Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ChA-_d3Vy9IZf17yE_Uef10WG9M.roa
File: ChA-_d3Vy9IZf17yE_Uef10WG9M.roa (raw, json)
Hash identifier: ThTKA9C1taRV0ZlPpz1ZJcMnk2S11LmNGcWAuH2N468=
Subject key identifier: 0A:10:3E:FD:DD:D5:CB:D2:19:7F:5E:F2:13:F5:1E:7F:5D:16:1B:D3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184D1ED534DD186959873D2399D539C7B0A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ChA-_d3Vy9IZf17yE_Uef10WG9M.roa
Signing time: Fri 02 Dec 2022 08:21:42 +0000
ROA not before: Fri 02 Dec 2022 08:21:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 194.58.58.0/24 maxlen: 24
212.193.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:ed:53:4d:d1:86:95:98:73:d2:39:9d:53:9c:7b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 2 08:21:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a103efdddd5cbd2197f5ef213f51e7f5d161bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:05:3d:4f:a6:e8:45:bd:67:63:c8:8a:a8:
52:b8:4d:0d:a1:d1:9c:6f:37:e0:2f:7f:48:6f:2a:
00:69:c7:56:89:4a:33:73:9d:32:51:df:fb:1a:89:
04:22:07:fc:b9:12:f4:ef:23:a0:c6:ae:03:e2:f7:
fd:91:0c:71:94:81:69:54:db:ab:37:31:18:cf:12:
88:03:e3:bf:9e:de:2d:65:5a:f4:d9:97:f3:c0:d8:
b5:ae:e0:51:75:3c:a6:ff:67:dc:ba:3e:bc:a8:a6:
92:72:f4:d6:c8:26:f5:51:f0:29:cc:0a:ec:1b:2b:
0d:e5:b5:08:f8:4b:d8:0e:8b:87:17:02:db:9a:ec:
a6:52:40:9b:d9:89:42:16:3b:a6:6c:7f:56:29:23:
57:85:9c:99:30:23:0c:5c:d1:2c:86:5a:83:34:cb:
fe:e0:63:1a:31:08:5b:f7:4c:37:de:47:fd:23:2c:
ca:72:3f:67:da:ea:3c:e8:2f:0c:88:08:e1:1c:57:
8e:a5:ff:87:ae:94:8a:4c:18:28:8b:26:d0:47:64:
18:29:60:1f:21:98:40:52:a8:40:82:f6:3d:22:6f:
2f:ef:60:5b:11:e2:cc:ae:bd:c9:ae:f8:91:c9:86:
98:6a:e5:4f:3f:8e:94:67:d0:07:76:d3:b4:0f:83:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:3E:FD:DD:D5:CB:D2:19:7F:5E:F2:13:F5:1E:7F:5D:16:1B:D3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ChA-_d3Vy9IZf17yE_Uef10WG9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.58.0/24
212.193.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f5:b7:e0:97:cb:bf:b9:18:7f:7e:f0:e4:07:af:bd:f5:04:
86:36:72:38:bf:e3:e1:fb:1f:22:ef:8c:e4:98:54:5b:78:2a:
72:fa:c5:f7:8b:61:7d:e0:35:fe:cc:e7:56:de:a7:ab:a3:dc:
1c:11:47:c6:43:f8:ec:f6:4c:c8:61:f8:92:0f:d3:5b:06:b3:
07:00:60:02:bb:eb:54:0c:32:10:a6:01:07:17:77:92:d1:9f:
a4:00:d5:02:73:bc:6d:80:5a:cc:fd:bc:c5:fb:45:7a:c8:3c:
41:42:e6:a8:78:1f:91:fe:7e:37:8c:c2:a1:be:b1:e9:cf:58:
2e:fa:f9:bf:2f:b1:73:82:33:41:34:2a:9d:08:2b:24:5c:aa:
ce:4a:f8:7b:af:37:09:88:cd:90:48:28:84:0f:7d:5c:f6:4a:
b0:05:19:b2:08:70:83:df:4b:d8:70:42:ae:f0:20:78:00:1b:
93:d6:c3:76:13:ca:17:aa:26:1d:d4:ec:9d:b4:aa:51:73:76:
88:7b:09:dd:e6:6e:81:a1:7f:21:83:67:03:6f:5e:4b:d5:22:
76:0a:1e:3b:05:87:ab:a5:aa:f4:a8:91:75:c1:a7:4e:74:34:
6e:80:38:54:96:74:7a:1f:28:58:f9:8b:37:7a:fd:68:9d:1d:
e3:aa:9d:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTR7VNN0YaVmHPSOZ1TnHsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjAyMDgyMTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTEwM2VmZGRkZDVjYmQyMTk3ZjVlZjIxM2Y1MWU3ZjVkMTYxYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4IFPU+m6EW9Z2PIiqhSuE0NodGc
bzfgL39IbyoAacdWiUozc50yUd/7GokEIgf8uRL07yOgxq4D4vf9kQxxlIFpVNur
NzEYzxKIA+O/nt4tZVr02ZfzwNi1ruBRdTym/2fcuj68qKaScvTWyCb1UfApzArs
GysN5bUI+EvYDouHFwLbmuymUkCb2YlCFjumbH9WKSNXhZyZMCMMXNEshlqDNMv+
4GMaMQhb90w33kf9IyzKcj9n2uo86C8MiAjhHFeOpf+HrpSKTBgoiybQR2QYKWAf
IZhAUqhAgvY9Im8v72BbEeLMrr3JrviRyYaYauVPP46UZ9AHdtO0D4P69wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAoQPv3d1cvSGX9e8hP1Hn9dFhvTMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQ2hBLV9kM1Z5OUlaZjE3eUVfVWVmMTBXRzlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjo6AwQA
1MEHMA0GCSqGSIb3DQEBCwUAA4IBAQA99bfgl8u/uRh/fvDkB6+99QSGNnI4v+Ph
+x8i74zkmFRbeCpy+sX3i2F94DX+zOdW3qero9wcEUfGQ/js9kzIYfiSD9NbBrMH
AGACu+tUDDIQpgEHF3eS0Z+kANUCc7xtgFrM/bzF+0V6yDxBQuaoeB+R/n43jMKh
vrHpz1gu+vm/L7FzgjNBNCqdCCskXKrOSvh7rzcJiM2QSCiED31c9kqwBRmyCHCD
30vYcEKu8CB4ABuT1sN2E8oXqiYd1OydtKpRc3aIewnd5m6BoX8hg2cDb15L1SJ2
Ch47BYerpar0qJF1wadOdDRugDhUlnR6HyhY+Ys3ev1onR3jqp1B
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:58 2023 by rpki-client on console-fra.rpki-client.org