Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qLDiPL0JclOzTMCc1LmSca3FW_g.roa
File: qLDiPL0JclOzTMCc1LmSca3FW_g.roa (raw, json)
Hash identifier: LirZxX5FkgmhiXmJkijnC9X8VILEjx2hQWiKfM/HE78=
Subject key identifier: A8:B0:E2:3C:BD:09:72:53:B3:4C:C0:9C:D4:B9:92:71:AD:C5:5B:F8
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B076D56
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qLDiPL0JclOzTMCc1LmSca3FW_g.roa
Signing time: Sat 01 Jan 2022 13:58:02 +0000
ROA not before: Sat 01 Jan 2022 13:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200504
IP address blocks: 193.192.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721907030 (0x2b076d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8b0e23cbd097253b34cc09cd4b99271adc55bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:af:14:bc:80:85:3c:59:8f:53:66:48:a5:
fb:f8:1a:7e:a7:8a:4e:3a:ae:28:8f:73:d9:19:bb:
ff:d9:ed:8c:10:c7:1b:25:b9:ce:85:24:4f:a7:3e:
65:77:2b:c9:a8:51:29:bf:aa:a3:98:b9:66:8c:f4:
c4:11:c7:46:54:7c:9b:6b:b1:2a:3a:58:7a:75:97:
d8:ff:73:3f:7a:06:c5:56:46:98:bd:f5:60:01:62:
e1:23:df:37:3d:ee:80:96:c9:ba:5d:10:da:cf:72:
63:bd:a2:3f:13:a6:b7:41:27:99:c1:56:bc:17:f8:
15:9e:0f:a3:fb:61:02:be:b5:7d:1b:71:30:8e:58:
2e:db:37:d0:8b:ec:ab:db:5c:77:a3:c4:65:8d:54:
90:c3:f4:94:ab:9b:a4:00:ec:20:7f:2b:49:a5:15:
38:fa:8b:be:c2:ff:c5:6c:ad:22:65:88:f6:20:11:
14:4f:15:99:f1:f5:3c:e5:0c:b9:9f:ab:f0:ea:58:
6b:20:ce:9c:96:e9:dd:62:99:cb:c2:27:94:b5:11:
b0:7b:7d:10:55:57:c0:cc:96:89:ad:82:8a:1c:44:
86:38:1b:57:03:e4:5c:33:02:96:54:4c:2e:71:ca:
bb:89:60:e6:14:dd:b2:82:ee:93:c2:a5:1a:5a:80:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:E2:3C:BD:09:72:53:B3:4C:C0:9C:D4:B9:92:71:AD:C5:5B:F8
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qLDiPL0JclOzTMCc1LmSca3FW_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.169.0/24
Signature Algorithm: sha256WithRSAEncryption
31:93:d3:f0:2e:e3:ec:d1:04:47:cb:4d:87:45:7b:07:88:e5:
a1:e9:7c:2f:74:86:e6:cf:c5:77:b2:79:2b:1f:f0:a5:4b:d8:
58:91:7f:28:ef:31:7c:5b:9c:f3:7b:56:00:87:d7:6b:13:4f:
9c:6b:f1:80:1b:27:2b:31:a7:71:28:b3:ca:e2:fa:c4:0c:ab:
fd:4d:25:88:fc:76:2f:8d:36:6c:d9:72:6d:1c:cf:1e:7d:02:
07:66:03:06:ae:cc:67:c9:7e:93:0e:4b:87:d6:26:76:70:27:
48:5e:64:40:aa:e2:52:46:a7:b5:15:d0:2b:c7:af:86:33:26:
48:8c:34:71:6d:67:51:14:ba:da:63:eb:3c:5b:de:15:dc:f8:
4c:ec:ae:cb:86:5a:c3:ae:55:c7:14:09:ad:ea:ac:f4:2f:ce:
62:28:3f:c4:47:6f:a3:ce:03:00:13:82:59:dc:28:a8:18:14:
8e:3f:15:1f:4d:72:18:cb:68:a8:3f:39:58:f5:e6:ff:bb:fa:
95:a0:c0:09:1d:26:de:5e:f0:db:67:1b:a2:72:39:bb:0b:1c:
71:93:7b:0d:fc:3d:76:c5:5a:5e:56:88:fc:74:5d:42:96:0a:
bb:67:86:72:f3:e4:d2:cc:9b:5a:5d:68:a1:72:d6:f5:1f:b1:
74:08:dc:bb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKwdtVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYThiMGUyM2NiZDA5
NzI1M2IzNGNjMDljZDRiOTkyNzFhZGM1NWJmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/PrxS8gIU8WY9TZkil+/gafqeKTjquKI9z2Rm7/9ntjBDH
GyW5zoUkT6c+ZXcryahRKb+qo5i5Zoz0xBHHRlR8m2uxKjpYenWX2P9zP3oGxVZG
mL31YAFi4SPfNz3ugJbJul0Q2s9yY72iPxOmt0EnmcFWvBf4FZ4Po/thAr61fRtx
MI5YLts30Ivsq9tcd6PEZY1UkMP0lKubpADsIH8rSaUVOPqLvsL/xWytImWI9iAR
FE8VmfH1POUMuZ+r8OpYayDOnJbp3WKZy8InlLURsHt9EFVXwMyWia2CihxEhjgb
VwPkXDMCllRMLnHKu4lg5hTdsoLuk8KlGlqAJCMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSosOI8vQlyU7NMwJzUuZJxrcVb+DAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L3FMRGlQTDBKY2xPelRNQ2MxTG1TY2EzRldfZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHAqTANBgkqhkiG9w0BAQsFAAOC
AQEAMZPT8C7j7NEER8tNh0V7B4jloel8L3SG5s/Fd7J5Kx/wpUvYWJF/KO8xfFuc
83tWAIfXaxNPnGvxgBsnKzGncSizyuL6xAyr/U0liPx2L402bNlybRzPHn0CB2YD
Bq7MZ8l+kw5Lh9YmdnAnSF5kQKriUkantRXQK8evhjMmSIw0cW1nURS62mPrPFve
Fdz4TOyuy4Zaw65VxxQJreqs9C/OYig/xEdvo84DABOCWdwoqBgUjj8VH01yGMto
qD85WPXm/7v6laDACR0m3l7w22cbonI5uwsccZN7Dfw9dsVaXlaI/HRdQpYKu2eG
cvPk0sybWl1ooXLW9R+xdAjcuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org