Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZiVb8RaxfTVzUypHD7vJ0kSEaHk.roa
File: ZiVb8RaxfTVzUypHD7vJ0kSEaHk.roa (raw, json)
Hash identifier: gG4ftA+Y7F80SX8sFoiiBCsMjP++dt9JaKtuojKJlro=
Subject key identifier: 66:25:5B:F1:16:B1:7D:35:73:53:2A:47:0F:BB:C9:D2:44:84:68:79
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 07763CCB
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZiVb8RaxfTVzUypHD7vJ0kSEaHk.roa
Signing time: Sat 01 Jan 2022 05:04:18 +0000
ROA not before: Sat 01 Jan 2022 05:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17941
IP address blocks: 217.147.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125189323 (0x7763ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 1 05:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66255bf116b17d3573532a470fbbc9d244846879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:a0:a6:18:c0:8d:aa:ab:b7:10:94:b0:1c:
35:4c:31:c8:06:7d:6e:a0:bb:65:3c:83:4f:c4:4f:
ff:0c:39:18:ec:e3:67:b6:e0:94:74:85:cb:c8:0e:
d3:b6:3f:c6:bb:42:29:69:99:10:f5:40:27:a5:8f:
a5:6c:03:97:e5:15:82:bc:77:bb:8a:19:af:47:71:
af:21:98:57:27:96:10:c4:f3:da:59:2d:86:37:03:
46:2b:d6:ab:de:99:58:e6:72:e2:76:d0:71:c3:5c:
3e:4e:bf:b2:19:7a:8c:90:f1:45:bd:b7:a8:cc:1d:
84:c3:3c:36:a1:2f:9c:df:1e:90:0f:07:ba:e3:a6:
62:90:d2:54:47:45:9d:35:19:9e:55:14:66:5a:3f:
a2:d8:9f:a9:6a:49:9b:ce:6e:c4:12:40:fa:ff:b4:
a3:7c:8f:b6:2c:8e:5b:5d:74:23:c5:0b:7d:09:b8:
8f:7e:a0:e4:6d:57:78:45:ba:0a:8a:c8:8c:22:41:
82:27:ac:61:df:83:3a:c3:98:93:e8:b1:bc:bf:ce:
d5:37:20:59:6c:81:87:d2:26:0c:9c:6a:5c:49:a9:
76:e1:7a:0b:46:b5:aa:4c:9a:50:68:f2:bd:e4:f9:
22:d5:9c:9d:b5:91:a7:cb:9d:ea:52:20:2c:47:52:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:5B:F1:16:B1:7D:35:73:53:2A:47:0F:BB:C9:D2:44:84:68:79
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZiVb8RaxfTVzUypHD7vJ0kSEaHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:e4:76:82:ff:b9:bb:c7:fb:bc:14:19:65:94:29:12:ce:f4:
66:3f:b6:bb:5b:c6:9c:a3:1d:3d:1a:2b:bb:76:42:58:55:f5:
70:6c:a3:6c:99:31:bc:ad:0a:8e:f3:e2:17:04:10:27:66:f9:
33:98:dd:cc:49:00:aa:71:33:5f:16:78:5a:94:ca:5e:9b:87:
dd:dc:34:a9:6b:cf:a5:6e:99:79:5f:bd:3e:32:53:09:d9:46:
c4:97:40:d3:75:7e:b3:6e:93:a3:97:85:52:99:0c:ce:b6:51:
7e:5b:33:6f:b6:53:c7:09:ce:ab:2c:8e:25:68:b7:b1:37:15:
2b:cd:3c:1b:03:4e:40:af:23:c0:0e:4c:01:21:ae:03:20:39:
7b:9b:ca:40:e4:be:fe:0b:45:07:e3:c7:ac:65:ad:b3:1e:22:
6d:93:86:64:1d:4d:1c:e8:81:4e:26:d3:99:0a:9b:b4:39:98:
e0:74:56:e0:46:d6:7b:49:80:64:76:51:98:44:cb:86:a0:b0:
1f:ba:b5:17:88:c8:d4:f0:13:e0:c4:65:29:d1:3a:e4:08:80:
dc:90:96:af:ba:17:fe:29:fa:19:91:c9:3b:ac:f2:4d:bc:e0:
d3:35:07:00:a3:da:00:e6:d4:3b:9e:c0:b4:f0:16:08:5d:bc:
ad:5d:a7:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB3Y8yzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzY3N2Q3Y2I5MjcxY2UzNjEyNTZlOTgzM2NjN2IxNGZkMDIzZWJlMB4XDTIyMDEw
MTA1MDQxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjYyNTViZjExNmIx
N2QzNTczNTMyYTQ3MGZiYmM5ZDI0NDg0Njg3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxroKYYwI2qq7cQlLAcNUwxyAZ9bqC7ZTyDT8RP/ww5GOzj
Z7bglHSFy8gO07Y/xrtCKWmZEPVAJ6WPpWwDl+UVgrx3u4oZr0dxryGYVyeWEMTz
2lkthjcDRivWq96ZWOZy4nbQccNcPk6/shl6jJDxRb23qMwdhMM8NqEvnN8ekA8H
uuOmYpDSVEdFnTUZnlUUZlo/otifqWpJm85uxBJA+v+0o3yPtiyOW110I8ULfQm4
j36g5G1XeEW6CorIjCJBgiesYd+DOsOYk+ixvL/O1TcgWWyBh9ImDJxqXEmpduF6
C0a1qkyaUGjyveT5ItWcnbWRp8ud6lIgLEdSxxkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRmJVvxFrF9NXNTKkcPu8nSRIRoeTAfBgNVHSMEGDAWgBSTZ318uScc42El
bpgzzHsU/QI+vjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2syZDlmTGtuSE9OaEpXNllNOHg3RlAwQ1ByNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYTljNmRhLThlYTAtNDZiNy1hMWE2LTk5YWNiOTljZTc1NC8x
L1ppVmI4UmF4ZlRWelV5cEhEN3ZKMGtTRWFIay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YTljNmRhLThlYTAtNDZiNy1hMWE2LTk5YWNiOTljZTc1NC8xL2syZDlmTGtuSE9O
aEpXNllNOHg3RlAwQ1ByNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtmTDDANBgkqhkiG9w0BAQsFAAOC
AQEAHuR2gv+5u8f7vBQZZZQpEs70Zj+2u1vGnKMdPRoru3ZCWFX1cGyjbJkxvK0K
jvPiFwQQJ2b5M5jdzEkAqnEzXxZ4WpTKXpuH3dw0qWvPpW6ZeV+9PjJTCdlGxJdA
03V+s26To5eFUpkMzrZRflszb7ZTxwnOqyyOJWi3sTcVK808GwNOQK8jwA5MASGu
AyA5e5vKQOS+/gtFB+PHrGWtsx4ibZOGZB1NHOiBTibTmQqbtDmY4HRW4EbWe0mA
ZHZRmETLhqCwH7q1F4jI1PAT4MRlKdE65AiA3JCWr7oX/in6GZHJO6zyTbzg0zUH
AKPaAObUO57AtPAWCF28rV2nhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org