Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/QmbG8ZWb6KGamMH-gFeGn1AONTo.roa
File: QmbG8ZWb6KGamMH-gFeGn1AONTo.roa (raw, json)
Hash identifier: O7H4das+2Qymd/2gNm61hz2rjhTuttAduAT6zz8YYCc=
Subject key identifier: 42:66:C6:F1:95:9B:E8:A1:9A:98:C1:FE:80:57:86:9F:50:0E:35:3A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37B243D8
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/QmbG8ZWb6KGamMH-gFeGn1AONTo.roa
Signing time: Sat 01 Jan 2022 08:55:53 +0000
ROA not before: Sat 01 Jan 2022 08:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208161
IP address blocks: 87.107.146.0/24 maxlen: 24
87.107.147.0/24 maxlen: 24
87.107.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934429656 (0x37b243d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4266c6f1959be8a19a98c1fe8057869f500e353a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:04:fc:2b:39:7b:a6:b3:82:7f:ee:b8:73:
07:71:7d:7e:8d:e9:24:71:00:e8:79:a2:93:2e:25:
fe:9d:6f:fd:1e:c6:91:d0:06:fb:84:d4:28:7e:fb:
85:26:3c:f4:ed:79:e0:8c:f9:88:cf:8a:d0:fa:11:
b8:73:60:2a:31:f9:f0:03:63:ec:36:8b:bc:d9:29:
41:99:5a:7a:f9:d2:2d:ec:cc:3c:43:32:2f:16:bd:
a5:42:29:9a:4e:12:19:54:94:67:17:94:d5:1b:c9:
23:a7:2b:09:fb:2f:63:b5:5d:a2:b5:93:f3:91:4b:
c2:c9:4a:ce:e1:6e:46:f0:87:c5:b8:4c:b8:e6:25:
81:fe:c2:05:cf:6f:6c:79:d0:c1:9a:bc:f2:0d:e5:
07:8c:b1:67:b5:b0:c9:a6:b3:fa:f9:db:04:90:07:
ff:02:6d:52:8a:ad:ff:78:f0:46:97:e0:e3:89:b5:
af:b4:51:71:41:3b:45:0c:e4:09:b0:0f:2b:24:c9:
e7:b3:f5:d7:56:34:5c:c0:2c:70:33:14:9f:20:b4:
1e:d7:7d:af:b8:1a:0a:82:96:f1:af:0f:8c:9d:7c:
ea:b5:bf:cb:36:b4:dc:be:30:9b:02:bb:a0:93:b8:
c3:2e:aa:07:54:3e:6f:cf:f6:0f:fa:e6:16:15:9a:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:66:C6:F1:95:9B:E8:A1:9A:98:C1:FE:80:57:86:9F:50:0E:35:3A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/QmbG8ZWb6KGamMH-gFeGn1AONTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:4e:42:f9:d3:4a:16:01:eb:28:fb:81:89:a8:98:4b:4a:42:
a4:88:dc:70:fc:ac:70:92:83:d6:48:6d:95:d3:61:7e:3e:51:
25:cc:12:c7:94:5e:c8:7c:1e:bb:71:62:a5:20:90:ae:29:59:
ac:c2:09:3d:36:95:6d:8e:36:0d:32:e1:19:90:cb:fa:5a:9e:
b1:72:78:e8:99:82:aa:bd:ec:d3:8b:b0:e1:34:21:c0:ff:29:
e6:44:77:f1:70:54:c7:e9:92:2c:03:21:5f:ff:2e:76:9f:97:
49:e5:58:c0:90:7b:ff:14:2c:8e:24:75:fd:d4:29:92:df:f5:
66:76:61:3f:90:43:6a:19:ec:41:a4:68:bc:a5:6a:19:5b:9f:
31:fa:ca:50:4c:c4:95:cb:72:25:df:50:9f:2c:8f:b9:ef:24:
27:41:4c:21:30:a1:10:91:ee:fc:36:3d:0c:2e:c8:40:da:b7:
60:b6:93:a2:32:3a:82:24:19:fd:69:cf:12:13:6d:72:a3:7b:
1f:e4:34:b4:0e:56:f1:b8:66:57:c1:29:7a:71:fb:d8:96:28:
21:6e:1f:ad:b3:25:86:c0:d4:1b:d0:0d:9b:93:6a:42:a4:7d:
a0:92:5f:06:d8:d2:e3:0b:dd:e8:61:e0:6f:c4:98:23:27:e6:
8d:77:14:6e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN7JD2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDc3NWQ5NDcxYjg1ZDk2M2ZlZjZkMjgzNTkwZTJkOTQyZGQ1YzIxMB4XDTIyMDEw
MTA4NTU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDI2NmM2ZjE5NTli
ZThhMTlhOThjMWZlODA1Nzg2OWY1MDBlMzUzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKWdBPwrOXums4J/7rhzB3F9fo3pJHEA6Hmiky4l/p1v/R7G
kdAG+4TUKH77hSY89O154Iz5iM+K0PoRuHNgKjH58ANj7DaLvNkpQZlaevnSLezM
PEMyLxa9pUIpmk4SGVSUZxeU1RvJI6crCfsvY7VdorWT85FLwslKzuFuRvCHxbhM
uOYlgf7CBc9vbHnQwZq88g3lB4yxZ7Wwyaaz+vnbBJAH/wJtUoqt/3jwRpfg44m1
r7RRcUE7RQzkCbAPKyTJ57P111Y0XMAscDMUnyC0Htd9r7gaCoKW8a8PjJ186rW/
yza03L4wmwK7oJO4wy6qB1Q+b8/2D/rmFhWaZR0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRCZsbxlZvooZqYwf6AV4afUA41OjAfBgNVHSMEGDAWgBQAd12Ucbhdlj/v
bSg1kOLZQt1cITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FIZGRsSEc0WFpZXzcyMG9OWkRpMlVMZFhDRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8x
L1FtYkc4WldiNktHYW1NSC1nRmVHbjFBT05Uby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8xL0FIZGRsSEc0WFpZ
XzcyMG9OWkRpMlVMZFhDRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVdrkjANBgkqhkiG9w0BAQsFAAOC
AQEAO05C+dNKFgHrKPuBiaiYS0pCpIjccPyscJKD1khtldNhfj5RJcwSx5ReyHwe
u3FipSCQrilZrMIJPTaVbY42DTLhGZDL+lqesXJ46JmCqr3s04uw4TQhwP8p5kR3
8XBUx+mSLAMhX/8udp+XSeVYwJB7/xQsjiR1/dQpkt/1ZnZhP5BDahnsQaRovKVq
GVufMfrKUEzElctyJd9QnyyPue8kJ0FMITChEJHu/DY9DC7IQNq3YLaTojI6giQZ
/WnPEhNtcqN7H+Q0tA5W8bhmV8EpenH72JYoIW4frbMlhsDUG9ANm5NqQqR9oJJf
BtjS4wvd6GHgb8SYIyfmjXcUbg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org