Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/uObvftObk0kVN8-gt3t2cnFEbOY.roa
File: uObvftObk0kVN8-gt3t2cnFEbOY.roa (raw, json)
Hash identifier: sfxxKeTZeTqDPQk0PjINvI1+U6zpCAICRgSdgj7jS2g=
Subject key identifier: B8:E6:EF:7E:D3:9B:93:49:15:37:CF:A0:B7:7B:76:72:71:44:6C:E6
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17DC7EE0
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/uObvftObk0kVN8-gt3t2cnFEbOY.roa
Signing time: Sat 01 Jan 2022 00:54:35 +0000
ROA not before: Sat 01 Jan 2022 00:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48062
IP address blocks: 94.100.4.0/24 maxlen: 24
94.100.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400326368 (0x17dc7ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8e6ef7ed39b93491537cfa0b77b767271446ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:f9:b5:80:59:80:34:e1:46:79:bf:4e:87:
c4:1c:99:e0:60:f4:37:2e:20:8e:b6:de:e6:9e:03:
01:bc:1d:fd:aa:8f:a3:6f:3a:f4:8f:6a:08:16:34:
11:1d:9f:0d:73:ae:e0:a7:8c:da:44:e0:8c:c5:29:
3b:85:e3:1b:f1:a9:1a:9a:55:ce:6b:94:c5:1f:8b:
8d:5f:6b:e0:c4:fd:74:ca:b9:24:dd:ac:27:52:1d:
65:3b:ac:8b:d3:f1:b6:42:c9:c2:ae:a1:71:72:85:
4b:a8:6e:58:60:40:65:ad:a9:8d:69:de:72:dc:4f:
d8:74:68:8c:13:85:98:c6:57:c2:70:3a:8d:cd:21:
f4:96:2f:b5:2e:26:2d:aa:ec:4b:18:da:a0:5e:fa:
82:6a:99:a2:81:86:44:ac:30:62:88:3d:4f:69:d1:
95:0a:c5:5e:3b:82:11:6f:ef:b8:17:f4:59:43:2a:
f7:e4:18:70:c4:19:61:63:11:fa:a9:ed:18:03:4f:
be:5e:40:82:5f:7c:dd:4b:b5:70:bf:05:66:ec:35:
d2:11:fd:c2:28:17:38:c1:28:8f:0f:33:c3:4f:23:
da:0b:7c:bc:74:0d:60:12:1d:54:ba:d2:33:50:94:
eb:d1:5d:c5:59:fd:91:d7:6f:4d:ae:6d:66:59:7a:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:EF:7E:D3:9B:93:49:15:37:CF:A0:B7:7B:76:72:71:44:6C:E6
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/uObvftObk0kVN8-gt3t2cnFEbOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.4.0/23
Signature Algorithm: sha256WithRSAEncryption
88:e8:c8:54:88:7e:55:84:e8:09:73:79:52:7e:98:c1:16:d0:
1c:3d:f4:49:5c:68:88:3c:0c:ba:5e:19:62:84:7f:cb:2c:58:
d2:83:0d:21:c2:80:e5:f6:cf:c0:98:55:97:34:e2:d7:2f:ab:
51:0f:d9:ad:cc:fa:71:9e:3f:98:96:6c:e8:72:62:c5:52:22:
a9:e9:95:7b:47:7c:1e:11:b7:24:6b:ec:c7:25:e3:a5:f1:56:
c4:b4:25:b2:a5:35:00:e6:fa:5b:d0:94:b2:56:c9:45:ed:d3:
78:ff:18:25:f4:e7:70:17:5c:69:e5:72:8f:a0:5d:a4:ff:60:
14:43:ae:0d:4e:89:89:c8:d3:92:6d:0c:db:0a:93:00:f0:43:
27:ad:b0:13:ec:71:10:50:53:18:a1:de:fc:7f:de:c0:d9:27:
a4:5e:16:af:e1:60:69:99:e6:f4:b5:4a:a0:d4:73:9e:70:2e:
54:5f:a6:0b:07:33:ce:2a:3f:4d:d4:4d:67:36:a7:5c:fc:bc:
be:29:2e:3b:de:e0:e5:a1:f2:1f:c5:e9:37:8e:36:45:ee:f5:
0c:65:75:1f:6a:ad:5a:04:4e:2d:08:01:2e:f6:75:17:e0:8b:
b2:4d:b9:ef:aa:f6:bc:95:76:a7:54:86:ed:6b:2f:30:70:f1:
cf:6d:a1:e0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF9x+4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzM4OTdmYzdhOTYzZjE0MjE1ZDU4ZTE4MjQxNDRhYjE5ZmQ1ODEwMB4XDTIyMDEw
MTAwNTQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjhlNmVmN2VkMzli
OTM0OTE1MzdjZmEwYjc3Yjc2NzI3MTQ0NmNlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKch+bWAWYA04UZ5v06HxByZ4GD0Ny4gjrbe5p4DAbwd/aqP
o2869I9qCBY0ER2fDXOu4KeM2kTgjMUpO4XjG/GpGppVzmuUxR+LjV9r4MT9dMq5
JN2sJ1IdZTusi9PxtkLJwq6hcXKFS6huWGBAZa2pjWnectxP2HRojBOFmMZXwnA6
jc0h9JYvtS4mLarsSxjaoF76gmqZooGGRKwwYog9T2nRlQrFXjuCEW/vuBf0WUMq
9+QYcMQZYWMR+qntGANPvl5Agl983Uu1cL8FZuw10hH9wigXOMEojw8zw08j2gt8
vHQNYBIdVLrSM1CU69FdxVn9kddvTa5tZll6GJUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS45u9+05uTSRU3z6C3e3ZycURs5jAfBgNVHSMEGDAWgBQTOJf8epY/FCFd
WOGCQUSrGf1YEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V6aVhfSHFXUHhRaFhWamhna0ZFcXhuOVdCQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvOGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8x
L3VPYnZmdE9iazBrVk44LWd0M3QyY25GRWJPWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
OGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8xL0V6aVhfSHFXUHhR
aFhWamhna0ZFcXhuOVdCQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV5kBDANBgkqhkiG9w0BAQsFAAOC
AQEAiOjIVIh+VYToCXN5Un6YwRbQHD30SVxoiDwMul4ZYoR/yyxY0oMNIcKA5fbP
wJhVlzTi1y+rUQ/Zrcz6cZ4/mJZs6HJixVIiqemVe0d8HhG3JGvsxyXjpfFWxLQl
sqU1AOb6W9CUslbJRe3TeP8YJfTncBdcaeVyj6BdpP9gFEOuDU6JicjTkm0M2wqT
APBDJ62wE+xxEFBTGKHe/H/ewNknpF4Wr+FgaZnm9LVKoNRznnAuVF+mCwczzio/
TdRNZzanXPy8vikuO97g5aHyH8XpN442Re71DGV1H2qtWgROLQgBLvZ1F+CLsk25
76r2vJV2p1SG7WsvMHDxz22h4A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org