Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/_A5w6LFBVbll4Nfbxt6yX8q8sDY.roa
File: _A5w6LFBVbll4Nfbxt6yX8q8sDY.roa (raw, json)
Hash identifier: 2Xi16wudAw7tMn2f7745qzPRj0ZQpUXRE0y+HDbmrPY=
Subject key identifier: FC:0E:70:E8:B1:41:55:B9:65:E0:D7:DB:C6:DE:B2:5F:CA:BC:B0:36
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 0183169C93E0D5DC4AA3FC8CAD492739E5DD
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/_A5w6LFBVbll4Nfbxt6yX8q8sDY.roa
Signing time: Wed 07 Sep 2022 06:21:43 +0000
ROA not before: Wed 07 Sep 2022 06:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 193.17.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:9c:93:e0:d5:dc:4a:a3:fc:8c:ad:49:27:39:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Sep 7 06:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc0e70e8b14155b965e0d7dbc6deb25fcabcb036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:59:70:85:19:fe:88:3a:08:c8:63:ea:be:
3b:c4:89:be:23:c1:72:b7:f1:39:cc:c5:68:00:4b:
ba:61:d1:99:f0:18:c6:0b:0a:22:7e:f9:36:ee:bf:
fb:aa:c8:81:46:e5:e9:af:25:d6:db:fe:d9:fc:e1:
6e:c3:0c:11:0d:4a:fd:5d:f7:b1:6e:b4:f9:fc:fb:
22:b0:94:8e:ec:ad:70:1b:34:c6:71:a8:ad:96:24:
06:b8:df:35:d5:85:6d:70:71:b3:3c:da:ee:e7:89:
df:d5:7c:8d:22:93:b0:bd:7e:31:34:de:fa:bc:59:
78:2a:28:a0:4b:4c:3a:d5:9d:45:91:7f:36:3f:cb:
90:56:3c:49:2c:60:6f:b4:a2:2e:2f:7d:f9:cc:60:
de:66:99:10:b7:22:13:02:cd:7a:4b:c9:fa:82:0b:
96:1b:d0:df:63:6d:f6:c1:85:6f:07:50:85:fe:5d:
eb:87:7a:63:94:3f:a3:a9:57:92:e4:a6:75:f2:2b:
39:81:1a:ba:b5:1a:77:45:bd:e2:f8:00:b5:4d:14:
05:a6:5b:ea:6f:65:ff:15:2d:68:45:66:dc:a6:1e:
ba:b2:87:95:10:fc:f3:5a:1a:e0:ba:65:2c:30:7e:
34:c6:eb:f6:d2:5e:bb:52:6e:10:92:01:55:58:c8:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0E:70:E8:B1:41:55:B9:65:E0:D7:DB:C6:DE:B2:5F:CA:BC:B0:36
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/_A5w6LFBVbll4Nfbxt6yX8q8sDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:37:ec:41:b3:64:db:a4:89:c7:2c:80:a0:a5:e4:b6:18:a0:
03:d9:9c:c0:ab:82:9f:c4:a3:3e:6c:c2:cf:ae:96:31:43:ff:
76:11:5f:c5:5d:2a:c9:49:ae:d4:55:49:e5:93:08:81:87:1c:
a2:1e:a2:e2:47:8d:7b:b2:6c:9b:ba:53:47:60:d9:dd:4c:0f:
9e:cf:0a:2a:d3:ac:92:8b:9b:18:f2:23:4c:fe:b7:af:df:08:
4f:a9:a9:0b:4e:7c:ae:d1:fd:be:64:36:85:63:cf:d9:f1:ff:
ee:0c:e4:c6:64:b1:da:1d:f4:f8:36:f9:c9:39:36:6b:12:1d:
fd:cd:60:6c:b7:24:ff:bc:dd:a9:4d:55:b7:04:ef:ec:ac:18:
b5:cf:24:ba:59:32:bc:07:44:0d:79:96:4c:9d:b8:71:be:a2:
b5:44:d8:33:66:a1:13:61:76:45:ec:0e:96:16:a6:4c:70:45:
07:89:26:15:dd:de:de:ea:01:e6:cc:9c:4f:ca:70:8c:62:89:
e4:c1:6e:74:cc:71:c3:e5:56:84:51:6c:8e:69:6c:20:8d:5d:
99:c1:11:a2:69:90:21:97:d7:16:d7:e8:0e:ef:05:77:ad:2f:
2f:61:40:cd:0c:c6:50:0a:5d:a0:64:2b:06:16:2c:f4:41:44:
90:f0:d8:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMWnJPg1dxKo/yMrUknOeXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj
MWFmYWUwHhcNMjIwOTA3MDYyMTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzBlNzBlOGIxNDE1NWI5NjVlMGQ3ZGJjNmRlYjI1ZmNhYmNiMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOlZcIUZ/og6CMhj6r47xIm+I8Fy
t/E5zMVoAEu6YdGZ8BjGCwoifvk27r/7qsiBRuXpryXW2/7Z/OFuwwwRDUr9Xfex
brT5/PsisJSO7K1wGzTGcaitliQGuN811YVtcHGzPNru54nf1XyNIpOwvX4xNN76
vFl4KiigS0w61Z1FkX82P8uQVjxJLGBvtKIuL335zGDeZpkQtyITAs16S8n6gguW
G9DfY232wYVvB1CF/l3rh3pjlD+jqVeS5KZ18is5gRq6tRp3Rb3i+AC1TRQFplvq
b2X/FS1oRWbcph66soeVEPzzWhrgumUsMH40xuv20l67Um4QkgFVWMgSlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwOcOixQVW5ZeDX28besl/KvLA2MB8GA1UdIwQY
MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt
NjAzYWExZjIwOWQ4LzEvX0E1dzZMRkJWYmxsNE5mYnh0NnlYOHE4c0RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4
LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRHOMA0G
CSqGSIb3DQEBCwUAA4IBAQAtN+xBs2TbpInHLICgpeS2GKAD2ZzAq4KfxKM+bMLP
rpYxQ/92EV/FXSrJSa7UVUnlkwiBhxyiHqLiR417smybulNHYNndTA+ezwoq06yS
i5sY8iNM/rev3whPqakLTnyu0f2+ZDaFY8/Z8f/uDOTGZLHaHfT4NvnJOTZrEh39
zWBstyT/vN2pTVW3BO/srBi1zyS6WTK8B0QNeZZMnbhxvqK1RNgzZqETYXZF7A6W
FqZMcEUHiSYV3d7e6gHmzJxPynCMYonkwW50zHHD5VaEUWyOaWwgjV2ZwRGiaZAh
l9cW1+gO7wV3rS8vYUDNDMZQCl2gZCsGFiz0QUSQ8Njo
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:20 2024 by rpki-client on console-ams.rpki-client.org