Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/nADXDGXDqrtkOaBfsUEO2xNH2NQ.roa
File: nADXDGXDqrtkOaBfsUEO2xNH2NQ.roa (raw, json)
Hash identifier: xVWYW7YtJOf7OLtz21S1/9B6ty85A8CcbG7mpmvDjtk=
Subject key identifier: 9C:00:D7:0C:65:C3:AA:BB:64:39:A0:5F:B1:41:0E:DB:13:47:D8:D4
Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial: 03D04623
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/nADXDGXDqrtkOaBfsUEO2xNH2NQ.roa
Signing time: Sat 01 Jan 2022 07:53:30 +0000
ROA not before: Sat 01 Jan 2022 07:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198199
IP address blocks: 193.38.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63981091 (0x3d04623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
Validity
Not Before: Jan 1 07:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c00d70c65c3aabb6439a05fb1410edb1347d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:e7:5e:67:cf:f6:6f:79:cb:15:96:38:b5:
5b:be:0b:92:1c:7e:5e:67:c2:7c:74:bf:98:07:ca:
70:67:52:e5:c0:38:eb:18:e4:1d:1a:76:d9:d1:b2:
5d:82:e3:e6:b4:d2:4e:30:51:31:4b:ea:df:ec:bc:
9d:4c:89:8f:6f:b1:a3:8c:9c:81:05:37:b3:36:9d:
f0:dc:35:93:0e:e6:48:3e:99:a1:be:4a:f1:b6:38:
a7:e6:b7:27:f4:43:6d:ab:38:c3:da:5b:90:07:84:
15:e5:8b:b6:4c:1f:92:73:bf:fe:58:49:4d:7b:f1:
cc:e4:46:d8:dc:ee:45:35:38:a9:be:82:90:fb:1d:
a3:8d:b2:05:83:00:b7:3d:37:d6:4a:05:25:93:e9:
31:91:3e:3a:ce:32:68:c7:56:89:90:2b:65:5b:b9:
76:57:4e:1d:77:df:1f:f8:8c:1d:41:e1:cf:84:e1:
67:35:8c:1b:31:b5:d0:e2:65:a8:d9:01:4b:1d:0d:
61:97:6a:da:01:78:0b:41:d5:e3:14:a4:43:72:80:
2e:aa:54:24:ce:96:f1:16:f9:72:98:9b:32:5a:cc:
c4:3d:0b:7f:86:63:ac:37:3d:5a:16:1e:7d:ad:00:
1d:f7:33:ee:db:17:09:1b:8e:f3:1b:45:0d:f7:b1:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:D7:0C:65:C3:AA:BB:64:39:A0:5F:B1:41:0E:DB:13:47:D8:D4
X509v3 Authority Key Identifier:
keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/nADXDGXDqrtkOaBfsUEO2xNH2NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.48.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b6:1b:4c:8c:7a:68:bd:1a:a2:75:d2:30:09:7b:75:89:fd:
c6:73:c0:97:39:a3:20:e3:bf:37:cb:b2:de:d7:dd:2c:96:07:
7e:b3:37:e0:7e:db:27:66:6f:c6:f6:29:54:7b:25:19:7b:77:
9e:8e:44:ad:4c:ef:14:47:16:bf:97:35:11:a1:6d:05:0f:ee:
cb:dd:f1:1b:50:f7:c4:d6:bd:66:a3:a3:b0:da:68:c0:3c:a5:
f5:1f:42:6c:a9:de:f3:55:aa:5c:f3:5a:ff:3f:30:25:64:1d:
65:68:b2:ce:08:98:60:25:79:9d:35:f2:d7:d4:6e:ab:f3:b3:
de:cf:37:09:e6:43:57:46:9d:97:11:95:86:fb:da:65:68:09:
74:09:24:ea:c7:6e:b9:26:c0:72:5a:f6:9f:fd:2b:95:96:27:
db:1a:7d:c3:47:7a:6f:cc:24:cf:9d:18:e0:8a:ee:b6:56:84:
79:15:05:5b:a4:36:47:f5:2a:a3:63:eb:7e:9a:38:98:ea:6c:
49:95:63:40:b1:a5:9b:38:17:97:12:a2:d9:f6:d3:d0:54:e2:
05:0f:a0:c3:5c:f1:c2:7c:dc:dd:a4:76:2d:ee:56:ba:82:ac:
3a:61:2d:92:1a:94:75:1e:96:48:41:fd:ef:c0:95:f7:7d:bd:
69:32:c9:d1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA9BGIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YWYyMjg4MDE0OTk1OTMyNzM3YWU3ZjlmYzIyNGRmMTAyMTQxMjU1MB4XDTIyMDEw
MTA3NTMzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWMwMGQ3MGM2NWMz
YWFiYjY0MzlhMDVmYjE0MTBlZGIxMzQ3ZDhkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPJv515nz/ZvecsVlji1W74Lkhx+XmfCfHS/mAfKcGdS5cA4
6xjkHRp22dGyXYLj5rTSTjBRMUvq3+y8nUyJj2+xo4ycgQU3szad8Nw1kw7mSD6Z
ob5K8bY4p+a3J/RDbas4w9pbkAeEFeWLtkwfknO//lhJTXvxzORG2NzuRTU4qb6C
kPsdo42yBYMAtz031koFJZPpMZE+Os4yaMdWiZArZVu5dldOHXffH/iMHUHhz4Th
ZzWMGzG10OJlqNkBSx0NYZdq2gF4C0HV4xSkQ3KALqpUJM6W8Rb5cpibMlrMxD0L
f4ZjrDc9WhYefa0AHfcz7tsXCRuO8xtFDfexQIECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBScANcMZcOqu2Q5oF+xQQ7bE0fY1DAfBgNVHSMEGDAWgBSq8iiAFJlZMnN6
5/n8Ik3xAhQSVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F2SW9nQlNaV1RKemV1ZjVfQ0pOOFFJVUVsVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmMvZWEwNjIzLTM2YzEtNGYzYS1iZmYzLTYzMTRiOThiZGE0Mi8x
L25BRFhER1hEcXJ0a09hQmZzVUVPMnhOSDJOUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMv
ZWEwNjIzLTM2YzEtNGYzYS1iZmYzLTYzMTRiOThiZGE0Mi8xL3F2SW9nQlNaV1RK
emV1ZjVfQ0pOOFFJVUVsVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEmMDANBgkqhkiG9w0BAQsFAAOC
AQEAKbYbTIx6aL0aonXSMAl7dYn9xnPAlzmjIOO/N8uy3tfdLJYHfrM34H7bJ2Zv
xvYpVHslGXt3no5ErUzvFEcWv5c1EaFtBQ/uy93xG1D3xNa9ZqOjsNpowDyl9R9C
bKne81WqXPNa/z8wJWQdZWiyzgiYYCV5nTXy19Ruq/Oz3s83CeZDV0adlxGVhvva
ZWgJdAkk6sduuSbAclr2n/0rlZYn2xp9w0d6b8wkz50Y4IrutlaEeRUFW6Q2R/Uq
o2Prfpo4mOpsSZVjQLGlmzgXlxKi2fbT0FTiBQ+gw1zxwnzc3aR2Le5WuoKsOmEt
khqUdR6WSEH978CV9329aTLJ0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:03 2024 by rpki-client on console-fra.rpki-client.org