Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/AZe8jaRDzC5zTlgtW0w3nSTSlCw.roa
File: AZe8jaRDzC5zTlgtW0w3nSTSlCw.roa (raw, json)
Hash identifier: N5iiaT8Pk5CRkenUQfKVLv6rzbwhoi4fFNG68v7Tjnc=
Subject key identifier: 01:97:BC:8D:A4:43:CC:2E:73:4E:58:2D:5B:4C:37:9D:24:D2:94:2C
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 01924593
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/AZe8jaRDzC5zTlgtW0w3nSTSlCw.roa
Signing time: Sat 01 Jan 2022 16:04:02 +0000
ROA not before: Sat 01 Jan 2022 16:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47168
IP address blocks: 46.31.67.0/24 maxlen: 24
92.255.75.0/24 maxlen: 24
92.255.74.0/24 maxlen: 24
92.255.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26363283 (0x1924593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Jan 1 16:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0197bc8da443cc2e734e582d5b4c379d24d2942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:5f:ed:65:c2:ce:13:e3:9b:55:08:4c:ef:
13:d5:d7:ee:8e:28:4d:8f:c0:3c:e6:b7:af:0c:4d:
31:8f:ca:df:63:08:ff:ba:ab:89:35:7b:78:ce:17:
55:28:e5:71:40:17:fe:ac:43:4f:c5:aa:88:95:9b:
f3:ec:6f:28:84:36:85:b5:b5:c8:82:23:b4:c4:21:
65:a2:07:66:0f:30:09:7f:30:8e:19:e6:ff:92:25:
24:2f:83:63:85:09:3e:bb:d7:4a:0f:3d:15:1e:67:
6b:60:ff:5b:97:19:9b:5f:3c:ce:ff:56:64:cc:84:
9f:38:23:50:c1:ba:c8:4d:b9:06:2a:40:98:68:93:
cd:fc:b4:1a:15:5b:fc:a1:87:9c:93:0f:03:d8:20:
c4:ec:5a:e7:25:06:3e:30:fb:80:32:c4:4f:84:ef:
d2:46:55:cc:8c:d3:a6:0b:5c:44:ec:20:20:80:0f:
78:8e:80:0d:8d:21:4d:78:87:06:87:77:1a:cb:1b:
0a:a9:8c:82:a7:b9:e4:f2:21:21:cb:3c:29:8f:9b:
b3:f2:65:16:e7:66:ea:dd:96:bd:52:0f:07:16:e1:
ea:77:a2:b2:99:81:0a:a2:8f:b1:76:b3:81:d0:89:
21:4b:8e:a1:52:81:55:9d:dd:bf:30:c4:c0:2f:06:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:97:BC:8D:A4:43:CC:2E:73:4E:58:2D:5B:4C:37:9D:24:D2:94:2C
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/AZe8jaRDzC5zTlgtW0w3nSTSlCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.67.0/24
92.255.73.0-92.255.75.255
Signature Algorithm: sha256WithRSAEncryption
38:b2:24:f3:8c:50:08:c7:06:18:3a:43:2c:a3:0e:a5:68:5c:
c6:79:e7:fa:b5:b2:21:3d:0b:7e:80:52:33:e8:d2:46:4a:ed:
17:24:3b:66:07:31:8b:96:50:90:37:a4:29:b7:a8:ac:3e:7a:
bb:31:72:20:23:75:e9:20:6e:b2:a8:51:fd:9b:3a:5c:17:96:
9a:49:f3:32:1e:a8:51:d4:c4:f7:28:2b:b1:ed:18:6a:d2:3a:
c0:bd:37:43:3d:ad:8e:a3:87:86:94:c5:8a:8c:9b:45:67:c0:
c7:7e:45:31:f0:67:3d:4e:66:85:48:c0:ad:27:85:c7:39:ec:
0d:c6:ff:63:b9:c9:6c:87:f4:7b:f7:19:bd:50:23:e0:31:12:
a6:f5:46:8c:c8:f6:9f:9d:b6:2e:39:e9:ba:12:7d:53:c7:68:
a3:e1:b4:55:df:d0:5c:23:b6:dd:79:c5:b4:18:06:de:8d:30:
05:07:25:5e:1b:86:70:f0:8d:3f:dd:3e:c3:54:71:e6:f1:2e:
5a:6b:e3:1e:51:0f:13:e0:e4:61:5d:40:e5:41:ea:fc:ea:d2:
31:48:84:21:19:ec:17:93:e7:af:5d:28:f2:ff:03:da:3f:02:
71:39:49:f6:92:af:23:14:26:f9:d9:a6:04:70:e6:6b:5b:f7:
a0:58:a3:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEAZJFkzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZjUzM2RkYmExZjhhNzZkZTJlZjQ5NzFmY2Q1MmY5NDQxY2UwOTg5MB4XDTIyMDEw
MTE2MDQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDE5N2JjOGRhNDQz
Y2MyZTczNGU1ODJkNWI0YzM3OWQyNGQyOTQyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTbX+1lws4T45tVCEzvE9XX7o4oTY/APOa3rwxNMY/K32MI
/7qriTV7eM4XVSjlcUAX/qxDT8WqiJWb8+xvKIQ2hbW1yIIjtMQhZaIHZg8wCX8w
jhnm/5IlJC+DY4UJPrvXSg89FR5na2D/W5cZm188zv9WZMyEnzgjUMG6yE25BipA
mGiTzfy0GhVb/KGHnJMPA9ggxOxa5yUGPjD7gDLET4Tv0kZVzIzTpgtcROwgIIAP
eI6ADY0hTXiHBod3GssbCqmMgqe55PIhIcs8KY+bs/JlFudm6t2WvVIPBxbh6nei
spmBCqKPsXazgdCJIUuOoVKBVZ3dvzDEwC8GsZ0CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQBl7yNpEPMLnNOWC1bTDedJNKULDAfBgNVHSMEGDAWgBS/Uz3bofinbeLv
SXH81S+UQc4JiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3YxTTkyNkg0cDIzaTcwbHhfTlV2bEVIT0NZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvNzNkOWE1LTFjNGYtNDRlMC1hOTU4LTE2NzE5MWExMTdlZS8x
L0FaZThqYVJEekM1elRsZ3RXMHczblNUU2xDdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
NzNkOWE1LTFjNGYtNDRlMC1hOTU4LTE2NzE5MWExMTdlZS8xL3YxTTkyNkg0cDIz
aTcwbHhfTlV2bEVIT0NZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAC4fQzAMAwQAXP9JAwQCXP9IMA0G
CSqGSIb3DQEBCwUAA4IBAQA4siTzjFAIxwYYOkMsow6laFzGeef6tbIhPQt+gFIz
6NJGSu0XJDtmBzGLllCQN6Qpt6isPnq7MXIgI3XpIG6yqFH9mzpcF5aaSfMyHqhR
1MT3KCux7Rhq0jrAvTdDPa2Oo4eGlMWKjJtFZ8DHfkUx8Gc9TmaFSMCtJ4XHOewN
xv9juclsh/R79xm9UCPgMRKm9UaMyPafnbYuOem6En1Tx2ij4bRV39BcI7bdecW0
GAbejTAFByVeG4Zw8I0/3T7DVHHm8S5aa+MeUQ8T4ORhXUDlQer86tIxSIQhGewX
k+evXSjy/wPaPwJxOUn2kq8jFCb52aYEcOZrW/egWKN3
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:22 2023 by rpki-client on console-ams.rpki-client.org