Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/7FZ0yiQLc3mz9CvpWlWy76214BA.roa
File: 7FZ0yiQLc3mz9CvpWlWy76214BA.roa (raw, json)
Hash identifier: +lv6MHS8MVL/+Yfs/zmTOHyvW2rbi/EdTZtsyhz4+4o=
Subject key identifier: EC:56:74:CA:24:0B:73:79:B3:F4:2B:E9:5A:55:B2:EF:AD:B5:E0:10
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 01856267B459568CACABBE507F573BEB6978
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/7FZ0yiQLc3mz9CvpWlWy76214BA.roa
Signing time: Fri 30 Dec 2022 09:40:41 +0000
ROA not before: Fri 30 Dec 2022 09:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15543
IP address blocks: 193.26.11.0/24 maxlen: 24
193.138.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:67:b4:59:56:8c:ac:ab:be:50:7f:57:3b:eb:69:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: Dec 30 09:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec5674ca240b7379b3f42be95a55b2efadb5e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:5d:d4:03:fb:32:28:a8:f7:27:8c:8a:0d:
a7:87:6c:92:01:70:9f:65:f7:eb:5e:e5:9d:e3:8e:
ed:db:40:88:7e:87:3b:2b:fd:d9:16:30:e4:93:3b:
2f:5b:55:bc:26:42:e5:98:53:20:ab:de:d0:05:16:
81:cd:12:2a:7c:d6:e4:c6:26:b2:d0:83:32:9d:89:
47:1e:46:32:30:ff:60:e7:74:b6:25:bb:c1:5d:24:
76:9e:02:de:97:38:cd:cd:80:fc:20:c3:8a:67:78:
f4:05:8b:cf:4c:a7:2d:d4:e7:0c:d4:6b:ff:8f:9b:
3d:da:8a:6d:70:0f:8b:c3:bd:b2:99:be:38:c1:6c:
31:82:ab:00:d0:41:09:36:73:42:51:43:fc:0c:3a:
71:ad:b0:df:a5:28:bb:b8:22:27:27:9a:f3:ec:87:
27:98:20:e4:fe:31:f0:b7:23:2a:24:f5:74:0f:74:
b9:c4:8d:88:0f:7f:9c:b8:31:5a:c9:bc:ed:f6:45:
a2:69:52:d0:b8:37:40:7e:03:68:f1:27:db:54:a7:
02:57:59:cf:d4:50:a1:96:f2:4d:ec:35:58:c0:27:
e6:78:0d:77:15:6a:d0:04:ec:af:60:87:31:cd:66:
49:22:d7:81:07:e0:b0:9a:e8:62:1e:87:17:cd:75:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:74:CA:24:0B:73:79:B3:F4:2B:E9:5A:55:B2:EF:AD:B5:E0:10
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/7FZ0yiQLc3mz9CvpWlWy76214BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.11.0/24
193.138.64.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0a:80:23:d1:11:54:05:be:52:03:d5:a3:68:71:94:09:d2:
cd:95:2d:ca:1d:48:6d:46:38:08:38:b8:46:9b:e5:c8:a5:70:
7c:a7:3d:f7:37:40:5d:ee:a5:1b:ad:5e:08:df:79:a7:a5:06:
ef:76:9f:39:94:50:53:df:56:e0:c9:76:4f:0b:ec:ec:cf:1d:
a3:ee:66:c1:a0:d9:79:a4:85:86:e9:29:f5:5e:b4:31:17:04:
e5:40:11:fd:84:ab:1f:02:50:9b:14:5f:a2:c6:0f:3e:9f:bc:
be:71:fe:67:13:d9:31:6f:b8:ba:2a:9b:01:ee:20:27:4b:be:
4a:5c:2a:09:e4:07:91:8e:08:4f:b5:82:44:8c:91:d8:da:b3:
ee:07:27:8c:79:53:52:54:99:8d:aa:e1:94:71:2d:02:8d:09:
cf:76:f4:27:4d:f4:18:ec:e9:f5:ac:c9:b4:8c:ff:d2:06:c2:
32:89:41:1b:c1:22:63:1a:1f:5b:8b:c5:aa:42:95:3e:65:84:
28:8f:02:b1:6e:b1:64:55:47:cf:54:64:3b:9b:3e:60:3c:e6:
3d:5a:38:ed:97:94:2e:92:cb:9f:22:a3:b7:a5:4e:99:98:f0:
20:67:62:dc:5c:24:44:02:e8:7a:aa:f7:ef:72:90:42:e7:cc:
ab:e7:44:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYViZ7RZVoysq75Qf1c762l4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MGJjMDIxYjY1N2E1OTRlZTU4ZDlkMzZkOGQ5MTgzMWQw
ODUxNzQwHhcNMjIxMjMwMDk0MDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzU2NzRjYTI0MGI3Mzc5YjNmNDJiZTk1YTU1YjJlZmFkYjVlMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaFd1AP7Miio9yeMig2nh2ySAXCf
ZffrXuWd447t20CIfoc7K/3ZFjDkkzsvW1W8JkLlmFMgq97QBRaBzRIqfNbkxiay
0IMynYlHHkYyMP9g53S2JbvBXSR2ngLelzjNzYD8IMOKZ3j0BYvPTKct1OcM1Gv/
j5s92optcA+Lw72ymb44wWwxgqsA0EEJNnNCUUP8DDpxrbDfpSi7uCInJ5rz7Icn
mCDk/jHwtyMqJPV0D3S5xI2ID3+cuDFaybzt9kWiaVLQuDdAfgNo8SfbVKcCV1nP
1FChlvJN7DVYwCfmeA13FWrQBOyvYIcxzWZJIteBB+CwmuhiHocXzXW6wwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOxWdMokC3N5s/Qr6VpVsu+tteAQMB8GA1UdIwQY
MBaAFEcLwCG2V6WU7ljZ022NkYMdCFF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQt
M2JlY2RkZmNjYWU2LzEvN0ZaMHlpUUxjM216OUN2cFdsV3k3NjIxNEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQtM2JlY2RkZmNjYWU2
LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRoLAwQA
wYpAMA0GCSqGSIb3DQEBCwUAA4IBAQCXCoAj0RFUBb5SA9WjaHGUCdLNlS3KHUht
RjgIOLhGm+XIpXB8pz33N0Bd7qUbrV4I33mnpQbvdp85lFBT31bgyXZPC+zszx2j
7mbBoNl5pIWG6Sn1XrQxFwTlQBH9hKsfAlCbFF+ixg8+n7y+cf5nE9kxb7i6KpsB
7iAnS75KXCoJ5AeRjghPtYJEjJHY2rPuByeMeVNSVJmNquGUcS0CjQnPdvQnTfQY
7On1rMm0jP/SBsIyiUEbwSJjGh9bi8WqQpU+ZYQojwKxbrFkVUfPVGQ7mz5gPOY9
Wjjtl5QuksufIqO3pU6ZmPAgZ2LcXCREAuh6qvfvcpBC58yr50TD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:36 2024 by rpki-client on console-fra.rpki-client.org