Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/B_ieTFqoHBHogrvSy1xve0Mk-TY.roa
File: B_ieTFqoHBHogrvSy1xve0Mk-TY.roa (raw, json)
Hash identifier: r8vo9kL2rRV/SBA75yx6blgWmO+8/7OY7mabPCnH2qQ=
Subject key identifier: 07:F8:9E:4C:5A:A8:1C:11:E8:82:BB:D2:CB:5C:6F:7B:43:24:F9:36
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0182341020E8EC3AF3B2809590FFC6A29A3E
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/B_ieTFqoHBHogrvSy1xve0Mk-TY.roa
Signing time: Mon 25 Jul 2022 06:34:08 +0000
ROA not before: Mon 25 Jul 2022 06:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.51.40.0/23 maxlen: 24
92.51.42.0/23 maxlen: 24
92.51.9.0/24 maxlen: 24
92.51.8.0/24 maxlen: 24
92.51.11.0/24 maxlen: 24
92.51.10.0/24 maxlen: 24
92.51.12.0/22 maxlen: 22
92.51.16.0/22 maxlen: 22
92.51.34.0/23 maxlen: 24
92.51.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:10:20:e8:ec:3a:f3:b2:80:95:90:ff:c6:a2:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jul 25 06:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07f89e4c5aa81c11e882bbd2cb5c6f7b4324f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:f3:ba:9f:9f:76:6a:2c:13:96:7a:0e:c0:
47:13:83:f2:35:d5:35:60:7c:5c:79:47:47:01:cd:
d0:d8:1f:33:05:f6:7b:64:69:9a:85:50:1c:c9:21:
a0:67:1e:81:7e:c9:c1:15:99:67:8d:62:aa:5a:57:
7e:54:e1:11:88:29:71:5f:fc:35:ad:15:75:5b:79:
bd:1b:1b:ff:b6:2e:64:c8:4b:62:e7:25:c1:0c:17:
91:02:3b:45:05:a9:d5:df:30:17:d6:fc:4f:a7:9c:
fb:52:67:2d:bd:6f:8b:a0:07:66:79:0a:7e:11:0a:
6c:bd:a3:7c:57:cc:59:ad:df:27:4b:8e:89:13:32:
51:54:9a:d9:fa:1f:9b:4a:ae:f2:39:43:95:2c:09:
03:45:7c:a2:59:dd:6c:d8:ae:f5:1e:62:33:18:09:
4f:ff:d5:5c:2f:7f:84:8b:22:3a:5c:a9:28:01:6b:
5e:dc:69:7c:f3:e5:d7:44:e8:8e:e4:90:cd:da:a3:
ab:3c:cc:92:f1:73:c3:e0:23:b5:9b:48:25:e8:80:
ac:fd:58:41:10:98:bc:5f:0e:17:23:d5:e9:ae:88:
ee:64:76:7c:d2:c1:7a:fe:59:6e:4f:ca:90:80:49:
96:08:0b:ec:0a:06:6e:7c:55:2f:41:3e:66:c4:cf:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:9E:4C:5A:A8:1C:11:E8:82:BB:D2:CB:5C:6F:7B:43:24:F9:36
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/B_ieTFqoHBHogrvSy1xve0Mk-TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.8.0-92.51.19.255
92.51.32.0/22
92.51.40.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:57:65:f0:aa:03:03:f8:7a:4d:b9:e1:eb:e4:80:a4:26:0b:
86:78:39:dd:5a:12:39:2a:32:bb:c0:c4:9d:67:c2:c8:ee:c0:
45:39:dc:65:34:c1:24:ab:14:b7:33:0f:70:a9:a8:2c:66:a3:
89:46:22:aa:ec:6f:b2:ab:86:c4:fb:42:66:cd:0a:9a:71:f1:
34:e5:77:17:d2:c3:be:66:a3:bf:15:79:bd:ab:bd:88:b6:4e:
a5:9a:ae:c0:47:95:a6:87:95:da:72:26:04:42:c7:89:21:34:
cd:82:ca:d1:f6:f2:51:cd:54:a4:ca:f0:05:0f:1b:17:7b:7d:
fb:b3:36:50:34:c4:7c:d8:9b:78:ed:64:6d:6f:92:af:3b:f2:
81:30:b1:7f:01:4e:cb:d2:a1:16:a3:51:ac:38:0a:4e:95:a3:
02:73:16:d4:4f:59:f3:f4:ae:b7:e8:80:c5:47:34:f6:33:3c:
72:ba:5b:ae:76:e4:20:78:e8:d0:72:78:f0:43:aa:1e:ee:12:
ac:4d:a4:5e:0c:43:35:0a:eb:c7:a2:d8:73:d4:ce:7e:ff:a0:
59:73:57:f3:87:75:55:15:9d:cc:fa:40:41:87:56:d3:a4:5c:
e3:da:78:9c:45:a3:b1:c2:53:91:c5:23:54:bb:de:92:52:6e:
2d:d4:c2:b8
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYI0ECDo7DrzsoCVkP/Gopo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjIwNzI1MDYzNDA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2Y4OWU0YzVhYTgxYzExZTg4MmJiZDJjYjVjNmY3YjQzMjRmOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0fzup+fdmosE5Z6DsBHE4PyNdU1
YHxceUdHAc3Q2B8zBfZ7ZGmahVAcySGgZx6BfsnBFZlnjWKqWld+VOERiClxX/w1
rRV1W3m9Gxv/ti5kyEti5yXBDBeRAjtFBanV3zAX1vxPp5z7UmctvW+LoAdmeQp+
EQpsvaN8V8xZrd8nS46JEzJRVJrZ+h+bSq7yOUOVLAkDRXyiWd1s2K71HmIzGAlP
/9VcL3+EiyI6XKkoAWte3Gl88+XXROiO5JDN2qOrPMyS8XPD4CO1m0gl6ICs/VhB
EJi8Xw4XI9XprojuZHZ80sF6/lluT8qQgEmWCAvsCgZufFUvQT5mxM/M+QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAf4nkxaqBwR6IK70stcb3tDJPk2MB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvQl9pZVRGcW9IQkhvZ3J2U3kxeHZlME1rLVRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBANcMwgD
BAJcMxADBAJcMyADBAJcMygwDQYJKoZIhvcNAQELBQADggEBANFXZfCqAwP4ek25
4evkgKQmC4Z4Od1aEjkqMrvAxJ1nwsjuwEU53GU0wSSrFLczD3CpqCxmo4lGIqrs
b7KrhsT7QmbNCppx8TTldxfSw75mo78Veb2rvYi2TqWarsBHlaaHldpyJgRCx4kh
NM2CytH28lHNVKTK8AUPGxd7ffuzNlA0xHzYm3jtZG1vkq878oEwsX8BTsvSoRaj
Uaw4Ck6VowJzFtRPWfP0rrfogMVHNPYzPHK6W6525CB46NByePBDqh7uEqxNpF4M
QzUK68ei2HPUzn7/oFlzV/OHdVUVncz6QEGHVtOkXOPaeJxFo7HCU5HFI1S73pJS
bi3Uwrg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org