Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/meym_7yG_AoC2Sse_RV_7tPLVaU.roa
File: meym_7yG_AoC2Sse_RV_7tPLVaU.roa (raw, json)
Hash identifier: yTKVSEzdwlsc+I10HljE0rcdb/LWD5AA2wDlRGWjzFY=
Subject key identifier: 99:EC:A6:FF:BC:86:FC:0A:02:D9:2B:1E:FD:15:7F:EE:D3:CB:55:A5
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0488A7A1
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/meym_7yG_AoC2Sse_RV_7tPLVaU.roa
Signing time: Fri 03 Jun 2022 06:34:20 +0000
ROA not before: Fri 03 Jun 2022 06:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6079
IP address blocks: 92.51.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76064673 (0x488a7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jun 3 06:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99eca6ffbc86fc0a02d92b1efd157feed3cb55a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:dd:57:a0:7a:08:54:b6:93:c4:c4:a7:18:
91:a0:cc:c4:3f:35:d5:43:86:eb:95:8a:8b:5e:b3:
c8:cf:b2:73:58:76:20:56:99:16:b6:37:10:20:92:
f4:5b:5b:d6:99:30:e3:a0:6f:c6:46:87:8c:21:5d:
19:69:fc:1b:6f:86:ea:c0:b4:ac:ca:e0:d3:59:6e:
d1:ab:62:20:e8:72:1e:64:b6:28:c2:1d:d2:5f:d6:
03:40:2c:a7:26:77:fe:91:ba:e4:c9:40:e0:a6:89:
6f:82:b8:22:77:2c:56:fe:2b:52:50:de:17:9f:3b:
60:30:3a:ae:58:41:b6:f6:69:6e:ef:d6:9e:ce:01:
39:99:e6:f9:e3:cd:23:14:25:64:80:66:2c:3a:a4:
d4:32:5a:5a:ae:eb:48:58:77:88:d3:0f:e2:69:8a:
87:cf:a7:0b:27:a1:7c:70:69:4a:b9:3d:66:60:02:
7e:31:06:92:f7:66:79:85:ae:c9:85:cf:b5:f1:47:
dd:ff:94:7e:ce:c2:e3:21:df:b9:93:70:6b:a3:07:
9e:03:91:91:01:32:3d:4e:c7:c4:32:c4:61:c1:b1:
f8:af:60:9d:10:52:eb:4d:f6:74:0a:25:db:24:6d:
d3:29:d0:4c:52:7b:f8:99:f1:6b:56:ef:1b:40:6f:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:A6:FF:BC:86:FC:0A:02:D9:2B:1E:FD:15:7F:EE:D3:CB:55:A5
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/meym_7yG_AoC2Sse_RV_7tPLVaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.8.0/22
Signature Algorithm: sha256WithRSAEncryption
12:1b:28:15:b0:0f:7a:2f:91:1e:8a:f7:bf:5c:c4:ac:7e:55:
88:a0:50:89:ca:2d:8f:bb:34:ff:b6:91:3e:3f:de:fb:bb:5b:
98:9d:fe:9c:a8:f7:96:e8:ea:6d:46:8b:75:f9:49:83:1c:9f:
e4:67:e5:ff:d1:0f:6b:ce:02:e4:89:43:64:6e:1f:71:3c:1f:
0d:6f:2b:a2:38:75:4b:f1:6d:64:42:54:4f:b0:55:3e:23:f2:
48:57:37:43:f5:2d:88:2b:98:3f:c0:3e:78:da:7c:32:21:3c:
9f:25:bd:4f:62:bc:f9:4f:b2:f1:97:58:b7:ec:8a:26:09:9b:
54:f8:cd:c7:ae:54:d8:22:99:c5:98:06:e6:84:ce:f6:f4:85:
70:59:d1:2d:e2:4a:d0:dd:b3:68:2b:1d:59:2d:92:d9:d3:55:
14:99:41:d2:30:04:12:2b:87:6f:a2:2f:8a:c0:cd:a2:48:48:
da:5f:31:99:23:a7:04:2b:5e:98:24:27:a7:38:0d:53:1c:4c:
f3:24:04:2a:cf:53:99:b7:0d:15:55:12:f3:bf:8d:60:23:fa:
b1:3d:99:e5:64:9b:36:1a:5a:45:1f:65:3b:5e:93:57:d9:22:
83:49:7c:7f:80:d0:57:08:25:81:2b:48:0c:da:70:15:ec:27:
57:5e:07:f5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBIinoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjU3YzJkOWQ5M2FjN2NmOWIyZjE3Y2FhNzg1OWI2OTg1YjM5YjlkMB4XDTIyMDYw
MzA2MzQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTllY2E2ZmZiYzg2
ZmMwYTAyZDkyYjFlZmQxNTdmZWVkM2NiNTVhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOQy3VegeghUtpPExKcYkaDMxD811UOG65WKi16zyM+yc1h2
IFaZFrY3ECCS9Ftb1pkw46BvxkaHjCFdGWn8G2+G6sC0rMrg01lu0atiIOhyHmS2
KMId0l/WA0AspyZ3/pG65MlA4KaJb4K4IncsVv4rUlDeF587YDA6rlhBtvZpbu/W
ns4BOZnm+ePNIxQlZIBmLDqk1DJaWq7rSFh3iNMP4mmKh8+nCyehfHBpSrk9ZmAC
fjEGkvdmeYWuyYXPtfFH3f+Ufs7C4yHfuZNwa6MHngORkQEyPU7HxDLEYcGx+K9g
nRBS6032dAol2yRt0ynQTFJ7+Jnxa1bvG0BvS40CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSZ7Kb/vIb8CgLZKx79FX/u08tVpTAfBgNVHSMEGDAWgBTvV8LZ2TrHz5sv
F8qnhZtphbObnTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzcxZkMyZGs2eDgtYkx4ZktwNFdiYVlXem01MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMWUwNGI4LTEwMzEtNDNmOS05NjY3LThlNmY4NzhkYjVmNC8x
L21leW1fN3lHX0FvQzJTc2VfUlZfN3RQTFZhVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MWUwNGI4LTEwMzEtNDNmOS05NjY3LThlNmY4NzhkYjVmNC8xLzcxZkMyZGs2eDgt
Ykx4ZktwNFdiYVlXem01MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlwzCDANBgkqhkiG9w0BAQsFAAOC
AQEAEhsoFbAPei+RHor3v1zErH5ViKBQicotj7s0/7aRPj/e+7tbmJ3+nKj3lujq
bUaLdflJgxyf5Gfl/9EPa84C5IlDZG4fcTwfDW8rojh1S/FtZEJUT7BVPiPySFc3
Q/UtiCuYP8A+eNp8MiE8nyW9T2K8+U+y8ZdYt+yKJgmbVPjNx65U2CKZxZgG5oTO
9vSFcFnRLeJK0N2zaCsdWS2S2dNVFJlB0jAEEiuHb6IvisDNokhI2l8xmSOnBCte
mCQnpzgNUxxM8yQEKs9TmbcNFVUS87+NYCP6sT2Z5WSbNhpaRR9lO16TV9kig0l8
f4DQVwglgStIDNpwFewnV14H9Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:05 2023 by rpki-client on console-ams.rpki-client.org