Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/d0M9YPwVi5of4AeDxq_to6BSfqk.roa
File: d0M9YPwVi5of4AeDxq_to6BSfqk.roa (raw, json)
Hash identifier: k/qn0DQOiaa2OTHy50iz2StKLl7Ri5QP4qv5FZQL2mo=
Subject key identifier: 77:43:3D:60:FC:15:8B:9A:1F:E0:07:83:C6:AF:ED:A3:A0:52:7E:A9
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 06AA4CA9
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/d0M9YPwVi5of4AeDxq_to6BSfqk.roa
Signing time: Sat 01 Jan 2022 06:56:11 +0000
ROA not before: Sat 01 Jan 2022 06:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 193.134.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111824041 (0x6aa4ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Jan 1 06:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77433d60fc158b9a1fe00783c6afeda3a0527ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:c6:a9:96:3b:fc:63:b6:5e:e6:6a:6b:4d:
da:6f:dd:e9:1b:a3:3d:d6:da:f4:f0:b8:f1:b9:f5:
9e:f6:01:c5:d2:af:2a:d3:0d:c0:6d:66:06:44:ce:
1f:9c:1b:53:0e:bd:2f:20:b4:63:f5:a2:bc:23:56:
5a:d7:20:7f:86:8a:0a:66:68:b4:5a:25:71:63:70:
53:ed:d0:6e:b9:d7:11:8c:80:96:72:b1:43:82:cc:
94:f5:fc:7e:b9:9e:66:46:76:27:5d:f6:38:76:7e:
4b:52:fc:92:aa:5a:5b:a9:2b:33:9a:89:dd:cb:63:
39:96:30:32:7e:9b:cb:e5:92:28:f4:0d:1a:91:1e:
13:70:a2:f1:9a:62:01:41:c9:e9:68:36:31:26:cc:
fa:1a:de:6c:1a:77:d4:7c:d1:41:ad:3a:bc:c1:b9:
c5:0e:9b:6d:97:89:21:ba:86:00:76:6d:94:8d:78:
e7:f9:80:c5:f5:64:bf:46:64:83:b6:a3:3e:d9:89:
98:7f:71:6c:b4:71:a5:97:63:3b:20:c6:c7:6a:c7:
d1:af:9c:fe:5b:85:c5:65:f9:e2:22:9c:73:b9:82:
de:46:32:45:2c:56:a7:29:af:f4:82:f4:6e:77:d8:
31:f9:56:a6:f7:67:d2:1b:88:74:a5:64:14:f5:99:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:3D:60:FC:15:8B:9A:1F:E0:07:83:C6:AF:ED:A3:A0:52:7E:A9
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/d0M9YPwVi5of4AeDxq_to6BSfqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.200.0/21
Signature Algorithm: sha256WithRSAEncryption
40:82:83:d8:53:04:df:20:95:35:1c:bb:a7:ca:62:4b:11:15:
06:3b:25:37:15:05:04:00:6c:52:18:e0:b1:63:53:2b:46:18:
7f:cd:ed:dc:19:2d:da:66:01:60:f0:bb:f1:4e:49:40:68:f4:
94:4e:05:12:92:41:bc:16:8e:d9:a7:e7:2f:c3:64:e4:5a:90:
9b:b7:c7:7e:e4:1a:04:8f:7a:dd:22:07:4c:d0:5f:86:cd:20:
a8:fa:63:2c:8d:32:18:31:90:9a:bb:ef:7a:11:bd:80:a2:89:
0b:50:88:a2:a2:ae:df:33:27:20:bf:7a:9c:99:ae:be:f0:62:
05:e9:ee:03:ca:64:4a:95:37:dd:7c:e9:7e:db:e1:94:e9:51:
67:9c:02:15:1e:b6:b1:0d:f5:c5:04:96:d8:f8:6a:7e:e3:31:
f4:d6:b6:8a:06:1b:a4:2e:48:84:42:ee:b6:b9:15:92:c6:e0:
02:9e:fe:a2:1a:fe:53:ae:ac:fe:53:b8:2f:b7:9b:0c:db:46:
b5:11:9d:5d:bb:16:53:53:f3:52:fd:8f:d1:8c:cb:c0:8e:df:
f7:8e:eb:73:cc:15:e3:d1:54:e9:05:ea:f6:8f:28:da:3d:a9:
79:71:d6:de:1e:f3:81:40:61:b5:8c:5b:c0:18:4d:57:de:54:
82:11:88:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBqpMqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OWE1MWQ0NDViNzY3YWI5YjY2Mjc3MDJlNGEyYjM5MDRkMjAzZjc3MB4XDTIyMDEw
MTA2NTYxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzc0MzNkNjBmYzE1
OGI5YTFmZTAwNzgzYzZhZmVkYTNhMDUyN2VhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANzhxqmWO/xjtl7mamtN2m/d6RujPdba9PC48bn1nvYBxdKv
KtMNwG1mBkTOH5wbUw69LyC0Y/WivCNWWtcgf4aKCmZotFolcWNwU+3QbrnXEYyA
lnKxQ4LMlPX8frmeZkZ2J132OHZ+S1L8kqpaW6krM5qJ3ctjOZYwMn6by+WSKPQN
GpEeE3Ci8ZpiAUHJ6Wg2MSbM+hrebBp31HzRQa06vMG5xQ6bbZeJIbqGAHZtlI14
5/mAxfVkv0Zkg7ajPtmJmH9xbLRxpZdjOyDGx2rH0a+c/luFxWX54iKcc7mC3kYy
RSxWpymv9IL0bnfYMflWpvdn0huIdKVkFPWZ/bMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR3Qz1g/BWLmh/gB4PGr+2joFJ+qTAfBgNVHSMEGDAWgBRppR1EW3Z6ubZi
dwLkorOQTSA/dzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FhVWRSRnQyZXJtMlluY0M1S0t6a0UwZ1AzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2YvMmJhNjZlLTViM2UtNDFmZS04YTA5LTcwNTIwZWE3NjM2OS8x
L2QwTTlZUHdWaTVvZjRBZUR4cV90bzZCU2Zxay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Yv
MmJhNjZlLTViM2UtNDFmZS04YTA5LTcwNTIwZWE3NjM2OS8xL2FhVWRSRnQyZXJt
MlluY0M1S0t6a0UwZ1AzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8GGyDANBgkqhkiG9w0BAQsFAAOC
AQEAQIKD2FME3yCVNRy7p8piSxEVBjslNxUFBABsUhjgsWNTK0YYf83t3Bkt2mYB
YPC78U5JQGj0lE4FEpJBvBaO2afnL8Nk5FqQm7fHfuQaBI963SIHTNBfhs0gqPpj
LI0yGDGQmrvvehG9gKKJC1CIoqKu3zMnIL96nJmuvvBiBenuA8pkSpU33Xzpftvh
lOlRZ5wCFR62sQ31xQSW2PhqfuMx9Na2igYbpC5IhELutrkVksbgAp7+ohr+U66s
/lO4L7ebDNtGtRGdXbsWU1PzUv2P0YzLwI7f947rc8wV49FU6QXq9o8o2j2peXHW
3h7zgUBhtYxbwBhNV95UghGIdg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:05 2024 by rpki-client on console-ams.rpki-client.org