Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/eUx_YtqEoo_4bcS0ikkux2nKOdI.roa
File: eUx_YtqEoo_4bcS0ikkux2nKOdI.roa (raw, json)
Hash identifier: qmEbMW8LP4+7oae+/I9VnsMZMzARySmMubAqeL/d1/k=
Subject key identifier: 79:4C:7F:62:DA:84:A2:8F:F8:6D:C4:B4:8A:49:2E:C7:69:CA:39:D2
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A8CFD9C95AFF3F64C388419AA673CF3
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/eUx_YtqEoo_4bcS0ikkux2nKOdI.roa
Signing time: Wed 20 Jul 2022 07:40:23 +0000
ROA not before: Wed 20 Jul 2022 07:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61022
IP address blocks: 80.121.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:8c:fd:9c:95:af:f3:f6:4c:38:84:19:aa:67:3c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 07:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=794c7f62da84a28ff86dc4b48a492ec769ca39d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:53:10:c2:9d:58:0e:b8:b0:69:f3:d5:f3:
1f:be:2b:bf:df:54:83:d3:27:4a:dd:76:1c:60:3c:
a4:1c:02:b6:9a:55:86:cd:32:d0:21:26:85:d5:2f:
e2:9e:aa:e2:5a:3e:b7:6f:0b:c0:21:cd:eb:5a:81:
bb:5d:31:f1:dd:3d:3b:1f:aa:5a:65:68:61:ee:fc:
b8:9b:76:53:dc:cd:37:f6:d1:98:ab:87:f1:e3:22:
57:8f:97:9a:7b:4f:bb:8a:c9:79:2d:44:5d:11:43:
88:de:5e:af:02:6f:f5:23:b0:b6:ba:27:9c:17:1c:
bd:02:59:67:08:57:61:dd:dc:63:94:e4:e9:d9:44:
6e:2f:8c:8b:75:e6:36:09:fe:68:6d:56:87:a9:cb:
8f:d3:d7:f5:8d:f5:2b:32:7d:f8:f3:e0:b6:90:d9:
ef:28:e2:4f:8a:a2:4a:9c:72:00:fb:5f:0d:83:3f:
6e:0a:89:9d:9f:8a:cd:ba:31:5e:35:79:82:96:ea:
4b:e4:0f:2a:e4:22:47:0b:43:54:f6:0a:0d:39:19:
71:c7:fb:2b:0d:f3:b3:c9:55:ca:0f:4a:82:58:0e:
f7:cd:69:d4:71:0e:bd:1b:11:a8:76:8e:bd:24:18:
6d:01:1e:6d:cd:6f:fe:28:38:bb:23:72:04:ae:85:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:7F:62:DA:84:A2:8F:F8:6D:C4:B4:8A:49:2E:C7:69:CA:39:D2
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/eUx_YtqEoo_4bcS0ikkux2nKOdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.121.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:95:34:ab:ee:72:68:68:67:88:36:fa:94:31:89:bd:37:28:
26:0e:96:95:74:3d:62:c7:fb:3a:41:06:0c:4f:88:36:c9:0b:
3c:fb:b5:bc:3a:18:9b:90:ef:63:0b:1d:79:79:e2:84:14:b0:
e4:95:ac:da:a1:22:cd:e1:94:ac:d1:86:70:45:73:ee:b0:69:
9e:9e:f4:b0:48:3e:8a:3e:0c:ff:48:cf:f0:f9:65:f8:4d:5a:
9c:1d:1b:a4:13:10:a4:88:5c:64:20:4d:c9:9d:90:52:27:86:
2b:c7:33:8b:84:67:c8:37:57:ee:a5:64:3b:ba:6f:25:18:d2:
88:d8:1b:27:24:27:40:ca:e3:3f:23:fa:4d:88:c2:41:a2:16:
fc:d4:4d:6c:4e:c2:f1:ef:50:d9:28:76:5f:90:85:51:ae:93:
94:fe:c6:ee:55:03:70:6c:fc:32:f7:9f:b8:06:ec:33:9a:87:
ea:d1:4b:d3:cb:f9:ae:2e:17:bd:7c:6e:e7:0f:aa:12:e2:1f:
a6:41:05:c3:0c:19:a2:53:39:71:f7:74:81:06:53:65:75:b6:
8e:8a:d4:d4:90:b9:f9:78:3a:69:37:28:34:85:87:d2:70:f0:
e3:4c:92:c3:97:bc:81:b5:51:09:3c:b4:94:e4:9a:36:2e:0f:
bd:60:c2:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIajP2cla/z9kw4hBmqZzzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjIwNzIwMDc0MDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTRjN2Y2MmRhODRhMjhmZjg2ZGM0YjQ4YTQ5MmVjNzY5Y2EzOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6tTEMKdWA64sGnz1fMfviu/31SD
0ydK3XYcYDykHAK2mlWGzTLQISaF1S/inqriWj63bwvAIc3rWoG7XTHx3T07H6pa
ZWhh7vy4m3ZT3M039tGYq4fx4yJXj5eae0+7isl5LURdEUOI3l6vAm/1I7C2uiec
Fxy9AllnCFdh3dxjlOTp2URuL4yLdeY2Cf5obVaHqcuP09f1jfUrMn348+C2kNnv
KOJPiqJKnHIA+18Ngz9uComdn4rNujFeNXmClupL5A8q5CJHC0NU9goNORlxx/sr
DfOzyVXKD0qCWA73zWnUcQ69GxGodo69JBhtAR5tzW/+KDi7I3IEroXwDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlMf2LahKKP+G3EtIpJLsdpyjnSMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvZVV4X1l0cUVvb180YmNTMGlra3V4Mm5LT2RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHnKMA0G
CSqGSIb3DQEBCwUAA4IBAQAulTSr7nJoaGeINvqUMYm9NygmDpaVdD1ix/s6QQYM
T4g2yQs8+7W8OhibkO9jCx15eeKEFLDklazaoSLN4ZSs0YZwRXPusGmenvSwSD6K
Pgz/SM/w+WX4TVqcHRukExCkiFxkIE3JnZBSJ4YrxzOLhGfIN1fupWQ7um8lGNKI
2BsnJCdAyuM/I/pNiMJBohb81E1sTsLx71DZKHZfkIVRrpOU/sbuVQNwbPwy95+4
Buwzmofq0UvTy/muLhe9fG7nD6oS4h+mQQXDDBmiUzlx93SBBlNldbaOitTUkLn5
eDppNyg0hYfScPDjTJLDl7yBtVEJPLSU5Jo2Lg+9YMKl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org