Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/64BbQ9jOfvZlnj-rtZeruYAHmPA.roa
File: 64BbQ9jOfvZlnj-rtZeruYAHmPA.roa (raw, json)
Hash identifier: Y1nFChRMwu7OKbebDZXevW8Kz9onbWIhNTh+YoDeYmY=
Subject key identifier: EB:80:5B:43:D8:CE:7E:F6:65:9E:3F:AB:B5:97:AB:B9:80:07:98:F0
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 076CD175
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/64BbQ9jOfvZlnj-rtZeruYAHmPA.roa
Signing time: Wed 02 Mar 2022 16:42:04 +0000
ROA not before: Wed 02 Mar 2022 16:42:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208011
IP address blocks: 194.156.190.0/23 maxlen: 24
194.156.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124572021 (0x76cd175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Mar 2 16:42:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb805b43d8ce7ef6659e3fabb597abb9800798f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:53:f5:84:c5:70:f7:ae:bb:86:10:bc:9f:
9f:04:07:49:cb:bb:a4:07:5f:c8:b3:a4:e8:b4:01:
0e:5f:27:24:6e:82:0c:24:78:0b:3f:a3:ba:3c:91:
75:9b:76:1e:d3:b1:e3:2b:38:cf:78:eb:ee:7e:d0:
5e:6e:10:74:cb:b3:77:dd:20:54:05:8d:60:4b:31:
48:3f:77:22:3b:b9:cf:48:67:4a:85:97:bc:6b:50:
cc:c8:c2:f0:32:a5:0d:42:dc:b0:1a:3f:98:5b:13:
05:01:49:89:84:1d:a3:a0:67:a3:26:07:12:b8:d1:
6f:4f:a7:f8:09:47:e4:fb:f3:ea:37:56:66:35:28:
6c:67:61:de:03:a4:bc:a4:ba:3c:9a:3c:85:af:aa:
0e:74:c4:8e:b9:91:f3:fe:5c:dd:a2:a4:95:48:87:
47:cc:f3:7f:2b:68:f8:08:9b:87:38:cb:96:f2:8f:
5f:c7:d8:63:d6:f2:87:c2:8c:76:84:09:c5:c8:3f:
7e:ec:8b:1d:ec:bf:74:a1:0f:fa:e7:c4:c4:c8:d7:
11:d6:f1:d4:ba:ff:b4:b6:04:05:a4:d8:48:f5:29:
e7:dd:b7:e5:21:76:03:e4:b9:da:d2:c3:33:76:c2:
8d:03:8f:51:76:f9:57:01:b3:4e:d5:f3:53:96:ab:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:80:5B:43:D8:CE:7E:F6:65:9E:3F:AB:B5:97:AB:B9:80:07:98:F0
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/64BbQ9jOfvZlnj-rtZeruYAHmPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.190.0/23
194.156.198.0/23
Signature Algorithm: sha256WithRSAEncryption
56:1c:97:b7:45:0a:ec:16:07:87:42:28:71:6a:91:59:79:44:
1f:0d:0d:7d:32:9c:28:67:63:75:c5:79:38:da:fa:ea:0c:4b:
e0:84:1f:8f:e1:a0:7d:70:85:1b:d9:ec:3e:da:60:7f:5d:d7:
49:6d:c5:8f:a8:dc:1a:0f:7d:72:f6:42:c6:bc:59:cf:14:7f:
ec:38:50:3e:0e:ae:04:7a:f7:19:5b:8b:d1:7b:d7:63:40:04:
5e:cb:0c:ca:78:cf:09:8f:ed:89:41:2f:54:9d:5b:16:ae:2e:
87:a7:57:da:7a:9d:3b:bf:f1:10:d5:5c:33:f9:d8:37:a8:90:
82:9e:93:04:58:0f:9a:13:50:c1:34:55:b6:1b:60:8f:bf:e8:
3e:32:3c:49:29:8f:c7:a0:e9:fb:7f:4b:6b:3e:b3:70:ae:53:
40:2a:70:9f:c0:0b:02:a5:b8:0d:5a:ec:82:6f:ee:0c:63:b1:
57:bc:2f:51:2b:2d:06:6f:80:6a:df:b4:1e:99:3f:5c:41:56:
b4:ea:16:36:a3:2b:84:7f:69:d2:fa:47:fa:3a:52:6f:9d:ee:
f2:fa:a2:32:a6:c0:f4:3b:33:9e:db:d2:83:4b:ab:08:d8:b0:
1b:a1:89:f1:4d:cd:2f:3b:60:57:f0:f2:7d:1c:ed:a6:1c:c3:
48:48:83:e4
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB2zRdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZjI2YzkxYWYwYWIyNjY4YTM2MDFiMmQ5NTdkYzRjZTAwMmQ1OTg2MB4XDTIyMDMw
MjE2NDIwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWI4MDViNDNkOGNl
N2VmNjY1OWUzZmFiYjU5N2FiYjk4MDA3OThmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALncU/WExXD3rruGELyfnwQHScu7pAdfyLOk6LQBDl8nJG6C
DCR4Cz+jujyRdZt2HtOx4ys4z3jr7n7QXm4QdMuzd90gVAWNYEsxSD93Iju5z0hn
SoWXvGtQzMjC8DKlDULcsBo/mFsTBQFJiYQdo6BnoyYHErjRb0+n+AlH5Pvz6jdW
ZjUobGdh3gOkvKS6PJo8ha+qDnTEjrmR8/5c3aKklUiHR8zzfyto+AibhzjLlvKP
X8fYY9byh8KMdoQJxcg/fuyLHey/dKEP+ufExMjXEdbx1Lr/tLYEBaTYSPUp5923
5SF2A+S52tLDM3bCjQOPUXb5VwGzTtXzU5ar2HMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTrgFtD2M5+9mWeP6u1l6u5gAeY8DAfBgNVHSMEGDAWgBTPJska8KsmaKNg
Gy2VfcTOAC1ZhjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3p5YkpHdkNySm1pallCc3RsWDNFemdBdFdZWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjEvNzZkZGQ3LTBhZjItNDNjZS05ODU5LTZiYzgzOTQ2NTZiNy8x
LzY0QmJROWpPZnZabG5qLXJ0WmVydVlBSG1QQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEv
NzZkZGQ3LTBhZjItNDNjZS05ODU5LTZiYzgzOTQ2NTZiNy8xL3p5YkpHdkNySm1p
allCc3RsWDNFemdBdFdZWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcKcvgMEAcKcxjANBgkqhkiG9w0B
AQsFAAOCAQEAVhyXt0UK7BYHh0IocWqRWXlEHw0NfTKcKGdjdcV5ONr66gxL4IQf
j+GgfXCFG9nsPtpgf13XSW3Fj6jcGg99cvZCxrxZzxR/7DhQPg6uBHr3GVuL0XvX
Y0AEXssMynjPCY/tiUEvVJ1bFq4uh6dX2nqdO7/xENVcM/nYN6iQgp6TBFgPmhNQ
wTRVthtgj7/oPjI8SSmPx6Dp+39Laz6zcK5TQCpwn8ALAqW4DVrsgm/uDGOxV7wv
USstBm+Aat+0Hpk/XEFWtOoWNqMrhH9p0vpH+jpSb53u8vqiMqbA9DszntvSg0ur
CNiwG6GJ8U3NLztgV/DyfRztphzDSEiD5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org