Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/couxfphy0bwqHXZOVfbY_m4ML9k.roa
File: couxfphy0bwqHXZOVfbY_m4ML9k.roa (raw, json)
Hash identifier: 0P9NuSA1/jcsE8PyftFxWQsMm1sgWEgIy6Q3zdUAbQo=
Subject key identifier: 72:8B:B1:7E:98:72:D1:BC:2A:1D:76:4E:55:F6:D8:FE:6E:0C:2F:D9
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 1BACAA8C
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/couxfphy0bwqHXZOVfbY_m4ML9k.roa
Signing time: Sat 01 Jan 2022 13:55:48 +0000
ROA not before: Sat 01 Jan 2022 13:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200094
IP address blocks: 81.21.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464300684 (0x1bacaa8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jan 1 13:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=728bb17e9872d1bc2a1d764e55f6d8fe6e0c2fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:20:e0:60:d0:e9:67:96:65:3a:4b:eb:b1:
d8:e3:c1:4e:81:96:72:2e:de:90:70:2e:60:2c:16:
fa:d9:b3:f5:28:08:54:7d:6d:09:79:03:a9:b0:de:
7a:22:72:a9:40:dd:cb:72:1e:22:53:73:78:3d:4e:
d3:f6:22:e2:31:4b:dc:62:61:04:13:7b:a2:f1:09:
ec:7c:1c:25:c9:a4:a7:0c:63:9b:a8:07:7c:8e:a3:
16:34:80:d6:9d:93:e8:3b:59:f4:9e:7e:62:10:66:
e2:41:53:f8:83:0f:1b:80:55:4d:9d:1b:8b:59:06:
e3:24:d5:16:9f:ae:24:6e:e0:5b:46:08:24:6f:92:
51:17:a2:a0:fb:88:19:b2:1e:35:9b:91:59:71:13:
3e:b0:e6:ce:fd:42:2e:89:8a:69:a7:6a:c7:ad:eb:
59:72:39:b9:9e:f0:47:a9:b6:c3:25:6a:7c:90:3c:
7f:42:9a:c0:72:4f:5f:e0:3f:d8:68:41:a8:00:fc:
89:5a:bf:77:b6:cc:63:35:14:c1:fd:3a:13:64:84:
67:df:1e:7f:64:d6:30:80:82:8e:d0:e0:91:e4:16:
20:0a:11:fd:02:aa:a7:dc:f5:43:a5:ef:10:ed:3c:
0a:2e:30:a7:c3:03:9b:1d:26:87:29:d8:52:01:84:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:B1:7E:98:72:D1:BC:2A:1D:76:4E:55:F6:D8:FE:6E:0C:2F:D9
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/couxfphy0bwqHXZOVfbY_m4ML9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:53:83:1a:46:71:15:dc:a2:a2:fb:d4:2c:0f:cd:37:1e:84:
f6:27:0b:53:b9:7a:7d:51:e0:5b:0a:c4:b2:d5:13:01:3c:a9:
5d:92:d4:b4:0c:97:29:23:e4:31:1a:17:72:ba:31:b5:1e:2e:
4f:54:41:97:24:4d:ab:bc:e1:a9:60:8a:bc:9e:94:2b:b2:46:
ae:97:31:fe:ed:38:13:9b:49:09:49:54:5a:39:00:83:13:a7:
0a:06:e6:99:bb:04:c2:49:40:c4:8d:0e:ab:3c:dc:30:8b:86:
1f:0f:20:1a:42:7f:c1:fb:d7:5a:b6:ca:b6:af:f2:d5:1c:64:
b7:ab:4c:2c:32:ed:4e:97:2b:f4:c4:60:d5:79:e5:c2:f9:d5:
e9:f3:dc:bf:17:fb:b4:21:d2:3b:54:7c:31:8a:96:2f:16:ed:
cb:ef:ab:f5:2a:14:04:5b:25:42:99:72:0e:41:81:28:e7:fe:
bf:b4:5c:d7:1a:10:6b:c9:57:16:f1:80:90:14:ad:a6:85:41:
58:92:34:09:b5:96:21:ac:fc:eb:53:0c:74:f9:6f:6b:38:fc:
80:2d:a4:f1:ce:4e:6d:88:60:1a:7a:a0:78:ae:90:ed:b1:ac:
d9:db:30:ad:13:f7:61:26:00:56:49:ee:a5:af:e4:a5:9c:e0:
5a:04:33:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEG6yqjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTFlNGIxNzllMDk1M2I5ZWNjNTg1YWQ5ODU5YTAwYmUzNTY4MDAxMB4XDTIyMDEw
MTEzNTU0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzI4YmIxN2U5ODcy
ZDFiYzJhMWQ3NjRlNTVmNmQ4ZmU2ZTBjMmZkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXYIOBg0OlnlmU6S+ux2OPBToGWci7ekHAuYCwW+tmz9SgI
VH1tCXkDqbDeeiJyqUDdy3IeIlNzeD1O0/Yi4jFL3GJhBBN7ovEJ7HwcJcmkpwxj
m6gHfI6jFjSA1p2T6DtZ9J5+YhBm4kFT+IMPG4BVTZ0bi1kG4yTVFp+uJG7gW0YI
JG+SUReioPuIGbIeNZuRWXETPrDmzv1CLomKaadqx63rWXI5uZ7wR6m2wyVqfJA8
f0KawHJPX+A/2GhBqAD8iVq/d7bMYzUUwf06E2SEZ98ef2TWMICCjtDgkeQWIAoR
/QKqp9z1Q6XvEO08Ci4wp8MDmx0mhynYUgGEONUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRyi7F+mHLRvCoddk5V9tj+bgwv2TAfBgNVHSMEGDAWgBSZHksXnglTuezF
ha2YWaAL41aAATAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21SNUxGNTRKVTduc3hZV3RtRm1nQy1OV2dBRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvYmZkZGE5LTI3NDItNGIyZi04NWI2LWVmOWM5NTI3NjkzMi8x
L2NvdXhmcGh5MGJ3cUhYWk9WZmJZX200TUw5ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
YmZkZGE5LTI3NDItNGIyZi04NWI2LWVmOWM5NTI3NjkzMi8xL21SNUxGNTRKVTdu
c3hZV3RtRm1nQy1OV2dBRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEVzjANBgkqhkiG9w0BAQsFAAOC
AQEAL1ODGkZxFdyiovvULA/NNx6E9icLU7l6fVHgWwrEstUTATypXZLUtAyXKSPk
MRoXcroxtR4uT1RBlyRNq7zhqWCKvJ6UK7JGrpcx/u04E5tJCUlUWjkAgxOnCgbm
mbsEwklAxI0OqzzcMIuGHw8gGkJ/wfvXWrbKtq/y1Rxkt6tMLDLtTpcr9MRg1Xnl
wvnV6fPcvxf7tCHSO1R8MYqWLxbty++r9SoUBFslQplyDkGBKOf+v7Rc1xoQa8lX
FvGAkBStpoVBWJI0CbWWIaz861MMdPlvazj8gC2k8c5ObYhgGnqgeK6Q7bGs2dsw
rRP3YSYAVknupa/kpZzgWgQzJQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:32 2024 by rpki-client on console-ams.rpki-client.org