Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/e6t7NdI2QKuPUCJqS_kEXNgQdNY.roa
File: e6t7NdI2QKuPUCJqS_kEXNgQdNY.roa (raw, json)
Hash identifier: WJ6JdXYRLIY7UzQbCjt1HZqid2fEvMvr29z79EbRT+w=
Subject key identifier: 7B:AB:7B:35:D2:36:40:AB:8F:50:22:6A:4B:F9:04:5C:D8:10:74:D6
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 0184C6A78FC2419768913555EA6497242CEF
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/e6t7NdI2QKuPUCJqS_kEXNgQdNY.roa
Signing time: Wed 30 Nov 2022 03:49:40 +0000
ROA not before: Wed 30 Nov 2022 03:49:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136796
IP address blocks: 194.61.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c6:a7:8f:c2:41:97:68:91:35:55:ea:64:97:24:2c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Nov 30 03:49:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bab7b35d23640ab8f50226a4bf9045cd81074d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:6d:ce:9e:ee:72:a3:9f:74:20:cd:0d:0e:
02:50:8b:5c:b9:5c:72:79:f1:01:8c:58:14:bd:7b:
6f:75:cf:01:7c:c7:51:48:23:2d:da:52:ff:1e:79:
63:e0:3d:25:2a:63:1a:68:a9:83:ba:90:40:87:b0:
35:8b:eb:f8:73:84:da:8e:0c:29:f5:0d:ea:ad:df:
02:ba:09:6b:0a:52:85:9c:3a:d2:36:33:97:48:b2:
31:2c:c9:ee:eb:98:db:ab:e0:c8:7c:29:67:5b:8e:
20:e0:c9:0b:70:6b:e8:5a:7a:14:0a:d9:61:37:41:
19:bc:07:4a:4e:3a:18:72:a0:cc:e8:74:01:a8:32:
7e:8c:ef:8c:ba:4c:09:2d:45:73:90:b3:67:3a:18:
0f:36:8a:30:aa:bb:50:3f:31:8d:43:7d:23:0a:fd:
24:6b:92:60:ee:43:b8:aa:f0:49:11:16:69:32:48:
5a:e4:55:de:60:1f:76:61:d5:f6:06:bc:d4:8e:7f:
9f:de:72:1c:48:be:7e:b3:45:2d:b1:a6:a7:5e:18:
0a:c4:35:e8:90:1a:8d:06:11:17:e0:75:6a:9d:3c:
5f:44:81:91:45:0b:73:75:fe:7f:d6:28:c3:cf:e2:
ea:32:f6:91:06:83:14:52:d0:5a:d0:be:2a:4c:12:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:7B:35:D2:36:40:AB:8F:50:22:6A:4B:F9:04:5C:D8:10:74:D6
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/e6t7NdI2QKuPUCJqS_kEXNgQdNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.236.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:1d:4f:24:c8:c2:62:dd:7a:af:b4:8c:e1:66:bb:93:92:bb:
93:d9:e5:a0:0b:f8:9a:6a:c1:f7:1a:60:b3:47:70:c1:06:9d:
dc:09:31:f5:8c:fc:0e:10:f8:70:03:7b:66:d9:03:b7:a4:3d:
d7:f8:33:5a:0d:11:d7:50:62:12:e4:38:de:18:cc:09:ee:96:
56:ef:ee:0a:4e:d3:6e:c8:10:f8:a2:03:5a:8b:6c:ae:db:89:
17:04:b7:68:bc:a5:ce:63:d4:c7:e9:27:41:1e:12:3f:b2:71:
47:8b:de:fd:26:62:41:5e:b2:60:d4:14:3e:ac:a9:14:ea:8d:
fa:23:f1:2b:d6:c4:2c:60:9d:dc:bb:3f:05:cc:4f:6c:ee:40:
51:9a:b6:e1:6a:7f:d2:2f:55:cd:1c:9a:21:5b:28:30:1d:d5:
b5:ff:c5:84:74:e3:d8:f7:86:3c:7a:cf:09:71:4b:60:95:1e:
2f:11:e8:82:7d:e4:75:fa:45:76:80:12:f6:62:4d:42:2d:77:
e9:7f:80:84:c1:6a:dc:40:88:f6:86:57:8c:9a:26:07:0b:d7:
8e:35:14:d0:8a:7c:43:58:33:b4:22:cf:32:c0:64:0e:8c:39:
9f:8a:82:e3:6b:4a:b6:7a:96:00:d0:a6:4e:d2:d1:30:77:30:
84:7e:48:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTGp4/CQZdokTVV6mSXJCzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5
MjU4ZjEwHhcNMjIxMTMwMDM0OTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmFiN2IzNWQyMzY0MGFiOGY1MDIyNmE0YmY5MDQ1Y2Q4MTA3NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnattzp7ucqOfdCDNDQ4CUItcuVxy
efEBjFgUvXtvdc8BfMdRSCMt2lL/Hnlj4D0lKmMaaKmDupBAh7A1i+v4c4Tajgwp
9Q3qrd8CuglrClKFnDrSNjOXSLIxLMnu65jbq+DIfClnW44g4MkLcGvoWnoUCtlh
N0EZvAdKTjoYcqDM6HQBqDJ+jO+MukwJLUVzkLNnOhgPNoowqrtQPzGNQ30jCv0k
a5Jg7kO4qvBJERZpMkha5FXeYB92YdX2BrzUjn+f3nIcSL5+s0UtsaanXhgKxDXo
kBqNBhEX4HVqnTxfRIGRRQtzdf5/1ijDz+LqMvaRBoMUUtBa0L4qTBIv/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHurezXSNkCrj1Aiakv5BFzYEHTWMB8GA1UdIwQY
MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt
Njk3OTQ4ZWE3MWY1LzEvZTZ0N05kSTJRS3VQVUNKcVNfa0VYTmdRZE5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1
LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwj3sMA0G
CSqGSIb3DQEBCwUAA4IBAQA9HU8kyMJi3XqvtIzhZruTkruT2eWgC/iaasH3GmCz
R3DBBp3cCTH1jPwOEPhwA3tm2QO3pD3X+DNaDRHXUGIS5DjeGMwJ7pZW7+4KTtNu
yBD4ogNai2yu24kXBLdovKXOY9TH6SdBHhI/snFHi979JmJBXrJg1BQ+rKkU6o36
I/Er1sQsYJ3cuz8FzE9s7kBRmrbhan/SL1XNHJohWygwHdW1/8WEdOPY94Y8es8J
cUtglR4vEeiCfeR1+kV2gBL2Yk1CLXfpf4CEwWrcQIj2hleMmiYHC9eONRTQinxD
WDO0Is8ywGQOjDmfioLja0q2epYA0KZO0tEwdzCEfkgc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org