Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/kVvtV0z2Ij4JebFDxehXNCl959I.roa
File: kVvtV0z2Ij4JebFDxehXNCl959I.roa (raw, json)
Hash identifier: uq0BpGilnLWbrqqgfX9GPv+tm7gtPK79ctxsQ9JeaS4=
Subject key identifier: 91:5B:ED:57:4C:F6:22:3E:09:79:B1:43:C5:E8:57:34:29:7D:E7:D2
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 1641DEFA
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/kVvtV0z2Ij4JebFDxehXNCl959I.roa
Signing time: Sat 01 Jan 2022 08:52:55 +0000
ROA not before: Sat 01 Jan 2022 08:52:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201992
IP address blocks: 217.23.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373415674 (0x1641defa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 08:52:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=915bed574cf6223e0979b143c5e85734297de7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:ed:53:b7:1a:d3:ba:16:ab:c3:af:9e:eb:
80:b1:e8:62:a7:af:1f:04:11:71:43:5a:0b:8a:f3:
db:eb:11:19:1e:b7:5d:7d:37:55:5b:cf:5c:09:d3:
cb:ac:58:ff:9a:30:e2:24:22:8e:52:64:e1:5b:b1:
b7:2a:ba:9a:84:d9:a9:6f:19:7d:58:56:5d:98:7e:
51:b1:75:1a:c0:4b:33:46:4b:ab:15:66:c0:63:b2:
44:2b:30:ba:e0:f5:66:a1:fb:98:a6:65:7e:2d:f8:
31:70:ce:0b:fb:bd:7d:99:eb:b9:57:3c:28:2d:aa:
e8:ab:f5:d2:37:88:80:2d:84:a6:4b:10:4b:cd:16:
01:2c:9d:9d:f0:dc:05:c7:49:fc:18:30:fb:5d:4d:
0c:a6:90:5f:fc:93:8b:aa:e6:24:a4:b1:4d:dc:78:
b1:7d:db:6a:d0:e9:85:2b:38:16:f8:40:7a:3c:26:
6d:b1:26:fb:67:7a:3d:b9:8e:cf:2c:60:d8:1e:e3:
64:6f:35:8b:20:54:24:b5:2b:48:9a:f9:c2:a1:41:
f7:d8:cc:57:6f:63:1e:dc:70:32:b2:cc:5d:f6:00:
dc:6a:9c:89:1f:79:1b:ae:75:7f:d7:84:ad:8a:ef:
01:bc:6e:3a:65:14:63:c9:b2:d7:e5:36:c7:45:52:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:ED:57:4C:F6:22:3E:09:79:B1:43:C5:E8:57:34:29:7D:E7:D2
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/kVvtV0z2Ij4JebFDxehXNCl959I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.112.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b9:23:00:90:9c:6b:e5:1b:df:7c:ae:84:f3:b0:e1:de:21:
2f:75:8a:fe:7f:c4:27:68:19:58:33:9b:44:53:84:69:cc:c4:
9d:b5:49:bc:a8:0d:a9:93:49:fe:9a:e2:f1:b2:9d:5f:dc:35:
a4:91:aa:56:12:e5:65:55:56:37:2c:38:cc:82:42:87:66:3b:
c2:3c:54:5c:65:0f:f5:c2:8b:3b:71:14:32:30:18:af:33:d5:
a3:44:0a:3e:61:d3:40:9a:19:b3:41:e9:a1:54:71:24:01:a3:
8c:12:b2:80:67:e4:10:fc:7b:00:a7:04:6a:7e:3f:54:1b:cb:
bd:f8:f2:cf:3f:0c:4a:70:cd:26:76:15:25:28:17:75:f8:b7:
dc:1e:5a:01:b5:ba:87:30:9b:3b:28:90:a0:c9:62:ce:a7:1c:
75:63:b6:22:d2:db:53:a2:37:8a:89:03:f6:a6:19:7f:60:07:
d7:5f:75:51:0f:b9:ca:47:82:34:5e:b5:7a:fd:81:87:32:59:
f9:7c:f3:44:f6:d7:3e:dd:4d:65:d4:0e:42:49:4a:22:ac:12:
c1:3d:a3:51:a8:82:30:a6:6f:71:21:d6:18:82:b9:5a:5f:e7:
ba:fc:4d:37:c7:f8:62:14:dc:a8:cf:83:1b:fd:41:73:7a:2b:
5f:bf:dd:f4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFkHe+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTEwMTAzNWQ1MzM3N2M1YTcyYmVkY2E1MjJmYzE0NTZlMGI4NDE5MB4XDTIyMDEw
MTA4NTI1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE1YmVkNTc0Y2Y2
MjIzZTA5NzliMTQzYzVlODU3MzQyOTdkZTdkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOhP7VO3GtO6FqvDr57rgLHoYqevHwQRcUNaC4rz2+sRGR63
XX03VVvPXAnTy6xY/5ow4iQijlJk4Vuxtyq6moTZqW8ZfVhWXZh+UbF1GsBLM0ZL
qxVmwGOyRCswuuD1ZqH7mKZlfi34MXDOC/u9fZnruVc8KC2q6Kv10jeIgC2EpksQ
S80WASydnfDcBcdJ/Bgw+11NDKaQX/yTi6rmJKSxTdx4sX3batDphSs4FvhAejwm
bbEm+2d6PbmOzyxg2B7jZG81iyBUJLUrSJr5wqFB99jMV29jHtxwMrLMXfYA3Gqc
iR95G651f9eErYrvAbxuOmUUY8my1+U2x0VSHFcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSRW+1XTPYiPgl5sUPF6Fc0KX3n0jAfBgNVHSMEGDAWgBR5EBA11TN3xacr
7cpSL8FFbguEGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VSQVFOZFV6ZDhXbkstM0tVaV9CUlc0TGhCay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvOTU4YzJjLWI0YzMtNDMyZC05YWIxLTBjYzgzYjAwZmM1OC8x
L2tWdnRWMHoySWo0SmViRkR4ZWhYTkNsOTU5SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
OTU4YzJjLWI0YzMtNDMyZC05YWIxLTBjYzgzYjAwZmM1OC8xL2VSQVFOZFV6ZDhX
bkstM0tVaV9CUlc0TGhCay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANkXcDANBgkqhkiG9w0BAQsFAAOC
AQEAJ7kjAJCca+Ub33yuhPOw4d4hL3WK/n/EJ2gZWDObRFOEaczEnbVJvKgNqZNJ
/pri8bKdX9w1pJGqVhLlZVVWNyw4zIJCh2Y7wjxUXGUP9cKLO3EUMjAYrzPVo0QK
PmHTQJoZs0HpoVRxJAGjjBKygGfkEPx7AKcEan4/VBvLvfjyzz8MSnDNJnYVJSgX
dfi33B5aAbW6hzCbOyiQoMlizqccdWO2ItLbU6I3iokD9qYZf2AH1191UQ+5ykeC
NF61ev2BhzJZ+XzzRPbXPt1NZdQOQklKIqwSwT2jUaiCMKZvcSHWGIK5Wl/nuvxN
N8f4YhTcqM+DG/1Bc3orX7/d9A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:01 2025 by rpki-client