Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/B7Wc_Lf7Sl63v3VyIH-KROTP3fg.roa
File: B7Wc_Lf7Sl63v3VyIH-KROTP3fg.roa (raw, json)
Hash identifier: DL8+c9qBUWk6iEM4Dgzw7fMGeYUm7k1umqoy1N3bY44=
Subject key identifier: 07:B5:9C:FC:B7:FB:4A:5E:B7:BF:75:72:20:7F:8A:44:E4:CF:DD:F8
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 0259FD4B
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/B7Wc_Lf7Sl63v3VyIH-KROTP3fg.roa
Signing time: Sat 01 Jan 2022 15:57:29 +0000
ROA not before: Sat 01 Jan 2022 15:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211558
IP address blocks: 193.3.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39451979 (0x259fd4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jan 1 15:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07b59cfcb7fb4a5eb7bf7572207f8a44e4cfddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:88:2f:02:51:ab:ad:76:53:00:c5:cd:96:
27:6c:d4:ea:f6:37:06:82:bf:35:09:46:1a:e6:b5:
39:25:ff:f0:40:02:37:83:5c:89:2c:17:ff:42:3e:
50:1c:f3:4d:85:fb:18:dd:09:a1:ff:21:b9:77:b6:
b3:19:a7:17:f0:9d:eb:97:2e:b5:cd:89:0a:1f:97:
c4:d9:8c:3c:5b:8f:c0:e8:00:cc:76:25:d8:01:ab:
34:0a:58:3a:36:a9:b9:77:92:01:06:38:7a:4b:1f:
11:90:2e:6e:f3:74:cb:f6:d1:44:ed:e6:1f:fb:40:
4f:9c:c3:3e:03:41:50:1e:41:12:ad:c9:b1:f2:05:
40:0d:c5:58:51:15:bb:16:e8:af:bf:53:2f:42:df:
a2:07:e0:48:69:79:7f:4c:e0:41:ac:88:68:bb:f1:
06:45:78:54:8d:04:f1:f3:02:7d:88:0a:1e:22:ba:
03:d2:26:c0:67:e5:63:52:90:e8:c2:e1:65:a5:f7:
c6:d8:44:12:c0:e7:6f:da:a7:3e:39:e1:7e:84:72:
88:45:40:6c:43:4e:df:44:d7:63:c6:61:cf:56:ac:
dd:da:16:61:58:46:4e:ec:32:12:a2:75:ac:93:de:
76:4f:ea:7c:8b:7b:f5:09:85:04:55:33:20:44:89:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:9C:FC:B7:FB:4A:5E:B7:BF:75:72:20:7F:8A:44:E4:CF:DD:F8
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/B7Wc_Lf7Sl63v3VyIH-KROTP3fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.52.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ef:5f:45:00:78:57:cf:e3:f2:8f:90:7e:50:b3:62:09:a8:
73:7f:8f:53:83:ae:6e:fc:9a:e2:8e:fc:d9:84:fc:24:de:f9:
cc:86:8d:e3:a6:47:da:14:cc:21:bb:cd:ff:38:0d:cd:da:98:
8c:85:ed:bf:f7:84:b6:d4:15:18:57:d2:78:aa:ae:65:ec:6d:
90:51:62:1c:69:f6:87:b1:f6:68:be:8a:26:a8:c3:4a:69:bd:
34:8c:68:20:c6:4d:69:c6:c3:a5:41:18:03:22:75:e1:be:24:
f2:e0:b7:45:56:85:f6:89:fb:d6:84:7b:28:27:6a:3c:64:d8:
01:34:e7:ea:8e:b0:4b:c3:d8:14:46:0a:9e:69:a2:32:9e:b6:
4e:28:0b:4a:a6:ab:06:42:51:27:9f:4f:bd:1a:9f:02:c3:a8:
46:85:de:fc:09:32:32:f2:17:fb:39:b8:46:51:84:e8:65:30:
54:c9:34:f7:bb:38:f8:18:b4:06:e4:94:d3:36:0e:d8:17:09:
0d:8b:2f:d8:14:81:2c:e0:39:52:09:c7:d0:38:05:76:3b:c0:
ce:f6:80:70:78:52:09:8f:fe:79:00:ca:bf:56:73:79:52:bd:
62:72:d1:4f:77:a1:82:7c:26:e7:58:79:f6:14:4f:4f:40:8e:
9a:ba:c9:22
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAln9SzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
M2NkZTY0ZjQxNjhhM2YzOTliNzc0OTRkOTRhZWE3NzI5MmM5YmNmMB4XDTIyMDEw
MTE1NTcyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDdiNTljZmNiN2Zi
NGE1ZWI3YmY3NTcyMjA3ZjhhNDRlNGNmZGRmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALy3iC8CUautdlMAxc2WJ2zU6vY3BoK/NQlGGua1OSX/8EAC
N4NciSwX/0I+UBzzTYX7GN0Jof8huXe2sxmnF/Cd65cutc2JCh+XxNmMPFuPwOgA
zHYl2AGrNApYOjapuXeSAQY4eksfEZAubvN0y/bRRO3mH/tAT5zDPgNBUB5BEq3J
sfIFQA3FWFEVuxbor79TL0LfogfgSGl5f0zgQayIaLvxBkV4VI0E8fMCfYgKHiK6
A9ImwGflY1KQ6MLhZaX3xthEEsDnb9qnPjnhfoRyiEVAbENO30TXY8Zhz1as3doW
YVhGTuwyEqJ1rJPedk/qfIt79QmFBFUzIESJd30CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQHtZz8t/tKXre/dXIgf4pE5M/d+DAfBgNVHSMEGDAWgBQDzeZPQWij85m3
dJTZSup3KSybzzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0E4M21UMEZvb19PWnQzU1UyVXJxZHlrc204OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvZGMxMzE4LWMzMzAtNGI0ZC05NGFlLWYxYjAwYzg0MjhlZC8x
L0I3V2NfTGY3U2w2M3YzVnlJSC1LUk9UUDNmZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
ZGMxMzE4LWMzMzAtNGI0ZC05NGFlLWYxYjAwYzg0MjhlZC8xL0E4M21UMEZvb19P
WnQzU1UyVXJxZHlrc204OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEDNDANBgkqhkiG9w0BAQsFAAOC
AQEAQO9fRQB4V8/j8o+QflCzYgmoc3+PU4Oubvya4o782YT8JN75zIaN46ZH2hTM
IbvN/zgNzdqYjIXtv/eEttQVGFfSeKquZextkFFiHGn2h7H2aL6KJqjDSmm9NIxo
IMZNacbDpUEYAyJ14b4k8uC3RVaF9on71oR7KCdqPGTYATTn6o6wS8PYFEYKnmmi
Mp62TigLSqarBkJRJ59PvRqfAsOoRoXe/AkyMvIX+zm4RlGE6GUwVMk097s4+Bi0
BuSU0zYO2BcJDYsv2BSBLOA5UgnH0DgFdjvAzvaAcHhSCY/+eQDKv1ZzeVK9YnLR
T3ehgnwm51h59hRPT0COmrrJIg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:55 2023 by rpki-client on console-fra.rpki-client.org