Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/p5xwbxGQnWRLbpyjN85pG4BAwG0.roa
File: p5xwbxGQnWRLbpyjN85pG4BAwG0.roa (raw, json)
Hash identifier: 4r/hODQ5ey4v9f4lrMSSEkOHqyQ9zrxOwv+t03atUno=
Subject key identifier: A7:9C:70:6F:11:90:9D:64:4B:6E:9C:A3:37:CE:69:1B:80:40:C0:6D
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 25A62E
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/p5xwbxGQnWRLbpyjN85pG4BAwG0.roa
Signing time: Sat 01 Jan 2022 00:57:12 +0000
ROA not before: Sat 01 Jan 2022 00:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.16.56.0/22 maxlen: 22
193.16.60.0/23 maxlen: 23
193.16.62.0/24 maxlen: 24
193.16.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467374 (0x25a62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jan 1 00:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a79c706f11909d644b6e9ca337ce691b8040c06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:4b:41:50:3b:ed:fe:52:82:5a:df:5d:0b:
87:5f:9a:3c:39:68:b0:17:60:66:21:95:15:8f:80:
01:05:80:c3:75:98:b8:b0:63:b9:dc:0f:d4:1c:45:
8d:ef:cc:43:84:01:9f:4e:f5:91:9f:8e:46:07:37:
b1:a5:d9:fc:71:07:3f:a4:0a:a6:c1:92:3f:be:29:
77:8c:cb:26:c5:35:8f:2d:fa:c9:d9:12:97:bf:26:
77:04:77:d6:df:01:ad:e0:22:de:c8:40:0b:a3:e8:
c8:ee:6f:b6:77:64:53:f8:09:7b:62:ed:56:1f:31:
24:12:0c:28:6e:c5:af:5c:91:1f:53:14:b3:08:9e:
2f:58:b2:30:dd:b7:4b:97:6c:28:ee:9b:e1:6f:15:
33:59:a6:8e:66:d3:11:ea:1d:65:a7:ef:a7:99:71:
d5:19:51:60:b7:72:bd:09:81:74:81:73:5c:e0:90:
a8:2f:ef:df:bb:4b:7a:cf:f5:49:84:dd:d3:a0:bc:
84:99:bf:c6:7e:c0:8f:f5:c4:c2:e2:1a:e5:66:31:
b7:aa:c6:dd:fe:e5:02:24:5a:51:fd:58:9a:ea:33:
34:e3:41:08:20:85:23:3f:1b:0f:54:34:a2:ab:a9:
93:35:eb:61:77:87:1a:7a:a6:1b:90:cb:b7:88:b0:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:70:6F:11:90:9D:64:4B:6E:9C:A3:37:CE:69:1B:80:40:C0:6D
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/p5xwbxGQnWRLbpyjN85pG4BAwG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.48.0-193.16.62.255
Signature Algorithm: sha256WithRSAEncryption
8f:33:79:eb:6d:d7:67:bf:1d:7d:5c:a9:17:3c:8d:56:5c:d8:
fa:5d:a2:a9:50:d4:6c:a9:04:b0:dd:68:34:14:53:ad:19:d0:
1d:79:f9:9f:7b:7e:cd:1b:3f:99:ee:36:ea:7d:34:78:1d:c3:
61:13:2b:a5:e2:2e:ff:83:d6:08:ce:9f:35:03:ca:79:75:22:
a8:48:fa:74:da:c1:9e:34:30:90:20:5b:95:87:7d:4f:86:f3:
b7:4c:86:f9:b0:be:44:2d:71:c2:b9:90:18:58:d2:74:1e:40:
58:d1:4d:34:73:0a:d9:71:de:35:95:c1:e5:6e:dc:68:02:1e:
42:f6:8c:88:7f:70:04:a6:2b:0c:23:ab:b5:72:64:85:83:82:
64:4c:1f:98:5a:bf:95:ad:89:4f:21:49:58:1b:55:6d:60:89:
73:e7:a3:0f:91:d2:d2:24:2e:d7:a8:30:95:79:1a:5f:9e:ee:
9f:fd:97:c1:dc:d6:e4:c1:f0:de:49:ba:02:2d:b0:1e:70:3b:
4b:25:12:30:e9:ed:a5:76:18:09:ee:8d:1f:de:1d:f5:38:93:
9b:6a:e3:28:02:4b:6b:2e:51:c0:d1:18:44:08:ab:19:40:0f:
9d:46:39:47:e0:45:30:65:01:1e:10:71:d4:7a:96:90:d1:09:
f9:af:2b:a0
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIDJaYuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUwMjEzYTkwHhcNMjIwMTAx
MDA1NzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNzljNzA2ZjExOTA5
ZDY0NGI2ZTljYTMzN2NlNjkxYjgwNDBjMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo0FLQVA77f5SglrfXQuHX5o8OWiwF2BmIZUVj4ABBYDDdZi4
sGO53A/UHEWN78xDhAGfTvWRn45GBzexpdn8cQc/pAqmwZI/vil3jMsmxTWPLfrJ
2RKXvyZ3BHfW3wGt4CLeyEALo+jI7m+2d2RT+Al7Yu1WHzEkEgwobsWvXJEfUxSz
CJ4vWLIw3bdLl2wo7pvhbxUzWaaOZtMR6h1lp++nmXHVGVFgt3K9CYF0gXNc4JCo
L+/fu0t6z/VJhN3ToLyEmb/GfsCP9cTC4hrlZjG3qsbd/uUCJFpR/Via6jM040EI
IIUjPxsPVDSiq6mTNethd4caeqYbkMu3iLC9/wIDAQABo4ICETCCAg0wHQYDVR0O
BBYEFKeccG8RkJ1kS26cozfOaRuAQMBtMB8GA1UdIwQYMBaAFHTX2mOSmZlgM5WH
dEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5LzEv
cDV4d2J4R1FuV1JMYnB5ak44NXBHNEJBd0cwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8w
ZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5LzEvZE5mYVk1S1ptV0F6
bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcG
CCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATBEDADBADBED4wDQYJKoZIhvcN
AQELBQADggEBAI8zeett12e/HX1cqRc8jVZc2PpdoqlQ1GypBLDdaDQUU60Z0B15
+Z97fs0bP5nuNup9NHgdw2ETK6XiLv+D1gjOnzUDynl1IqhI+nTawZ40MJAgW5WH
fU+G87dMhvmwvkQtccK5kBhY0nQeQFjRTTRzCtlx3jWVweVu3GgCHkL2jIh/cASm
Kwwjq7VyZIWDgmRMH5hav5WtiU8hSVgbVW1giXPnow+R0tIkLteoMJV5Gl+e7p/9
l8Hc1uTB8N5JugItsB5wO0slEjDp7aV2GAnujR/eHfU4k5tq4ygCS2suUcDRGEQI
qxlAD51GOUfgRTBlAR4QcdR6lpDRCfmvK6A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:51 2024 by rpki-client on console-ams.rpki-client.org