Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/VB23OjFPP2-RL9PK3nuUXk3mYSs.roa
File: VB23OjFPP2-RL9PK3nuUXk3mYSs.roa (raw, json)
Hash identifier: 7WSnaaYzmNUTL95bd5HrMi56LuPsCvN7EdUbW8Lb4sA=
Subject key identifier: 54:1D:B7:3A:31:4F:3F:6F:91:2F:D3:CA:DE:7B:94:5E:4D:E6:61:2B
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: E1B9
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/VB23OjFPP2-RL9PK3nuUXk3mYSs.roa
Signing time: Thu 28 Apr 2022 12:27:07 +0000
ROA not before: Thu 28 Apr 2022 12:27:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.40.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57785 (0xe1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Apr 28 12:27:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=541db73a314f3f6f912fd3cade7b945e4de6612b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:a0:87:00:76:db:90:2a:58:75:45:56:66:
83:8a:ba:17:3a:61:46:ea:02:d7:04:d9:30:cd:b0:
31:7d:b5:e0:87:5f:bd:6e:b2:e1:06:96:c9:d8:22:
bc:f3:50:ae:bd:48:5c:f5:e2:1b:b2:92:ec:e8:e2:
70:95:8e:88:82:d1:31:e2:f6:c3:70:5c:5e:38:54:
48:bf:15:ad:da:c3:49:c2:cf:ac:f3:48:f0:df:cc:
a0:da:d5:fc:ee:e5:e2:5c:2b:fc:87:e3:e6:1c:ef:
0a:bb:8e:8e:e6:c8:30:ca:93:a4:c3:c6:8f:5a:45:
3f:49:07:48:84:64:10:51:91:a6:51:f0:e0:bc:a3:
53:bb:ea:91:5a:88:3e:b7:c8:06:cf:5f:98:9c:f4:
1a:06:69:2c:24:77:b1:5a:6d:be:15:7a:cd:36:e5:
1e:f0:97:59:45:20:25:19:78:1a:39:1a:8f:26:b5:
32:ec:32:0a:34:79:34:1a:b0:78:14:d0:a0:54:c4:
4d:14:9f:36:af:1b:0c:54:85:45:1a:a9:20:df:41:
43:03:6c:57:e2:5c:bc:a3:43:a3:db:12:aa:5c:d8:
fc:7c:75:b9:95:4d:06:63:03:d3:b1:a4:f4:b5:ba:
c8:91:df:3e:d0:71:db:8e:6c:20:26:fb:74:78:c6:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:B7:3A:31:4F:3F:6F:91:2F:D3:CA:DE:7B:94:5E:4D:E6:61:2B
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/VB23OjFPP2-RL9PK3nuUXk3mYSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.40.233.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5a:8b:5d:6a:23:a9:e8:3c:33:64:53:90:e6:4e:34:2a:bf:
fd:63:aa:23:89:9c:82:1a:7e:4f:ca:3c:bc:f2:b5:4d:dc:88:
74:67:cb:c0:76:d7:22:7d:3d:29:33:25:ab:70:f0:ca:fe:5c:
da:6e:93:84:ba:cb:06:c0:db:e3:39:2b:3a:57:da:65:db:99:
79:cf:b7:88:97:0a:95:d7:9a:13:b8:05:a4:f4:06:46:0d:41:
5d:d6:99:48:40:8e:d6:40:9d:57:c4:14:79:30:6e:e7:ea:8e:
95:42:4e:79:b4:5e:15:79:e8:06:6a:e0:b6:53:bf:fc:32:a9:
b8:e0:23:01:d7:70:03:13:45:48:d5:2d:70:24:04:9e:54:eb:
54:81:af:e1:85:9c:f1:43:19:74:85:6d:fd:71:ed:c8:ac:ea:
a3:79:2e:24:fd:00:db:89:49:d6:46:a4:6e:83:bb:59:84:f4:
b1:7c:f8:b1:55:bd:a4:48:51:df:50:cd:b9:90:ff:5d:11:99:
f1:73:7a:82:a6:d4:44:a3:56:93:20:71:f9:93:4a:fc:95:33:
8b:36:7e:90:e0:84:4b:ce:a4:ca:d9:83:dc:6c:6b:db:e9:5c:
65:1c:8a:12:97:5d:d7:48:75:64:20:a4:47:e2:ef:5f:9f:8d:
2d:e9:c5:8b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAOG5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNhOGI0ZjYwHhcNMjIwNDI4
MTIyNzA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1NDFkYjczYTMxNGYz
ZjZmOTEyZmQzY2FkZTdiOTQ1ZTRkZTY2MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr8CghwB225AqWHVFVmaDiroXOmFG6gLXBNkwzbAxfbXgh1+9
brLhBpbJ2CK881CuvUhc9eIbspLs6OJwlY6IgtEx4vbDcFxeOFRIvxWt2sNJws+s
80jw38yg2tX87uXiXCv8h+PmHO8Ku46O5sgwypOkw8aPWkU/SQdIhGQQUZGmUfDg
vKNTu+qRWog+t8gGz1+YnPQaBmksJHexWm2+FXrNNuUe8JdZRSAlGXgaORqPJrUy
7DIKNHk0GrB4FNCgVMRNFJ82rxsMVIVFGqkg30FDA2xX4ly8o0Oj2xKqXNj8fHW5
lU0GYwPTsaT0tbrIkd8+0HHbjmwgJvt0eMa4ewIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFQdtzoxTz9vkS/Tyt57lF5N5mErMB8GA1UdIwQYMBaAFCf8IYVs2OA3p7uM
Y5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Sl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIwLzEv
VkIyM09qRlBQMi1STDlQSzNudVVYazNtWVNzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9j
N2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIwLzEvSl93aGhXelk0RGVu
dTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwijpMA0GCSqGSIb3DQEBCwUAA4IB
AQAFWotdaiOp6DwzZFOQ5k40Kr/9Y6ojiZyCGn5Pyjy88rVN3Ih0Z8vAdtcifT0p
MyWrcPDK/lzabpOEussGwNvjOSs6V9pl25l5z7eIlwqV15oTuAWk9AZGDUFd1plI
QI7WQJ1XxBR5MG7n6o6VQk55tF4VeegGauC2U7/8Mqm44CMB13ADE0VI1S1wJASe
VOtUga/hhZzxQxl0hW39ce3IrOqjeS4k/QDbiUnWRqRug7tZhPSxfPixVb2kSFHf
UM25kP9dEZnxc3qCptREo1aTIHH5k0r8lTOLNn6Q4IRLzqTK2YPcbGvb6VxlHIoS
l13XSHVkIKRH4u9fn40t6cWL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:06 2024 by rpki-client on console-ams.rpki-client.org