Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zOFe9PDJrnFbDN4ghi0mR8kuhQA.roa
File: zOFe9PDJrnFbDN4ghi0mR8kuhQA.roa (raw, json)
Hash identifier: Batc9M9S3e77Sxkzg6hN8yOMIXuX/EB2gE1PbZEmlLc=
Subject key identifier: CC:E1:5E:F4:F0:C9:AE:71:5B:0C:DE:20:86:2D:26:47:C9:2E:85:00
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AFA1DA0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zOFe9PDJrnFbDN4ghi0mR8kuhQA.roa
Signing time: Sat 01 Jan 2022 13:57:57 +0000
ROA not before: Sat 01 Jan 2022 13:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198115
IP address blocks: 193.192.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721034656 (0x2afa1da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cce15ef4f0c9ae715b0cde20862d2647c92e8500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:f8:91:96:b9:2f:0b:e3:67:4d:9c:83:b2:
9e:fe:b8:85:d2:70:14:72:8e:12:a0:ee:91:59:af:
8d:ca:e0:e1:5a:58:e8:74:1b:11:c2:3e:58:c1:6d:
16:be:1b:87:87:1d:9e:8d:d8:f4:73:4e:35:91:38:
68:86:bd:e2:ad:1a:9d:4a:07:a9:b5:07:a9:91:64:
90:5e:6c:0c:13:e6:6d:89:d2:33:66:2f:31:b8:eb:
fa:3c:31:a9:6d:f5:84:e7:e1:36:ab:f8:69:d5:b3:
30:b2:4c:49:8d:02:53:5d:cd:4f:b6:ea:be:f1:54:
c5:39:55:ca:83:d3:23:29:12:44:71:04:03:6d:48:
ac:f1:73:be:dd:df:16:a9:fd:71:a8:bd:81:40:23:
7c:e9:77:e7:31:b0:9f:0e:79:ca:07:91:88:ae:2c:
1d:5a:9d:21:20:20:cf:82:a3:e7:7c:88:32:29:3a:
cc:cf:2f:05:11:1d:8f:37:7b:f0:c2:e4:15:e6:c0:
42:95:58:64:1e:94:aa:59:23:8e:86:ff:30:5a:80:
39:27:28:17:df:1e:26:0b:de:f2:65:6f:f3:77:93:
78:7e:c2:a0:51:9c:31:82:92:c9:0a:56:a6:67:5f:
bf:3c:51:da:c4:98:68:5f:13:09:a5:bb:ba:44:68:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:5E:F4:F0:C9:AE:71:5B:0C:DE:20:86:2D:26:47:C9:2E:85:00
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zOFe9PDJrnFbDN4ghi0mR8kuhQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.189.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:91:9d:14:da:04:85:bc:58:48:fa:32:dc:d2:e0:b3:43:
07:2b:f6:55:88:d2:95:7c:14:d1:95:51:f7:71:39:c7:95:28:
1d:5e:ce:6e:31:2d:9f:c6:a8:5d:b6:db:32:4a:5f:99:ea:2a:
26:41:4b:66:84:8f:ae:ac:08:53:9d:aa:ba:13:36:bb:b2:5c:
21:cc:84:1e:c7:b0:3b:e9:c9:fd:dd:2b:95:70:83:96:8b:bf:
1b:41:38:cf:ef:62:9c:d1:30:a6:13:af:2b:29:b5:d5:a1:47:
62:8c:eb:9a:56:26:f1:fd:96:94:b6:c0:60:98:6c:4b:dd:79:
94:8c:ea:d3:97:1d:d0:0f:f6:61:b9:63:87:00:f8:30:58:b9:
9e:67:5e:fc:a5:b4:eb:54:0d:f9:1f:0d:fc:60:11:65:04:6f:
91:47:da:04:32:e0:94:da:4c:0c:30:7c:1d:3d:e0:93:04:ce:
06:1d:ef:4b:22:3f:5f:65:4c:51:e3:4e:62:c0:e9:f8:4d:e8:
6e:34:ff:f1:e1:e0:65:1b:9c:29:16:d1:d3:c1:ae:11:8b:18:
59:43:d0:57:3c:b1:94:da:47:67:8b:b5:8c:a0:c3:f4:59:2c:
0b:f9:97:1e:61:75:bc:a7:2d:ae:05:8a:8f:af:6d:b9:43:10:
b0:ee:53:c3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKvodoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTc1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NlMTVlZjRmMGM5
YWU3MTViMGNkZTIwODYyZDI2NDdjOTJlODUwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVi+JGWuS8L42dNnIOynv64hdJwFHKOEqDukVmvjcrg4VpY
6HQbEcI+WMFtFr4bh4cdno3Y9HNONZE4aIa94q0anUoHqbUHqZFkkF5sDBPmbYnS
M2YvMbjr+jwxqW31hOfhNqv4adWzMLJMSY0CU13NT7bqvvFUxTlVyoPTIykSRHEE
A21IrPFzvt3fFqn9cai9gUAjfOl35zGwnw55ygeRiK4sHVqdISAgz4Kj53yIMik6
zM8vBREdjzd78MLkFebAQpVYZB6Uqlkjjob/MFqAOScoF98eJgve8mVv83eTeH7C
oFGcMYKSyQpWpmdfvzxR2sSYaF8TCaW7ukRoVDECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTM4V708MmucVsM3iCGLSZHyS6FADAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L3pPRmU5UERKcm5GYkRONGdoaTBtUjhrdWhRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHAvTANBgkqhkiG9w0BAQsFAAOC
AQEAdGyRnRTaBIW8WEj6MtzS4LNDByv2VYjSlXwU0ZVR93E5x5UoHV7ObjEtn8ao
XbbbMkpfmeoqJkFLZoSPrqwIU52quhM2u7JcIcyEHsewO+nJ/d0rlXCDlou/G0E4
z+9inNEwphOvKym11aFHYozrmlYm8f2WlLbAYJhsS915lIzq05cd0A/2YbljhwD4
MFi5nmde/KW061QN+R8N/GARZQRvkUfaBDLglNpMDDB8HT3gkwTOBh3vSyI/X2VM
UeNOYsDp+E3objT/8eHgZRucKRbR08GuEYsYWUPQVzyxlNpHZ4u1jKDD9FksC/mX
HmF1vKctrgWKj69tuUMQsO5Tww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org