Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/R07EezJ4tps6fHWFdtRtLJsKMpc.roa
File: R07EezJ4tps6fHWFdtRtLJsKMpc.roa (raw, json)
Hash identifier: is00LwSc6OM+tuhpRh2lnWRiGujkztQZzS++gOu7z3Q=
Subject key identifier: 47:4E:C4:7B:32:78:B6:9B:3A:7C:75:85:76:D4:6D:2C:9B:0A:32:97
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 01833733E3392A97301820FA7BCBA5E53028
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/R07EezJ4tps6fHWFdtRtLJsKMpc.roa
Signing time: Tue 13 Sep 2022 14:14:50 +0000
ROA not before: Tue 13 Sep 2022 14:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9076
IP address blocks: 212.104.0.0/19 maxlen: 19
212.104.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:33:e3:39:2a:97:30:18:20:fa:7b:cb:a5:e5:30:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Sep 13 14:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=474ec47b3278b69b3a7c758576d46d2c9b0a3297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:0e:e5:83:c3:bf:86:0a:9c:8d:5d:64:77:
0d:58:fb:30:5d:bb:88:4a:95:11:02:8c:a6:6d:ed:
a0:e0:52:cd:17:2e:99:80:ee:2c:e5:a8:4f:6d:be:
d6:28:8c:18:ff:ec:a3:69:b3:b5:5a:73:24:f4:b5:
0d:55:24:0d:60:b3:ef:aa:03:c3:d8:ee:31:11:15:
aa:8e:04:98:92:fd:57:52:2b:54:34:ae:34:98:49:
1b:ef:bf:a0:43:81:16:b1:a0:78:24:67:cf:b7:83:
78:4a:6d:e0:74:5b:5a:49:c8:1e:db:59:d0:83:fb:
13:53:30:27:6b:ca:36:09:39:5a:9f:a2:04:c5:c6:
ff:97:23:46:f2:f2:00:f5:ef:b0:2d:6f:f1:eb:8b:
bb:c9:60:47:bc:5c:3d:c0:b3:f8:33:8a:c5:ee:55:
1e:2f:19:4f:c1:11:e1:cf:cf:2b:c5:12:6e:c7:75:
d9:e8:35:57:59:3e:8e:0b:31:4a:ca:b4:e3:10:82:
28:3e:52:7d:84:2f:f1:5f:6d:ea:b9:20:cd:01:a0:
ac:97:4e:45:c1:99:fb:d6:aa:8a:51:65:7a:11:63:
f8:5a:c7:3b:54:24:5c:65:8d:4a:ea:b2:f7:1d:9d:
24:28:c0:9f:0c:d7:e2:58:96:79:8e:5a:d0:c3:45:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:C4:7B:32:78:B6:9B:3A:7C:75:85:76:D4:6D:2C:9B:0A:32:97
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/R07EezJ4tps6fHWFdtRtLJsKMpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0-212.104.47.255
Signature Algorithm: sha256WithRSAEncryption
5b:03:02:7c:d4:0f:a2:0c:80:a2:cc:bb:ad:79:dc:8d:ff:2f:
d4:12:23:89:5b:94:32:39:54:36:ec:3f:dd:ab:c7:8d:77:1c:
91:f9:64:35:42:26:c9:82:12:a8:09:a2:b1:9e:f6:9b:3a:73:
92:8e:da:3c:dc:06:ad:22:59:6e:6c:46:40:51:ef:e5:90:29:
84:d7:d4:fd:99:d3:f9:66:f0:1e:8b:ce:2c:24:d9:3b:72:35:
4c:17:66:00:f8:44:11:38:ca:02:96:ca:44:ad:2e:33:34:68:
07:d3:87:92:18:01:66:ff:14:3a:f2:80:0f:28:b7:d2:bc:4b:
da:40:c7:11:cc:02:ef:7a:21:4d:bf:6b:07:a1:d8:40:25:ab:
d4:86:8d:d0:d8:f3:fe:2c:3f:d5:2a:a5:03:8d:38:b6:4e:d2:
7c:36:96:dc:ec:1a:7d:8d:b6:1c:cb:a7:ff:e7:18:ee:45:85:
83:7f:06:52:c7:d9:1d:e8:a4:a1:92:ac:e8:61:0f:f8:d8:51:
da:c8:db:2d:5a:03:a3:6d:28:63:60:fe:71:78:89:86:73:a3:
58:97:16:e5:67:e8:7c:c7:4c:74:a5:10:ef:53:05:9d:c8:f3:
c9:24:fd:f2:77:12:04:fb:d8:b8:f5:3f:16:3f:3d:c2:4d:81:
74:36:67:fc
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYM3M+M5KpcwGCD6e8ul5TAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjIwOTEzMTQxNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzRlYzQ3YjMyNzhiNjliM2E3Yzc1ODU3NmQ0NmQyYzliMGEzMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpQO5YPDv4YKnI1dZHcNWPswXbuI
SpURAoymbe2g4FLNFy6ZgO4s5ahPbb7WKIwY/+yjabO1WnMk9LUNVSQNYLPvqgPD
2O4xERWqjgSYkv1XUitUNK40mEkb77+gQ4EWsaB4JGfPt4N4Sm3gdFtaScge21nQ
g/sTUzAna8o2CTlan6IExcb/lyNG8vIA9e+wLW/x64u7yWBHvFw9wLP4M4rF7lUe
LxlPwRHhz88rxRJux3XZ6DVXWT6OCzFKyrTjEIIoPlJ9hC/xX23quSDNAaCsl05F
wZn71qqKUWV6EWP4Wsc7VCRcZY1K6rL3HZ0kKMCfDNfiWJZ5jlrQw0UnUQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFEdOxHsyeLabOnx1hXbUbSybCjKXMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvUjA3RWV6SjR0cHM2ZkhXRmR0UnRMSnNLTXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwPUaAME
BNRoIDANBgkqhkiG9w0BAQsFAAOCAQEAWwMCfNQPogyAosy7rXncjf8v1BIjiVuU
MjlUNuw/3avHjXcckflkNUImyYISqAmisZ72mzpzko7aPNwGrSJZbmxGQFHv5ZAp
hNfU/ZnT+WbwHovOLCTZO3I1TBdmAPhEETjKApbKRK0uMzRoB9OHkhgBZv8UOvKA
Dyi30rxL2kDHEcwC73ohTb9rB6HYQCWr1IaN0Njz/iw/1SqlA404tk7SfDaW3Owa
fY22HMun/+cY7kWFg38GUsfZHeikoZKs6GEP+NhR2sjbLVoDo20oY2D+cXiJhnOj
WJcW5WfofMdMdKUQ71MFncjzyST98ncSBPvYuPU/Fj89wk2BdDZn/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:15 2024 by rpki-client on console-fra.rpki-client.org