Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/7CNImmRZEO558lmVr1zdHifdJ2o.roa
File: 7CNImmRZEO558lmVr1zdHifdJ2o.roa (raw, json)
Hash identifier: qoosiIzWFyR0/lQj7yxXXq6J7RTuBVUsZPnDu/6yi6Q=
Subject key identifier: EC:23:48:9A:64:59:10:EE:79:F2:59:95:AF:5C:DD:1E:27:DD:27:6A
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 01857079B9D7DDBAA3ED3F0DA2771DCBE88C
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/7CNImmRZEO558lmVr1zdHifdJ2o.roa
Signing time: Mon 02 Jan 2023 03:15:03 +0000
ROA not before: Mon 02 Jan 2023 03:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57119
IP address blocks: 185.215.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b9:d7:dd:ba:a3:ed:3f:0d:a2:77:1d:cb:e8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Jan 2 03:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec23489a645910ee79f25995af5cdd1e27dd276a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:20:9b:27:74:95:5b:ff:f0:d5:c8:7b:b2:
94:ed:c9:45:cd:be:00:74:f0:3b:05:de:61:19:c3:
3c:cc:ce:1d:08:d5:7d:48:f2:90:75:88:95:28:1e:
e8:09:22:05:4e:58:1e:cb:b0:1c:84:3e:ca:37:b7:
0d:09:61:4b:be:f8:7e:ae:29:24:0e:fb:7c:0a:4a:
46:d4:28:cb:3c:e8:02:f8:e3:cd:b6:3d:bf:eb:b6:
10:88:45:8c:cb:3a:b6:8a:69:4d:5b:bc:fb:15:a5:
5c:c6:d2:17:ad:3c:21:03:8e:19:37:36:e3:61:c3:
4d:03:39:0b:7f:bd:63:2d:49:1b:0d:24:29:7b:52:
f8:7f:cf:10:09:76:7a:5e:6f:4c:46:36:39:a4:98:
e8:f8:60:53:3c:10:21:fd:90:4c:3a:cf:ff:73:f5:
25:f4:93:c4:d6:4e:ce:6e:c2:b8:f5:04:9f:08:5d:
1f:9f:77:ca:6b:cc:e5:62:8f:66:50:64:19:68:70:
93:e4:f7:b2:b6:5b:80:f4:ac:fc:8e:d1:25:e2:67:
b2:66:5a:77:7a:b9:71:6b:ee:ad:07:e0:3b:ef:51:
a9:4c:15:5a:a2:2d:bc:57:44:23:15:80:96:15:3a:
15:b6:c4:74:88:39:13:e5:e1:3b:77:3c:39:62:06:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:48:9A:64:59:10:EE:79:F2:59:95:AF:5C:DD:1E:27:DD:27:6A
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/7CNImmRZEO558lmVr1zdHifdJ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:b9:a1:18:3e:f3:42:56:14:cb:eb:42:a0:21:ee:bf:5b:0d:
ce:2f:bf:38:95:bd:d7:72:41:e0:42:e4:f3:62:f9:f9:ab:1a:
cb:89:1b:c1:ff:4f:b2:e8:fe:a2:7b:84:60:e8:cb:55:2f:87:
09:1b:c9:4e:93:22:48:62:dd:e3:dd:a6:52:13:b9:25:73:05:
e0:bd:bc:0b:b1:3c:aa:f2:8d:50:12:d3:03:e2:52:6d:b5:95:
fe:c6:93:07:ee:83:8c:a8:a5:9f:a6:57:a7:40:91:e2:ca:e5:
60:21:21:a5:f3:be:86:08:ac:35:91:5b:31:7e:64:cd:57:44:
44:ec:ca:95:8a:66:86:ec:51:08:95:2b:16:3e:c6:33:78:0c:
b6:59:11:70:60:ab:00:99:33:bf:4b:50:09:7d:b4:94:78:16:
63:b5:aa:07:6c:6b:b6:21:55:71:be:21:a3:66:60:03:31:59:
ff:c7:10:35:61:e3:8a:00:56:bd:61:55:5f:e0:4e:42:27:86:
92:9a:e3:74:97:2d:05:8f:76:14:66:39:e0:8e:18:bc:c4:b8:
33:91:99:c1:9f:dc:2a:34:a3:75:11:7e:dc:48:2e:20:0c:bb:
55:d2:ef:30:d8:e6:e3:b1:01:bb:c1:fe:07:fb:55:77:b6:87:
fa:a0:bc:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwebnX3bqj7T8Noncdy+iMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjVhNDBiMjc0YTk2M2U1ZWQzZWYwMmU4Mzk5Y2I5YjFi
YjBjN2IwHhcNMjMwMTAyMDMxNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzIzNDg5YTY0NTkxMGVlNzlmMjU5OTVhZjVjZGQxZTI3ZGQyNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27wgmyd0lVv/8NXIe7KU7clFzb4A
dPA7Bd5hGcM8zM4dCNV9SPKQdYiVKB7oCSIFTlgey7AchD7KN7cNCWFLvvh+rikk
Dvt8CkpG1CjLPOgC+OPNtj2/67YQiEWMyzq2imlNW7z7FaVcxtIXrTwhA44ZNzbj
YcNNAzkLf71jLUkbDSQpe1L4f88QCXZ6Xm9MRjY5pJjo+GBTPBAh/ZBMOs//c/Ul
9JPE1k7ObsK49QSfCF0fn3fKa8zlYo9mUGQZaHCT5PeytluA9Kz8jtEl4meyZlp3
erlxa+6tB+A771GpTBVaoi28V0QjFYCWFToVtsR0iDkT5eE7dzw5Ygao9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwjSJpkWRDuefJZla9c3R4n3SdqMB8GA1UdIwQY
MBaAFIS1pAsnSpY+XtPvAug5nLmxuwx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjct
YTcyMGFmODYxZmVlLzEvN0NOSW1tUlpFTzU1OGxtVnIxemRIaWZkSjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjctYTcyMGFmODYxZmVl
LzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudcYMA0G
CSqGSIb3DQEBCwUAA4IBAQAPuaEYPvNCVhTL60KgIe6/Ww3OL784lb3XckHgQuTz
Yvn5qxrLiRvB/0+y6P6ie4Rg6MtVL4cJG8lOkyJIYt3j3aZSE7klcwXgvbwLsTyq
8o1QEtMD4lJttZX+xpMH7oOMqKWfplenQJHiyuVgISGl876GCKw1kVsxfmTNV0RE
7MqVimaG7FEIlSsWPsYzeAy2WRFwYKsAmTO/S1AJfbSUeBZjtaoHbGu2IVVxviGj
ZmADMVn/xxA1YeOKAFa9YVVf4E5CJ4aSmuN0ly0Fj3YUZjngjhi8xLgzkZnBn9wq
NKN1EX7cSC4gDLtV0u8w2ObjsQG7wf4H+1V3tof6oLyP
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:37 2025 by rpki-client