Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AFXsayLe4SOVFZpKqqsCEvVL2Cw.roa
File: AFXsayLe4SOVFZpKqqsCEvVL2Cw.roa (raw, json)
Hash identifier: bsJFt+jGGNpZHMjGeRiUYL9GJ1yfrG0cX0ysMda2FCI=
Subject key identifier: 00:55:EC:6B:22:DE:E1:23:95:15:9A:4A:AA:AB:02:12:F5:4B:D8:2C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018361B50CF070064D7D6BE9A7BCB781B731
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AFXsayLe4SOVFZpKqqsCEvVL2Cw.roa
Signing time: Wed 21 Sep 2022 20:19:58 +0000
ROA not before: Wed 21 Sep 2022 20:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:61:b5:0c:f0:70:06:4d:7d:6b:e9:a7:bc:b7:81:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 21 20:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0055ec6b22dee12395159a4aaaab0212f54bd82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:7c:9f:e6:87:9b:d0:b0:fb:9c:b4:3f:4d:
40:fb:68:82:ba:8b:de:42:e5:bf:71:b0:00:51:8c:
e1:80:98:4e:1b:90:11:1f:37:bb:60:32:fd:57:4d:
31:9b:c5:a1:e6:6f:38:1b:35:1e:d7:21:aa:e0:b3:
27:fd:ef:60:cb:8c:93:9d:23:e5:8d:95:fd:0c:20:
4e:a0:ae:6d:84:63:b7:8b:3a:7a:b8:e2:4c:ef:01:
05:64:c4:48:89:ea:f0:c4:2a:eb:67:f7:a8:94:44:
67:2f:32:18:8d:65:0d:6a:82:87:29:a0:da:29:6b:
79:55:d3:2d:b6:1b:4f:5a:0d:b6:10:6c:db:22:7f:
46:6c:03:a5:1b:62:25:5d:4d:84:4a:00:3c:f4:f0:
d4:ab:57:ed:97:1e:61:61:e7:81:77:d9:0c:ca:18:
2b:94:d9:de:32:9d:61:0e:1f:b1:29:4f:b1:64:7d:
7b:52:c3:36:1c:fb:3b:a8:cb:72:1d:fe:e7:3b:55:
03:7d:30:1d:51:51:08:5f:e5:55:c1:51:a3:92:44:
f1:16:67:4b:9b:34:c7:e6:8a:53:28:83:3c:4e:6c:
30:e2:b3:7f:ac:dc:84:33:50:62:a8:c8:03:33:78:
55:61:a8:22:18:66:08:16:a3:2e:aa:6d:b8:35:a3:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:55:EC:6B:22:DE:E1:23:95:15:9A:4A:AA:AB:02:12:F5:4B:D8:2C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AFXsayLe4SOVFZpKqqsCEvVL2Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:1b:af:50:7d:99:46:fb:f8:e0:22:ff:fc:7a:e7:4d:86:b4:
2f:84:d6:8d:fb:b1:3e:20:7d:90:70:bf:10:61:8c:41:de:b2:
57:b8:1a:68:13:e9:c3:77:bc:a7:6e:d3:e2:da:d2:21:2a:95:
42:96:92:50:60:24:d3:45:a8:e1:30:da:95:fd:d0:80:2b:c0:
f3:62:75:b8:7a:d3:41:9e:0e:dc:ae:d0:ba:54:1c:a7:95:ee:
85:92:37:a1:99:8e:67:3d:99:18:39:eb:c6:66:c8:32:58:1c:
8b:15:93:11:c7:63:b0:7d:1a:72:58:8d:ef:59:2e:b4:a5:c5:
25:be:1a:a2:8b:55:c3:d9:c8:6c:0a:dd:74:58:80:db:1d:62:
53:55:4c:c7:b5:14:39:e6:2d:b4:ac:3d:5a:9d:56:2e:e7:99:
5f:af:ea:a5:7c:74:8c:2f:17:87:73:b2:a3:db:97:80:a0:01:
f0:df:d8:14:1e:47:89:53:38:c5:41:df:21:2f:a5:f9:cb:04:
34:c6:b4:05:79:be:ff:9a:c6:e6:41:94:bc:6d:6f:18:cf:13:
cf:0c:d2:c6:63:aa:4a:f8:ff:02:f6:d4:c1:c1:6f:9d:ea:35:
31:64:b6:b0:89:4e:91:e1:5a:20:22:ed:ae:f5:f6:54:58:f0:
e6:c3:c8:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNhtQzwcAZNfWvpp7y3gbcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIwOTIxMjAxOTU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDU1ZWM2YjIyZGVlMTIzOTUxNTlhNGFhYWFiMDIxMmY1NGJkODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEp8n+aHm9Cw+5y0P01A+2iCuove
QuW/cbAAUYzhgJhOG5ARHze7YDL9V00xm8Wh5m84GzUe1yGq4LMn/e9gy4yTnSPl
jZX9DCBOoK5thGO3izp6uOJM7wEFZMRIierwxCrrZ/eolERnLzIYjWUNaoKHKaDa
KWt5VdMtthtPWg22EGzbIn9GbAOlG2IlXU2ESgA89PDUq1ftlx5hYeeBd9kMyhgr
lNneMp1hDh+xKU+xZH17UsM2HPs7qMtyHf7nO1UDfTAdUVEIX+VVwVGjkkTxFmdL
mzTH5opTKIM8Tmww4rN/rNyEM1BiqMgDM3hVYagiGGYIFqMuqm24NaOMKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFABV7Gsi3uEjlRWaSqqrAhL1S9gsMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvQUZYc2F5TGU0U09WRlpwS3Fxc0NFdlZMMkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5P4MA0G
CSqGSIb3DQEBCwUAA4IBAQANG69QfZlG+/jgIv/8eudNhrQvhNaN+7E+IH2QcL8Q
YYxB3rJXuBpoE+nDd7ynbtPi2tIhKpVClpJQYCTTRajhMNqV/dCAK8DzYnW4etNB
ng7crtC6VBynle6FkjehmY5nPZkYOevGZsgyWByLFZMRx2OwfRpyWI3vWS60pcUl
vhqii1XD2chsCt10WIDbHWJTVUzHtRQ55i20rD1anVYu55lfr+qlfHSMLxeHc7Kj
25eAoAHw39gUHkeJUzjFQd8hL6X5ywQ0xrQFeb7/msbmQZS8bW8YzxPPDNLGY6pK
+P8C9tTBwW+d6jUxZLawiU6R4VogIu2u9fZUWPDmw8iO
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org