Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/SlUuZtOuabIx6HnRFp97tfScUdA.roa
File: SlUuZtOuabIx6HnRFp97tfScUdA.roa (raw, json)
Hash identifier: jCbNApeY1RO83Im4/KzQhQA18JIYSD723y/QlHoT3WA=
Subject key identifier: 4A:55:2E:66:D3:AE:69:B2:31:E8:79:D1:16:9F:7B:B5:F4:9C:51:D0
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 06B0BF38
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/SlUuZtOuabIx6HnRFp97tfScUdA.roa
Signing time: Sat 01 Jan 2022 00:52:44 +0000
ROA not before: Sat 01 Jan 2022 00:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201749
IP address blocks: 194.31.93.0/24 maxlen: 24
194.31.220.0/24 maxlen: 24
194.31.199.0/24 maxlen: 24
194.31.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112246584 (0x6b0bf38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jan 1 00:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a552e66d3ae69b231e879d1169f7bb5f49c51d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:f1:38:cf:fa:8b:40:44:70:82:08:1b:68:
52:2d:e9:d1:6e:4f:e2:ea:cf:a8:45:13:38:4f:a5:
c1:e5:74:e5:0a:a6:65:81:ae:ea:fd:a2:04:84:3f:
af:d1:09:9a:9c:04:10:90:db:56:af:ba:68:35:ef:
04:0f:ab:bb:54:45:40:a3:30:d9:00:95:9b:6d:70:
e4:b1:5f:84:38:16:19:f3:bd:a4:5c:9d:e9:fa:26:
7f:25:ee:69:cb:cd:0d:85:a3:c4:f9:ee:9c:f7:63:
81:fa:44:80:2e:0e:e6:82:f2:43:d4:51:16:99:a0:
8e:cc:48:67:8f:72:ff:9a:98:68:08:59:b1:af:17:
75:95:c5:bb:96:15:db:54:f3:6e:f5:50:4d:33:c8:
c0:a4:df:b9:11:0e:ab:8b:48:1a:d8:5c:f4:6b:68:
2f:24:e9:23:8c:c7:c2:0e:e5:69:9d:c4:ff:7d:9e:
50:25:b0:c7:07:b3:e8:db:38:16:a7:ed:5d:5b:c5:
f9:42:eb:0a:63:ea:3f:57:bb:83:a1:dd:d1:f7:9a:
62:53:7b:f2:df:cc:4c:d7:f4:d4:00:67:9e:74:a4:
82:95:ef:f9:b2:c7:82:9d:44:e0:98:5c:5a:07:fa:
52:2b:15:f2:25:99:48:7b:16:1c:43:fb:91:c7:dd:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:2E:66:D3:AE:69:B2:31:E8:79:D1:16:9F:7B:B5:F4:9C:51:D0
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/SlUuZtOuabIx6HnRFp97tfScUdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.93.0/24
194.31.193.0/24
194.31.199.0/24
194.31.220.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0d:3a:c7:0e:6b:36:e7:a3:61:35:de:0f:5f:cd:da:cd:31:
fe:26:47:de:b7:ed:88:0a:5c:4c:cc:eb:03:88:ce:5c:fb:2e:
60:61:2c:aa:dc:59:a5:c7:58:1c:83:48:d8:53:e1:81:a6:d2:
86:94:70:68:98:34:4f:49:f5:d1:94:1e:48:d3:16:58:02:07:
a7:74:c3:25:88:23:5a:80:62:64:59:6c:36:f0:fa:f7:9a:a6:
4d:64:37:b9:5d:1a:4f:f5:14:04:20:00:2a:ba:2f:1f:2f:1f:
73:d5:28:28:d6:92:55:e9:ae:54:74:47:3d:12:a8:de:ed:0d:
ed:37:cc:1f:37:99:c2:29:7f:1e:20:ad:07:c1:77:b9:11:c8:
01:12:4e:93:9d:11:35:d5:0e:9a:64:03:1a:8f:a1:d3:46:bd:
03:81:1b:a3:a9:3c:89:be:a0:88:0b:06:40:51:23:55:cc:c6:
65:a9:6d:62:1e:9d:41:5d:ef:bb:3c:b4:eb:7c:53:fb:8b:22:
73:6f:0a:04:da:64:2e:dc:e9:f2:fb:3e:fb:b4:f4:32:a7:98:
2d:d8:6e:ca:19:cf:12:92:6d:6d:e4:1a:a3:a6:80:08:56:d2:
97:97:25:ce:8e:e3:a4:82:3a:8a:ae:05:cb:3f:6a:9f:06:5f:
e0:78:7c:02
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBrC/ODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YmJiMmE0MzAyMDk0ZjRjM2Y1YmFkYTU0N2VmNGY3ZWRlMThlOTAzMB4XDTIyMDEw
MTAwNTI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE1NTJlNjZkM2Fl
NjliMjMxZTg3OWQxMTY5ZjdiYjVmNDljNTFkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6L8TjP+otARHCCCBtoUi3p0W5P4urPqEUTOE+lweV05Qqm
ZYGu6v2iBIQ/r9EJmpwEEJDbVq+6aDXvBA+ru1RFQKMw2QCVm21w5LFfhDgWGfO9
pFyd6fomfyXuacvNDYWjxPnunPdjgfpEgC4O5oLyQ9RRFpmgjsxIZ49y/5qYaAhZ
sa8XdZXFu5YV21TzbvVQTTPIwKTfuREOq4tIGthc9GtoLyTpI4zHwg7laZ3E/32e
UCWwxwez6Ns4FqftXVvF+ULrCmPqP1e7g6Hd0feaYlN78t/MTNf01ABnnnSkgpXv
+bLHgp1E4JhcWgf6UisV8iWZSHsWHEP7kcfdWi8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRKVS5m065psjHoedEWn3u19JxR0DAfBgNVHSMEGDAWgBS7uypDAglPTD9b
raVH709+3hjpAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3U3c3FRd0lKVDB3X1c2MmxSLTlQZnQ0WTZRTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvYzM5OWE0LTUzYjYtNDI3MS05YjkwLTMyYmYxNjQxZmIzYi8x
L1NsVXVadE91YWJJeDZIblJGcDk3dGZTY1VkQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
YzM5OWE0LTUzYjYtNDI3MS05YjkwLTMyYmYxNjQxZmIzYi8xL3U3c3FRd0lKVDB3
X1c2MmxSLTlQZnQ0WTZRTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAMIfXQMEAMIfwQMEAMIfxwMEAMIf
3DANBgkqhkiG9w0BAQsFAAOCAQEAhw06xw5rNuejYTXeD1/N2s0x/iZH3rftiApc
TMzrA4jOXPsuYGEsqtxZpcdYHINI2FPhgabShpRwaJg0T0n10ZQeSNMWWAIHp3TD
JYgjWoBiZFlsNvD695qmTWQ3uV0aT/UUBCAAKrovHy8fc9UoKNaSVemuVHRHPRKo
3u0N7TfMHzeZwil/HiCtB8F3uRHIARJOk50RNdUOmmQDGo+h00a9A4Ebo6k8ib6g
iAsGQFEjVczGZaltYh6dQV3vuzy063xT+4sic28KBNpkLtzp8vs++7T0MqeYLdhu
yhnPEpJtbeQao6aACFbSl5clzo7jpII6iq4Fyz9qnwZf4Hh8Ag==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:52 2023 by rpki-client on console-fra.rpki-client.org