Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/retZjaVnskQqWz5rVhnMcZW2FvM.roa
File: retZjaVnskQqWz5rVhnMcZW2FvM.roa (raw, json)
Hash identifier: W8WJszXrU69kTP9v+mFWZyxNlmc/nJwIc8Gp1tj9JPw=
Subject key identifier: AD:EB:59:8D:A5:67:B2:44:2A:5B:3E:6B:56:19:CC:71:95:B6:16:F3
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 34DC0407
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/retZjaVnskQqWz5rVhnMcZW2FvM.roa
Signing time: Sat 01 Jan 2022 03:55:16 +0000
ROA not before: Sat 01 Jan 2022 03:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4637
IP address blocks: 217.151.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886834183 (0x34dc0407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jan 1 03:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adeb598da567b2442a5b3e6b5619cc7195b616f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:a1:78:d2:94:7b:32:d4:56:ec:be:06:e9:
d0:ab:7d:71:47:52:04:05:06:c6:56:d2:18:e7:85:
66:ae:20:e2:bb:85:d6:94:b8:d3:c4:40:6b:1e:71:
26:86:02:9a:b3:4c:6f:9e:d7:76:ce:63:71:97:3e:
e9:27:74:6e:fd:05:9b:b4:e4:2d:06:8e:36:4a:99:
3f:d4:ca:55:16:77:3e:60:6e:20:34:f8:88:e1:1e:
95:de:e5:77:55:62:9a:1d:0d:ad:91:1a:d3:57:c3:
7d:fb:1b:7f:33:d7:e9:5d:36:88:25:20:7c:2e:37:
b9:57:88:b5:7d:84:25:13:8b:b3:4c:01:98:46:cd:
83:24:b9:9c:e5:0d:86:15:e6:0c:01:ef:ff:af:66:
d3:e5:35:9e:b3:8f:a7:20:c1:68:a1:d3:8d:f7:6a:
a9:4e:7e:d7:61:2d:c2:ff:bf:01:42:2b:bb:93:e1:
68:d3:c9:ce:49:f4:44:0a:39:31:c2:5c:ad:2e:b0:
1a:5e:5b:94:f7:77:b2:ac:88:c7:09:de:a7:25:61:
9f:6d:c0:5e:eb:47:d6:75:b6:b3:1a:b3:e9:17:e1:
d6:5d:aa:c9:a5:c3:4b:49:d4:f4:a5:ee:ab:4f:41:
07:5e:1a:0c:9a:53:0d:ce:e9:b3:ad:8b:b2:8c:2b:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:59:8D:A5:67:B2:44:2A:5B:3E:6B:56:19:CC:71:95:B6:16:F3
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/retZjaVnskQqWz5rVhnMcZW2FvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.151.32.0/20
Signature Algorithm: sha256WithRSAEncryption
81:c8:80:b4:f2:e6:03:e3:c1:6e:2e:04:9b:5d:cf:58:58:76:
63:ac:d0:b7:b9:9b:c1:27:fb:38:51:a3:3e:1b:98:9d:32:a2:
f7:4e:83:ca:a5:51:72:ff:63:34:fe:05:71:1f:e9:03:71:02:
42:ba:67:79:1f:59:ba:58:e8:19:be:b0:18:cf:e0:8c:b5:51:
6d:04:34:88:0f:34:88:ad:e9:81:02:42:66:5e:f7:78:7a:51:
28:18:6e:70:2f:38:3c:7c:24:4f:f5:62:95:e2:05:19:a9:aa:
67:6d:0f:38:78:3f:8a:4c:71:12:55:8f:6d:de:7b:d9:3f:d2:
c7:4f:45:1d:94:1e:d0:48:9c:eb:f9:96:6d:2e:0d:a5:cb:a1:
8b:78:e6:f7:b7:0f:01:e5:0f:f1:63:b0:03:0c:9b:8b:b3:a5:
cd:8a:2b:19:2b:2a:d1:d0:fc:30:52:55:a8:38:54:15:78:98:
40:e1:92:84:54:e5:0a:d1:bd:07:fb:8a:6c:78:69:4d:fc:f0:
8a:6d:c4:29:31:12:6c:d6:5d:ef:a0:84:f3:54:13:77:4f:be:
9d:61:cc:1e:f7:d1:04:c9:f0:d5:c8:6c:55:0a:89:65:19:92:
6a:ba:d7:99:e3:b3:6b:51:20:ad:4a:04:ee:21:76:33:f2:2c:
10:c6:07:eb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENNwEBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NTNmNTU2MjkxMjFiNjBmYjE5Yzk3Zjk5Yzc1ZGQ2ZjAxNWRkNmU4MB4XDTIyMDEw
MTAzNTUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWRlYjU5OGRhNTY3
YjI0NDJhNWIzZTZiNTYxOWNjNzE5NWI2MTZmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMfNoXjSlHsy1Fbsvgbp0Kt9cUdSBAUGxlbSGOeFZq4g4ruF
1pS408RAax5xJoYCmrNMb57Xds5jcZc+6Sd0bv0Fm7TkLQaONkqZP9TKVRZ3PmBu
IDT4iOEeld7ld1Vimh0NrZEa01fDffsbfzPX6V02iCUgfC43uVeItX2EJROLs0wB
mEbNgyS5nOUNhhXmDAHv/69m0+U1nrOPpyDBaKHTjfdqqU5+12Etwv+/AUIru5Ph
aNPJzkn0RAo5McJcrS6wGl5blPd3sqyIxwnepyVhn23AXutH1nW2sxqz6Rfh1l2q
yaXDS0nU9KXuq09BB14aDJpTDc7ps62LsowrQkcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSt61mNpWeyRCpbPmtWGcxxlbYW8zAfBgNVHSMEGDAWgBRlP1VikSG2D7Gc
l/mcdd1vAV3W6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pUOVZZcEVodGcteG5KZjVuSFhkYndGZDF1Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNzRjZjNiLTlmNWMtNGY1ZS05NmM0LTI5MjZkMjgxYjUxNC8x
L3JldFpqYVZuc2tRcVd6NXJWaG5NY1pXMkZ2TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NzRjZjNiLTlmNWMtNGY1ZS05NmM0LTI5MjZkMjgxYjUxNC8xL1pUOVZZcEVodGct
eG5KZjVuSFhkYndGZDF1Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNmXIDANBgkqhkiG9w0BAQsFAAOC
AQEAgciAtPLmA+PBbi4Em13PWFh2Y6zQt7mbwSf7OFGjPhuYnTKi906DyqVRcv9j
NP4FcR/pA3ECQrpneR9ZuljoGb6wGM/gjLVRbQQ0iA80iK3pgQJCZl73eHpRKBhu
cC84PHwkT/VileIFGamqZ20POHg/ikxxElWPbd572T/Sx09FHZQe0Eic6/mWbS4N
pcuhi3jm97cPAeUP8WOwAwybi7OlzYorGSsq0dD8MFJVqDhUFXiYQOGShFTlCtG9
B/uKbHhpTfzwim3EKTESbNZd76CE81QTd0++nWHMHvfRBMnw1chsVQqJZRmSarrX
meOza1EgrUoE7iF2M/IsEMYH6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org