Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7gEeLBoAthULeISddnyl4JLVTTo.roa
File: 7gEeLBoAthULeISddnyl4JLVTTo.roa (raw, json)
Hash identifier: fRnqH3uBL4K1ucXxITi47y74q0ZEfr9TxXKSogDSdjo=
Subject key identifier: EE:01:1E:2C:1A:00:B6:15:0B:78:84:9D:76:7C:A5:E0:92:D5:4D:3A
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 07EF7733
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7gEeLBoAthULeISddnyl4JLVTTo.roa
Signing time: Sat 01 Jan 2022 03:02:02 +0000
ROA not before: Sat 01 Jan 2022 03:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133134131 (0x7ef7733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 1 03:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee011e2c1a00b6150b78849d767ca5e092d54d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:3d:09:10:b3:fb:74:9c:45:0c:d9:18:38:
07:b5:5d:74:4e:03:c5:49:16:51:36:e6:a1:e6:7e:
f4:93:0c:88:82:6f:50:8e:57:b8:d2:a0:ee:35:31:
2f:b5:48:6d:43:48:d0:01:29:4f:27:47:f2:b8:f9:
b7:15:10:ef:1d:b5:db:5e:c3:e5:24:ea:c6:1a:a4:
bc:0c:92:be:8d:1c:ee:ab:28:df:8e:9c:67:18:28:
13:d4:20:58:77:9d:a6:3e:e8:a0:4f:03:0c:b9:34:
f5:1a:ba:aa:46:d5:ed:c1:6a:0a:48:9d:c2:bb:1b:
47:a6:a1:47:93:69:2f:49:6d:3a:65:43:16:85:98:
89:ad:12:9c:2b:1b:91:81:3c:61:6d:11:a8:d9:6f:
f9:97:41:42:6d:fa:af:54:c7:d9:42:97:2a:c5:d1:
2b:57:dd:6b:cb:11:cf:25:ff:08:24:fb:a2:08:24:
1b:40:04:bf:63:e0:a9:e7:8c:52:b2:3b:0d:df:42:
49:59:64:3f:8c:09:cd:7c:9c:be:cf:3a:ae:fa:dc:
88:9d:18:ee:b1:08:82:ff:1b:21:94:fd:aa:0f:08:
f7:9a:d6:85:37:73:04:29:8a:19:f8:55:c7:f3:40:
a2:cc:a4:61:89:e1:a6:e0:1c:e0:1b:d5:bf:81:dc:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:1E:2C:1A:00:B6:15:0B:78:84:9D:76:7C:A5:E0:92:D5:4D:3A
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7gEeLBoAthULeISddnyl4JLVTTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/22
94.241.136.0/21
Signature Algorithm: sha256WithRSAEncryption
03:4e:50:01:39:18:08:8b:cd:e4:23:e8:98:f1:eb:03:9c:d5:
29:55:7c:4e:d2:b2:be:63:86:02:a0:93:49:1e:f9:57:05:1b:
03:9a:6f:f6:77:25:0a:96:29:1c:d0:f6:b2:8e:32:71:2f:54:
36:0f:f5:63:3f:96:79:a4:45:39:53:d4:9a:1d:b3:94:ac:a9:
fe:67:9e:dd:98:39:a1:2b:aa:1d:37:e0:88:9f:b8:50:36:de:
9c:22:11:33:97:67:30:30:fd:29:bb:eb:cb:e3:60:e3:f1:f5:
fc:f6:93:c4:d4:62:d7:41:de:53:a4:cd:01:df:d3:9c:14:40:
23:e7:6e:4f:b4:a6:e6:31:94:ab:4b:ba:fa:cb:94:7f:4f:fb:
43:4f:9c:9e:3f:9c:c3:bb:89:6b:0d:c6:3e:b9:51:80:52:f8:
ca:ef:77:8d:99:cd:81:84:88:98:76:85:9f:a5:d0:c4:c8:09:
fe:88:c9:71:d8:89:94:1d:a2:34:28:9a:7c:f8:1a:52:c8:ef:
b3:22:fa:65:62:36:27:4a:38:bf:a6:52:ee:a9:72:ac:c1:56:
61:46:3b:e9:9d:7c:8b:63:25:6a:14:cf:1a:ff:1a:79:ac:ec:
65:2c:8e:99:33:1b:97:be:c0:b4:5d:81:d1:22:f7:0b:26:0c:
dc:19:2b:9c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB+93MzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDEw
MTAzMDIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWUwMTFlMmMxYTAw
YjYxNTBiNzg4NDlkNzY3Y2E1ZTA5MmQ1NGQzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIvIPQkQs/t0nEUM2Rg4B7VddE4DxUkWUTbmoeZ+9JMMiIJv
UI5XuNKg7jUxL7VIbUNI0AEpTydH8rj5txUQ7x21217D5STqxhqkvAySvo0c7qso
346cZxgoE9QgWHedpj7ooE8DDLk09Rq6qkbV7cFqCkidwrsbR6ahR5NpL0ltOmVD
FoWYia0SnCsbkYE8YW0RqNlv+ZdBQm36r1TH2UKXKsXRK1fda8sRzyX/CCT7oggk
G0AEv2PgqeeMUrI7Dd9CSVlkP4wJzXycvs86rvrciJ0Y7rEIgv8bIZT9qg8I95rW
hTdzBCmKGfhVx/NAosykYYnhpuAc4BvVv4HcejcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTuAR4sGgC2FQt4hJ12fKXgktVNOjAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
LzdnRWVMQm9BdGhVTGVJU2RkbnlsNEpMVlRUby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlu62AMEA17xiDANBgkqhkiG9w0B
AQsFAAOCAQEAA05QATkYCIvN5CPomPHrA5zVKVV8TtKyvmOGAqCTSR75VwUbA5pv
9nclCpYpHND2so4ycS9UNg/1Yz+WeaRFOVPUmh2zlKyp/mee3Zg5oSuqHTfgiJ+4
UDbenCIRM5dnMDD9Kbvry+Ng4/H1/PaTxNRi10HeU6TNAd/TnBRAI+duT7Sm5jGU
q0u6+suUf0/7Q0+cnj+cw7uJaw3GPrlRgFL4yu93jZnNgYSImHaFn6XQxMgJ/ojJ
cdiJlB2iNCiafPgaUsjvsyL6ZWI2J0o4v6ZS7qlyrMFWYUY76Z18i2MlahTPGv8a
eazsZSyOmTMbl77AtF2B0SL3CyYM3BkrnA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org