61:21:87:05:8b:a9:53:e0:89:15:c1:38:96:0b:a2:85:
c9:cd:ef:3a:b7:77:a1:37:46:fb:fb:44:ca:fc:72:e5:5f:1b:
19:33:3d:1a:09:83:0c:e8:fe:c6:00:65:d3:23:4c:02:ef:20:
0c:c4:b9:f5:bf:3d:d3:03:57:21:94:bb:b6:20:0d:97:c0:7f:
d5:35:ba:47:8d:6f:20:e2:7f:6a:bf:ce:37:9a:bd:b6:39:4c:
9a:de:fc:6e:31:ae:0f:90:21:c0:5d:ac:08:e2:4e:29:de:38:
08:da:d9:fb:e6:af:14:be:81:4a:c1:47:2c:c9:c8:40:6f:b4:
6b:58:e0:9f:d6:b6:af:34:6f:e4:4d:35:a3:2f:40:18:7b:d9:
8c:36:99:f3:07:ab:05:3e:45:fd:d1:49:7b:6c:2b:ba:d3:14:
7d:76:ae:9a:d7:30:36:78:f9:e7:a7:da:a4:82:19:c0:70:3a:
4f:f5:2b:f7:e5:74:87:a6:28:24:e5:6a:cd:ff:e3:85:b7:bb:
24:f3:a8:75
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAROKhzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTgyOTYzZmYxYWE3MGFiMTBkMWQzM2U4NmIxZDZkNDk0ZDZjZTUxMB4XDTIyMDQx
NTA5MTgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM0ODhjMGM5ZDE2
YzY3YWExOWI0Y2I5NjJkYWFlYjVmYTk0NTE0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/hIHvshvhfhOThN0LqVa3kNEe/nsVsuriZtvCWuKwydgU0
YN1Y2CUPyi/SlOvrHiBVAWBcOhmmJPYYscRTfxZ2x9gYjd8E4xBO/CnCR7gJmkTk
4Fk4hrX4kqSdj5KiilxgEZLyfjaI7zVdiy/XicwiPIOsY81FwNZbPf4mt6WAiLzk
+yUaNWdmdPf4NEMSXAAorusfhVlx+OZM07JVe1cPzwUNMzASpRKdKuwMM/l3syY6
rndybH4Z3AVFxCCVXgVPaWhZgAusBDAL+LymBcYcQQfisuWoWOjtWR217S6AiPMH
2GcdV6ExAFgZrkiiPA9bIV7wwDFrzsv3qXw4fWkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT8SIwMnRbGeqGbTLli2q61+pRRRDAfBgNVHSMEGDAWgBQugpY/8apwqxDR
0z6GsdbUlNbOUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xvS1dQX0dxY0tzUTBkTS1ockhXMUpUV3psRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvOTU3YzY4LTZmMjctNDBlZC1hYmVkLWRmNjRmMGU4MjM2MC8x
L19FaU1ESjBXeG5xaG0weTVZdHF1dGZxVVVVUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
OTU3YzY4LTZmMjctNDBlZC1hYmVkLWRmNjRmMGU4MjM2MC8xL0xvS1dQX0dxY0tz
UTBkTS1ockhXMUpUV3psRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiUTRDANBgkqhkiG9w0BAQsFAAOC
AQEAaxuZR4S5qGsFHEbisMT17Qmup5KQgWMeb4USOk6kK+JRwPQbUwX5LSJLt0+T
65UpXdwHZOEbEdJhIYcFi6lT4IkVwTiWC6KFyc3vOrd3oTdG+/tEyvxy5V8bGTM9
GgmDDOj+xgBl0yNMAu8gDMS59b890wNXIZS7tiANl8B/1TW6R41vIOJ/ar/ON5q9
tjlMmt78bjGuD5AhwF2sCOJOKd44CNrZ++avFL6BSsFHLMnIQG+0a1jgn9a2rzRv
5E01oy9AGHvZjDaZ8werBT5F/dFJe2wrutMUfXaumtcwNnj556fapIIZwHA6T/Ur
9+V0h6YoJOVqzf/jhbe7JPOodQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org