Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/t2zG_2KrTGMnzL-8ucGpqqX3p8w.roa
File: t2zG_2KrTGMnzL-8ucGpqqX3p8w.roa (raw, json)
Hash identifier: WFsUfPSAFwkg8j+U2uw3tufZAkXJJ9czHQe2BdOt8lQ=
Subject key identifier: B7:6C:C6:FF:62:AB:4C:63:27:CC:BF:BC:B9:C1:A9:AA:A5:F7:A7:CC
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A0CDCD1
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/t2zG_2KrTGMnzL-8ucGpqqX3p8w.roa
Signing time: Sat 01 Jan 2022 14:00:43 +0000
ROA not before: Sat 01 Jan 2022 14:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203920
IP address blocks: 157.25.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973921489 (0x3a0cdcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b76cc6ff62ab4c6327ccbfbcb9c1a9aaa5f7a7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:da:54:f3:3e:8c:2e:a3:e3:6a:1f:55:37:
99:bc:52:2b:b8:d1:b1:40:0c:5b:bf:06:4d:65:c5:
bb:f2:8f:c1:4d:5d:a3:8c:cf:da:1d:90:c6:ef:33:
a1:d9:6a:ca:9c:cc:19:59:62:d0:1b:4a:24:83:31:
fd:03:e5:35:fd:ef:ae:c8:d8:50:58:78:3e:9f:88:
25:63:ba:07:13:4e:b7:bb:dd:06:5d:30:21:b0:e1:
84:65:7d:c8:02:30:66:7c:0b:21:2d:ec:c8:91:73:
28:64:f1:f3:ae:62:36:aa:4a:09:9f:13:58:aa:33:
9c:96:cf:a3:d8:51:1d:2c:95:e2:82:79:13:24:b9:
50:26:ee:1f:b9:24:94:bb:28:e2:20:06:a1:c0:69:
cd:bd:f6:3c:75:a0:9a:aa:c1:d0:72:05:36:83:fe:
84:dd:14:c6:4e:b2:ac:39:0a:91:f5:bc:8a:38:f5:
62:b6:f8:33:4e:7d:73:fa:93:79:91:c1:1c:98:4c:
72:5e:be:83:29:c2:b8:ff:88:17:ff:5e:d1:a7:43:
c0:99:88:e4:90:5b:9b:af:b3:65:c5:35:ca:98:9f:
f6:56:a4:2d:24:c9:dd:14:3c:f9:69:11:7c:c8:83:
4d:b0:e7:35:b7:a8:f4:d7:02:1d:82:76:55:73:bd:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:C6:FF:62:AB:4C:63:27:CC:BF:BC:B9:C1:A9:AA:A5:F7:A7:CC
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/t2zG_2KrTGMnzL-8ucGpqqX3p8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.140.0/24
Signature Algorithm: sha256WithRSAEncryption
65:63:38:05:95:33:eb:17:ae:86:61:9d:90:4e:a5:e8:eb:19:
6a:ac:98:20:10:f0:89:82:6b:bb:99:38:aa:61:d9:18:ba:bf:
7e:51:cc:ee:5a:4c:5c:71:25:cf:96:04:ca:fe:8f:ab:fe:e1:
01:f3:09:27:c6:f4:12:9f:8c:b2:94:a1:a0:48:85:f7:2f:50:
9a:c9:47:e7:44:62:d3:07:0f:19:9b:c2:11:3f:9c:3b:dd:38:
6b:f5:db:4b:1b:76:71:82:1c:32:ae:c0:1a:9a:5b:8b:6a:9e:
d8:5a:88:2b:d1:58:3c:0c:d9:00:66:f0:65:86:69:3f:75:90:
c4:72:a6:1e:b6:ba:44:a3:a8:0e:c9:cc:3e:17:02:0e:a6:b5:
57:db:ae:ac:03:14:34:6c:0c:7c:51:e9:7a:39:83:1e:a4:00:
12:90:10:5f:b7:84:24:99:ca:3d:b7:ff:a8:f3:fb:49:c3:94:
4c:43:d7:76:de:88:a2:26:d7:39:2b:03:af:71:04:06:6e:38:
f4:ad:8f:9b:8a:64:74:1a:b7:51:48:86:df:36:15:e8:11:8c:
18:cf:d9:a3:0e:c4:52:25:2b:ea:33:b0:41:97:4e:03:61:bf:
d4:b5:3e:ae:90:d3:2b:b3:b9:53:b9:22:66:1b:bc:bf:73:f3:
39:2e:aa:4a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOgzc0TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YWNhNjNkZjI0OGI3YWRmM2RkZDA3ZThjMmQzZWVkZDAyY2VmOTMzMB4XDTIyMDEw
MTE0MDA0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjc2Y2M2ZmY2MmFi
NGM2MzI3Y2NiZmJjYjljMWE5YWFhNWY3YTdjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANKi2lTzPowuo+NqH1U3mbxSK7jRsUAMW78GTWXFu/KPwU1d
o4zP2h2Qxu8zodlqypzMGVli0BtKJIMx/QPlNf3vrsjYUFh4Pp+IJWO6BxNOt7vd
Bl0wIbDhhGV9yAIwZnwLIS3syJFzKGTx865iNqpKCZ8TWKoznJbPo9hRHSyV4oJ5
EyS5UCbuH7kklLso4iAGocBpzb32PHWgmqrB0HIFNoP+hN0Uxk6yrDkKkfW8ijj1
Yrb4M059c/qTeZHBHJhMcl6+gynCuP+IF/9e0adDwJmI5JBbm6+zZcU1ypif9lak
LSTJ3RQ8+WkRfMiDTbDnNbeo9NcCHYJ2VXO96L0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS3bMb/YqtMYyfMv7y5wamqpfenzDAfBgNVHSMEGDAWgBQaymPfJIt63z3d
B+jC0+7dAs75MzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dzcGozeVNMZXQ4OTNRZm93dFB1M1FMTy1UTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvMWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8x
L3QyekdfMktyVEdNbnpMLTh1Y0dwcXFYM3A4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
MWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8xL0dzcGozeVNMZXQ4
OTNRZm93dFB1M1FMTy1UTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0ZjDANBgkqhkiG9w0BAQsFAAOC
AQEAZWM4BZUz6xeuhmGdkE6l6OsZaqyYIBDwiYJru5k4qmHZGLq/flHM7lpMXHEl
z5YEyv6Pq/7hAfMJJ8b0Ep+MspShoEiF9y9QmslH50Ri0wcPGZvCET+cO904a/Xb
Sxt2cYIcMq7AGppbi2qe2FqIK9FYPAzZAGbwZYZpP3WQxHKmHra6RKOoDsnMPhcC
Dqa1V9uurAMUNGwMfFHpejmDHqQAEpAQX7eEJJnKPbf/qPP7ScOUTEPXdt6IoibX
OSsDr3EEBm449K2Pm4pkdBq3UUiG3zYV6BGMGM/Zow7EUiUr6jOwQZdOA2G/1LU+
rpDTK7O5U7kiZhu8v3PzOS6qSg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org