Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/0taCSbYH5JeyoaC9og_1S7xV_ys.roa
File: 0taCSbYH5JeyoaC9og_1S7xV_ys.roa (raw, json)
Hash identifier: f3POf7rzz1j1jPsNVF8j6YN9BmQx1L4Af/n5xiPQF8w=
Subject key identifier: D2:D6:82:49:B6:07:E4:97:B2:A1:A0:BD:A2:0F:F5:4B:BC:55:FF:2B
Certificate issuer: /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial: 078FAF84
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/0taCSbYH5JeyoaC9og_1S7xV_ys.roa
Signing time: Mon 09 May 2022 21:04:50 +0000
ROA not before: Mon 09 May 2022 21:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20571
IP address blocks: 217.169.64.0/20 maxlen: 24
2a0a:b7c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126857092 (0x78faf84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Validity
Not Before: May 9 21:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2d68249b607e497b2a1a0bda20ff54bbc55ff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:ff:c0:05:a7:c0:8f:57:58:b6:15:f9:6b:
f4:dc:b4:2c:63:dd:e7:2a:27:9f:24:61:c9:37:7a:
b9:ef:a6:8b:24:70:72:b7:b3:c6:8f:9a:46:9f:09:
24:ca:32:4b:11:1f:02:59:2b:f5:ce:3f:c7:8e:de:
59:ad:e0:ff:af:cd:9d:3d:b1:43:76:8b:ed:8b:ba:
c3:aa:c9:49:c9:72:61:b0:9f:9b:b1:f1:f8:28:58:
6c:c9:28:4b:17:55:90:d3:f5:7a:00:29:08:69:35:
3d:42:95:7c:6e:59:d4:f1:b0:f0:38:15:87:2b:a5:
e5:23:64:6d:b2:b0:c5:04:9a:91:22:6b:bf:f7:0a:
c1:b4:20:d5:3c:85:54:02:d0:a6:aa:6a:a3:86:7b:
2f:a4:d2:a0:ce:10:82:ca:62:d1:8c:94:16:3b:0c:
d2:c2:57:86:b2:0c:f7:2d:01:c3:b5:fb:a6:82:e1:
a6:27:6a:b8:9d:be:62:0f:76:b8:a6:87:ee:05:9f:
d7:9c:be:a3:9d:94:86:04:f7:d3:56:79:3a:63:ba:
be:d1:c2:74:be:b8:68:d5:93:f8:a4:51:55:e4:51:
7c:95:ff:fe:66:5b:df:65:c9:60:8a:13:39:7f:47:
e8:b1:3b:11:92:a7:cf:03:01:b8:00:55:f1:98:90:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D6:82:49:B6:07:E4:97:B2:A1:A0:BD:A2:0F:F5:4B:BC:55:FF:2B
X509v3 Authority Key Identifier:
keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/0taCSbYH5JeyoaC9og_1S7xV_ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.64.0/20
IPv6:
2a0a:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:c2:98:37:25:49:d1:fe:f9:9d:26:9e:40:27:18:3c:62:12:
0c:28:4c:15:4c:fc:67:3a:b5:17:a8:54:8d:a4:70:69:dc:3e:
3d:08:4b:f4:2e:29:5f:50:26:56:94:99:da:fc:ed:5c:2d:6c:
13:9b:05:a0:77:93:72:9c:5c:d1:23:48:f8:d2:37:18:a0:22:
4b:5e:a9:46:5e:19:3e:1a:a5:cc:4d:98:cb:82:8f:77:34:51:
fa:58:24:e0:94:78:c5:f5:b2:1d:a3:ba:ec:9a:d7:b2:0a:fa:
24:78:11:67:20:f2:20:c3:bf:f2:32:46:52:b0:dd:7a:e0:7f:
52:22:a3:83:d8:16:9a:f0:50:2e:cf:63:2c:bb:c3:00:ad:fd:
84:90:eb:28:35:45:13:3d:54:ef:c0:0d:86:cb:74:19:86:37:
af:31:b6:2b:1d:22:5f:8e:19:2a:12:bb:e0:7b:9e:25:b2:f9:
e2:22:92:72:64:59:0a:9f:d5:a7:c6:a4:b6:2c:14:17:ad:27:
ed:2e:60:dd:d5:88:74:08:6f:8c:14:bf:9a:9f:61:6f:83:aa:
22:d2:33:5b:7f:ac:62:25:e0:3a:cd:1e:d5:78:4a:15:e7:8a:
cf:b6:ab:5e:2c:84:d8:ee:cb:59:4e:39:3b:bf:96:74:70:b1:
17:dd:0d:18
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB4+vhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2ZiZGJiMjBjMmQ5NzA3M2MwZGU4YjdjYWE3NWVjMWVlYjE5MWI4MB4XDTIyMDUw
OTIxMDQ1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDJkNjgyNDliNjA3
ZTQ5N2IyYTFhMGJkYTIwZmY1NGJiYzU1ZmYyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANNK/8AFp8CPV1i2Fflr9Ny0LGPd5yonnyRhyTd6ue+miyRw
crezxo+aRp8JJMoySxEfAlkr9c4/x47eWa3g/6/NnT2xQ3aL7Yu6w6rJSclyYbCf
m7Hx+ChYbMkoSxdVkNP1egApCGk1PUKVfG5Z1PGw8DgVhyul5SNkbbKwxQSakSJr
v/cKwbQg1TyFVALQpqpqo4Z7L6TSoM4Qgspi0YyUFjsM0sJXhrIM9y0Bw7X7poLh
pidquJ2+Yg92uKaH7gWf15y+o52UhgT301Z5OmO6vtHCdL64aNWT+KRRVeRRfJX/
/mZb32XJYIoTOX9H6LE7EZKnzwMBuABV8ZiQ5AkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTS1oJJtgfkl7KhoL2iD/VLvFX/KzAfBgNVHSMEGDAWgBQz+9uyDC2XBzwN
6LfKp17B7rGRuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01fdmJzZ3d0bHdjOERlaTN5cWRld2U2eGtiZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvM2EzNjJkLTQxOTgtNGIwOC1iYjBhLWRiZTQxZmM4Mzk5ZS8x
LzB0YUNTYllINUpleW9hQzlvZ18xUzd4Vl95cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
M2EzNjJkLTQxOTgtNGIwOC1iYjBhLWRiZTQxZmM4Mzk5ZS8xL01fdmJzZ3d0bHdj
OERlaTN5cWRld2U2eGtiZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBNmpQDANBAIAAjAHAwUAKgq3wDAN
BgkqhkiG9w0BAQsFAAOCAQEAf8KYNyVJ0f75nSaeQCcYPGISDChMFUz8Zzq1F6hU
jaRwadw+PQhL9C4pX1AmVpSZ2vztXC1sE5sFoHeTcpxc0SNI+NI3GKAiS16pRl4Z
PhqlzE2Yy4KPdzRR+lgk4JR4xfWyHaO67JrXsgr6JHgRZyDyIMO/8jJGUrDdeuB/
UiKjg9gWmvBQLs9jLLvDAK39hJDrKDVFEz1U78ANhst0GYY3rzG2Kx0iX44ZKhK7
4HueJbL54iKScmRZCp/Vp8aktiwUF60n7S5g3dWIdAhvjBS/mp9hb4OqItIzW3+s
YiXgOs0e1XhKFeeKz7arXiyE2O7LWU45O7+WdHCxF90NGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org