Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/Bh2cggYbEt-A229wHUxxTm4DPTk.roa
File: Bh2cggYbEt-A229wHUxxTm4DPTk.roa (raw, json)
Hash identifier: qgYolqMrwn8d+5T3+XI96OSoOrrbAMOyY7DHqVSMN60=
Subject key identifier: 06:1D:9C:82:06:1B:12:DF:80:DB:6F:70:1D:4C:71:4E:6E:03:3D:39
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 117C2CF6
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/Bh2cggYbEt-A229wHUxxTm4DPTk.roa
Signing time: Sun 27 Mar 2022 18:16:09 +0000
ROA not before: Sun 27 Mar 2022 18:16:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.0.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293350646 (0x117c2cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Mar 27 18:16:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=061d9c82061b12df80db6f701d4c714e6e033d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:d8:70:62:ea:25:a1:53:f9:6a:f4:72:c7:
ae:5b:81:26:51:c6:8c:43:9b:6d:6d:26:c5:31:8e:
c6:b7:2c:d2:8c:82:ee:cb:16:26:f6:6a:df:fc:ad:
33:de:c3:f9:7b:84:51:d2:e6:94:2a:b0:0a:ab:f5:
56:4f:f1:ae:ed:9c:25:75:42:af:74:54:d9:86:f1:
eb:ac:18:28:af:3d:2e:54:6c:c7:00:cc:79:93:c1:
51:0a:b7:ae:08:2f:63:54:68:b1:5f:ce:1a:8e:cb:
14:23:8f:65:38:7e:c8:01:62:b5:eb:1a:e5:cd:43:
70:4d:e1:20:7c:ff:6d:ff:5a:d8:9b:eb:66:81:2d:
62:32:b3:4c:a0:71:58:3c:cc:08:fc:dc:02:60:10:
08:b3:60:56:9a:cc:ff:ac:b0:80:86:1c:2a:ec:75:
3c:4b:81:71:6f:15:9c:e8:40:bd:5f:0d:09:e0:20:
11:bc:3b:ee:75:eb:5e:1c:7e:ec:6e:52:12:65:b6:
d7:c5:5b:e5:95:c2:26:6e:fd:f2:bf:ea:0a:39:79:
74:be:9d:b3:94:b9:86:2a:14:a4:82:ca:70:87:a9:
f1:ea:83:f7:91:77:87:9f:86:72:31:f4:64:ac:90:
7a:09:13:76:9e:09:0e:b5:b4:28:6d:f1:0a:11:e1:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1D:9C:82:06:1B:12:DF:80:DB:6F:70:1D:4C:71:4E:6E:03:3D:39
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/Bh2cggYbEt-A229wHUxxTm4DPTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.181.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8b:2b:83:0e:07:bb:75:0f:a0:d3:bc:c9:08:89:b9:43:a3:
2b:26:62:0d:1c:fa:35:cf:c5:32:b4:4e:27:22:52:4e:08:f3:
43:cb:b3:c2:72:a4:e0:9e:89:4f:34:5b:ff:05:a4:4a:c7:41:
dc:61:1b:76:22:a2:fb:b6:b1:b2:78:95:c0:38:04:6f:73:e5:
a8:f5:48:06:ee:4f:7c:c3:26:d2:a1:0d:19:d7:3f:b8:bd:2f:
90:4c:c3:eb:65:39:b5:ae:41:c8:48:0b:a8:0a:b4:6c:79:c1:
45:e1:f8:6c:c9:4f:f9:07:f6:d3:1d:29:c5:9f:26:f7:82:b9:
82:0a:65:ac:28:45:b0:dc:3b:7e:a8:df:a7:88:84:3a:d7:3a:
f9:16:10:43:c1:bc:69:f4:f3:38:bd:56:48:6a:6e:fb:04:ed:
43:ba:47:b6:64:8c:27:9f:79:8e:c6:51:62:cf:12:a0:5b:af:
3a:8b:bf:6e:2d:fa:ae:98:d2:e5:ee:1d:1c:8e:96:3d:c1:89:
e9:4b:bc:96:80:21:1b:55:b0:78:dc:76:63:7d:c5:32:7e:98:
86:19:f1:89:fd:69:79:bf:94:69:80:b4:64:e6:52:01:3d:25:
6d:e8:9b:1e:a1:2b:ee:f2:4b:99:2d:72:c3:8c:ff:27:a0:2e:
35:61:e2:72
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEXws9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZTI0YzdlY2ZhMzdkMjQ4NzE1MmZiOWJiYmFiNTBiZTc5ZGUyNjE5MB4XDTIyMDMy
NzE4MTYwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDYxZDljODIwNjFi
MTJkZjgwZGI2ZjcwMWQ0YzcxNGU2ZTAzM2QzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK912HBi6iWhU/lq9HLHrluBJlHGjEObbW0mxTGOxrcs0oyC
7ssWJvZq3/ytM97D+XuEUdLmlCqwCqv1Vk/xru2cJXVCr3RU2Ybx66wYKK89LlRs
xwDMeZPBUQq3rggvY1RosV/OGo7LFCOPZTh+yAFitesa5c1DcE3hIHz/bf9a2Jvr
ZoEtYjKzTKBxWDzMCPzcAmAQCLNgVprM/6ywgIYcKux1PEuBcW8VnOhAvV8NCeAg
Ebw77nXrXhx+7G5SEmW218Vb5ZXCJm798r/qCjl5dL6ds5S5hioUpILKcIep8eqD
95F3h5+GcjH0ZKyQegkTdp4JDrW0KG3xChHha78CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQGHZyCBhsS34Dbb3AdTHFObgM9OTAfBgNVHSMEGDAWgBQ+JMfs+jfSSHFS
+5u7q1C+ed4mGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BpVEg3UG8zMGtoeFV2dWJ1NnRRdm5uZUpoay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvMzlhNWZjLWQyNmUtNGQ1My05MWUzLTQ5M2Q3NzRhYTFmZi8x
L0JoMmNnZ1liRXQtQTIyOXdIVXh4VG00RFBUay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
MzlhNWZjLWQyNmUtNGQ1My05MWUzLTQ5M2Q3NzRhYTFmZi8xL1BpVEg3UG8zMGto
eFV2dWJ1NnRRdm5uZUpoay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEAtTANBgkqhkiG9w0BAQsFAAOC
AQEAVIsrgw4Hu3UPoNO8yQiJuUOjKyZiDRz6Nc/FMrROJyJSTgjzQ8uzwnKk4J6J
TzRb/wWkSsdB3GEbdiKi+7axsniVwDgEb3PlqPVIBu5PfMMm0qENGdc/uL0vkEzD
62U5ta5ByEgLqAq0bHnBReH4bMlP+Qf20x0pxZ8m94K5ggplrChFsNw7fqjfp4iE
Otc6+RYQQ8G8afTzOL1WSGpu+wTtQ7pHtmSMJ595jsZRYs8SoFuvOou/bi36rpjS
5e4dHI6WPcGJ6Uu8loAhG1WweNx2Y33FMn6Yhhnxif1peb+UaYC0ZOZSAT0lbeib
HqEr7vJLmS1yw4z/J6AuNWHicg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-ams.rpki-client.org