Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ev5opOMtQO8LUZKf7eHTEXK8dnc.roa
File: ev5opOMtQO8LUZKf7eHTEXK8dnc.roa (raw, json)
Hash identifier: YAO/7sahlDchZDNh6IN2FA3AL/HxRyye2kzzf3wQ088=
Subject key identifier: 7A:FE:68:A4:E3:2D:40:EF:0B:51:92:9F:ED:E1:D3:11:72:BC:76:77
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018433231E41A0E5B85EFE7561AEEA4D9C03
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ev5opOMtQO8LUZKf7eHTEXK8dnc.roa
Signing time: Tue 01 Nov 2022 12:20:50 +0000
ROA not before: Tue 01 Nov 2022 12:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:23:1e:41:a0:e5:b8:5e:fe:75:61:ae:ea:4d:9c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 1 12:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7afe68a4e32d40ef0b51929fede1d31172bc7677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:4e:43:9f:50:88:69:7f:77:b2:95:47:c5:
7d:e2:b4:bb:f2:87:51:60:66:cf:3e:b1:a2:67:60:
55:3d:a4:59:fe:02:9e:1c:bc:d0:bd:fa:3c:9e:d4:
7a:e7:65:bd:88:ab:a5:54:bb:95:a4:49:9f:29:9a:
86:6b:16:62:03:48:25:75:e0:f1:73:0a:6a:6b:47:
2c:0c:43:76:1a:49:d4:e7:91:ab:bb:ae:42:7f:42:
3f:83:96:7f:35:58:cc:d4:40:d0:1a:e2:33:ba:d0:
f6:e9:9d:43:b8:fd:f8:ef:35:af:c1:a3:4c:89:d3:
1c:1c:ad:8f:e4:61:c6:fe:1b:f7:33:09:f1:ab:e8:
26:80:3b:8b:42:c8:2e:1c:16:26:27:57:dc:e1:9d:
5d:83:c6:59:e3:27:ea:c9:18:c0:7d:ab:21:37:ec:
c3:d0:48:99:c1:db:1f:62:a9:69:4a:28:3f:92:2b:
d0:4c:b6:6f:b9:0f:88:98:b9:f2:71:3a:51:af:10:
73:00:25:48:76:b5:12:c5:9d:fd:a0:88:c9:17:94:
55:f1:46:70:32:a2:f6:e4:3a:3e:5e:e3:97:44:02:
9f:6e:ff:81:96:f8:a6:82:7a:35:82:dd:af:18:32:
ef:16:df:1f:d5:87:67:2d:1d:f8:60:0b:e4:2e:6d:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FE:68:A4:E3:2D:40:EF:0B:51:92:9F:ED:E1:D3:11:72:BC:76:77
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ev5opOMtQO8LUZKf7eHTEXK8dnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:09:4e:f2:e9:df:65:88:ca:7d:c7:1b:b4:90:25:2d:3b:f9:
aa:c9:e2:35:a5:7c:bd:04:4b:5d:12:8b:03:83:82:5b:d2:23:
db:c4:98:c8:19:2d:ed:d5:ae:fc:8b:b6:57:1a:71:b0:b1:ed:
55:e1:d6:dc:7a:67:26:c3:69:9b:8a:10:bf:f4:a7:5a:4d:f0:
df:92:85:61:90:bc:35:93:07:50:88:e5:22:bf:20:d8:61:5e:
85:bd:1c:0d:85:02:1e:10:39:57:f5:66:6d:b2:1d:1d:32:7c:
30:65:8f:29:22:f5:d9:2b:4e:3b:bc:58:86:ca:7f:bf:54:91:
28:5f:74:6f:81:0b:e9:09:ea:79:aa:60:5b:7b:b3:51:2d:c7:
00:19:0c:61:9d:f7:f1:ab:d6:be:50:73:54:a9:b4:af:08:83:
f2:f6:61:b6:cb:d1:c8:9d:1e:08:e6:ef:4f:5b:18:81:c8:7e:
95:44:47:16:4f:02:2b:6b:9c:3e:51:29:7b:f0:33:74:21:e4:
e8:ee:70:b0:59:eb:03:9a:54:eb:e1:60:a4:50:22:67:9b:28:
79:9e:18:0e:7d:4a:04:c1:26:de:51:ad:2a:4f:f7:3d:24:d5:
8f:8b:a4:1f:ad:b6:18:92:c3:9b:5f:21:a9:b9:b3:11:9b:8e:
29:f8:d3:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQzIx5BoOW4Xv51Ya7qTZwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjIxMTAxMTIyMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWZlNjhhNGUzMmQ0MGVmMGI1MTkyOWZlZGUxZDMxMTcyYmM3Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMtOQ59QiGl/d7KVR8V94rS78odR
YGbPPrGiZ2BVPaRZ/gKeHLzQvfo8ntR652W9iKulVLuVpEmfKZqGaxZiA0gldeDx
cwpqa0csDEN2GknU55Gru65Cf0I/g5Z/NVjM1EDQGuIzutD26Z1DuP347zWvwaNM
idMcHK2P5GHG/hv3Mwnxq+gmgDuLQsguHBYmJ1fc4Z1dg8ZZ4yfqyRjAfashN+zD
0EiZwdsfYqlpSig/kivQTLZvuQ+ImLnycTpRrxBzACVIdrUSxZ39oIjJF5RV8UZw
MqL25Do+XuOXRAKfbv+Blvimgno1gt2vGDLvFt8f1YdnLR34YAvkLm1DOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHr+aKTjLUDvC1GSn+3h0xFyvHZ3MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvZXY1b3BPTXRRTzhMVVpLZjdlSFRFWEs4ZG5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkvdsMA0G
CSqGSIb3DQEBCwUAA4IBAQCiCU7y6d9liMp9xxu0kCUtO/mqyeI1pXy9BEtdEosD
g4Jb0iPbxJjIGS3t1a78i7ZXGnGwse1V4dbcemcmw2mbihC/9KdaTfDfkoVhkLw1
kwdQiOUivyDYYV6FvRwNhQIeEDlX9WZtsh0dMnwwZY8pIvXZK047vFiGyn+/VJEo
X3RvgQvpCep5qmBbe7NRLccAGQxhnffxq9a+UHNUqbSvCIPy9mG2y9HInR4I5u9P
WxiByH6VREcWTwIra5w+USl78DN0IeTo7nCwWesDmlTr4WCkUCJnmyh5nhgOfUoE
wSbeUa0qT/c9JNWPi6QfrbYYksObXyGpubMRm44p+NOB
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org