Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/dazB4kEjA7gdxfbm_41AVGTQSL0.roa
File: dazB4kEjA7gdxfbm_41AVGTQSL0.roa (raw, json)
Hash identifier: aOLLByPdxvm202+V8OG3jHTMkK8jmZoAuY9kz/ZQ+/0=
Subject key identifier: 75:AC:C1:E2:41:23:03:B8:1D:C5:F6:E6:FF:8D:40:54:64:D0:48:BD
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 08FA914A
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/dazB4kEjA7gdxfbm_41AVGTQSL0.roa
Signing time: Sat 01 Jan 2022 12:57:42 +0000
ROA not before: Sat 01 Jan 2022 12:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209217
IP address blocks: 92.119.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150638922 (0x8fa914a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 1 12:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75acc1e2412303b81dc5f6e6ff8d405464d048bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:a5:b3:51:bc:3c:8c:c4:37:d7:23:19:15:
36:90:37:0a:d6:bd:28:77:c7:d6:a3:5f:b9:5d:1d:
3e:f4:d8:20:2f:f4:0c:c0:fb:d9:d5:99:6c:c7:d2:
0f:ca:0f:31:6d:54:0e:65:51:25:d1:a2:cd:96:a6:
50:ce:d0:0a:f1:ca:a6:1a:ce:3a:68:7f:4b:de:ab:
21:48:5b:61:08:fb:d5:e3:3e:d2:47:65:87:f4:7d:
e6:26:eb:1a:5c:de:9e:52:6e:7a:66:59:03:2a:13:
b5:ae:d5:92:2f:7e:6f:9b:dc:4a:70:b7:db:27:8b:
f6:c6:8f:f7:07:9c:1f:46:b1:51:77:21:82:80:e6:
36:b8:9e:ab:31:4b:a3:d2:a7:e6:8f:22:12:1f:4c:
cd:b5:ec:f4:ab:e1:c1:43:f7:ea:26:38:a5:2c:b6:
40:ec:12:57:2a:8d:cd:4d:0a:b6:6c:1f:4b:41:bf:
de:31:5d:8d:fc:21:c7:98:b0:de:d1:97:0e:32:29:
2c:fe:4d:57:31:5c:64:56:12:34:98:46:a0:19:9e:
47:89:c2:b1:77:08:a9:b8:4b:68:cf:4e:60:13:28:
a8:c8:71:98:0e:88:8d:fd:9e:db:03:40:2e:f1:56:
e0:e8:bf:14:f8:2c:be:7e:a9:db:74:cc:c8:8d:5b:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:C1:E2:41:23:03:B8:1D:C5:F6:E6:FF:8D:40:54:64:D0:48:BD
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/dazB4kEjA7gdxfbm_41AVGTQSL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.219.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f6:e2:9b:62:77:c4:42:e4:64:fb:35:aa:4a:1d:a2:19:dc:
3a:9f:4d:a1:e7:ef:61:f8:9e:9e:8d:63:5e:92:bc:e2:a5:8b:
d3:e7:02:de:9d:88:f6:2b:87:9e:db:df:d8:0b:b8:d1:a9:7c:
f3:4e:eb:d4:af:12:06:0a:8c:58:4b:68:ae:d8:5c:0a:f2:f4:
4d:fd:db:ae:8b:28:1a:8c:55:3c:18:e7:b2:70:89:e5:d8:a7:
d3:84:03:ce:13:a0:13:27:b3:3d:88:9e:ea:68:64:2b:72:78:
87:8c:2b:ac:a3:4b:4b:bf:4a:bb:1d:9c:9d:bb:ef:7e:bc:03:
3f:15:fe:f4:7f:21:cb:8e:ff:05:0f:a1:5a:f7:f5:8a:59:3e:
43:37:ba:80:07:91:c3:70:a3:77:2f:9c:00:01:de:63:d2:97:
f0:27:3c:5a:ec:7e:ff:6e:c3:8f:71:e3:c8:36:7d:9d:51:4e:
3d:41:60:93:83:fa:9c:a1:64:b0:df:80:72:63:bb:61:33:e4:
80:30:7d:80:0b:5d:9a:9b:00:46:7c:55:58:be:bd:88:70:97:
4f:fa:be:db:3e:6e:f3:14:8d:bd:d9:13:b1:34:72:e4:af:36:
c2:77:e4:8a:59:8b:cc:c2:03:70:89:ba:86:21:16:c1:e6:b1:
25:64:7c:d7
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECPqRSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGQzZTlkYWVkYjZiYTQyNmI2ODE2ZDFjOTBmMzc5MjIzYmU3NTc2MB4XDTIyMDEw
MTEyNTc0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzVhY2MxZTI0MTIz
MDNiODFkYzVmNmU2ZmY4ZDQwNTQ2NGQwNDhiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAORMpbNRvDyMxDfXIxkVNpA3Cta9KHfH1qNfuV0dPvTYIC/0
DMD72dWZbMfSD8oPMW1UDmVRJdGizZamUM7QCvHKphrOOmh/S96rIUhbYQj71eM+
0kdlh/R95ibrGlzenlJuemZZAyoTta7Vki9+b5vcSnC32yeL9saP9wecH0axUXch
goDmNrieqzFLo9Kn5o8iEh9MzbXs9KvhwUP36iY4pSy2QOwSVyqNzU0KtmwfS0G/
3jFdjfwhx5iw3tGXDjIpLP5NVzFcZFYSNJhGoBmeR4nCsXcIqbhLaM9OYBMoqMhx
mA6Ijf2e2wNALvFW4Oi/FPgsvn6p23TMyI1bhlkCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBR1rMHiQSMDuB3F9ub/jUBUZNBIvTAfBgNVHSMEGDAWgBT40+na7ba6Qmto
FtHJDzeSI751djAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtTlBwMnUyMnVrSnJhQmJSeVE4M2tpTy1kWFkuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzA5LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0ZjMv
MS9kYXpCNGtFakE3Z2R4ZmJtXzQxQVZHVFFTTDAucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5
LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0ZjMvMS8xLU5QcDJ1MjJ1
a0pyYUJiUnlRODNraU8tZFhZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHfbMA0GCSqGSIb3DQEBCwUA
A4IBAQBn9uKbYnfEQuRk+zWqSh2iGdw6n02h5+9h+J6ejWNekrzipYvT5wLenYj2
K4ee29/YC7jRqXzzTuvUrxIGCoxYS2iu2FwK8vRN/duuiygajFU8GOeycInl2KfT
hAPOE6ATJ7M9iJ7qaGQrcniHjCuso0tLv0q7HZydu+9+vAM/Ff70fyHLjv8FD6Fa
9/WKWT5DN7qAB5HDcKN3L5wAAd5j0pfwJzxa7H7/bsOPcePINn2dUU49QWCTg/qc
oWSw34ByY7thM+SAMH2AC12amwBGfFVYvr2IcJdP+r7bPm7zFI292ROxNHLkrzbC
d+SKWYvMwgNwibqGIRbB5rElZHzX
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net