Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/pOVTh5U3aesC1VWe4gw5yC5tACs.roa
File: pOVTh5U3aesC1VWe4gw5yC5tACs.roa (raw, json)
Hash identifier: rl1czCFyD+0wXZDCFzIQlDf/W9PzXr75diHxfwmQzJU=
Subject key identifier: A4:E5:53:87:95:37:69:EB:02:D5:55:9E:E2:0C:39:C8:2E:6D:00:2B
Certificate issuer: /CN=5fdb8a17efa4654923a35e06b2d05fc7c20d5ef2
Certificate serial: 72A9F6
Authority key identifier: 5F:DB:8A:17:EF:A4:65:49:23:A3:5E:06:B2:D0:5F:C7:C2:0D:5E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9uKF--kZUkjo14GstBfx8INXvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/pOVTh5U3aesC1VWe4gw5yC5tACs.roa
Signing time: Sat 01 Jan 2022 01:50:42 +0000
ROA not before: Sat 01 Jan 2022 01:50:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.23.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7514614 (0x72a9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdb8a17efa4654923a35e06b2d05fc7c20d5ef2
Validity
Not Before: Jan 1 01:50:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4e55387953769eb02d5559ee20c39c82e6d002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:59:69:dd:5f:7a:15:b9:a3:af:59:af:4a:
0d:35:b5:26:a8:5e:5f:45:45:95:15:be:cb:9c:39:
7b:50:75:4b:3c:21:c3:0f:b7:89:48:e7:09:8a:9d:
97:fc:5b:8c:f7:4d:78:89:00:82:d8:6d:2c:84:65:
e2:7c:c2:8e:ad:a8:47:b6:23:28:f8:0b:8d:8b:ce:
a9:2f:47:fa:b2:9d:5a:84:a0:32:36:f9:a6:d5:04:
cd:04:49:99:24:d7:7f:78:d1:10:67:e7:6a:a7:8d:
12:82:b6:19:6a:4f:ae:16:6c:db:90:9d:e3:c2:ae:
f2:0d:c3:55:55:8a:9e:b0:25:4b:ac:b8:ba:fb:c6:
70:44:0e:45:41:bd:25:79:65:ce:df:ac:63:8e:dc:
ae:62:45:45:cc:52:8e:64:cc:ff:75:3c:94:98:23:
27:b1:44:54:ae:80:7b:8a:1f:92:99:9a:d4:99:6b:
cf:a8:30:a9:53:a0:e7:7d:d8:f2:42:17:ee:5f:8a:
1e:d8:b6:39:f9:bb:2a:db:ef:20:89:e8:1b:42:75:
d5:93:6a:74:92:9a:f8:51:2f:25:f1:6e:80:a6:6e:
0e:17:fa:09:70:b4:e3:0d:4b:1a:b3:b3:6f:57:19:
9d:37:67:d5:2a:c9:ab:cb:64:44:c5:32:22:c6:c4:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E5:53:87:95:37:69:EB:02:D5:55:9E:E2:0C:39:C8:2E:6D:00:2B
X509v3 Authority Key Identifier:
keyid:5F:DB:8A:17:EF:A4:65:49:23:A3:5E:06:B2:D0:5F:C7:C2:0D:5E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9uKF--kZUkjo14GstBfx8INXvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/pOVTh5U3aesC1VWe4gw5yC5tACs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/X9uKF--kZUkjo14GstBfx8INXvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d3:8c:80:f8:32:17:84:d9:d0:43:d0:1c:04:7f:37:4d:8e:
