Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gEgTD2ZDoMtxIllGhw8LyhwWoV4.roa
File: gEgTD2ZDoMtxIllGhw8LyhwWoV4.roa (raw, json)
Hash identifier: 5lZCOmm6ZZye5gqCkOuJzPEx2LWPgP2WXwJGWd0I6vE=
Subject key identifier: 80:48:13:0F:66:43:A0:CB:71:22:59:46:87:0F:0B:CA:1C:16:A1:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184BE8694E2E125A85274515E3B0DB254AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gEgTD2ZDoMtxIllGhw8LyhwWoV4.roa
Signing time: Mon 28 Nov 2022 13:56:41 +0000
ROA not before: Mon 28 Nov 2022 13:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 193.124.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:86:94:e2:e1:25:a8:52:74:51:5e:3b:0d:b2:54:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 28 13:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8048130f6643a0cb71225946870f0bca1c16a15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:00:64:02:f2:bf:3a:a8:a5:8f:35:4f:be:
7e:93:d2:72:8e:73:62:84:a2:f7:99:4c:80:15:b9:
a5:8d:9e:8d:b5:e8:fb:ef:aa:65:1f:eb:df:03:42:
9a:0b:49:a6:55:3f:e5:3d:8f:5b:0c:09:7d:38:9a:
89:f5:1d:1b:c2:e0:91:cc:20:15:0f:cf:03:95:b1:
fa:dd:3e:1c:ff:0d:7c:ef:21:b1:0d:b2:b9:71:67:
7a:c6:d9:8a:55:99:26:26:84:5d:80:c2:f5:76:79:
c1:86:53:c7:36:c1:2f:9b:1d:7b:7b:45:da:2b:4a:
6d:41:76:05:4c:66:cf:fd:30:7e:e0:dd:a9:5e:59:
41:2c:40:38:72:83:f6:f8:bb:59:e9:c7:e7:be:43:
de:f1:d6:03:64:0a:2e:fd:cc:29:e1:97:e3:57:0e:
32:6c:21:27:2b:fc:04:93:3e:d1:f1:b1:34:9a:aa:
e6:2f:e7:18:af:c9:af:07:d9:6a:8e:a5:99:68:f6:
58:f0:15:32:45:e0:7e:d8:81:17:40:f2:8c:f8:58:
ea:c3:b8:d7:66:c6:c1:95:f2:5e:b9:20:cf:37:8b:
dc:53:fe:32:27:ef:52:d7:5a:c6:9d:b1:a0:c2:cc:
18:63:39:9e:9c:ad:16:93:be:ac:9d:31:06:6b:0d:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:13:0F:66:43:A0:CB:71:22:59:46:87:0F:0B:CA:1C:16:A1:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gEgTD2ZDoMtxIllGhw8LyhwWoV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.46.0/24
Signature Algorithm: sha256WithRSAEncryption
65:dc:36:53:15:70:6c:bf:cb:e0:77:15:55:39:80:7e:c8:12:
6e:ea:e1:9a:59:30:ca:c2:b9:85:32:99:ce:b3:25:34:5d:75:
a8:37:b8:bb:d3:b6:c2:f9:50:35:9e:31:1f:e1:54:71:2d:05:
35:b0:a8:4e:72:53:90:f9:93:c9:c8:84:bf:d8:4c:61:84:ea:
ba:eb:f6:08:71:74:ba:5e:37:5e:d1:84:cf:ed:da:92:4c:12:
36:81:51:2d:75:3f:28:a7:9e:90:7c:ba:a3:0e:06:9b:4a:de:
de:9f:81:83:d4:e2:7f:47:3e:04:da:b1:a9:0c:62:7a:6a:d3:
11:b7:00:65:7c:4e:00:d8:0c:41:80:ce:09:17:c9:05:5c:22:
42:7d:3a:34:80:05:03:58:a8:9e:1b:d9:73:49:81:44:33:41:
4f:9c:f9:4c:ee:c7:79:31:d0:39:50:67:95:b9:7f:8e:b3:1d:
f6:84:e5:e2:cd:22:4f:84:67:7e:89:f0:21:45:3c:5e:84:3b:
c7:53:7b:0d:6b:04:a1:a7:7e:00:2f:99:79:57:f8:4d:79:54:
a1:1b:17:07:f5:23:7e:80:75:8c:f3:27:bc:0a:75:af:58:27:
7e:3b:1e:62:0a:dc:18:66:1e:d8:b4:ae:29:7f:53:2f:10:56:
fb:39:61:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS+hpTi4SWoUnRRXjsNslSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTI4MTM1NjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDQ4MTMwZjY2NDNhMGNiNzEyMjU5NDY4NzBmMGJjYTFjMTZhMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE0AZALyvzqopY81T75+k9JyjnNi
hKL3mUyAFbmljZ6Ntej776plH+vfA0KaC0mmVT/lPY9bDAl9OJqJ9R0bwuCRzCAV
D88DlbH63T4c/w187yGxDbK5cWd6xtmKVZkmJoRdgML1dnnBhlPHNsEvmx17e0Xa
K0ptQXYFTGbP/TB+4N2pXllBLEA4coP2+LtZ6cfnvkPe8dYDZAou/cwp4ZfjVw4y
bCEnK/wEkz7R8bE0mqrmL+cYr8mvB9lqjqWZaPZY8BUyReB+2IEXQPKM+Fjqw7jX
ZsbBlfJeuSDPN4vcU/4yJ+9S11rGnbGgwswYYzmenK0Wk76snTEGaw2XYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBIEw9mQ6DLcSJZRocPC8ocFqFeMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZ0VnVEQyWkRvTXR4SWxsR2h3OEx5aHdXb1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXwuMA0G
CSqGSIb3DQEBCwUAA4IBAQBl3DZTFXBsv8vgdxVVOYB+yBJu6uGaWTDKwrmFMpnO
syU0XXWoN7i707bC+VA1njEf4VRxLQU1sKhOclOQ+ZPJyIS/2ExhhOq66/YIcXS6
Xjde0YTP7dqSTBI2gVEtdT8op56QfLqjDgabSt7en4GD1OJ/Rz4E2rGpDGJ6atMR
twBlfE4A2AxBgM4JF8kFXCJCfTo0gAUDWKieG9lzSYFEM0FPnPlM7sd5MdA5UGeV
uX+Osx32hOXizSJPhGd+ifAhRTxehDvHU3sNawShp34AL5l5V/hNeVShGxcH9SN+
gHWM8ye8CnWvWCd+Ox5iCtwYZh7YtK4pf1MvEFb7OWGT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org