Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/YqVIj8k7-X1SQK3KeXw5HkpwcUs.roa
File: YqVIj8k7-X1SQK3KeXw5HkpwcUs.roa (raw, json)
Hash identifier: vmQkA3a1/itJ1XaeQFeCpknxmuTWhp8OJyDJZEYgTTY=
Subject key identifier: 62:A5:48:8F:C9:3B:F9:7D:52:40:AD:CA:79:7C:39:1E:4A:70:71:4B
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 0182F2293C9E21870275DACD34CAAE888F33
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/YqVIj8k7-X1SQK3KeXw5HkpwcUs.roa
Signing time: Wed 31 Aug 2022 04:29:24 +0000
ROA not before: Wed 31 Aug 2022 04:29:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40065
IP address blocks: 193.134.208.0/24 maxlen: 24
193.134.209.0/24 maxlen: 24
193.134.210.0/24 maxlen: 24
193.134.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:29:3c:9e:21:87:02:75:da:cd:34:ca:ae:88:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Aug 31 04:29:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62a5488fc93bf97d5240adca797c391e4a70714b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f8:40:9e:76:92:d4:c2:67:10:c4:91:5a:ad:
a7:d8:55:c6:0f:df:21:80:83:85:d0:42:ed:79:d8:
9a:13:6a:1d:69:25:0f:c7:5f:17:03:0d:31:27:8c:
87:02:3b:d9:10:93:77:a8:d0:fd:14:fa:e7:35:ea:
ad:ac:6e:6e:af:d4:34:ff:ce:4c:c1:d4:3d:d6:4d:
f5:99:4e:c4:b1:bd:65:95:58:9f:47:b3:d3:75:8f:
e5:96:88:7f:6c:98:8c:da:43:c2:f4:b3:8a:44:cc:
44:08:4d:e6:f4:07:71:d1:8b:cc:92:b2:54:fb:fc:
f5:f2:6c:9c:e9:96:8f:98:51:86:e5:fd:2f:45:c3:
a6:f2:4b:0e:ff:9a:8c:4b:9d:96:e6:aa:80:6f:9b:
bb:a2:3f:87:32:55:46:45:1a:98:0a:1c:c2:f5:06:
32:08:48:66:0c:3b:87:7c:0a:21:e2:64:48:58:05:
86:e7:b9:b4:48:59:3d:d7:dd:0a:54:cd:85:2e:8c:
b3:81:83:73:36:e2:00:ed:66:41:ec:33:8a:cb:44:
a8:80:86:a2:07:62:8e:36:d4:16:9e:55:bf:c6:99:
f4:4d:f0:ff:e2:d8:2d:46:72:d5:50:d2:26:d3:c9:
7c:12:d0:f6:62:70:a1:71:31:f5:39:c6:17:e6:e2:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:48:8F:C9:3B:F9:7D:52:40:AD:CA:79:7C:39:1E:4A:70:71:4B
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/YqVIj8k7-X1SQK3KeXw5HkpwcUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.208.0/22
Signature Algorithm: sha256WithRSAEncryption
02:2f:11:d6:d3:e4:a7:f3:fb:ab:8d:72:2a:b3:15:54:53:4d:
d7:aa:53:68:ce:a9:d1:d8:8f:6f:13:27:f7:64:ef:8a:15:b0:
d3:68:4f:43:23:14:7c:26:8e:af:fd:3a:0a:bb:9c:00:78:1d:
41:0a:d1:0a:70:7a:b6:2f:8a:79:b7:8d:fc:67:ca:b3:ab:e3:
22:d2:23:24:a5:d6:27:01:67:af:8f:b4:7e:07:5f:82:76:36:
ee:46:d4:f1:6f:18:b9:0d:2d:e4:3a:26:6c:22:00:2c:3d:03:
a8:4b:d5:c8:e8:17:ec:7e:78:86:40:66:2d:d7:ae:eb:1c:3f:
19:1d:f3:aa:82:94:2f:e4:d4:64:7c:96:bd:f9:53:3b:00:1e:
a8:db:b3:34:2e:8b:d6:cc:f0:68:7a:16:58:78:c6:16:06:db:
c1:47:5d:af:b4:79:5e:3b:86:55:a7:44:1b:d9:14:f0:5e:db:
9e:b1:f7:44:88:20:1c:29:5c:51:9b:6d:33:af:16:0b:1a:3e:
85:77:32:9a:43:6c:26:e1:7c:4a:ed:c0:07:fd:1c:a0:aa:e3:
37:7a:84:5e:6c:89:a1:c9:9d:d0:70:61:1b:0b:74:8a:f1:8e:
98:78:84:37:07:6b:e8:96:01:fc:41:c5:7a:70:1f:1a:48:90:
f7:c5:84:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLyKTyeIYcCddrNNMquiI8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjIwODMxMDQyOTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmE1NDg4ZmM5M2JmOTdkNTI0MGFkY2E3OTdjMzkxZTRhNzA3MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfhAnnaS1MJnEMSRWq2n2FXGD98h
gIOF0ELtediaE2odaSUPx18XAw0xJ4yHAjvZEJN3qND9FPrnNeqtrG5ur9Q0/85M
wdQ91k31mU7Esb1llVifR7PTdY/lloh/bJiM2kPC9LOKRMxECE3m9Adx0YvMkrJU
+/z18myc6ZaPmFGG5f0vRcOm8ksO/5qMS52W5qqAb5u7oj+HMlVGRRqYChzC9QYy
CEhmDDuHfAoh4mRIWAWG57m0SFk9190KVM2FLoyzgYNzNuIA7WZB7DOKy0SogIai
B2KONtQWnlW/xpn0TfD/4tgtRnLVUNIm08l8EtD2YnChcTH1OcYX5uLg5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKlSI/JO/l9UkCtynl8OR5KcHFLMB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvWXFWSWo4azctWDFTUUszS2VYdzVIa3B3Y1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwYbQMA0G
CSqGSIb3DQEBCwUAA4IBAQACLxHW0+Sn8/urjXIqsxVUU03XqlNozqnR2I9vEyf3
ZO+KFbDTaE9DIxR8Jo6v/ToKu5wAeB1BCtEKcHq2L4p5t438Z8qzq+Mi0iMkpdYn
AWevj7R+B1+CdjbuRtTxbxi5DS3kOiZsIgAsPQOoS9XI6BfsfniGQGYt167rHD8Z
HfOqgpQv5NRkfJa9+VM7AB6o27M0LovWzPBoehZYeMYWBtvBR12vtHleO4ZVp0Qb
2RTwXtuesfdEiCAcKVxRm20zrxYLGj6FdzKaQ2wm4XxK7cAH/RygquM3eoRebImh
yZ3QcGEbC3SK8Y6YeIQ3B2volgH8QcV6cB8aSJD3xYRd
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:22 2024 by rpki-client on console-ams.rpki-client.org