Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/mdu1uYhm9SCPwJRgR38nCotbx7s.roa
File: mdu1uYhm9SCPwJRgR38nCotbx7s.roa (raw, json)
Hash identifier: 0+HrJYOSwtUKzMMmomndLaRIdIguDvzw/Z9tAYAjhUc=
Subject key identifier: 99:DB:B5:B9:88:66:F5:20:8F:C0:94:60:47:7F:27:0A:8B:5B:C7:BB
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 03267A09
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/mdu1uYhm9SCPwJRgR38nCotbx7s.roa
Signing time: Sat 01 Jan 2022 02:59:29 +0000
ROA not before: Sat 01 Jan 2022 02:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213072
IP address blocks: 194.60.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52853257 (0x3267a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Jan 1 02:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99dbb5b98866f5208fc09460477f270a8b5bc7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:e0:df:82:34:40:5e:b4:68:6b:1f:40:8c:
53:5f:89:ef:38:d1:00:19:d4:ba:1b:4a:b4:2e:76:
cb:06:b4:6a:dd:66:c1:2d:e5:c5:e7:47:ec:36:a4:
7f:c2:a7:b1:ec:24:61:2f:ba:aa:45:95:9a:07:1f:
4a:35:26:ba:da:85:5a:7d:fe:dd:2f:54:77:ac:0a:
5c:5a:54:b2:91:42:5a:0e:3a:a2:53:9b:7a:ea:25:
7f:06:b2:d6:75:2a:93:bf:db:75:ef:95:6e:4e:1a:
fb:a8:96:84:dc:24:af:71:89:7c:44:b1:04:80:41:
dd:89:68:b0:fa:db:87:a2:11:97:41:53:9f:19:f0:
92:03:c6:d6:2f:80:73:f7:01:e7:3a:2f:2c:40:69:
f9:45:69:f9:f4:f7:7b:a0:ca:d8:42:e5:15:a2:fd:
a0:a6:d9:5b:10:4d:7e:6f:02:25:ab:72:47:0a:2f:
23:7f:00:4a:c7:9a:12:ff:51:4f:ca:c8:b1:44:4f:
0d:64:65:ce:8a:15:a6:b1:19:c6:e7:7a:fb:97:17:
27:57:db:b2:1d:5f:7f:07:97:25:02:21:64:91:72:
06:f7:79:36:37:46:e9:0b:1b:eb:a9:c0:fa:95:f7:
b4:30:e6:24:df:40:95:25:58:e2:98:1a:f7:23:a8:
9a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:B5:B9:88:66:F5:20:8F:C0:94:60:47:7F:27:0A:8B:5B:C7:BB
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/mdu1uYhm9SCPwJRgR38nCotbx7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:65:6a:75:65:09:f4:bc:51:2b:17:36:73:ba:37:3a:d9:7a:
d4:de:1b:0c:ba:da:2b:6d:de:87:53:f0:df:ea:e5:58:28:b4:
c3:c4:06:38:97:63:42:a2:de:70:93:cb:c9:3f:f4:41:0b:ca:
1a:33:fb:54:e3:77:6b:1a:43:46:95:95:1c:dc:3b:0f:2b:f0:
d2:8d:0d:19:ce:1e:42:c7:7c:82:bb:04:a9:07:0c:fc:64:b6:
93:c4:0d:82:64:5e:2c:c2:00:ed:39:1e:63:f6:66:56:6a:1f:
79:0d:fe:eb:06:38:de:46:91:41:20:6f:d4:05:bf:7f:dc:c9:
f4:08:a4:19:14:47:a1:f2:85:52:3a:d5:2b:67:22:f6:19:d6:
34:4d:f6:f3:af:30:95:11:4b:5f:7b:56:e9:4e:f6:98:5a:c4:
3a:48:51:60:36:08:f7:bb:bb:69:00:d4:13:ad:1a:01:e0:64:
2e:91:f9:0a:80:80:16:a1:66:5a:e0:1e:82:69:65:8f:f5:75:
51:33:ee:23:e8:09:fe:bc:f5:62:5e:f8:c9:4f:67:3b:85:c1:
46:97:20:12:7c:c6:07:91:6a:ce:56:45:d0:3f:0c:94:b8:8b:
c9:bf:d1:fe:ff:9e:7f:d3:8b:5f:33:ef:6a:29:a5:cd:c6:b2:
6c:35:89:40
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAyZ6CTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzEyNTkzNzMyZGZmZTM4NWU2NzZlOTA1Njg3NzIzMDZjZGFlYjcyMB4XDTIyMDEw
MTAyNTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTlkYmI1Yjk4ODY2
ZjUyMDhmYzA5NDYwNDc3ZjI3MGE4YjViYzdiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2d4N+CNEBetGhrH0CMU1+J7zjRABnUuhtKtC52ywa0at1m
wS3lxedH7Dakf8KnsewkYS+6qkWVmgcfSjUmutqFWn3+3S9Ud6wKXFpUspFCWg46
olObeuolfway1nUqk7/bde+Vbk4a+6iWhNwkr3GJfESxBIBB3YlosPrbh6IRl0FT
nxnwkgPG1i+Ac/cB5zovLEBp+UVp+fT3e6DK2ELlFaL9oKbZWxBNfm8CJatyRwov
I38ASseaEv9RT8rIsURPDWRlzooVprEZxud6+5cXJ1fbsh1ffweXJQIhZJFyBvd5
NjdG6Qsb66nA+pX3tDDmJN9AlSVY4pga9yOomg8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSZ27W5iGb1II/AlGBHfycKi1vHuzAfBgNVHSMEGDAWgBSnElk3Mt/+OF5n
bpBWh3IwbNrrcjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3B4SlpOekxmX2poZVoyNlFWb2R5TUd6YTYzSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvMjExOWFiLTJmMGEtNDUxZS1iM2ZhLTk4ZGI0ZDVjZGIzMy8x
L21kdTF1WWhtOVNDUHdKUmdSMzhuQ290Yng3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
MjExOWFiLTJmMGEtNDUxZS1iM2ZhLTk4ZGI0ZDVjZGIzMy8xL3B4SlpOekxmX2po
ZVoyNlFWb2R5TUd6YTYzSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI8UDANBgkqhkiG9w0BAQsFAAOC
AQEAW2VqdWUJ9LxRKxc2c7o3Otl61N4bDLraK23eh1Pw3+rlWCi0w8QGOJdjQqLe
cJPLyT/0QQvKGjP7VON3axpDRpWVHNw7Dyvw0o0NGc4eQsd8grsEqQcM/GS2k8QN
gmReLMIA7TkeY/ZmVmofeQ3+6wY43kaRQSBv1AW/f9zJ9AikGRRHofKFUjrVK2ci
9hnWNE32868wlRFLX3tW6U72mFrEOkhRYDYI97u7aQDUE60aAeBkLpH5CoCAFqFm
WuAegmllj/V1UTPuI+gJ/rz1Yl74yU9nO4XBRpcgEnzGB5FqzlZF0D8MlLiLyb/R
/v+ef9OLXzPvaimlzcaybDWJQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org