Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yhngpvCCX_YXIq4yrxoKoTMtLYE.roa
File: yhngpvCCX_YXIq4yrxoKoTMtLYE.roa (raw, json)
Hash identifier: QLLKJ6JYlrSn0Zv9pgQ5OjePxHbCrBxWAZzHogAl2Vg=
Subject key identifier: CA:19:E0:A6:F0:82:5F:F6:17:22:AE:32:AF:1A:0A:A1:33:2D:2D:81
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E030863
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yhngpvCCX_YXIq4yrxoKoTMtLYE.roa
Signing time: Thu 14 Apr 2022 16:07:35 +0000
ROA not before: Thu 14 Apr 2022 16:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 193.149.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503515235 (0x1e030863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 14 16:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca19e0a6f0825ff61722ae32af1a0aa1332d2d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:bd:2f:50:4d:72:30:f2:b3:80:72:3c:5f:
ce:2d:1e:42:c5:65:7e:96:99:1c:b5:90:37:22:12:
a3:01:6c:52:55:93:cc:4f:d9:19:85:5a:a8:94:86:
dc:41:62:85:53:a4:9e:1c:0b:fa:12:a9:d6:36:47:
12:e2:5d:ea:4b:45:08:8a:e5:84:0d:48:d2:75:ed:
aa:47:35:94:68:ed:57:3f:65:7d:56:b5:ae:dd:14:
2e:f4:82:ee:ef:01:2f:a0:40:ed:ef:09:86:92:da:
2e:99:43:18:1a:2b:9a:3b:92:96:1f:2f:c1:9e:29:
2c:42:85:bd:fa:d4:f2:a3:cb:9c:62:ac:b5:bb:e0:
19:cb:15:c2:0c:c1:d3:b7:8b:6c:f9:e0:23:7d:df:
0e:ec:a4:ad:cb:7d:dd:7c:d3:db:57:7b:2c:40:12:
bd:ae:9c:34:77:b0:4a:13:dd:d1:2f:01:ad:3d:c1:
02:a2:6e:8e:66:b8:a2:c8:71:2d:d5:61:b2:44:0b:
00:b4:aa:e8:ed:49:b8:51:1d:0f:4c:21:c6:ea:81:
f0:6c:6a:be:ac:b8:41:e1:1c:b0:19:6f:8f:1d:03:
a5:30:5e:35:c9:6d:ab:d7:36:71:ef:58:22:52:5b:
b1:8d:4e:e4:35:c7:7d:ab:96:2c:06:97:56:ca:d0:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:E0:A6:F0:82:5F:F6:17:22:AE:32:AF:1A:0A:A1:33:2D:2D:81
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yhngpvCCX_YXIq4yrxoKoTMtLYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:60:2e:08:0e:02:cd:ed:34:68:6e:0b:99:23:70:c5:d0:1d:
d4:99:64:08:68:3d:70:55:3b:ff:cc:f6:a3:09:00:a8:d9:12:
94:b1:dc:e7:ff:c7:8d:2a:44:b1:e9:e2:93:2e:b0:cd:5b:fb:
1b:7e:98:9c:d0:38:7a:73:e9:ff:1f:e8:2d:db:2b:b9:b3:6b:
80:e9:db:0d:68:59:a0:02:3e:cd:22:50:44:2a:f7:bb:63:b3:
21:2c:f0:a0:69:49:73:1e:96:30:5a:70:95:f1:0e:1e:47:a6:
01:32:d4:37:9e:f3:a2:24:72:7f:0f:11:0f:86:cc:b0:1f:25:
60:3a:78:c9:2d:94:2f:bc:c9:3f:42:79:2b:7c:0c:a9:d1:c4:
55:a8:ea:a1:d5:4b:e2:ed:2a:7c:b8:a6:e8:3a:88:00:c6:01:
ce:83:5d:d0:3b:82:de:22:bd:b9:9a:19:bb:4b:63:08:c2:6c:
92:32:ef:81:d8:04:2c:b6:90:0a:0d:e2:e3:44:f4:fb:5b:e0:
b6:b7:6d:e2:9a:bc:1f:c7:60:74:27:65:a9:0f:c5:14:8c:5d:
a3:f8:b1:1d:91:16:5e:bf:52:24:68:d9:b4:6f:89:1f:01:9e:
7d:33:c0:93:b7:a9:f1:44:a3:90:e8:55:7e:27:b9:10:08:84:
53:13:f9:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHgMIYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDQx
NDE2MDczNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2ExOWUwYTZmMDgy
NWZmNjE3MjJhZTMyYWYxYTBhYTEzMzJkMmQ4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKXNvS9QTXIw8rOAcjxfzi0eQsVlfpaZHLWQNyISowFsUlWT
zE/ZGYVaqJSG3EFihVOknhwL+hKp1jZHEuJd6ktFCIrlhA1I0nXtqkc1lGjtVz9l
fVa1rt0ULvSC7u8BL6BA7e8JhpLaLplDGBormjuSlh8vwZ4pLEKFvfrU8qPLnGKs
tbvgGcsVwgzB07eLbPngI33fDuykrct93XzT21d7LEASva6cNHewShPd0S8BrT3B
AqJujma4oshxLdVhskQLALSq6O1JuFEdD0whxuqB8Gxqvqy4QeEcsBlvjx0DpTBe
Ncltq9c2ce9YIlJbsY1O5DXHfauWLAaXVsrQFGsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTKGeCm8IJf9hcirjKvGgqhMy0tgTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L3lobmdwdkNDWF9ZWElxNHlyeG9Lb1RNdExZRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsGVHDANBgkqhkiG9w0BAQsFAAOC
AQEAnWAuCA4Cze00aG4LmSNwxdAd1JlkCGg9cFU7/8z2owkAqNkSlLHc5//HjSpE
seniky6wzVv7G36YnNA4enPp/x/oLdsrubNrgOnbDWhZoAI+zSJQRCr3u2OzISzw
oGlJcx6WMFpwlfEOHkemATLUN57zoiRyfw8RD4bMsB8lYDp4yS2UL7zJP0J5K3wM
qdHEVajqodVL4u0qfLim6DqIAMYBzoNd0DuC3iK9uZoZu0tjCMJskjLvgdgELLaQ
Cg3i40T0+1vgtrdt4pq8H8dgdCdlqQ/FFIxdo/ixHZEWXr9SJGjZtG+JHwGefTPA
k7ep8USjkOhVfie5EAiEUxP5mw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org