7b:e8:92:39:d0:69:50:19:0b:f1:6b:44:59:ca:c7:39:67:db:
70:78:92:58:3c:db:eb:4f:82:4f:69:c5:8c:a9:25:9d:70:89:
e6:bd:45:bf:9b:f4:22:18:58:ee:cb:2e:ce:38:2d:09:7b:a2:
bf:2e:27:ed:b8:b4:b1:92:6c:82:fe:e0:cf:e4:72:4c:54:8a:
b5:05:73:78:5b:ec:3e:65:76:4c:e0:81:ca:48:c0:fb:3b:53:
9c:dc:d6:6e:7d:25:a5:95:6e:33:1e:34:47:00:c8:0d:3f:a6:
89:66:2d:36:55:bb:bb:51:cc:2b:6d:2c:2e:9f:5c:8d:ad:45:
97:d9:50:7b:ff:53:c7:00:cf:2c:6f:52:dc:f6:70:4e:1c:02:
26:11:04:e7:0c:5d:95:69:71:6a:80:bd:f3:b5:be:f4:d8:86:
41:79:fb:90:7d:45:39:a4:72:13:97:5c:70:af:78:08:66:6a:
fa:1a:4d:98:f4:ce:be:8c:7a:cf:1c:38:35:60:c4:8d:9e:bd:
3a:2d:32:82:8f:db:c7:8f:24:7b:5c:72:24:41:18:a8:2d:aa:
76:54:92:d3:4c:c3:c6:59:fb:43:76:aa:ea:80:5c:53:fa:28:
08:5c:5c:90
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDcqn2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
ZGI4YTE3ZWZhNDY1NDkyM2EzNWUwNmIyZDA1ZmM3YzIwZDVlZjIwHhcNMjIwMTAx
MDE1MDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNGU1NTM4Nzk1Mzc2
OWViMDJkNTU1OWVlMjBjMzljODJlNmQwMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApvFZad1fehW5o69Zr0oNNbUmqF5fRUWVFb7LnDl7UHVLPCHD
D7eJSOcJip2X/FuM9014iQCC2G0shGXifMKOrahHtiMo+AuNi86pL0f6sp1ahKAy
Nvmm1QTNBEmZJNd/eNEQZ+dqp40SgrYZak+uFmzbkJ3jwq7yDcNVVYqesCVLrLi6
+8ZwRA5FQb0leWXO36xjjtyuYkVFzFKOZMz/dTyUmCMnsURUroB7ih+SmZrUmWvP
qDCpU6DnfdjyQhfuX4oe2LY5+bsq2+8giegbQnXVk2p0kpr4US8l8W6Apm4OF/oJ
cLTjDUsas7NvVxmdN2fVKsmry2RExTIixsRVaQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFKTlU4eVN2nrAtVVnuIMOcgubQArMB8GA1UdIwQYMBaAFF/bihfvpGVJI6Ne
BrLQX8fCDV7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WDl1S0YtLWtaVWtqbzE0R3N0QmZ4OElOWHZJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMC84MjFiYmYtYTAyNC00NTdmLTliOTMtMDkxMDhmM2JmMjA0LzEv
cE9WVGg1VTNhZXNDMVZXZTRndzV5QzV0QUNzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84
MjFiYmYtYTAyNC00NTdmLTliOTMtMDkxMDhmM2JmMjA0LzEvWDl1S0YtLWtaVWtq
bzE0R3N0QmZ4OElOWHZJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfQMA0GCSqGSIb3DQEBCwUAA4IB
AQA+04yA+DIXhNnQQ9AcBH83TY576JI50GlQGQvxa0RZysc5Z9tweJJYPNvrT4JP
acWMqSWdcInmvUW/m/QiGFjuyy7OOC0Je6K/LiftuLSxkmyC/uDP5HJMVIq1BXN4
W+w+ZXZM4IHKSMD7O1Oc3NZufSWllW4zHjRHAMgNP6aJZi02Vbu7UcwrbSwun1yN
rUWX2VB7/1PHAM8sb1Lc9nBOHAImEQTnDF2VaXFqgL3ztb702IZBefuQfUU5pHIT
l1xwr3gIZmr6Gk2Y9M6+jHrPHDg1YMSNnr06LTKCj9vHjyR7XHIkQRioLap2VJLT
TMPGWftDdqrqgFxT+igIXFyQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-fra.rpki-client.org