Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/rX-ntQ1YBjdrkou4tIfuhSrv124.roa
File: rX-ntQ1YBjdrkou4tIfuhSrv124.roa (raw, json)
Hash identifier: /wm92CUOqgynEjcNr0ai4JWs9zqjBFmjmXOH79t1B1Y=
Subject key identifier: AD:7F:A7:B5:0D:58:06:37:6B:92:8B:B8:B4:87:EE:85:2A:EF:D7:6E
Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial: 029A88
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/rX-ntQ1YBjdrkou4tIfuhSrv124.roa
Signing time: Thu 28 Apr 2022 09:12:11 +0000
ROA not before: Thu 28 Apr 2022 09:12:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31420
IP address blocks: 193.151.80.0/24 maxlen: 24
193.151.83.0/24 maxlen: 24
193.151.81.0/24 maxlen: 24
193.151.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170632 (0x29a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Validity
Not Before: Apr 28 09:12:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad7fa7b50d5806376b928bb8b487ee852aefd76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:98:98:f5:95:99:26:a3:3c:02:7d:64:d5:
b3:d8:d5:31:51:e7:0c:3a:ed:89:8e:73:c8:1b:f7:
b5:93:32:84:0b:6e:48:46:33:9e:d7:a2:c3:02:7c:
57:4d:c9:74:20:95:4d:37:66:cb:ff:cd:b3:e2:74:
11:c6:a6:dc:4d:02:23:f9:d8:51:05:87:43:8f:60:
89:d1:fd:38:2c:c2:4d:e3:5d:61:bb:5d:58:4b:18:
8c:41:16:87:5e:a9:d1:3e:09:e5:21:17:e9:b7:49:
5c:6e:68:ad:87:9d:b6:f9:ce:77:45:e1:a9:35:a4:
fa:2d:97:c2:87:e4:0f:5e:8c:18:25:fc:65:6e:25:
58:7d:a3:7c:94:2e:c9:f6:6e:39:38:df:af:97:74:
45:a7:9f:1e:30:13:3c:9f:5a:97:ac:03:3d:93:a6:
5b:15:18:3c:61:db:11:ab:af:55:0f:c7:5f:62:c7:
18:eb:eb:5d:94:76:c3:e8:45:5f:57:80:5b:c5:7f:
0a:98:17:a3:a2:83:60:58:a1:7d:71:73:51:6a:0a:
3f:b1:02:61:1e:75:73:e5:ec:53:55:81:17:94:72:
c7:e6:67:89:f6:b0:55:46:e4:0c:10:b1:3b:65:5b:
7f:19:03:cd:3c:a4:49:ee:7e:c3:d5:7b:8f:91:8d:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7F:A7:B5:0D:58:06:37:6B:92:8B:B8:B4:87:EE:85:2A:EF:D7:6E
X509v3 Authority Key Identifier:
keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/rX-ntQ1YBjdrkou4tIfuhSrv124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.80.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:bc:10:43:13:a8:77:bb:4f:83:dd:e7:f3:10:93:eb:34:4d:
66:cc:da:c9:89:1c:20:88:51:3c:f7:e3:db:ff:b8:e3:5b:60:
44:86:94:05:bf:3b:71:37:97:07:c3:c6:bc:bd:e7:27:d5:cb:
f6:78:70:01:58:68:e6:88:89:15:33:e4:9d:11:70:12:97:2b:
ac:a4:0e:9b:cb:cd:f7:60:ef:64:af:33:12:a8:3d:ff:87:89:
8c:dd:ef:78:d5:8c:9f:b5:ad:84:bf:9f:33:ac:3b:1b:cc:d0:
d3:c0:01:ec:df:d7:24:91:62:b1:bf:5f:95:dc:0f:bb:fb:e6:
9e:2e:b9:71:7e:e6:12:54:99:aa:9b:9b:30:dd:73:e5:c0:ef:
da:37:e2:c9:91:00:30:2f:34:cd:ae:ed:be:85:e4:bd:aa:44:
4d:27:d5:2d:3c:c0:93:a3:b4:bc:20:22:46:2b:bb:3f:de:7f:
c0:78:82:64:31:92:e4:0e:b1:06:df:c2:39:f7:0a:78:7d:f6:
08:bb:f1:d0:ac:81:60:5c:33:08:69:73:82:7d:ba:a0:b0:42:
93:a5:ab:6d:3d:f3:03:4d:8b:db:37:1f:66:db:e8:ed:71:83:
d8:cf:3c:67:15:b2:78:ab:9d:89:1c:66:f9:64:a4:07:e2:2e:
10:d1:05:f3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDApqIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4M2E3YjMwHhcNMjIwNDI4
MDkxMjExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhZDdmYTdiNTBkNTgw
NjM3NmI5MjhiYjhiNDg3ZWU4NTJhZWZkNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsD2YmPWVmSajPAJ9ZNWz2NUxUecMOu2JjnPIG/e1kzKEC25I
RjOe16LDAnxXTcl0IJVNN2bL/82z4nQRxqbcTQIj+dhRBYdDj2CJ0f04LMJN411h
u11YSxiMQRaHXqnRPgnlIRfpt0lcbmith522+c53ReGpNaT6LZfCh+QPXowYJfxl
biVYfaN8lC7J9m45ON+vl3RFp58eMBM8n1qXrAM9k6ZbFRg8YdsRq69VD8dfYscY
6+tdlHbD6EVfV4BbxX8KmBejooNgWKF9cXNRago/sQJhHnVz5exTVYEXlHLH5meJ
9rBVRuQMELE7ZVt/GQPNPKRJ7n7D1XuPkY1w8wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFK1/p7UNWAY3a5KLuLSH7oUq79duMB8GA1UdIwQYMBaAFMFy57liUu6ocyYz
07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
d1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNiLzEv
clgtbnRRMVlCamRya291NHRJZnVoU3J2MTI0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9h
NmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6
SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwZdQMA0GCSqGSIb3DQEBCwUAA4IB
AQDNvBBDE6h3u0+D3efzEJPrNE1mzNrJiRwgiFE89+Pb/7jjW2BEhpQFvztxN5cH
w8a8vecn1cv2eHABWGjmiIkVM+SdEXASlyuspA6by833YO9krzMSqD3/h4mM3e94
1Yyfta2Ev58zrDsbzNDTwAHs39ckkWKxv1+V3A+7++aeLrlxfuYSVJmqm5sw3XPl
wO/aN+LJkQAwLzTNru2+heS9qkRNJ9UtPMCTo7S8ICJGK7s/3n/AeIJkMZLkDrEG
38I59wp4ffYIu/HQrIFgXDMIaXOCfbqgsEKTpattPfMDTYvbNx9m2+jtcYPYzzxn
FbJ4q52JHGb5ZKQH4i4Q0QXz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:04 2024 by rpki-client on console-fra.rpki-client.org