Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/2Dlv3bvm9fax93OmOXOQNBMVjHA.roa
File: 2Dlv3bvm9fax93OmOXOQNBMVjHA.roa (raw, json)
Hash identifier: Vh2J79TqJ4jxxOGfU2WqQA+/jRcPkWOaAWD1REuMGgE=
Subject key identifier: D8:39:6F:DD:BB:E6:F5:F6:B1:F7:73:A6:39:73:90:34:13:15:8C:70
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 33F488E0
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/2Dlv3bvm9fax93OmOXOQNBMVjHA.roa
Signing time: Sat 01 Jan 2022 06:57:43 +0000
ROA not before: Sat 01 Jan 2022 06:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16298
IP address blocks: 217.119.0.0/20 maxlen: 20
185.190.232.0/22 maxlen: 22
2a02:29b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871663840 (0x33f488e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Jan 1 06:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8396fddbbe6f5f6b1f773a63973903413158c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:26:a8:87:d5:f7:3d:0c:79:7c:94:4c:7d:
4b:dd:a6:5c:29:13:65:fe:51:11:ae:6c:ad:1b:40:
22:82:34:c2:e2:f2:67:6b:eb:57:f5:f0:33:cf:bc:
d6:1d:36:ce:40:61:34:ff:6e:8d:74:9a:77:e3:d4:
b1:64:0b:85:c7:49:7c:6e:ee:fa:6e:34:9f:1c:4e:
5f:3c:90:59:99:91:45:35:e3:e1:c2:ac:3f:c4:75:
c6:54:e6:3d:d9:33:a5:e1:3a:e1:33:49:4c:3b:6f:
76:20:0d:15:73:11:80:f1:ce:5e:cd:ab:d3:be:83:
e3:d9:f7:14:4c:48:3f:29:62:16:e8:3d:8e:4a:2d:
b6:ef:ee:70:a0:a2:c5:0a:57:bf:bb:ec:2b:4f:7c:
f1:dd:a9:e1:25:45:fa:e2:1b:0b:ca:b2:5e:76:b3:
9b:cf:40:b3:c2:e8:a0:16:20:65:72:40:0d:a1:5d:
da:65:59:a2:7e:e0:4e:c9:15:d2:ce:76:85:22:6a:
da:33:d4:6e:e7:ef:04:89:2e:34:07:67:8b:60:50:
0c:3b:cb:a1:93:88:5e:6f:50:94:2f:86:27:58:f0:
41:fa:d8:68:6a:3f:ac:75:ca:8a:b5:0a:1a:b9:21:
72:e1:7f:18:7c:fc:a6:3e:dc:86:01:5e:e3:5b:87:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:39:6F:DD:BB:E6:F5:F6:B1:F7:73:A6:39:73:90:34:13:15:8C:70
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/2Dlv3bvm9fax93OmOXOQNBMVjHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.232.0/22
217.119.0.0/20
IPv6:
2a02:29b0::/32
Signature Algorithm: sha256WithRSAEncryption
44:45:40:4b:c3:08:9e:77:8a:08:ad:ff:6f:2f:1f:d4:b0:a4:
0d:fa:c7:58:6e:3e:1c:c3:d7:eb:57:fc:d4:ab:21:d4:49:1a:
16:c3:7f:30:74:43:dd:a5:16:8d:fc:b6:24:77:68:75:a2:f3:
75:d9:ec:71:5a:77:ad:42:be:00:02:51:9c:8e:06:15:76:f4:
a8:5f:ed:1f:dc:05:cd:a9:58:a9:13:dd:f9:92:f2:ef:ed:63:
ea:38:9f:df:29:d3:2c:4a:47:50:2d:33:71:07:18:86:ce:9c:
3b:68:c7:f9:05:d8:c8:36:a6:26:e2:9c:4d:8d:b9:cf:f3:9b:
d5:ab:9b:13:e3:ec:da:32:a8:ad:d1:9c:7d:42:e7:ba:0b:ca:
e1:fa:71:bf:00:3d:72:56:93:eb:b5:e8:e0:b0:ed:cd:0a:e9:
11:91:27:32:dc:0d:af:15:5a:3b:54:79:8f:45:cb:9e:2d:50:
ed:3d:76:cb:c6:61:58:48:54:45:8c:a3:6f:09:df:58:89:54:
bc:aa:2a:26:06:54:c8:61:3f:de:91:e0:ff:3b:c8:a2:6a:4b:
0c:0d:79:cc:f5:bf:8f:85:10:2f:b5:c3:2c:37:cc:3d:03:bd:
43:9f:71:3c:9a:0f:fb:6b:a5:02:31:aa:d4:3d:44:2a:16:01:
4d:ba:97:ad
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEM/SI4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZGMwMGU5ZTMwNDY1OTFmOGJhNTUyNDQ4MGRkZjdjNmZjNGM2MGUwMB4XDTIyMDEw
MTA2NTc0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDgzOTZmZGRiYmU2
ZjVmNmIxZjc3M2E2Mzk3MzkwMzQxMzE1OGM3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHzJqiH1fc9DHl8lEx9S92mXCkTZf5REa5srRtAIoI0wuLy
Z2vrV/XwM8+81h02zkBhNP9ujXSad+PUsWQLhcdJfG7u+m40nxxOXzyQWZmRRTXj
4cKsP8R1xlTmPdkzpeE64TNJTDtvdiANFXMRgPHOXs2r076D49n3FExIPyliFug9
jkottu/ucKCixQpXv7vsK0988d2p4SVF+uIbC8qyXnazm89As8LooBYgZXJADaFd
2mVZon7gTskV0s52hSJq2jPUbufvBIkuNAdni2BQDDvLoZOIXm9QlC+GJ1jwQfrY
aGo/rHXKirUKGrkhcuF/GHz8pj7chgFe41uHamECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTYOW/du+b19rH3c6Y5c5A0ExWMcDAfBgNVHSMEGDAWgBSdwA6eMEZZH4ul
UkSA3ffG/Exg4DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25jQU9uakJHV1ItTHBWSkVnTjMzeHZ4TVlPQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvOGFkNTczLTU5NzctNGQ3Ni04M2ViLWJiMDMxOTIxM2EyOS8x
LzJEbHYzYnZtOWZheDkzT21PWE9RTkJNVmpIQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
OGFkNTczLTU5NzctNGQ3Ni04M2ViLWJiMDMxOTIxM2EyOS8xL25jQU9uakJHV1It
THBWSkVnTjMzeHZ4TVlPQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArm+6AMEBNl3ADANBAIAAjAHAwUA
KgIpsDANBgkqhkiG9w0BAQsFAAOCAQEAREVAS8MInneKCK3/by8f1LCkDfrHWG4+
HMPX61f81Ksh1EkaFsN/MHRD3aUWjfy2JHdodaLzddnscVp3rUK+AAJRnI4GFXb0
qF/tH9wFzalYqRPd+ZLy7+1j6jif3ynTLEpHUC0zcQcYhs6cO2jH+QXYyDamJuKc
TY25z/Ob1aubE+Ps2jKordGcfULnugvK4fpxvwA9claT67Xo4LDtzQrpEZEnMtwN
rxVaO1R5j0XLni1Q7T12y8ZhWEhURYyjbwnfWIlUvKoqJgZUyGE/3pHg/zvIompL
DA15zPW/j4UQL7XDLDfMPQO9Q59xPJoP+2ulAjGq1D1EKhYBTbqXrQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net