Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W_UlukUQ15XWrMhWhWWWOQgRjlw.roa
File: W_UlukUQ15XWrMhWhWWWOQgRjlw.roa (raw, json)
Hash identifier: EuVNOpEUzV5Sw0gxiipTbdXAPPVYmQW3Wy4uJ/JfepE=
Subject key identifier: 5B:F5:25:BA:45:10:D7:95:D6:AC:C8:56:85:65:96:39:08:11:8E:5C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01823653E3794169146DA231378FAE813A73
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W_UlukUQ15XWrMhWhWWWOQgRjlw.roa
Signing time: Mon 25 Jul 2022 17:07:23 +0000
ROA not before: Mon 25 Jul 2022 17:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 193.222.99.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:53:e3:79:41:69:14:6d:a2:31:37:8f:ae:81:3a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 17:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bf525ba4510d795d6acc8568565963908118e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:7c:9a:08:37:8b:27:55:45:9c:ba:3b:a5:
b5:fc:ae:39:6f:20:52:ea:b4:5d:a5:73:f4:f2:7f:
11:6b:8f:b1:88:ae:f2:4e:9e:0d:48:5b:e9:2c:2d:
e6:66:49:d1:6a:83:0e:32:bf:8a:19:1d:31:4d:d7:
a9:22:af:ee:50:72:f3:77:84:59:28:e9:c8:f3:8d:
31:dd:84:8d:c3:da:f3:f9:49:e5:1f:26:f5:80:22:
8d:ef:02:42:08:f6:df:9e:fd:93:5f:11:6e:05:84:
82:20:dd:1a:2f:ce:de:ec:4a:5e:c1:92:36:39:43:
66:1b:a2:25:54:32:33:e9:0b:86:8f:ee:b6:75:25:
5b:b1:7a:fe:91:1f:95:a4:76:da:0f:e6:59:8c:ba:
b6:16:67:2d:02:20:55:72:db:19:18:e1:8a:d5:2f:
a4:5a:fd:c5:e4:ab:99:1c:c3:6b:11:0d:97:3b:6d:
72:fc:44:e3:d3:67:c5:0a:ae:0c:cc:1e:65:5c:08:
79:60:5b:93:21:d4:c2:49:fa:f3:71:d2:4d:2d:69:
08:bc:25:98:9c:11:11:7e:14:39:df:41:6c:15:90:
48:65:54:f4:58:7d:aa:95:05:e1:0f:74:7a:03:57:
30:47:51:2b:97:48:9e:1c:20:e2:9c:8c:c6:0e:3f:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F5:25:BA:45:10:D7:95:D6:AC:C8:56:85:65:96:39:08:11:8E:5C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W_UlukUQ15XWrMhWhWWWOQgRjlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.60.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5d:a3:63:b0:1b:4a:88:00:96:73:fa:f2:e8:97:77:13:f9:
8e:af:17:6f:54:83:c5:c6:4e:ca:a5:82:09:7d:47:d7:1c:ca:
b8:05:11:29:87:c6:3a:2a:0d:5c:36:46:f7:cc:db:c3:0d:39:
53:f9:ff:77:c1:41:7e:21:9d:0e:a6:51:94:67:39:c8:42:8c:
8a:65:03:0a:85:48:65:5d:88:e9:09:45:59:80:8a:80:57:5f:
35:8a:68:ce:f0:f6:fe:d0:11:ec:82:95:68:20:c1:2c:61:91:
e1:ce:f4:1e:c7:81:82:89:86:64:12:7b:c8:77:45:25:02:97:
d4:90:b8:88:c7:48:e3:ec:e5:81:87:08:94:ca:29:98:de:9d:
1e:f3:06:d6:e8:62:f2:29:68:d3:2c:7f:f3:9a:a1:d3:21:d4:
06:40:29:6a:49:bb:0f:e6:c9:d9:85:fe:fd:a0:7b:05:86:5d:
a3:dd:fe:03:14:d4:d5:00:1f:1a:e6:06:c8:bf:0c:f0:00:0c:
99:33:11:1b:16:1a:09:88:d4:9c:93:79:8f:4e:2c:09:77:a3:
f7:8c:32:26:17:66:b9:9d:64:96:4c:3b:7e:55:53:ba:e9:94:
55:2b:a5:7b:3b:c6:0c:bd:66:6e:16:f1:78:4a:f8:3d:66:e2:
8d:aa:42:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYI2U+N5QWkUbaIxN4+ugTpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwNzI1MTcwNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmY1MjViYTQ1MTBkNzk1ZDZhY2M4NTY4NTY1OTYzOTA4MTE4ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkB8mgg3iydVRZy6O6W1/K45byBS
6rRdpXP08n8Ra4+xiK7yTp4NSFvpLC3mZknRaoMOMr+KGR0xTdepIq/uUHLzd4RZ
KOnI840x3YSNw9rz+UnlHyb1gCKN7wJCCPbfnv2TXxFuBYSCIN0aL87e7EpewZI2
OUNmG6IlVDIz6QuGj+62dSVbsXr+kR+VpHbaD+ZZjLq2FmctAiBVctsZGOGK1S+k
Wv3F5KuZHMNrEQ2XO21y/ETj02fFCq4MzB5lXAh5YFuTIdTCSfrzcdJNLWkIvCWY
nBERfhQ530FsFZBIZVT0WH2qlQXhD3R6A1cwR1Erl0ieHCDinIzGDj8fYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFv1JbpFENeV1qzIVoVlljkIEY5cMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV19VbHVrVVExNVhXck1oV2hXV1dPUWdSamx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS88AwQA
wd5jMA0GCSqGSIb3DQEBCwUAA4IBAQBEXaNjsBtKiACWc/ry6Jd3E/mOrxdvVIPF
xk7KpYIJfUfXHMq4BREph8Y6Kg1cNkb3zNvDDTlT+f93wUF+IZ0OplGUZznIQoyK
ZQMKhUhlXYjpCUVZgIqAV181imjO8Pb+0BHsgpVoIMEsYZHhzvQex4GCiYZkEnvI
d0UlApfUkLiIx0jj7OWBhwiUyimY3p0e8wbW6GLyKWjTLH/zmqHTIdQGQClqSbsP
5snZhf79oHsFhl2j3f4DFNTVAB8a5gbIvwzwAAyZMxEbFhoJiNSck3mPTiwJd6P3
jDImF2a5nWSWTDt+VVO66ZRVK6V7O8YMvWZuFvF4Svg9ZuKNqkIQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org