Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/7rHUdWpyQbFbsaN2YrlqWcmJQrI.roa
File: 7rHUdWpyQbFbsaN2YrlqWcmJQrI.roa (raw, json)
Hash identifier: 5GDmMS//tJNxP6ELKWN3dCwmQBEh01NUbfe9v4/XDfs=
Subject key identifier: EE:B1:D4:75:6A:72:41:B1:5B:B1:A3:76:62:B9:6A:59:C9:89:42:B2
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 0183EF60A561E7402B4E7C012B7278472CCE
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/7rHUdWpyQbFbsaN2YrlqWcmJQrI.roa
Signing time: Wed 19 Oct 2022 08:33:51 +0000
ROA not before: Wed 19 Oct 2022 08:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212138
IP address blocks: 192.145.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:60:a5:61:e7:40:2b:4e:7c:01:2b:72:78:47:2c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: Oct 19 08:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eeb1d4756a7241b15bb1a37662b96a59c98942b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:2c:7d:87:96:9f:79:46:82:0a:55:da:fe:
78:62:d4:b2:be:54:76:77:c3:9d:1c:23:5e:66:0f:
8c:bd:d3:2c:b6:bf:9d:e6:c1:3a:9e:8d:0e:99:09:
c1:9b:83:e3:f2:11:3b:09:42:f1:36:5d:ce:d6:fd:
68:94:e9:a6:45:4e:cf:33:57:60:12:bf:ca:ec:32:
75:ad:11:95:93:c3:97:b8:f6:03:06:ff:ee:16:81:
60:9c:61:45:3f:1b:25:9f:27:9f:b6:90:5c:15:89:
79:71:24:24:38:6c:c1:19:0f:88:27:8b:fe:15:57:
a8:64:1d:bf:e6:00:6c:38:6c:33:57:1b:ee:98:4d:
e5:52:54:8b:7f:28:9b:22:87:e1:bf:c6:61:48:75:
9e:f2:67:78:18:2e:e7:c5:69:4e:b9:59:a0:4d:25:
1b:0f:8e:d2:09:39:9f:82:34:14:7e:e3:4d:44:23:
05:0e:aa:2a:b0:82:8c:e3:62:87:1f:16:94:fa:7e:
15:86:df:3a:07:60:3a:0c:98:4c:4e:1f:b4:03:40:
73:5c:85:b8:04:90:ac:7e:0c:59:f0:ee:3c:1e:3a:
7a:68:69:01:29:16:14:7f:93:cf:7a:fa:6a:20:27:
45:d4:56:da:16:4a:0f:79:fb:bf:f0:ec:38:00:fb:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:D4:75:6A:72:41:B1:5B:B1:A3:76:62:B9:6A:59:C9:89:42:B2
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/7rHUdWpyQbFbsaN2YrlqWcmJQrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.104.0/22
Signature Algorithm: sha256WithRSAEncryption
47:09:2c:d1:51:1a:b5:36:92:3e:2d:e8:e3:11:c0:31:73:4e:
14:a9:34:1d:b5:56:23:e9:d1:e4:7b:e3:85:9c:78:f5:a2:ef:
c6:f9:84:72:be:10:92:b9:6d:7e:af:21:ff:7b:33:e5:cf:23:
72:7b:ba:fe:9f:b2:ad:ef:59:8b:73:b0:0b:08:d9:91:90:ae:
59:97:c6:c9:2a:45:3a:e1:3d:ae:38:8e:ab:89:b6:58:36:1c:
dc:dd:5b:2d:72:d0:b6:a8:05:17:53:a4:a5:a4:4b:92:62:80:
d2:7a:ee:e7:88:b2:98:9e:10:5c:45:e7:6c:c9:66:66:eb:e7:
77:51:56:13:a5:74:58:d7:0d:f1:da:56:46:46:95:ed:8f:57:
7d:b5:d4:9e:dd:ba:93:8f:4f:ed:5d:d4:00:23:60:13:30:5b:
72:55:72:e0:c8:dc:05:0d:ab:34:79:4c:41:8f:14:80:7e:a3:
7e:83:9a:13:fd:1f:47:c6:43:c1:8b:ed:0f:a8:84:6c:f9:37:
1a:e0:bf:0a:70:ba:88:8c:6a:fa:75:5b:f1:6a:bb:86:6d:1e:
37:f0:00:b5:82:fa:6e:59:6c:b1:6d:c8:cf:d4:49:17:cc:25:
be:99:ad:ef:1d:61:18:8b:16:5b:51:2e:3b:79:40:44:b3:7c:
0f:e8:49:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPvYKVh50ArTnwBK3J4RyzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzIwNjZkN2U2Y2E4YWQyZmZhNjJhNjliMDY3OTIzYTQy
ZGY5NmYwHhcNMjIxMDE5MDgzMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWIxZDQ3NTZhNzI0MWIxNWJiMWEzNzY2MmI5NmE1OWM5ODk0MmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIIsfYeWn3lGggpV2v54YtSyvlR2
d8OdHCNeZg+MvdMstr+d5sE6no0OmQnBm4Pj8hE7CULxNl3O1v1olOmmRU7PM1dg
Er/K7DJ1rRGVk8OXuPYDBv/uFoFgnGFFPxslnyeftpBcFYl5cSQkOGzBGQ+IJ4v+
FVeoZB2/5gBsOGwzVxvumE3lUlSLfyibIofhv8ZhSHWe8md4GC7nxWlOuVmgTSUb
D47SCTmfgjQUfuNNRCMFDqoqsIKM42KHHxaU+n4Vht86B2A6DJhMTh+0A0BzXIW4
BJCsfgxZ8O48Hjp6aGkBKRYUf5PPevpqICdF1FbaFkoPefu/8Ow4APudBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6x1HVqckGxW7GjdmK5alnJiUKyMB8GA1UdIwQY
MBaAFEtyBm1+bKitL/pippsGeSOkLflvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQt
MWY2OTkxODc3YjI2LzEvN3JIVWRXcHlRYkZic2FOMllybHFXY21KUXJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQtMWY2OTkxODc3YjI2
LzEvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJFoMA0G
CSqGSIb3DQEBCwUAA4IBAQBHCSzRURq1NpI+LejjEcAxc04UqTQdtVYj6dHke+OF
nHj1ou/G+YRyvhCSuW1+ryH/ezPlzyNye7r+n7Kt71mLc7ALCNmRkK5Zl8bJKkU6
4T2uOI6ribZYNhzc3VstctC2qAUXU6SlpEuSYoDSeu7niLKYnhBcRedsyWZm6+d3
UVYTpXRY1w3x2lZGRpXtj1d9tdSe3bqTj0/tXdQAI2ATMFtyVXLgyNwFDas0eUxB
jxSAfqN+g5oT/R9HxkPBi+0PqIRs+Tca4L8KcLqIjGr6dVvxaruGbR438AC1gvpu
WWyxbcjP1EkXzCW+ma3vHWEYixZbUS47eUBEs3wP6Elp
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net