Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/9kkLO4I2TxUE5eWqFb8GB_XqU9E.roa
File: 9kkLO4I2TxUE5eWqFb8GB_XqU9E.roa (raw, json)
Hash identifier: ivUpQCrhvsj9NK8OG/y526Wvb+MIlAXUYPsurfgI1s4=
Subject key identifier: F6:49:0B:3B:82:36:4F:15:04:E5:E5:AA:15:BF:06:07:F5:EA:53:D1
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 0184BDC77996FC661AF73339F2957E6FBE2B
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/9kkLO4I2TxUE5eWqFb8GB_XqU9E.roa
Signing time: Mon 28 Nov 2022 10:27:57 +0000
ROA not before: Mon 28 Nov 2022 10:27:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12962
IP address blocks: 193.178.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:c7:79:96:fc:66:1a:f7:33:39:f2:95:7e:6f:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Nov 28 10:27:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6490b3b82364f1504e5e5aa15bf0607f5ea53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:33:42:26:d3:ad:16:28:57:9e:9c:8e:0c:
3f:a5:ce:e9:8c:02:a1:9a:f8:ce:4c:ba:b7:79:13:
e0:a1:2b:b1:c0:0d:a3:20:21:4b:7c:8c:b2:01:6f:
8a:f1:14:38:93:8c:ec:fb:e7:08:f8:88:01:71:5c:
4e:9c:79:ae:49:e4:10:b3:c5:9c:09:06:d5:ed:7e:
7a:d2:45:f1:9e:36:37:a2:43:e0:f6:ff:52:39:56:
9a:d9:2b:6d:c4:76:5f:56:ee:bd:83:a8:fb:35:c8:
e6:4b:5f:77:1b:cd:26:37:2f:5a:94:97:e0:64:88:
6e:5d:d3:5c:48:ed:cc:fd:b9:28:54:c5:37:5a:78:
03:79:96:68:8f:66:74:f2:c1:fe:95:5b:c2:80:81:
a6:3f:d5:6b:33:d0:0a:62:7c:5d:b1:59:00:26:51:
44:b6:ee:a7:e0:18:51:0a:6b:fe:cc:c7:a9:35:c4:
cd:0c:bc:79:5b:22:2b:e8:98:f0:05:11:b5:f1:5f:
30:4e:2d:0e:13:30:51:5d:58:a5:7c:57:43:8e:4b:
00:8c:1c:09:5d:f4:f7:c9:06:d8:38:b7:92:b7:46:
03:d7:86:b8:5d:43:3e:d0:7e:8d:bd:06:c0:91:b2:
75:e2:44:7a:08:af:c3:91:0a:e0:08:b9:97:e7:7d:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:0B:3B:82:36:4F:15:04:E5:E5:AA:15:BF:06:07:F5:EA:53:D1
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/9kkLO4I2TxUE5eWqFb8GB_XqU9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5d:8d:57:34:66:94:d2:84:e2:14:15:e7:97:c6:82:8d:2d:
33:4b:d0:9c:ca:f3:f0:3d:dd:39:56:7c:71:5f:71:51:90:7c:
26:ee:04:f4:5f:32:c7:06:83:6c:c3:f0:89:dd:58:06:bc:bc:
84:f9:24:dc:d1:23:3d:72:26:63:99:48:cf:07:21:ac:58:f6:
5b:a4:4f:55:bd:28:7e:10:24:1b:5f:1a:52:b9:46:b1:f3:28:
77:61:60:f7:47:15:63:ee:14:4e:12:cd:15:f9:3a:77:7c:71:
5b:85:4f:e9:76:05:20:2f:71:8b:cc:4c:bc:2f:5e:f2:ef:36:
fc:f0:e1:ae:1c:e7:d3:b5:ec:df:51:52:bc:a2:ae:6a:c5:5f:
71:92:53:52:bf:92:7e:2f:cd:b4:d4:4e:79:63:da:40:f9:17:
c3:6c:d3:27:fc:e0:45:c7:6f:89:a9:88:3e:ae:b6:ee:cd:9d:
73:51:bf:b8:38:d9:60:a5:2b:12:8a:45:17:3d:2e:36:f7:2f:
0f:bd:77:ae:22:09:3c:21:85:d4:bc:3d:b9:33:48:90:c6:9c:
7a:f4:82:9a:5b:4d:21:fc:91:be:c0:72:f7:4c:97:bb:78:06:
f8:75:29:cc:c0:ce:bc:be:50:35:06:c7:ed:cd:08:f2:ed:f8:
c6:9d:16:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS9x3mW/GYa9zM58pV+b74rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE1ODhmNWU5YTFjMmFmNTZiZTA4ZjdlNmEyYzk5ODFh
YjYwMjYwHhcNMjIxMTI4MTAyNzU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjQ5MGIzYjgyMzY0ZjE1MDRlNWU1YWExNWJmMDYwN2Y1ZWE1M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdwzQibTrRYoV56cjgw/pc7pjAKh
mvjOTLq3eRPgoSuxwA2jICFLfIyyAW+K8RQ4k4zs++cI+IgBcVxOnHmuSeQQs8Wc
CQbV7X560kXxnjY3okPg9v9SOVaa2SttxHZfVu69g6j7NcjmS193G80mNy9alJfg
ZIhuXdNcSO3M/bkoVMU3WngDeZZoj2Z08sH+lVvCgIGmP9VrM9AKYnxdsVkAJlFE
tu6n4BhRCmv+zMepNcTNDLx5WyIr6JjwBRG18V8wTi0OEzBRXVilfFdDjksAjBwJ
XfT3yQbYOLeSt0YD14a4XUM+0H6NvQbAkbJ14kR6CK/DkQrgCLmX530zdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZJCzuCNk8VBOXlqhW/Bgf16lPRMB8GA1UdIwQY
MBaAFFDaWI9emhwq9Wvgj35qLJmBq2AmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmIt
NDNjMWM2MWQwMmViLzEvOWtrTE80STJUeFVFNWVXcUZiOEdCX1hxVTlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmItNDNjMWM2MWQwMmVi
LzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKmMA0G
CSqGSIb3DQEBCwUAA4IBAQBrXY1XNGaU0oTiFBXnl8aCjS0zS9CcyvPwPd05Vnxx
X3FRkHwm7gT0XzLHBoNsw/CJ3VgGvLyE+STc0SM9ciZjmUjPByGsWPZbpE9VvSh+
ECQbXxpSuUax8yh3YWD3RxVj7hROEs0V+Tp3fHFbhU/pdgUgL3GLzEy8L17y7zb8
8OGuHOfTtezfUVK8oq5qxV9xklNSv5J+L8201E55Y9pA+RfDbNMn/OBFx2+JqYg+
rrbuzZ1zUb+4ONlgpSsSikUXPS429y8PvXeuIgk8IYXUvD25M0iQxpx69IKaW00h
/JG+wHL3TJe7eAb4dSnMwM68vlA1BsftzQjy7fjGnRYm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:03 2024 by rpki-client on console-fra.rpki-client.org