Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/8nKoJH4GQIft_8CDqH220lqW1do.roa
File: 8nKoJH4GQIft_8CDqH220lqW1do.roa (raw, json)
Hash identifier: fRhQFT+hOwG9PiTwXspD+3PGCRLraTnIDsRrWv52mCs=
Subject key identifier: F2:72:A8:24:7E:06:40:87:ED:FF:C0:83:A8:7D:B6:D2:5A:96:D5:DA
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0183B1DE944BB9468929B0C62173714EF778
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/8nKoJH4GQIft_8CDqH220lqW1do.roa
Signing time: Fri 07 Oct 2022 09:54:57 +0000
ROA not before: Fri 07 Oct 2022 09:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212941
IP address blocks: 212.225.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:de:94:4b:b9:46:89:29:b0:c6:21:73:71:4e:f7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Oct 7 09:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f272a8247e064087edffc083a87db6d25a96d5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:cb:8b:86:bb:a6:26:af:89:84:28:09:8d:
b1:54:f4:cb:60:a6:80:02:f6:16:06:04:de:00:d2:
0d:3e:98:94:ce:fe:f1:51:53:a3:d4:d3:26:d7:c4:
a9:4d:fe:91:8a:93:23:be:6f:9c:d6:9b:78:e7:d0:
83:36:1f:36:0f:fc:61:17:ab:fc:41:fd:8a:e4:c9:
d6:4d:22:ff:f6:d3:37:bd:26:15:47:90:61:e8:88:
af:a8:0a:dc:2e:ed:c6:9f:94:c4:1d:ff:78:b3:41:
a3:31:14:4e:50:3b:be:11:b5:67:43:e5:40:60:2c:
01:a3:3f:f0:ac:c4:42:4b:54:37:11:51:32:fe:43:
c2:49:6e:17:9f:6b:21:4f:20:3b:0a:5f:b7:52:60:
b1:02:ac:5a:80:0c:1c:4e:da:be:a0:ae:5b:9a:d7:
e6:fd:72:6d:87:5a:44:e2:cf:3d:24:63:d7:5c:99:
b2:bf:7a:8a:ff:e0:f6:88:83:6c:ac:5d:ad:67:fb:
e7:ab:56:4e:2b:60:5c:6c:4a:15:79:e7:d6:7a:06:
82:17:f7:ad:43:fa:bc:1f:a5:f6:c3:83:1c:7b:54:
5a:15:f3:29:b2:0b:61:4c:6d:d2:1c:bc:7a:e1:ad:
56:c8:65:29:de:f6:73:47:04:4c:45:84:6c:c4:40:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:A8:24:7E:06:40:87:ED:FF:C0:83:A8:7D:B6:D2:5A:96:D5:DA
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/8nKoJH4GQIft_8CDqH220lqW1do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.225.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b3:96:27:4c:c7:f4:50:db:89:72:4d:fe:65:56:30:29:8c:
fc:13:ba:91:b0:22:0a:cb:06:bd:ca:c5:63:f7:41:d6:9e:78:
d4:b7:98:0c:31:87:c1:87:84:26:db:04:08:f1:79:75:4e:cb:
2c:e1:53:f5:b2:07:e9:21:e4:05:2d:ac:17:7c:27:18:b1:42:
5a:11:b9:5a:45:52:c7:43:ab:23:a1:2f:91:c7:c3:ef:a1:86:
18:1c:94:30:aa:32:09:65:e0:42:8b:87:31:33:73:46:d5:b1:
9e:b2:de:58:01:b7:c0:1b:9c:0f:1c:ac:72:68:bf:ba:ec:ba:
ef:31:c5:9e:ad:a1:cf:42:ae:6f:95:14:50:8c:ab:ab:d3:53:
32:78:a0:0e:37:6b:9e:35:61:71:99:f4:6f:2a:86:58:f4:6c:
44:c6:e0:b5:47:f2:42:45:26:1f:bc:a9:c6:e8:76:c9:19:ad:
d3:44:d2:2c:79:77:14:cb:c1:c1:9f:74:b2:8c:96:8d:14:58:
11:68:f2:d1:d8:4f:d9:ae:a1:35:4b:58:39:09:71:32:35:df:
dd:6b:e3:bd:5d:25:c3:dc:7c:9f:2b:fa:6e:f2:eb:67:bc:6b:
6e:84:0b:5b:00:fe:8c:27:31:fe:06:7a:86:2f:0b:cd:c1:10:
4b:eb:9f:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOx3pRLuUaJKbDGIXNxTvd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjIxMDA3MDk1NDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjcyYTgyNDdlMDY0MDg3ZWRmZmMwODNhODdkYjZkMjVhOTZkNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq7Li4a7piaviYQoCY2xVPTLYKaA
AvYWBgTeANINPpiUzv7xUVOj1NMm18SpTf6RipMjvm+c1pt459CDNh82D/xhF6v8
Qf2K5MnWTSL/9tM3vSYVR5Bh6IivqArcLu3Gn5TEHf94s0GjMRROUDu+EbVnQ+VA
YCwBoz/wrMRCS1Q3EVEy/kPCSW4Xn2shTyA7Cl+3UmCxAqxagAwcTtq+oK5bmtfm
/XJth1pE4s89JGPXXJmyv3qK/+D2iINsrF2tZ/vnq1ZOK2BcbEoVeefWegaCF/et
Q/q8H6X2w4Mce1RaFfMpsgthTG3SHLx64a1WyGUp3vZzRwRMRYRsxEAk5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJyqCR+BkCH7f/Ag6h9ttJaltXaMB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvOG5Lb0pINEdRSWZ0XzhDRHFIMjIwbHFXMWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OHgMA0G
CSqGSIb3DQEBCwUAA4IBAQCbs5YnTMf0UNuJck3+ZVYwKYz8E7qRsCIKywa9ysVj
90HWnnjUt5gMMYfBh4Qm2wQI8Xl1Tsss4VP1sgfpIeQFLawXfCcYsUJaEblaRVLH
Q6sjoS+Rx8PvoYYYHJQwqjIJZeBCi4cxM3NG1bGest5YAbfAG5wPHKxyaL+67Lrv
McWeraHPQq5vlRRQjKur01MyeKAON2ueNWFxmfRvKoZY9GxExuC1R/JCRSYfvKnG
6HbJGa3TRNIseXcUy8HBn3SyjJaNFFgRaPLR2E/ZrqE1S1g5CXEyNd/da+O9XSXD
3HyfK/pu8utnvGtuhAtbAP6MJzH+BnqGLwvNwRBL65/5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org