Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/a_4L2YtXPVQYSoyGZcEakGLMdPw.roa
File: a_4L2YtXPVQYSoyGZcEakGLMdPw.roa (raw, json)
Hash identifier: N2n6KgU47mQZW/6Qopy3Qa4M2zIK/0qulZCgwJPDkS0=
Subject key identifier: 6B:FE:0B:D9:8B:57:3D:54:18:4A:8C:86:65:C1:1A:90:62:CC:74:FC
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F20A1A0
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/a_4L2YtXPVQYSoyGZcEakGLMdPw.roa
Signing time: Thu 24 Feb 2022 19:33:39 +0000
ROA not before: Thu 24 Feb 2022 19:33:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59967
IP address blocks: 87.246.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253796768 (0xf20a1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:33:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bfe0bd98b573d54184a8c8665c11a9062cc74fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:ef:b0:04:bd:c2:10:fd:c0:9b:89:f7:46:
e4:a3:d8:61:f1:63:25:56:ef:b2:6a:e5:d2:05:ee:
dd:19:7a:cb:b2:82:4f:9a:f9:02:5e:24:52:4b:e9:
57:94:42:bb:51:fa:98:8c:6d:cf:ee:5f:6d:57:08:
20:f1:a2:dc:5d:93:45:7c:d0:26:72:fe:ed:4e:b9:
05:81:11:78:3c:09:f6:0d:2c:7f:a3:07:91:82:21:
4f:28:8b:7f:a9:0d:a3:e3:39:11:eb:07:f3:0c:2b:
18:5d:27:33:7c:c9:78:66:8f:03:df:07:eb:3e:f8:
18:12:28:ae:a8:8c:b1:a1:64:1f:51:dc:1d:a3:10:
ca:5a:13:c1:0a:4a:b3:a7:52:22:57:a7:59:37:82:
ab:1b:b0:91:d6:d1:e8:40:b0:b1:f0:1a:6b:4d:ba:
82:9c:74:81:60:f0:e5:fb:e5:62:76:7f:97:5c:9a:
d2:ba:94:68:65:15:fe:ec:54:78:c6:33:ad:65:7e:
a2:9d:5d:3b:d9:2b:23:a5:93:52:55:a1:85:9a:c1:
f4:4e:d2:2f:d4:3a:45:f3:f9:4f:d3:14:3e:7d:c6:
32:07:84:77:05:c7:d3:80:b4:4b:36:85:bc:15:4b:
43:da:a1:1c:44:9e:e7:7a:2a:92:cc:5b:d8:95:52:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FE:0B:D9:8B:57:3D:54:18:4A:8C:86:65:C1:1A:90:62:CC:74:FC
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/a_4L2YtXPVQYSoyGZcEakGLMdPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b5:19:a0:d4:58:0d:7b:12:d7:38:fe:99:d9:c8:8f:a4:75:
f3:5d:18:20:61:b2:7e:3a:9e:e1:e3:b9:87:1c:02:4a:37:a6:
2e:05:21:0b:6a:d2:88:a9:f1:79:02:13:76:4b:0a:f2:6e:22:
71:c9:96:dd:60:3f:9e:63:1a:3c:ac:9d:ce:8b:4e:39:e3:20:
f9:fd:f1:55:fa:22:b9:43:1e:1f:86:44:48:82:86:10:ad:c5:
49:62:51:15:ad:58:dc:94:ea:45:00:6a:73:0a:fd:88:d6:ea:
e2:64:a7:54:e7:19:0b:bc:33:61:5d:5a:50:7c:bc:65:49:68:
6d:68:f0:51:a9:b7:16:7b:38:75:5c:cb:7b:ce:63:fc:98:4e:
d9:a8:3c:ee:ac:c8:f6:44:cb:2f:cf:a0:b0:6e:ee:c6:08:81:
55:aa:c2:52:46:b5:18:57:5c:a6:3b:02:c5:41:05:c8:cb:1d:
ec:62:5e:a6:45:ce:1a:8a:a1:67:bc:e5:79:9c:5e:92:62:18:
06:27:a8:89:12:bb:62:7b:fe:95:b6:3d:f0:fc:99:a2:eb:34:
bb:d6:27:02:0e:87:95:60:3e:f2:e0:af:70:01:41:e9:0e:46:
6e:fd:14:1b:46:ca:99:12:fb:e4:42:a1:e3:14:d0:53:a5:a3:
8f:ce:81:dd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDyChoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
M2JlMDdjYjFmZDRmMWUzYzkyMjMwM2I2NzBhODgxYjgyZTYxNDkxMB4XDTIyMDIy
NDE5MzMzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJmZTBiZDk4YjU3
M2Q1NDE4NGE4Yzg2NjVjMTFhOTA2MmNjNzRmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJtr77AEvcIQ/cCbifdG5KPYYfFjJVbvsmrl0gXu3Rl6y7KC
T5r5Al4kUkvpV5RCu1H6mIxtz+5fbVcIIPGi3F2TRXzQJnL+7U65BYEReDwJ9g0s
f6MHkYIhTyiLf6kNo+M5EesH8wwrGF0nM3zJeGaPA98H6z74GBIorqiMsaFkH1Hc
HaMQyloTwQpKs6dSIlenWTeCqxuwkdbR6ECwsfAaa026gpx0gWDw5fvlYnZ/l1ya
0rqUaGUV/uxUeMYzrWV+op1dO9krI6WTUlWhhZrB9E7SL9Q6RfP5T9MUPn3GMgeE
dwXH04C0SzaFvBVLQ9qhHESe53oqksxb2JVScNMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRr/gvZi1c9VBhKjIZlwRqQYsx0/DAfBgNVHSMEGDAWgBTjvgfLH9Tx48ki
MDtnCogbguYUkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzQ3NEh5eF9VOGVQSklqQTdad3FJRzRMbUZKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvOGY1ZmFlLWRhOTAtNDMxNC1iZmZjLWQ0ZWUxZDM4OWUwZC8x
L2FfNEwyWXRYUFZRWVNveUdaY0Vha0dMTWRQdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
OGY1ZmFlLWRhOTAtNDMxNC1iZmZjLWQ0ZWUxZDM4OWUwZC8xLzQ3NEh5eF9VOGVQ
SklqQTdad3FJRzRMbUZKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf2ozANBgkqhkiG9w0BAQsFAAOC
AQEAb7UZoNRYDXsS1zj+mdnIj6R1810YIGGyfjqe4eO5hxwCSjemLgUhC2rSiKnx
eQITdksK8m4iccmW3WA/nmMaPKydzotOOeMg+f3xVfoiuUMeH4ZESIKGEK3FSWJR
Fa1Y3JTqRQBqcwr9iNbq4mSnVOcZC7wzYV1aUHy8ZUlobWjwUam3Fns4dVzLe85j
/JhO2ag87qzI9kTLL8+gsG7uxgiBVarCUka1GFdcpjsCxUEFyMsd7GJepkXOGoqh
Z7zleZxekmIYBieoiRK7Ynv+lbY98PyZous0u9YnAg6HlWA+8uCvcAFB6Q5Gbv0U
G0bKmRL75EKh4xTQU6Wjj86B3Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:51 2023 by rpki-client on console-fra.rpki-client.org