Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/lPV2WoentbpYUUrNM9QPTLwXX4g.roa
File: lPV2WoentbpYUUrNM9QPTLwXX4g.roa (raw, json)
Hash identifier: J1NKU0/nCHM3mjfQ0anptfw980j+OpZmUlXeMRak/XU=
Subject key identifier: 94:F5:76:5A:87:A7:B5:BA:58:51:4A:CD:33:D4:0F:4C:BC:17:5F:88
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018533ECAB55A189EA9751155114DF44BF19
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/lPV2WoentbpYUUrNM9QPTLwXX4g.roa
Signing time: Wed 21 Dec 2022 09:03:46 +0000
ROA not before: Wed 21 Dec 2022 09:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57912
IP address blocks: 85.14.42.0/23 maxlen: 23
82.119.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:ec:ab:55:a1:89:ea:97:51:15:51:14:df:44:bf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Dec 21 09:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94f5765a87a7b5ba58514acd33d40f4cbc175f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fb:95:c7:cd:ff:aa:d2:16:09:0a:e7:cb:14:
b1:77:13:e6:eb:57:e2:46:d4:4f:57:f7:57:a9:ab:
d4:18:3a:17:3c:60:84:83:44:8c:1f:18:7e:21:68:
43:40:24:e4:f7:7f:4d:9b:8f:77:53:34:3e:1b:a1:
e6:05:59:f7:dc:f4:90:e5:fa:76:b8:9c:aa:fb:80:
a1:ec:f4:78:99:03:34:86:57:59:2f:1a:71:0c:0a:
2a:e4:33:d0:db:ed:52:45:ac:34:f0:9d:39:20:fa:
12:b9:05:2c:90:42:ba:c2:12:63:83:32:3a:f0:fe:
28:05:d8:44:95:49:b3:f4:55:7b:8a:04:db:eb:a0:
27:8d:88:2d:9a:8f:44:bd:eb:3d:a3:f4:0a:fa:45:
15:0f:27:d2:a4:e3:4f:12:ed:6f:13:23:29:bf:60:
59:f8:f2:33:bd:32:0b:e8:9b:da:c8:31:15:fd:3d:
51:97:45:f6:2d:af:53:88:46:74:f1:2f:dc:80:09:
8f:01:72:ef:5a:59:f9:95:dc:3c:d1:d0:0d:1e:68:
7a:f6:25:fb:87:ef:a3:11:2d:cd:24:a2:33:bc:cd:
6b:a6:15:bb:0e:ff:85:49:48:07:87:62:6b:ba:9e:
b4:59:6d:28:3b:6e:53:06:ff:c2:04:8d:f8:6a:c6:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F5:76:5A:87:A7:B5:BA:58:51:4A:CD:33:D4:0F:4C:BC:17:5F:88
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/lPV2WoentbpYUUrNM9QPTLwXX4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.87.0/24
85.14.42.0/23
Signature Algorithm: sha256WithRSAEncryption
96:67:c5:a1:67:5d:32:42:2b:36:ef:dc:19:91:2d:17:ee:25:
33:3b:35:57:7c:82:6e:75:0e:7c:08:ba:a7:ce:64:94:c6:a8:
07:27:b3:bd:8e:3e:ae:95:1d:4d:99:26:55:c8:f5:26:0d:20:
12:a8:62:09:dc:e0:48:36:4f:f5:d0:87:6f:5b:f1:c9:e5:a5:
f1:06:7c:f6:81:d6:28:a4:7c:f2:ec:05:c0:00:87:f2:85:8c:
3b:e6:9b:49:64:a5:7b:14:51:05:0b:1e:2e:47:bd:a1:fb:45:
62:27:54:fa:72:ca:be:cc:ff:bc:a9:c7:90:7e:40:90:0e:90:
d2:e5:e4:f8:67:e7:0c:64:47:ed:ca:16:6c:33:c4:ff:55:2a:
1c:59:9a:24:0e:bf:82:8c:b7:aa:4c:8c:63:11:b8:c5:61:46:
35:51:63:aa:7a:62:7a:a0:0b:2d:52:3f:78:f4:45:fc:1a:19:
99:30:dd:76:98:27:c4:fb:25:6c:c7:f6:5f:a9:4f:fc:a4:e9:
95:46:9a:be:11:10:34:22:e8:9b:bd:a3:55:76:cf:d9:cf:4b:
a1:9a:24:75:5b:8d:20:5c:b2:f5:f7:0d:ff:9f:1f:42:16:ff:
21:25:fa:9f:a2:8d:89:02:74:e4:42:b7:6e:32:cb:cc:09:50:
59:6a:06:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYUz7KtVoYnql1EVURTfRL8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjIxMjIxMDkwMzQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGY1NzY1YTg3YTdiNWJhNTg1MTRhY2QzM2Q0MGY0Y2JjMTc1Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vuVx83/qtIWCQrnyxSxdxPm61fi
RtRPV/dXqavUGDoXPGCEg0SMHxh+IWhDQCTk939Nm493UzQ+G6HmBVn33PSQ5fp2
uJyq+4Ch7PR4mQM0hldZLxpxDAoq5DPQ2+1SRaw08J05IPoSuQUskEK6whJjgzI6
8P4oBdhElUmz9FV7igTb66AnjYgtmo9Eves9o/QK+kUVDyfSpONPEu1vEyMpv2BZ
+PIzvTIL6JvayDEV/T1Rl0X2La9TiEZ08S/cgAmPAXLvWln5ldw80dANHmh69iX7
h++jES3NJKIzvM1rphW7Dv+FSUgHh2Jrup60WW0oO25TBv/CBI34asZ3aQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJT1dlqHp7W6WFFKzTPUD0y8F1+IMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvbFBWMldvZW50YnBZVVVyTk05UVBUTHdYWDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUndXAwQB
VQ4qMA0GCSqGSIb3DQEBCwUAA4IBAQCWZ8WhZ10yQis279wZkS0X7iUzOzVXfIJu
dQ58CLqnzmSUxqgHJ7O9jj6ulR1NmSZVyPUmDSASqGIJ3OBINk/10IdvW/HJ5aXx
Bnz2gdYopHzy7AXAAIfyhYw75ptJZKV7FFEFCx4uR72h+0ViJ1T6csq+zP+8qceQ
fkCQDpDS5eT4Z+cMZEftyhZsM8T/VSocWZokDr+CjLeqTIxjEbjFYUY1UWOqemJ6
oAstUj949EX8GhmZMN12mCfE+yVsx/ZfqU/8pOmVRpq+ERA0IuibvaNVds/Zz0uh
miR1W40gXLL19w3/nx9CFv8hJfqfoo2JAnTkQrduMsvMCVBZagZe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:56 2024 by rpki-client on console-fra.rpki-client.org