Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7dYq2IEtYsYgmSpcRploKw7cXvw.roa
File: 7dYq2IEtYsYgmSpcRploKw7cXvw.roa (raw, json)
Hash identifier: MySX1hjciG8cQgz6G0G3ELIqhV0tPPaggjr2u2zxN/0=
Subject key identifier: ED:D6:2A:D8:81:2D:62:C6:20:99:2A:5C:46:99:68:2B:0E:DC:5E:FC
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 7B6E93
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7dYq2IEtYsYgmSpcRploKw7cXvw.roa
Signing time: Thu 24 Mar 2022 08:03:51 +0000
ROA not before: Thu 24 Mar 2022 08:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204259
IP address blocks: 212.110.159.0/24 maxlen: 24
185.76.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8089235 (0x7b6e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 24 08:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edd62ad8812d62c620992a5c4699682b0edc5efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:6b:e5:3e:dd:16:57:05:e3:b5:2f:f3:fb:
6f:bd:11:79:e9:b0:5e:ec:47:b6:a1:c1:f2:f3:3e:
8a:f7:4a:ed:45:1e:9d:d3:f2:e6:9b:12:c3:33:cf:
2a:67:24:bf:18:52:47:0b:e9:d3:64:30:97:d7:a7:
55:e1:53:aa:c3:29:dc:d6:83:e9:5f:4e:53:dc:94:
85:e3:c1:c6:22:60:16:6b:13:c1:6f:83:b8:2b:09:
b5:df:d5:9f:75:a2:8e:5e:bf:2f:23:1d:19:ff:b1:
54:6f:cf:6f:67:c0:ed:f2:32:a5:a7:a5:2e:3e:a6:
c9:93:63:7f:85:08:df:5f:22:b7:17:d2:92:6d:89:
a4:24:e0:e6:3c:71:68:28:74:35:7a:4c:0c:87:bc:
8b:d5:57:08:a8:fd:b8:38:51:a0:9d:5f:0d:a3:68:
de:89:12:6d:c1:44:8c:15:96:f0:3a:01:a6:5b:59:
cd:84:27:80:5d:3f:bb:ee:0f:eb:f9:ef:0f:38:b7:
f7:3d:32:1e:fa:32:8e:ed:43:cc:18:a4:f9:2c:f3:
f7:a1:79:20:11:fb:db:e9:dd:d2:6e:88:09:2a:8f:
51:22:89:e4:b5:b0:a6:68:71:5d:a8:cd:5c:a5:91:
fc:cf:34:0e:6f:12:e0:4a:c3:8e:4d:c0:61:e0:78:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D6:2A:D8:81:2D:62:C6:20:99:2A:5C:46:99:68:2B:0E:DC:5E:FC
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7dYq2IEtYsYgmSpcRploKw7cXvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.83.0/24
212.110.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ec:50:aa:47:ea:69:a6:a0:69:08:71:f4:70:75:94:82:cb:
a3:d5:43:02:6f:c6:5e:a3:45:af:97:b8:c1:a8:f5:c8:09:4e:
a2:40:3b:80:cb:44:d1:d1:7c:42:74:e9:e2:5e:b5:de:49:06:
a5:3a:c7:b1:7d:fa:af:71:58:21:6e:9d:15:e0:99:56:8a:82:
bb:77:a2:46:12:01:87:cb:10:d8:20:fe:de:1e:24:d4:15:0f:
12:3a:21:e6:0b:e5:dc:97:79:3a:a7:0b:ef:06:95:dd:79:9b:
64:bc:25:66:39:ec:cb:cf:28:c3:c5:cb:06:d8:4d:f7:73:7e:
b3:32:fb:f5:8f:ad:c8:ff:e7:91:19:3f:ac:6b:94:42:74:ed:
39:c4:ed:07:b4:ce:97:dc:92:0a:f0:f3:ed:32:65:7d:e6:62:
11:47:5c:8d:8e:b1:b9:4b:a1:fe:51:db:12:fc:44:da:96:a1:
98:5e:16:19:a1:3d:e1:12:56:58:f7:ea:78:b3:04:67:26:79:
c6:27:5d:60:e7:f8:f9:8f:df:a9:f7:dc:8d:7c:74:27:84:00:
7d:ae:66:d0:ff:98:24:5e:0d:ad:3e:56:1d:39:80:e2:df:48:
3e:85:42:26:9d:ed:36:e7:53:74:2e:0d:3e:a1:06:fa:74:16:
15:2b:de:3f
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDe26TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
MWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVhZGZhMDAwHhcNMjIwMzI0
MDgwMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlZGQ2MmFkODgxMmQ2
MmM2MjA5OTJhNWM0Njk5NjgyYjBlZGM1ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt8Rr5T7dFlcF47Uv8/tvvRF56bBe7Ee2ocHy8z6K90rtRR6d
0/LmmxLDM88qZyS/GFJHC+nTZDCX16dV4VOqwync1oPpX05T3JSF48HGImAWaxPB
b4O4Kwm139WfdaKOXr8vIx0Z/7FUb89vZ8Dt8jKlp6UuPqbJk2N/hQjfXyK3F9KS
bYmkJODmPHFoKHQ1ekwMh7yL1VcIqP24OFGgnV8No2jeiRJtwUSMFZbwOgGmW1nN
hCeAXT+77g/r+e8POLf3PTIe+jKO7UPMGKT5LPP3oXkgEfvb6d3SbogJKo9RIonk
tbCmaHFdqM1cpZH8zzQObxLgSsOOTcBh4HguqwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFO3WKtiBLWLGIJkqXEaZaCsO3F78MB8GA1UdIwQYMBaAFM8d9mZ9o45XolsZ
RfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
engzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJjLzEv
N2RZcTJJRXRZc1lnbVNwY1JwbG9LdzdjWHZ3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9l
NTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVp
V3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUxTAwQA1G6fMA0GCSqGSIb3DQEB
CwUAA4IBAQAr7FCqR+pppqBpCHH0cHWUgsuj1UMCb8Zeo0Wvl7jBqPXICU6iQDuA
y0TR0XxCdOniXrXeSQalOsexffqvcVghbp0V4JlWioK7d6JGEgGHyxDYIP7eHiTU
FQ8SOiHmC+Xcl3k6pwvvBpXdeZtkvCVmOezLzyjDxcsG2E33c36zMvv1j63I/+eR
GT+sa5RCdO05xO0HtM6X3JIK8PPtMmV95mIRR1yNjrG5S6H+UdsS/ETalqGYXhYZ
oT3hElZY9+p4swRnJnnGJ11g5/j5j9+p99yNfHQnhAB9rmbQ/5gkXg2tPlYdOYDi
30g+hUImne0251N0Lg0+oQb6dBYVK94/
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:03 2025 by rpki-client