Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/i1UOUsCNFmIzUnmHqdvMwKxUfvM.roa
File: i1UOUsCNFmIzUnmHqdvMwKxUfvM.roa (raw, json)
Hash identifier: xMdYmMjqky9MvbnW2sPD9CJfS1yoBhovjzq2aM8oLdI=
Subject key identifier: 8B:55:0E:52:C0:8D:16:62:33:52:79:87:A9:DB:CC:C0:AC:54:7E:F3
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08AE11C7
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/i1UOUsCNFmIzUnmHqdvMwKxUfvM.roa
Signing time: Sat 01 Jan 2022 11:04:16 +0000
ROA not before: Sat 01 Jan 2022 11:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 192.145.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145625543 (0x8ae11c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 11:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b550e52c08d166233527987a9dbccc0ac547ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:94:80:1e:15:be:f6:ba:3a:a1:5e:d9:78:
4c:cd:c8:b6:f9:2f:aa:d4:23:a5:86:f9:0c:15:21:
44:d2:1b:2b:98:f0:9a:9f:e8:a6:54:40:c0:6f:db:
b0:66:bd:0c:c6:31:f0:a3:91:fe:dc:7a:45:fe:53:
08:73:f7:81:89:df:c3:81:6e:26:9b:2c:18:76:c3:
80:8c:7c:b9:64:61:6f:90:03:9d:a0:ce:3d:76:3a:
0f:21:d2:27:8e:9a:a9:0e:b6:e4:5e:e4:2a:04:9c:
2f:fc:f3:83:3b:ac:87:6b:d7:34:2f:61:75:0b:ae:
aa:47:27:bb:5c:31:ae:30:9e:ea:04:68:5b:7e:44:
c4:30:c1:90:1c:e0:31:47:82:0f:ca:be:7c:92:b3:
67:d2:58:95:01:60:ce:10:75:9a:ae:1c:93:5a:82:
06:96:90:0a:3b:17:41:48:16:72:02:1e:b5:40:82:
66:a0:26:6d:e5:8b:a7:d9:fe:aa:47:cd:eb:10:6f:
f7:b5:b0:d5:2f:d7:b7:cc:d0:e7:0a:64:cf:7f:90:
22:ed:55:38:b3:e6:5b:b8:39:a6:01:07:b2:c6:de:
89:1e:b4:64:4e:09:e3:30:4d:37:ad:b4:85:ee:b2:
f7:43:8f:18:32:60:78:f6:93:95:26:77:30:3a:41:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:0E:52:C0:8D:16:62:33:52:79:87:A9:DB:CC:C0:AC:54:7E:F3
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/i1UOUsCNFmIzUnmHqdvMwKxUfvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.70.0/24
Signature Algorithm: sha256WithRSAEncryption
75:66:9a:86:f0:86:8f:16:4b:e2:7e:7f:89:6e:8a:53:ab:46:
d0:88:1c:2b:4d:02:58:34:1e:32:f3:70:86:bd:c9:1f:79:46:
25:0b:50:73:4e:cc:88:f3:30:18:ac:80:f3:b8:08:18:9f:e2:
75:28:b6:3f:d8:84:09:4b:ef:8b:46:eb:d4:e1:27:f3:3c:2c:
c1:eb:12:6e:c0:cf:ec:13:15:77:4d:00:94:d7:75:97:08:72:
27:e0:27:84:62:ef:8c:b5:91:bb:12:90:f4:e2:17:f4:5f:62:
f6:70:6e:d0:f7:ab:fd:8a:f8:2b:dd:12:28:e4:5e:ee:2b:5b:
e0:12:cc:fe:99:39:5b:81:ce:b6:7f:3d:13:9c:85:de:3f:ff:
c5:bb:44:ae:bd:02:3e:97:4f:cd:bb:c9:c0:10:00:83:2c:54:
cb:e1:07:72:d5:69:3a:f6:0d:2a:df:ae:3b:ff:c9:ad:e8:fc:
83:ab:7b:81:6f:f4:57:05:dd:b7:03:ac:7d:bf:57:fd:f6:74:
d1:bf:10:a0:40:c8:c7:3f:1c:64:b5:3f:eb:57:c0:bf:03:bf:
63:70:6c:90:9b:d4:9a:32:4d:35:d9:10:65:12:d2:58:a1:7c:
1d:68:d0:cd:c8:3f:65:92:3a:e3:a9:b8:27:e1:8c:74:62:d8:
a8:74:1c:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECK4RxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MmI3OGY2NjgyZmMzOWM1NWI0MWQ0OGY4MGI4ODM4ZDVkMmRiZjA3MB4XDTIyMDEw
MTExMDQxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGI1NTBlNTJjMDhk
MTY2MjMzNTI3OTg3YTlkYmNjYzBhYzU0N2VmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjQlIAeFb72ujqhXtl4TM3ItvkvqtQjpYb5DBUhRNIbK5jw
mp/oplRAwG/bsGa9DMYx8KOR/tx6Rf5TCHP3gYnfw4FuJpssGHbDgIx8uWRhb5AD
naDOPXY6DyHSJ46aqQ625F7kKgScL/zzgzush2vXNC9hdQuuqkcnu1wxrjCe6gRo
W35ExDDBkBzgMUeCD8q+fJKzZ9JYlQFgzhB1mq4ck1qCBpaQCjsXQUgWcgIetUCC
ZqAmbeWLp9n+qkfN6xBv97Ww1S/Xt8zQ5wpkz3+QIu1VOLPmW7g5pgEHssbeiR60
ZE4J4zBNN620he6y90OPGDJgePaTlSZ3MDpBRLUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSLVQ5SwI0WYjNSeYep28zArFR+8zAfBgNVHSMEGDAWgBRyt49mgvw5xVtB
1I+AuIONXS2/BzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NyZVBab0w4T2NWYlFkU1BnTGlEalYwdHZ3Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvM2M0YjhhLWJmYzctNDFlOS05OWUxLWYzZTUwNmFlYWEwMS8x
L2kxVU9Vc0NORm1JelVubUhxZHZNd0t4VWZ2TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
M2M0YjhhLWJmYzctNDFlOS05OWUxLWYzZTUwNmFlYWEwMS8xL2NyZVBab0w4T2NW
YlFkU1BnTGlEalYwdHZ3Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCRRjANBgkqhkiG9w0BAQsFAAOC
AQEAdWaahvCGjxZL4n5/iW6KU6tG0IgcK00CWDQeMvNwhr3JH3lGJQtQc07MiPMw
GKyA87gIGJ/idSi2P9iECUvvi0br1OEn8zwswesSbsDP7BMVd00AlNd1lwhyJ+An
hGLvjLWRuxKQ9OIX9F9i9nBu0Per/Yr4K90SKORe7itb4BLM/pk5W4HOtn89E5yF
3j//xbtErr0CPpdPzbvJwBAAgyxUy+EHctVpOvYNKt+uO//Jrej8g6t7gW/0VwXd
twOsfb9X/fZ00b8QoEDIxz8cZLU/61fAvwO/Y3BskJvUmjJNNdkQZRLSWKF8HWjQ
zcg/ZZI646m4J+GMdGLYqHQc3A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org