Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/Az8e1L33ajOB65JbZ5Ybdtxf8aE.roa
File: Az8e1L33ajOB65JbZ5Ybdtxf8aE.roa (raw, json)
Hash identifier: GaLExpYolNcqUZQhsNGr269AcF6arf612LBtbbKivbo=
Subject key identifier: 03:3F:1E:D4:BD:F7:6A:33:81:EB:92:5B:67:96:1B:76:DC:5F:F1:A1
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 018322448DF5B7760C2E962F93993B864D0F
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/Az8e1L33ajOB65JbZ5Ybdtxf8aE.roa
Signing time: Fri 09 Sep 2022 12:41:01 +0000
ROA not before: Fri 09 Sep 2022 12:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210892
IP address blocks: 79.135.124.0/24 maxlen: 24
79.135.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:44:8d:f5:b7:76:0c:2e:96:2f:93:99:3b:86:4d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Sep 9 12:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=033f1ed4bdf76a3381eb925b67961b76dc5ff1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:b1:6b:68:8c:05:3c:67:c1:15:54:b2:26:
ac:20:b4:27:5f:04:7a:e2:11:94:9f:c2:6b:40:cf:
c2:18:ee:d0:a4:f0:2f:3e:3c:bd:b7:d7:77:3c:a2:
9c:3c:01:ab:6f:7e:41:c0:7c:b6:3b:55:2a:66:cc:
39:bb:c2:15:77:42:86:41:56:2c:20:b5:81:e6:1b:
e0:83:80:c2:ef:e3:1a:00:dc:3b:f7:41:6a:d0:e2:
94:b1:47:9b:e5:6a:e6:a8:ea:86:be:95:d5:e1:65:
d1:ad:fe:33:8c:29:06:24:b9:5d:84:5d:d6:ae:5f:
2a:9b:59:e3:71:43:d2:17:09:fa:72:4d:36:b7:e2:
6a:15:f5:eb:41:4c:be:8c:81:79:64:cd:df:af:20:
1b:c7:e0:c4:53:7d:75:7d:06:3f:62:3c:f3:ee:ee:
9a:be:31:bb:5e:fb:ee:49:31:9b:0c:49:2e:0e:f7:
46:77:6f:7a:d7:58:9e:1c:d5:a7:05:ec:d4:c5:93:
9f:52:b2:a3:2f:2f:1f:36:3c:7c:49:d0:cc:85:ad:
5c:b1:84:7f:c3:df:27:62:92:39:eb:ec:50:a5:db:
bc:df:67:da:56:67:f1:71:7f:20:4f:14:42:37:5b:
b1:9a:31:11:2c:ee:99:86:48:81:c8:8a:30:fd:c1:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:1E:D4:BD:F7:6A:33:81:EB:92:5B:67:96:1B:76:DC:5F:F1:A1
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/Az8e1L33ajOB65JbZ5Ybdtxf8aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.124.0/24
79.135.126.0/24
Signature Algorithm: sha256WithRSAEncryption
84:30:e6:80:85:4f:36:b9:b8:25:69:0a:0e:64:70:fb:bd:17:
eb:f5:01:75:7b:81:95:8d:fa:d3:ab:f0:87:1b:2e:63:38:bb:
4e:b9:24:fd:7e:05:76:0e:8e:71:ee:3d:9b:f2:f9:d6:7c:1c:
78:38:fa:e4:ec:ad:0f:86:58:cf:d3:ec:af:ec:8b:c0:1c:7e:
00:ec:10:af:c6:0d:79:66:50:de:1b:9c:df:83:6d:49:28:72:
c8:78:0e:24:fb:26:0a:56:d5:d1:ea:16:05:0f:51:84:c5:7b:
42:f9:6c:b1:62:f7:c2:9e:ff:a1:61:3e:9e:e0:58:d4:e1:bd:
40:43:d9:2c:81:bd:cd:6c:c8:ab:b3:ae:a2:a4:b0:7b:b4:e5:
09:a6:fd:9b:1d:75:5c:8a:d4:6c:df:b9:73:3f:ac:3c:6a:ff:
ad:6a:31:ce:e4:d9:9b:de:3a:7c:84:de:b9:36:c3:cb:44:46:
84:f0:5e:05:20:bb:73:9f:7b:50:39:38:ad:ec:2a:1b:20:9c:
4d:75:e0:17:2a:a1:74:fc:f2:e9:01:3b:3e:2f:85:b3:27:89:
85:b3:e1:a1:f2:9f:51:c7:a1:4a:93:65:69:0b:61:dd:bd:03:
46:1d:27:12:99:95:27:e4:f8:b9:c3:38:88:f1:c1:42:7b:74:
d2:8f:40:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMiRI31t3YMLpYvk5k7hk0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDU5M2IxYzg3YjgxNzM5ZWM0MTkxMDI5NWJmMzg1ZjJj
OWE5OTIwHhcNMjIwOTA5MTI0MTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzNmMWVkNGJkZjc2YTMzODFlYjkyNWI2Nzk2MWI3NmRjNWZmMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3exa2iMBTxnwRVUsiasILQnXwR6
4hGUn8JrQM/CGO7QpPAvPjy9t9d3PKKcPAGrb35BwHy2O1UqZsw5u8IVd0KGQVYs
ILWB5hvgg4DC7+MaANw790Fq0OKUsUeb5WrmqOqGvpXV4WXRrf4zjCkGJLldhF3W
rl8qm1njcUPSFwn6ck02t+JqFfXrQUy+jIF5ZM3fryAbx+DEU311fQY/Yjzz7u6a
vjG7XvvuSTGbDEkuDvdGd29611ieHNWnBezUxZOfUrKjLy8fNjx8SdDMha1csYR/
w98nYpI56+xQpdu832faVmfxcX8gTxRCN1uxmjERLO6ZhkiByIow/cGR2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAM/HtS992ozgeuSW2eWG3bcX/GhMB8GA1UdIwQY
MBaAFPLVk7HIe4FznsQZEClb84XyyamSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTIt
OWI4ZDY4ZWU4N2ZjLzEvQXo4ZTFMMzNhak9CNjVKYlo1WWJkdHhmOGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTItOWI4ZDY4ZWU4N2Zj
LzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4d8AwQA
T4d+MA0GCSqGSIb3DQEBCwUAA4IBAQCEMOaAhU82ubglaQoOZHD7vRfr9QF1e4GV
jfrTq/CHGy5jOLtOuST9fgV2Do5x7j2b8vnWfBx4OPrk7K0PhljP0+yv7IvAHH4A
7BCvxg15ZlDeG5zfg21JKHLIeA4k+yYKVtXR6hYFD1GExXtC+WyxYvfCnv+hYT6e
4FjU4b1AQ9ksgb3NbMirs66ipLB7tOUJpv2bHXVcitRs37lzP6w8av+tajHO5Nmb
3jp8hN65NsPLREaE8F4FILtzn3tQOTit7CobIJxNdeAXKqF0/PLpATs+L4WzJ4mF
s+Gh8p9Rx6FKk2VpC2HdvQNGHScSmZUn5Pi5wziI8cFCe3TSj0A9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:04 2023 by rpki-client on console-fra.rpki-client.org