Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a7_mkORAsurtqZ23A5_vpbMkg-4.roa
File: a7_mkORAsurtqZ23A5_vpbMkg-4.roa (raw, json)
Hash identifier: OjL1mUon2II3v6/tdFBjLiykjd3le23LOjks+Venc3c=
Subject key identifier: 6B:BF:E6:90:E4:40:B2:EA:ED:A9:9D:B7:03:9F:EF:A5:B3:24:83:EE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09D5EE21
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a7_mkORAsurtqZ23A5_vpbMkg-4.roa
Signing time: Fri 01 Jul 2022 08:52:03 +0000
ROA not before: Fri 01 Jul 2022 08:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 91.186.220.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165015073 (0x9d5ee21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 1 08:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bbfe690e440b2eaeda99db7039fefa5b32483ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:bd:e5:26:4d:57:57:8f:a6:44:aa:21:bf:
cd:18:d3:5e:d3:7b:97:69:e2:0c:b7:c9:63:94:ed:
6d:97:df:fb:22:08:f5:6c:95:08:60:e7:e6:3c:ed:
58:3d:89:3e:5b:5f:15:45:9b:67:0e:a5:e1:f9:15:
c1:15:3d:0e:99:6f:ce:22:b0:6a:1b:77:3f:c0:f1:
bd:a1:5e:4b:58:41:34:fb:9b:d2:f7:ae:94:12:1f:
6c:d8:d2:5a:8e:62:17:3e:2c:b9:a9:d9:f3:dd:a1:
f6:78:c6:81:c6:1e:66:6b:a6:22:c0:c7:65:ba:15:
53:45:b1:bf:0a:60:5b:e1:ca:01:a0:dd:31:a2:62:
54:12:03:3f:61:5e:be:56:89:c0:15:ee:72:67:80:
e1:06:23:8c:ee:2a:be:a8:03:0e:a3:0b:12:96:1f:
4c:8c:6b:2f:64:6d:a0:ec:dc:75:db:01:11:df:1d:
61:3c:c6:18:51:9b:48:c1:27:8b:41:90:74:3b:64:
82:65:87:97:53:88:43:3d:2f:db:87:53:a1:01:b8:
61:de:df:8c:0d:9e:e3:d1:21:67:35:87:b2:82:25:
6e:c2:2b:6f:d9:57:62:2b:8b:c6:14:35:95:84:86:
c5:a9:b5:22:c4:d9:aa:ca:3e:b1:7d:12:fb:71:b7:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:E6:90:E4:40:B2:EA:ED:A9:9D:B7:03:9F:EF:A5:B3:24:83:EE
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a7_mkORAsurtqZ23A5_vpbMkg-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:4e:2a:2f:fb:c3:a6:a6:a4:3c:2b:e2:03:07:d5:5a:91:e2:
11:d0:f6:fe:9b:c2:10:ad:b8:ec:0b:1e:d8:58:b9:d9:3c:a9:
41:f8:d6:1c:1a:95:fa:23:10:0d:7d:b4:7b:06:28:52:61:d2:
d5:fc:81:1c:6e:c9:2b:70:95:36:3c:57:d7:e6:76:30:74:74:
63:97:06:b5:af:86:ef:51:5d:ac:55:75:92:fc:2e:84:7a:17:
4c:b0:c5:0d:b4:c6:a4:7c:94:75:ce:a2:1c:a4:1d:47:cf:dc:
37:8a:4d:cd:1f:5e:3a:ec:de:08:1b:a8:47:ed:75:64:53:b7:
77:14:fe:2b:ce:64:c8:bf:f4:ab:0d:73:2d:ab:66:4a:c5:37:
e9:12:e7:ee:c1:9e:ab:c6:7e:b6:14:c9:81:22:95:4e:46:93:
29:f1:46:10:d0:03:2a:c3:a7:c4:61:6c:f4:50:72:69:4c:08:
33:b6:e6:f5:d7:f0:38:4a:f4:18:6b:72:02:78:fd:9d:21:eb:
9c:68:c2:0b:71:c8:6b:49:c0:66:3e:b7:57:a0:e6:ca:5d:a6:
c8:51:16:c7:53:b9:cb:97:a1:e8:ec:e2:78:65:7b:5d:c1:bc:
6c:07:e3:a9:45:4d:09:7d:51:0c:75:8b:00:f2:31:6e:2c:32:
0f:78:2a:1a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECdXuITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDcw
MTA4NTIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJiZmU2OTBlNDQw
YjJlYWVkYTk5ZGI3MDM5ZmVmYTViMzI0ODNlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAImRveUmTVdXj6ZEqiG/zRjTXtN7l2niDLfJY5TtbZff+yII
9WyVCGDn5jztWD2JPltfFUWbZw6l4fkVwRU9DplvziKwaht3P8DxvaFeS1hBNPub
0veulBIfbNjSWo5iFz4suanZ892h9njGgcYeZmumIsDHZboVU0WxvwpgW+HKAaDd
MaJiVBIDP2FevlaJwBXucmeA4QYjjO4qvqgDDqMLEpYfTIxrL2RtoOzcddsBEd8d
YTzGGFGbSMEni0GQdDtkgmWHl1OIQz0v24dToQG4Yd7fjA2e49EhZzWHsoIlbsIr
b9lXYiuLxhQ1lYSGxam1IsTZqso+sX0S+3G3F0sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRrv+aQ5ECy6u2pnbcDn++lsySD7jAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L2E3X21rT1JBc3VydHFaMjNBNV92cGJNa2ctNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlOT+AMEAlu63DANBgkqhkiG9w0B
AQsFAAOCAQEAm04qL/vDpqakPCviAwfVWpHiEdD2/pvCEK247Ase2Fi52TypQfjW
HBqV+iMQDX20ewYoUmHS1fyBHG7JK3CVNjxX1+Z2MHR0Y5cGta+G71FdrFV1kvwu
hHoXTLDFDbTGpHyUdc6iHKQdR8/cN4pNzR9eOuzeCBuoR+11ZFO3dxT+K85kyL/0
qw1zLatmSsU36RLn7sGeq8Z+thTJgSKVTkaTKfFGENADKsOnxGFs9FByaUwIM7bm
9dfwOEr0GGtyAnj9nSHrnGjCC3HIa0nAZj63V6Dmyl2myFEWx1O5y5eh6OzieGV7
XcG8bAfjqUVNCX1RDHWLAPIxbiwyD3gqGg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org