Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V1IPr-XuNwFwrGbo1D6tQG5dHvQ.roa
File: V1IPr-XuNwFwrGbo1D6tQG5dHvQ.roa (raw, json)
Hash identifier: XVCzmzTmt0hCixpz3teG0kFd7wbHSXIN3G/9oyzJMp4=
Subject key identifier: 57:52:0F:AF:E5:EE:37:01:70:AC:66:E8:D4:3E:AD:40:6E:5D:1E:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1F5D99EF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V1IPr-XuNwFwrGbo1D6tQG5dHvQ.roa
Signing time: Thu 30 Jun 2022 12:46:03 +0000
ROA not before: Thu 30 Jun 2022 12:46:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 193.37.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526227951 (0x1f5d99ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 30 12:46:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57520fafe5ee370170ac66e8d43ead406e5d1ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:b3:1d:02:e1:97:ee:06:23:e9:db:a7:f7:
0e:f0:73:55:e3:fe:8d:74:c2:20:43:01:b6:ba:75:
e6:dd:dc:12:45:f7:cd:17:54:49:35:fb:c9:48:ba:
47:9e:b9:88:4b:09:37:d1:00:99:c3:ad:9b:67:69:
ab:dc:98:71:6a:13:d5:ba:c3:75:50:fd:f8:68:63:
06:19:f2:fd:79:e3:bf:16:05:d9:0b:ad:f3:00:58:
28:88:db:8f:eb:1c:0f:da:d4:f1:da:40:f0:7a:97:
1d:ea:91:8f:83:91:a3:90:09:c5:67:a9:20:ad:bf:
3f:80:82:0c:bc:15:39:1c:fe:9f:54:5d:ab:d9:73:
62:ff:32:83:ea:90:fd:c2:ef:f6:6f:e1:92:e4:45:
c7:09:c8:5f:69:cb:ef:7e:13:fb:95:ff:9b:5a:9d:
5c:36:ad:e9:9f:81:10:f6:f7:22:d1:36:7d:7a:74:
a5:6d:17:bc:0f:e7:0d:6a:54:79:42:da:5b:2f:9c:
05:a6:00:f6:fe:3e:b3:44:6a:ac:62:c6:46:13:03:
63:04:26:d3:ca:f2:ac:56:a7:b5:1f:db:59:16:6b:
20:d4:ea:cf:3b:22:c1:5b:44:16:b1:35:d0:1f:a2:
6b:b9:26:54:76:15:ae:6f:1e:c8:0f:5e:26:f9:4c:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:52:0F:AF:E5:EE:37:01:70:AC:66:E8:D4:3E:AD:40:6E:5D:1E:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V1IPr-XuNwFwrGbo1D6tQG5dHvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:96:13:d6:85:cf:4a:dd:b1:81:07:3d:f7:c1:a0:5f:50:7c:
4e:b9:17:d9:47:d4:9f:f6:28:b4:3e:bc:63:96:45:be:4e:44:
32:38:bc:ec:a6:8c:8f:db:e0:a3:01:56:ce:6e:98:00:4e:54:
03:48:49:af:77:ee:03:03:72:57:92:d2:27:c8:be:b0:81:81:
09:56:65:00:4f:34:6e:b0:77:ec:f4:dc:bf:f1:bc:8d:a9:21:
66:50:62:30:53:6e:a1:5a:4d:75:fa:02:bb:3f:73:cb:65:4f:
bd:e4:c5:9a:df:be:a0:06:7d:f5:89:99:4d:79:9d:84:1f:d3:
b3:f7:8f:e7:19:c7:2e:3f:20:0d:e2:1a:94:89:04:41:8e:95:
4a:81:4e:53:1e:48:27:fa:d1:e1:e9:f9:3f:67:a6:aa:bb:d8:
c9:86:fb:9c:65:e8:7d:30:64:2e:b1:41:76:ec:2c:07:ae:f4:
bd:d2:b3:1c:ee:49:fb:ad:89:94:8f:0b:b6:63:a3:a5:12:2e:
62:50:33:a9:32:73:fd:37:07:a7:e8:04:a1:36:ca:cd:14:c7:
4c:28:de:59:dc:78:66:b7:88:51:92:ea:03:82:7b:a5:ef:a3:
a2:49:24:6f:95:72:d1:9a:77:79:91:c3:ab:3f:b7:79:e5:35:
31:ed:c5:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEH12Z7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDYz
MDEyNDYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTc1MjBmYWZlNWVl
MzcwMTcwYWM2NmU4ZDQzZWFkNDA2ZTVkMWVmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6Nsx0C4ZfuBiPp26f3DvBzVeP+jXTCIEMBtrp15t3cEkX3
zRdUSTX7yUi6R565iEsJN9EAmcOtm2dpq9yYcWoT1brDdVD9+GhjBhny/XnjvxYF
2Qut8wBYKIjbj+scD9rU8dpA8HqXHeqRj4ORo5AJxWepIK2/P4CCDLwVORz+n1Rd
q9lzYv8yg+qQ/cLv9m/hkuRFxwnIX2nL734T+5X/m1qdXDat6Z+BEPb3ItE2fXp0
pW0XvA/nDWpUeULaWy+cBaYA9v4+s0RqrGLGRhMDYwQm08ryrFantR/bWRZrINTq
zzsiwVtEFrE10B+ia7kmVHYVrm8eyA9eJvlM5aUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRXUg+v5e43AXCsZujUPq1Abl0e9DAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L1YxSVByLVh1TndGd3JHYm8xRDZ0UUc1ZEh2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMElKTANBgkqhkiG9w0BAQsFAAOC
AQEAOpYT1oXPSt2xgQc998GgX1B8TrkX2UfUn/YotD68Y5ZFvk5EMji87KaMj9vg
owFWzm6YAE5UA0hJr3fuAwNyV5LSJ8i+sIGBCVZlAE80brB37PTcv/G8jakhZlBi
MFNuoVpNdfoCuz9zy2VPveTFmt++oAZ99YmZTXmdhB/Ts/eP5xnHLj8gDeIalIkE
QY6VSoFOUx5IJ/rR4en5P2emqrvYyYb7nGXofTBkLrFBduwsB670vdKzHO5J+62J
lI8LtmOjpRIuYlAzqTJz/TcHp+gEoTbKzRTHTCjeWdx4ZreIUZLqA4J7pe+jokkk
b5Vy0Zp3eZHDqz+3eeU1Me3Fnw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org