Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/fhyaPbq3CHjew_ZErEE0NmATU-w.roa
File: fhyaPbq3CHjew_ZErEE0NmATU-w.roa (raw, json)
Hash identifier: relFEbeQTo4cZ3xSM6rdymogAw61QOcDEmeL1x78wq4=
Subject key identifier: 7E:1C:9A:3D:BA:B7:08:78:DE:C3:F6:44:AC:41:34:36:60:13:53:EC
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 03AD3003
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/fhyaPbq3CHjew_ZErEE0NmATU-w.roa
Signing time: Sat 01 Jan 2022 05:53:34 +0000
ROA not before: Sat 01 Jan 2022 05:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43701
IP address blocks: 193.23.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61681667 (0x3ad3003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Jan 1 05:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e1c9a3dbab70878dec3f644ac413436601353ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:9c:2d:bd:13:8a:3c:23:13:84:00:1d:d5:
9c:31:ca:0b:7f:43:e1:03:da:59:76:10:ab:0a:f6:
4e:c3:68:cf:2f:95:b6:de:c6:ee:83:cf:f6:e7:16:
0f:ea:40:65:37:f7:15:56:26:bb:23:0f:96:b6:d7:
ee:92:16:9a:08:cb:48:2f:bb:56:0d:d0:52:46:87:
b0:78:37:f8:3b:74:5c:fd:81:56:d8:15:fa:1a:8d:
42:c6:de:3c:37:ec:0d:8e:8c:f4:87:44:07:e0:57:
78:70:2e:2d:67:98:dc:a2:63:8e:9b:29:4f:9a:2b:
cc:df:92:e4:d5:ea:3f:eb:f0:dc:d8:6e:d6:9c:21:
16:41:15:ee:05:ca:f1:ee:b4:f5:4f:e3:b3:fc:4b:
41:13:6a:39:76:de:00:24:fb:e9:73:32:b4:d9:6b:
d1:4b:7e:6c:70:3b:9d:ea:37:43:ee:1a:70:8c:f3:
ae:0b:8a:d3:9c:b8:99:1f:18:57:1f:1f:e6:39:70:
4a:27:52:15:5f:83:a3:26:e2:f9:d3:85:76:ac:81:
4b:e7:e6:18:49:3a:64:26:2d:04:e2:1b:0d:bd:dc:
c8:f0:0f:cc:a1:4a:92:e4:1c:16:1a:65:91:9c:90:
36:f4:0d:f5:1d:fe:7f:7d:54:f0:58:db:a3:8a:4b:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:9A:3D:BA:B7:08:78:DE:C3:F6:44:AC:41:34:36:60:13:53:EC
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/fhyaPbq3CHjew_ZErEE0NmATU-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.230.0/24
Signature Algorithm: sha256WithRSAEncryption
25:dc:8a:4f:a9:9d:ad:e6:07:11:0b:04:a9:3c:15:c4:e9:12:
9e:8a:5f:31:c2:d5:6e:cd:3d:d7:fd:d7:62:75:98:aa:2e:99:
c0:fa:15:d8:be:f5:95:ae:38:2d:7a:f4:37:0d:d5:39:7b:13:
43:44:d6:3a:80:a2:ab:5b:8f:99:96:e0:46:51:63:74:d2:e7:
a0:6a:13:e2:ee:76:74:5d:d0:52:13:8b:47:a6:6d:2e:29:85:
ed:03:65:ce:ba:f1:b7:c9:d5:59:c3:02:e8:05:45:74:75:68:
96:0c:20:93:58:00:67:01:03:d2:10:c4:96:b0:02:c5:92:09:
11:3e:f1:ef:6d:ac:78:60:93:61:94:37:b5:ae:a4:3b:28:ec:
f2:a5:b7:69:68:3e:fc:56:23:7c:40:09:d5:f9:07:f9:b3:8a:
14:f0:3d:03:6f:eb:0e:a5:9a:e5:70:d6:d4:66:2c:07:f9:38:
c2:81:98:cb:f8:a5:53:49:1b:57:36:51:e8:3e:80:20:b0:89:
9a:75:1b:cb:dc:c3:32:e3:b9:1a:97:fb:22:07:18:81:99:bc:
bb:02:4f:22:7a:36:e3:1f:4e:8e:c7:c6:cb:2b:e8:67:a6:0b:
28:44:10:ca:21:62:af:da:c7:77:fd:bd:8a:6d:c6:37:c2:e6:
6f:88:95:df
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA60wAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDU3NmE4NmFlM2EzNTMyZTEwOWM1Y2RmNzI5YWQ0NzhjMWM2OTdmMB4XDTIyMDEw
MTA1NTMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2UxYzlhM2RiYWI3
MDg3OGRlYzNmNjQ0YWM0MTM0MzY2MDEzNTNlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbAnC29E4o8IxOEAB3VnDHKC39D4QPaWXYQqwr2TsNozy+V
tt7G7oPP9ucWD+pAZTf3FVYmuyMPlrbX7pIWmgjLSC+7Vg3QUkaHsHg3+Dt0XP2B
VtgV+hqNQsbePDfsDY6M9IdEB+BXeHAuLWeY3KJjjpspT5orzN+S5NXqP+vw3Nhu
1pwhFkEV7gXK8e609U/js/xLQRNqOXbeACT76XMytNlr0Ut+bHA7neo3Q+4acIzz
rguK05y4mR8YVx8f5jlwSidSFV+Doybi+dOFdqyBS+fmGEk6ZCYtBOIbDb3cyPAP
zKFKkuQcFhplkZyQNvQN9R3+f31U8Fjbo4pLMZ0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR+HJo9urcIeN7D9kSsQTQ2YBNT7DAfBgNVHSMEGDAWgBSNV2qGrjo1MuEJ
xc33Ka1HjBxpfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pWZHFocTQ2TlRMaENjWE45eW10UjR3Y2FYOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvMWI4NjQ4LTVlOTYtNGNlZi04MDU1LTY0ZTcyOWVmMzAyZC8x
L2ZoeWFQYnEzQ0hqZXdfWkVyRUUwTm1BVFUtdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
MWI4NjQ4LTVlOTYtNGNlZi04MDU1LTY0ZTcyOWVmMzAyZC8xL2pWZHFocTQ2TlRM
aENjWE45eW10UjR3Y2FYOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEX5jANBgkqhkiG9w0BAQsFAAOC
AQEAJdyKT6mdreYHEQsEqTwVxOkSnopfMcLVbs091/3XYnWYqi6ZwPoV2L71la44
LXr0Nw3VOXsTQ0TWOoCiq1uPmZbgRlFjdNLnoGoT4u52dF3QUhOLR6ZtLimF7QNl
zrrxt8nVWcMC6AVFdHVolgwgk1gAZwED0hDElrACxZIJET7x722seGCTYZQ3ta6k
Oyjs8qW3aWg+/FYjfEAJ1fkH+bOKFPA9A2/rDqWa5XDW1GYsB/k4woGYy/ilU0kb
VzZR6D6AILCJmnUby9zDMuO5Gpf7IgcYgZm8uwJPIno24x9OjsfGyyvoZ6YLKEQQ
yiFir9rHd/29im3GN8Lmb4iV3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:54 2024 by rpki-client on console-fra.rpki-client.org