Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xtedGW2cD2UyxHY6qORpDv5W4kU.roa
File: xtedGW2cD2UyxHY6qORpDv5W4kU.roa (raw, json)
Hash identifier: 3thGa7AfhcN/rek8qN67pQFcmuDvIDgEk1Rs/i69ucY=
Subject key identifier: C6:D7:9D:19:6D:9C:0F:65:32:C4:76:3A:A8:E4:69:0E:FE:56:E2:45
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F796E14
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xtedGW2cD2UyxHY6qORpDv5W4kU.roa
Signing time: Sat 01 Jan 2022 08:04:58 +0000
ROA not before: Sat 01 Jan 2022 08:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41717
IP address blocks: 193.232.178.0/24 maxlen: 24
194.226.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259616276 (0xf796e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d79d196d9c0f6532c4763aa8e4690efe56e245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:32:e7:80:1f:c6:c6:e3:4c:92:36:c9:88:
ff:f1:10:75:6d:9a:47:ee:51:25:79:16:7e:a2:97:
40:89:de:12:b6:ee:a5:24:c6:b1:83:ee:64:dc:c9:
4e:13:11:72:4a:69:9a:3f:f0:c8:24:c1:e9:f4:48:
e1:d0:96:6a:d0:ab:2c:72:bc:88:0d:74:45:cd:f1:
47:6c:56:2a:40:6d:fd:d0:f1:63:38:0b:fa:c0:ce:
e2:3b:52:6f:1b:a4:67:50:61:48:2d:af:1a:3e:ef:
69:5f:a1:13:d9:0d:38:13:6e:70:e9:21:8c:f7:7e:
84:08:24:28:99:44:9a:ce:3f:15:b1:68:3f:7e:c4:
02:e2:77:ee:f0:02:ba:4f:21:e7:0d:26:13:7d:b3:
60:a5:54:01:fc:5c:eb:2e:0f:47:45:75:5b:13:b7:
11:c6:0d:a1:a0:ca:89:96:c7:f6:53:7e:ce:c1:39:
ae:29:00:cd:e7:09:ce:63:1a:bd:40:36:be:fe:ff:
35:56:c1:a1:7f:d9:52:53:88:40:43:ca:38:f3:ff:
0e:4f:a2:14:1d:f8:43:f8:22:42:89:a9:d2:89:34:
76:98:0f:4a:2d:b0:bc:0f:53:7c:da:72:47:8a:27:
d1:28:6f:c1:1d:92:06:4a:8e:5d:ae:16:46:d9:5e:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:9D:19:6D:9C:0F:65:32:C4:76:3A:A8:E4:69:0E:FE:56:E2:45
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xtedGW2cD2UyxHY6qORpDv5W4kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.178.0/24
194.226.169.0/24
Signature Algorithm: sha256WithRSAEncryption
44:36:c9:1e:a9:ad:85:e5:62:54:48:0b:08:2d:23:9a:46:c5:
3b:92:83:81:59:62:c5:63:0f:b1:1d:4e:9b:50:2c:a6:43:ae:
b6:7d:75:9d:6f:66:17:e8:28:04:2b:48:a3:00:5d:2c:ca:05:
8d:ba:f1:b5:d6:e5:e7:71:14:fe:92:af:a1:b7:bc:44:d0:4b:
3b:84:59:ae:ee:4c:a1:e5:9c:0d:6c:a2:5b:41:6a:5c:8a:da:
5e:2d:08:1e:8d:34:0f:84:95:6a:b4:96:03:73:95:b5:57:ab:
79:ea:6b:4b:80:6d:c3:67:20:48:42:64:7e:99:41:e9:97:28:
8b:9e:05:cf:cd:7c:e3:31:f1:0a:52:59:42:61:3b:f4:77:74:
f4:38:32:ab:4d:6a:60:22:d5:ff:b6:4c:2b:af:5a:20:ea:34:
d8:ac:2b:02:07:dc:bc:32:3a:3f:ca:5f:47:5a:6e:79:5f:7c:
5c:df:47:dd:a2:7d:c7:8e:16:11:56:ef:c8:36:c0:e9:26:e0:
a9:5f:e0:3d:f8:bb:71:0a:cd:7e:ab:34:5b:76:6a:c5:95:3e:
61:79:f2:7a:26:dc:99:36:c7:03:8b:0d:28:26:af:78:63:4b:
ce:eb:0a:24:6d:a3:65:9a:79:d2:43:e8:e2:e7:37:f7:e8:7a:
75:3b:03:70
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIED3luFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTNhM2I1ZjUxODA4MTY4YzIxMmMwOTRhMmJhYWZmMzhlMTY0NjRhMB4XDTIyMDEw
MTA4MDQ1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzZkNzlkMTk2ZDlj
MGY2NTMyYzQ3NjNhYThlNDY5MGVmZTU2ZTI0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQhMueAH8bG40ySNsmI//EQdW2aR+5RJXkWfqKXQIneErbu
pSTGsYPuZNzJThMRckppmj/wyCTB6fRI4dCWatCrLHK8iA10Rc3xR2xWKkBt/dDx
YzgL+sDO4jtSbxukZ1BhSC2vGj7vaV+hE9kNOBNucOkhjPd+hAgkKJlEms4/FbFo
P37EAuJ37vACuk8h5w0mE32zYKVUAfxc6y4PR0V1WxO3EcYNoaDKiZbH9lN+zsE5
rikAzecJzmMavUA2vv7/NVbBoX/ZUlOIQEPKOPP/Dk+iFB34Q/giQomp0ok0dpgP
Si2wvA9TfNpyR4on0ShvwR2SBkqOXa4WRtleHeECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTG150ZbZwPZTLEdjqo5GkO/lbiRTAfBgNVHSMEGDAWgBQlOjtfUYCBaMIS
wJSiuq/zjhZGSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8x
L3h0ZWRHVzJjRDJVeXhIWTZxT1JwRHY1VzRrVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8xL0pUbzdYMUdBZ1dq
Q0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMHosgMEAMLiqTANBgkqhkiG9w0B
AQsFAAOCAQEARDbJHqmtheViVEgLCC0jmkbFO5KDgVlixWMPsR1Om1AspkOutn11
nW9mF+goBCtIowBdLMoFjbrxtdbl53EU/pKvobe8RNBLO4RZru5MoeWcDWyiW0Fq
XIraXi0IHo00D4SVarSWA3OVtVereeprS4Btw2cgSEJkfplB6Zcoi54Fz8184zHx
ClJZQmE79Hd09Dgyq01qYCLV/7ZMK69aIOo02KwrAgfcvDI6P8pfR1pueV98XN9H
3aJ9x44WEVbvyDbA6SbgqV/gPfi7cQrNfqs0W3ZqxZU+YXnyeibcmTbHA4sNKCav
eGNLzusKJG2jZZp50kPo4uc39+h6dTsDcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org