Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/ntTI8nDyllNAhbqFs8Bo9owhS4s.roa
File: ntTI8nDyllNAhbqFs8Bo9owhS4s.roa (raw, json)
Hash identifier: 4ZEkzfL5qR/E8E8abQJ/EZUFEuTFC8SPighPjVrPuks=
Subject key identifier: 9E:D4:C8:F2:70:F2:96:53:40:85:BA:85:B3:C0:68:F6:8C:21:4B:8B
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0480E547
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/ntTI8nDyllNAhbqFs8Bo9owhS4s.roa
Signing time: Thu 02 Jun 2022 13:26:22 +0000
ROA not before: Thu 02 Jun 2022 13:26:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 89.185.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75556167 (0x480e547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jun 2 13:26:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ed4c8f270f296534085ba85b3c068f68c214b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:14:ab:17:35:56:47:db:a7:78:06:70:a6:
d0:bc:18:11:36:25:71:65:8d:3c:60:a7:9d:37:cd:
d6:1a:02:3b:32:dc:dd:73:18:a8:d2:7a:70:24:ac:
0c:aa:76:c4:9b:4e:82:ef:a0:4d:72:39:40:0d:89:
c0:83:bf:45:dc:a2:e1:5f:a0:63:57:39:e3:6e:e7:
a2:eb:26:62:ba:ee:38:0f:b4:94:f7:fc:6e:f8:db:
53:62:ed:39:8b:36:2d:8c:54:35:2f:ba:ce:4c:e5:
80:be:e1:ce:d3:00:6d:40:f7:9a:66:81:a0:35:08:
4d:cb:6d:c7:89:81:eb:5e:6d:09:13:30:44:c8:b3:
6a:27:b2:62:cc:86:44:4c:0f:c7:d9:cf:34:ba:35:
96:1d:2d:74:f7:f4:da:b1:99:db:b3:ec:28:fc:cc:
0f:f9:23:5c:d2:cd:3e:28:2f:12:4a:98:a7:07:1a:
2c:2d:74:41:94:7b:71:c1:08:3f:84:05:08:7a:95:
b0:76:88:82:3a:99:33:44:df:c7:68:cf:22:04:7a:
9e:61:e0:75:88:99:4e:f3:f6:43:8b:31:25:2d:5e:
cb:11:dc:d5:e0:3a:28:22:fa:c3:31:35:8e:63:ec:
f2:30:f9:ed:7e:d5:36:24:d4:ad:5c:69:af:3e:cd:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:C8:F2:70:F2:96:53:40:85:BA:85:B3:C0:68:F6:8C:21:4B:8B
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/ntTI8nDyllNAhbqFs8Bo9owhS4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:96:7b:9f:e8:dc:90:26:c6:4c:eb:21:4f:92:03:1f:1e:54:
ad:c4:e8:45:41:73:9e:ad:6d:69:07:a3:44:2d:b5:93:74:d6:
b3:76:05:80:bc:85:0d:72:2e:2d:ef:d3:c4:1e:78:9f:d9:4e:
b6:35:be:64:81:f9:6c:65:13:5c:7d:3b:39:3f:e3:a5:a6:5d:
82:44:ba:ba:fd:06:a1:4b:fc:fd:74:0e:7b:8c:50:21:1c:27:
3f:61:56:51:13:90:e8:ec:bf:ec:30:8a:02:ff:7a:32:b4:fd:
7d:ef:b3:40:d9:e5:45:94:5c:73:79:dd:d8:7a:15:db:f1:af:
d0:ff:02:e9:72:9b:b1:30:ac:e8:9a:3e:4a:f7:db:ab:f6:43:
8c:24:d8:d0:52:03:3c:54:1e:be:58:c2:af:bc:49:7b:08:42:
66:ac:53:07:cd:06:fe:ca:3a:01:df:e5:dd:65:52:9b:29:97:
10:15:ef:26:48:dc:09:ad:90:5e:a1:75:74:29:2a:93:8a:61:
29:dc:9c:c6:68:05:6c:85:9e:ff:56:bb:48:8d:df:d4:07:8e:
bc:d5:7a:1f:43:a8:a1:b5:29:1f:9b:9e:af:4b:42:67:c3:32:
9d:4a:09:a0:bb:b4:96:b0:66:e4:40:6f:01:df:52:49:d6:37:
1b:ba:25:49
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBIDlRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjU3YzJkOWQ5M2FjN2NmOWIyZjE3Y2FhNzg1OWI2OTg1YjM5YjlkMB4XDTIyMDYw
MjEzMjYyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWVkNGM4ZjI3MGYy
OTY1MzQwODViYTg1YjNjMDY4ZjY4YzIxNGI4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKI6FKsXNVZH26d4BnCm0LwYETYlcWWNPGCnnTfN1hoCOzLc
3XMYqNJ6cCSsDKp2xJtOgu+gTXI5QA2JwIO/Rdyi4V+gY1c5427nousmYrruOA+0
lPf8bvjbU2LtOYs2LYxUNS+6zkzlgL7hztMAbUD3mmaBoDUITcttx4mB615tCRMw
RMizaieyYsyGREwPx9nPNLo1lh0tdPf02rGZ27PsKPzMD/kjXNLNPigvEkqYpwca
LC10QZR7ccEIP4QFCHqVsHaIgjqZM0Tfx2jPIgR6nmHgdYiZTvP2Q4sxJS1eyxHc
1eA6KCL6wzE1jmPs8jD57X7VNiTUrVxprz7N5jsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSe1MjycPKWU0CFuoWzwGj2jCFLizAfBgNVHSMEGDAWgBTvV8LZ2TrHz5sv
F8qnhZtphbObnTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzcxZkMyZGs2eDgtYkx4ZktwNFdiYVlXem01MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMWUwNGI4LTEwMzEtNDNmOS05NjY3LThlNmY4NzhkYjVmNC8x
L250VEk4bkR5bGxOQWhicUZzOEJvOW93aFM0cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MWUwNGI4LTEwMzEtNDNmOS05NjY3LThlNmY4NzhkYjVmNC8xLzcxZkMyZGs2eDgt
Ykx4ZktwNFdiYVlXem01MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5VDANBgkqhkiG9w0BAQsFAAOC
AQEAS5Z7n+jckCbGTOshT5IDHx5UrcToRUFznq1taQejRC21k3TWs3YFgLyFDXIu
Le/TxB54n9lOtjW+ZIH5bGUTXH07OT/jpaZdgkS6uv0GoUv8/XQOe4xQIRwnP2FW
UROQ6Oy/7DCKAv96MrT9fe+zQNnlRZRcc3nd2HoV2/Gv0P8C6XKbsTCs6Jo+Svfb
q/ZDjCTY0FIDPFQevljCr7xJewhCZqxTB80G/so6Ad/l3WVSmymXEBXvJkjcCa2Q
XqF1dCkqk4phKdycxmgFbIWe/1a7SI3f1AeOvNV6H0OoobUpH5uer0tCZ8MynUoJ
oLu0lrBm5EBvAd9SSdY3G7olSQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:14 2023 by rpki-client on console-fra.rpki-client.org