Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/kFaMGbmqw8g4Pzw4cfQbHR8J4os.roa
File: kFaMGbmqw8g4Pzw4cfQbHR8J4os.roa (raw, json)
Hash identifier: fUg60TYl5IlsTB8kteQDKVUv2QcgpADWiZqCXVTjeMY=
Subject key identifier: 90:56:8C:19:B9:AA:C3:C8:38:3F:3C:38:71:F4:1B:1D:1F:09:E2:8B
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 0355C0
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/kFaMGbmqw8g4Pzw4cfQbHR8J4os.roa
Signing time: Wed 08 Jun 2022 20:02:10 +0000
ROA not before: Wed 08 Jun 2022 20:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47622
IP address blocks: 91.246.26.0/23 maxlen: 24
185.169.120.0/22 maxlen: 24
5.199.0.0/17 maxlen: 24
212.74.32.0/19 maxlen: 24
2a00:17f8::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218560 (0x355c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Jun 8 20:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90568c19b9aac3c8383f3c3871f41b1d1f09e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:ae:8a:10:de:60:6d:43:01:40:38:1e:b6:
6a:da:aa:2c:c1:c5:66:ac:f3:94:07:45:10:ba:ca:
9e:b9:67:12:cd:bb:1d:b2:e6:b3:1d:96:67:6a:96:
bb:bc:7f:80:69:ba:0e:1b:3b:64:c1:ec:31:b2:ac:
31:c3:d9:4a:a4:8d:8d:2b:d3:10:47:33:10:68:25:
61:42:fb:74:0d:50:70:85:21:5b:48:c9:83:ee:4d:
7d:e8:81:1e:99:80:a1:8d:84:ec:77:39:e7:d6:36:
db:1d:4b:f8:11:92:aa:54:62:67:81:5a:0d:c1:51:
b1:e5:f7:aa:04:ee:55:fc:c0:2e:86:84:4d:d6:39:
dc:36:81:04:ae:c2:50:ad:28:b7:61:14:57:71:be:
8c:ce:80:43:fe:ed:94:bd:42:e5:81:5b:4f:d5:a0:
01:bf:73:41:03:d3:d8:b5:fc:1d:44:46:16:9b:88:
4a:47:18:56:5f:fa:6a:1e:85:57:d5:e1:3b:87:ad:
a9:2b:3d:42:2f:80:90:3c:f0:9e:5c:cd:68:94:c4:
0e:7c:93:e5:32:ad:86:29:e4:e7:26:9d:b9:b3:d2:
1c:61:fe:c2:fa:19:86:e5:cf:99:a1:ad:20:5e:ff:
bb:87:da:2b:68:e0:d2:ea:4c:70:53:6b:fc:cb:58:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:8C:19:B9:AA:C3:C8:38:3F:3C:38:71:F4:1B:1D:1F:09:E2:8B
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/kFaMGbmqw8g4Pzw4cfQbHR8J4os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.0.0/17
91.246.26.0/23
185.169.120.0/22
212.74.32.0/19
IPv6:
2a00:17f8::/32
Signature Algorithm: sha256WithRSAEncryption
0b:c1:25:cd:22:cb:b2:5e:22:89:24:eb:08:b5:51:bc:7f:d5:
46:f6:a2:e4:a4:81:0f:a7:0b:92:cc:19:ca:4c:d3:37:7d:b2:
a1:1b:57:1f:41:86:9a:1a:54:c9:7b:e2:d4:ed:1b:ea:ca:97:
f1:bc:13:35:2c:45:ce:a2:57:8f:c5:d1:35:9a:70:0a:8b:68:
f0:d0:be:8a:c1:78:24:70:5a:ec:66:b6:00:cc:68:57:56:10:
71:50:ff:fe:a3:fc:12:a7:59:f0:28:de:9f:59:0c:23:57:f9:
0a:41:bd:b2:f6:ca:20:78:60:96:d0:75:ac:24:a2:63:1c:78:
c4:53:d3:02:70:5b:71:ca:f5:3e:c5:36:00:68:65:47:3d:bd:
1c:ca:25:da:a9:4c:e8:be:a6:bb:bc:1a:18:ca:27:b4:1a:ec:
58:5b:c7:19:83:99:25:b0:78:7a:7f:48:df:7b:83:87:62:f5:
e0:07:ac:8d:dc:b8:6b:ac:8f:2e:78:97:5c:02:33:99:0d:0d:
4f:5d:04:82:1d:2a:f0:a4:fa:08:8c:49:a8:3f:5e:94:18:eb:
a9:9e:a5:1d:f2:af:d2:f6:21:8b:3a:f9:ee:00:a0:d1:c0:e2:
01:d6:6e:a7:fb:79:79:7d:e3:0e:8b:3e:a7:9e:3b:3d:c2:9c:
25:86:b7:36
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIDA1XAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
Y2Y3MzJhOGE3NDM5ZTkyODBmMjNlZjU3ODQ5ODE0YWYxOTVhZTAwHhcNMjIwNjA4
MjAwMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5MDU2OGMxOWI5YWFj
M2M4MzgzZjNjMzg3MWY0MWIxZDFmMDllMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjcauihDeYG1DAUA4HrZq2qoswcVmrPOUB0UQusqeuWcSzbsd
suazHZZnapa7vH+AaboOGztkwewxsqwxw9lKpI2NK9MQRzMQaCVhQvt0DVBwhSFb
SMmD7k196IEemYChjYTsdznn1jbbHUv4EZKqVGJngVoNwVGx5feqBO5V/MAuhoRN
1jncNoEErsJQrSi3YRRXcb6MzoBD/u2UvULlgVtP1aABv3NBA9PYtfwdREYWm4hK
RxhWX/pqHoVX1eE7h62pKz1CL4CQPPCeXM1olMQOfJPlMq2GKeTnJp25s9IcYf7C
+hmG5c+Zoa0gXv+7h9oraODS6kxwU2v8y1gIkwIDAQABo4ICKjCCAiYwHQYDVR0O
BBYEFJBWjBm5qsPIOD88OHH0Gx0fCeKLMB8GA1UdIwQYMBaAFFHPcyqKdDnpKA8j
71eEmBSvGVrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQtYjA3MWM3ZWZkOTE1LzEv
a0ZhTUdibXF3OGc0UHp3NGNmUWJIUjhKNG9zLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85
YTY2MzgtYzhmZC00M2NmLWIxYzQtYjA3MWM3ZWZkOTE1LzEvVWM5ektvcDBPZWtv
RHlQdlY0U1lGSzhaV3VBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAG
CCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQHBccAAwQBW/YaAwQCual4AwQF1Eog
MA0EAgACMAcDBQAqABf4MA0GCSqGSIb3DQEBCwUAA4IBAQALwSXNIsuyXiKJJOsI
tVG8f9VG9qLkpIEPpwuSzBnKTNM3fbKhG1cfQYaaGlTJe+LU7RvqypfxvBM1LEXO
olePxdE1mnAKi2jw0L6KwXgkcFrsZrYAzGhXVhBxUP/+o/wSp1nwKN6fWQwjV/kK
Qb2y9sogeGCW0HWsJKJjHHjEU9MCcFtxyvU+xTYAaGVHPb0cyiXaqUzovqa7vBoY
yie0GuxYW8cZg5klsHh6f0jfe4OHYvXgB6yN3LhrrI8ueJdcAjOZDQ1PXQSCHSrw
pPoIjEmoP16UGOupnqUd8q/S9iGLOvnuAKDRwOIB1m6n+3l5feMOiz6nnjs9wpwl
hrc2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:36 2023 by rpki-client on console-ams.rpki-client.org