Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/9LAb09DonNFA17DBtJ9w3SsjBDI.roa
File: 9LAb09DonNFA17DBtJ9w3SsjBDI.roa (raw, json)
Hash identifier: Kij1p0Nwh8JWHXz3Wvo+RZK5PNaKE0LqY2hYljkSw5Q=
Subject key identifier: F4:B0:1B:D3:D0:E8:9C:D1:40:D7:B0:C1:B4:9F:70:DD:2B:23:04:32
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: C86A86
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/9LAb09DonNFA17DBtJ9w3SsjBDI.roa
Signing time: Mon 11 Apr 2022 12:50:02 +0000
ROA not before: Mon 11 Apr 2022 12:50:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64425
IP address blocks: 2.59.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13134470 (0xc86a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Apr 11 12:50:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4b01bd3d0e89cd140d7b0c1b49f70dd2b230432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:92:6f:d1:e0:87:13:db:b1:bd:ce:34:2f:
e5:7d:47:9a:07:a7:68:50:c2:1a:c5:53:a0:65:f5:
a0:08:ad:78:ae:8f:9b:79:cf:77:fc:59:39:35:65:
d8:bf:1f:56:6b:e4:82:b3:10:cf:24:f0:e3:54:59:
13:7f:9e:b5:4f:a6:a1:f8:73:1c:70:0b:bd:5f:97:
11:44:c6:96:0e:d9:d0:5c:77:4f:13:b3:b3:c1:cb:
af:33:34:a2:94:39:de:cd:3e:2c:d9:a0:c4:29:ce:
b4:fd:84:dd:02:ef:16:cb:a8:08:90:0a:6c:c0:ac:
ef:af:e2:77:34:6d:c6:0c:5a:94:67:17:56:00:42:
28:2f:ac:01:bb:46:d0:9d:1b:e2:a5:17:e5:5a:f5:
32:c4:ae:86:c3:6c:c9:1c:49:b4:f5:77:72:1d:6f:
0c:de:4a:23:b3:29:9a:e9:10:18:33:6a:d3:38:ec:
21:63:eb:1d:88:4c:92:d2:67:ea:e9:9b:b4:31:0e:
a5:83:36:a1:1e:b8:b3:23:ed:dc:a6:0d:48:5e:6c:
9b:c5:70:53:06:5d:a7:e3:8f:ac:61:db:4c:fa:76:
db:74:a6:35:60:36:8b:ec:87:73:28:e3:97:0a:e9:
4d:48:89:76:f1:9c:2c:6a:6a:e5:b5:23:06:72:b7:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B0:1B:D3:D0:E8:9C:D1:40:D7:B0:C1:B4:9F:70:DD:2B:23:04:32
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/9LAb09DonNFA17DBtJ9w3SsjBDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.183.0/24
Signature Algorithm: sha256WithRSAEncryption
10:47:e0:0c:32:70:68:c6:be:a3:ee:f3:c7:6a:e1:a1:8c:d6:
14:84:af:b1:24:62:8d:84:08:76:1c:e3:e0:73:da:08:ea:04:
c9:2f:6f:aa:af:58:db:53:6f:30:ee:8c:0b:6e:47:e8:28:83:
52:c6:73:cf:75:0a:62:22:53:eb:78:52:f8:94:68:28:8a:98:
5a:4c:d4:72:3c:5c:1c:97:3e:1e:90:61:7f:a3:2f:d4:53:84:
6d:a4:3c:ce:fc:d4:48:7d:af:98:91:c2:cb:19:19:1d:62:68:
de:71:74:40:26:4b:a7:c3:61:86:4b:27:3c:8d:12:83:c2:54:
ae:05:39:6f:f3:cb:6f:71:7c:f8:72:32:f6:d6:ba:b1:a5:aa:
d3:f4:b8:03:d3:dd:a2:ba:79:74:16:45:6c:45:07:97:fe:29:
62:01:3e:95:93:20:45:71:41:dd:d1:75:cc:84:37:2d:c8:16:
81:ae:cf:3c:c9:f6:e0:54:9e:20:82:08:19:69:26:fc:52:8c:
40:03:d0:fc:af:43:18:ff:9e:c1:11:4e:eb:80:c4:99:4c:86:
69:07:de:8c:59:a7:c3:ca:a1:0d:f3:5c:f4:52:d2:e3:8f:ab:
4c:2b:03:92:15:bb:c9:58:9a:45:35:fd:02:f1:0b:da:b3:26:
dd:7d:7a:45
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMhqhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTdmMDM2ZTI1OTIzOTFmYjQ1YTNkZDMzY2FmMGIwNzk1Njk3M2NmMB4XDTIyMDQx
MTEyNTAwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjRiMDFiZDNkMGU4
OWNkMTQwZDdiMGMxYjQ5ZjcwZGQyYjIzMDQzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8nkm/R4IcT27G9zjQv5X1HmgenaFDCGsVToGX1oAiteK6P
m3nPd/xZOTVl2L8fVmvkgrMQzyTw41RZE3+etU+mofhzHHALvV+XEUTGlg7Z0Fx3
TxOzs8HLrzM0opQ53s0+LNmgxCnOtP2E3QLvFsuoCJAKbMCs76/idzRtxgxalGcX
VgBCKC+sAbtG0J0b4qUX5Vr1MsSuhsNsyRxJtPV3ch1vDN5KI7MpmukQGDNq0zjs
IWPrHYhMktJn6umbtDEOpYM2oR64syPt3KYNSF5sm8VwUwZdp+OPrGHbTPp223Sm
NWA2i+yHcyjjlwrpTUiJdvGcLGpq5bUjBnK3XN0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT0sBvT0Oic0UDXsMG0n3DdKyMEMjAfBgNVHSMEGDAWgBQafwNuJZI5H7Ra
PdM8rwsHlWlzzzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0duOERiaVdTT1ItMFdqM1RQSzhMQjVWcGM4OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWQvMjRiZTFhLTE2ZGEtNDgxYy04YmNiLTM0MGQ2MjVjNmRiYS8x
LzlMQWIwOURvbk5GQTE3REJ0Sjl3M1NzakJESS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQv
MjRiZTFhLTE2ZGEtNDgxYy04YmNiLTM0MGQ2MjVjNmRiYS8xL0duOERiaVdTT1It
MFdqM1RQSzhMQjVWcGM4OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI7tzANBgkqhkiG9w0BAQsFAAOC
AQEAEEfgDDJwaMa+o+7zx2rhoYzWFISvsSRijYQIdhzj4HPaCOoEyS9vqq9Y21Nv
MO6MC25H6CiDUsZzz3UKYiJT63hS+JRoKIqYWkzUcjxcHJc+HpBhf6Mv1FOEbaQ8
zvzUSH2vmJHCyxkZHWJo3nF0QCZLp8NhhksnPI0Sg8JUrgU5b/PLb3F8+HIy9ta6
saWq0/S4A9Pdorp5dBZFbEUHl/4pYgE+lZMgRXFB3dF1zIQ3LcgWga7PPMn24FSe
IIIIGWkm/FKMQAPQ/K9DGP+ewRFO64DEmUyGaQfejFmnw8qhDfNc9FLS44+rTCsD
khW7yViaRTX9AvEL2rMm3X16RQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-fra.rpki-client.org