Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/xh3L3Lxv0l1juX0E9GIgLNYdLZQ.roa
File: xh3L3Lxv0l1juX0E9GIgLNYdLZQ.roa (raw, json)
Hash identifier: u1VyUAveF8e6K1JQfCmaQgxVTkkbPz1egvhX9/SXFek=
Subject key identifier: C6:1D:CB:DC:BC:6F:D2:5D:63:B9:7D:04:F4:62:20:2C:D6:1D:2D:94
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 012B8F
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/xh3L3Lxv0l1juX0E9GIgLNYdLZQ.roa
Signing time: Wed 22 Jun 2022 16:31:32 +0000
ROA not before: Wed 22 Jun 2022 16:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50774
IP address blocks: 193.108.143.0/24 maxlen: 24
193.108.142.0/24 maxlen: 24
193.108.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76687 (0x12b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Jun 22 16:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c61dcbdcbc6fd25d63b97d04f462202cd61d2d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:35:31:08:01:8a:b8:ff:92:8a:8a:15:88:
b0:9f:55:76:47:f4:76:03:c1:6c:80:15:0a:44:29:
e2:cd:59:01:b6:9f:f8:28:1b:fd:d6:f9:3b:4f:32:
01:f8:f3:83:be:d0:45:c0:84:7d:dc:ed:d4:54:33:
cc:8a:8e:77:0c:65:80:6b:e9:21:9f:48:f0:44:f0:
86:41:cb:c0:71:d2:cb:c7:a6:7e:53:94:17:cb:87:
d8:5a:07:fd:9e:8f:22:c8:50:55:b9:af:dc:1c:9d:
60:d4:e8:f5:eb:d2:d6:50:bc:c2:a7:d9:ca:86:09:
16:cf:11:d8:b9:a4:b0:b2:7e:ec:e3:db:6c:eb:59:
8b:a3:81:57:5c:3c:ad:de:a8:3e:4e:1e:a3:61:06:
18:36:08:6e:30:cb:b1:70:ce:68:b1:e9:63:3b:e1:
a1:66:3e:ad:f7:82:6b:a5:9c:8a:53:7a:11:d1:3d:
be:93:d4:69:e7:d0:6f:d0:63:0f:87:91:a2:a3:70:
7a:02:7b:2b:43:b2:7f:95:c0:e4:0d:5a:fa:13:d9:
ce:9f:18:c8:94:72:41:78:50:96:ae:e7:6c:ef:c4:
b4:04:f2:bd:52:06:db:cb:c3:8b:8b:8b:46:8d:68:
fd:a8:84:96:f4:b0:7a:af:4c:57:94:df:a6:11:26:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:CB:DC:BC:6F:D2:5D:63:B9:7D:04:F4:62:20:2C:D6:1D:2D:94
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/xh3L3Lxv0l1juX0E9GIgLNYdLZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.142.0/23
Signature Algorithm: sha256WithRSAEncryption
44:40:16:37:93:b1:0a:a7:cd:30:5f:a1:fa:3f:a7:58:58:57:
4a:5e:3b:8a:53:07:eb:39:fc:d7:c2:d7:45:d4:24:ed:5e:77:
c9:62:ac:10:5b:09:c3:c0:a4:45:99:2b:48:5b:51:bb:4e:d3:
d2:b1:6c:10:6c:b0:b7:63:9f:a3:77:be:31:c3:c4:1b:58:e5:
da:db:29:c9:01:02:ae:99:37:1c:a1:cf:41:0c:9c:35:e6:a3:
73:42:9f:64:d4:b0:4f:51:5f:6e:5b:7c:6d:fe:b4:4a:ae:a6:
f2:d0:1a:aa:1c:c1:c3:58:28:9c:bc:3b:ad:70:6f:1d:2a:6b:
72:46:d0:1d:fd:d4:0b:77:c1:e7:cc:4e:db:2c:09:90:c1:74:
63:7e:a1:00:f9:54:86:cf:d4:da:d7:c4:4b:18:16:91:74:2d:
aa:91:fb:b8:0d:88:a7:71:c7:40:94:5c:b3:50:96:3a:10:24:
07:28:84:1c:00:a9:31:55:ba:e0:61:6d:ec:b3:29:78:1d:59:
0f:a6:2c:da:2c:ec:13:a5:62:ae:7e:af:6f:60:a1:54:1c:fc:
93:b1:f4:c5:2b:0a:d4:54:45:29:b9:9f:30:33:b9:78:70:2a:
8f:01:9a:0a:9f:ee:c3:81:67:49:e5:78:aa:20:e3:c8:9c:65:
32:b9:c6:be
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDASuPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM0
NzhjMDhhMDYzYWMyZDM0YTFiMTkxZTI0MzYzODliYmVlZDVlOTcwHhcNMjIwNjIy
MTYzMTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNjFkY2JkY2JjNmZk
MjVkNjNiOTdkMDRmNDYyMjAyY2Q2MWQyZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlsA1MQgBirj/koqKFYiwn1V2R/R2A8FsgBUKRCnizVkBtp/4
KBv91vk7TzIB+PODvtBFwIR93O3UVDPMio53DGWAa+khn0jwRPCGQcvAcdLLx6Z+
U5QXy4fYWgf9no8iyFBVua/cHJ1g1Oj169LWULzCp9nKhgkWzxHYuaSwsn7s49ts
61mLo4FXXDyt3qg+Th6jYQYYNghuMMuxcM5oseljO+GhZj6t94JrpZyKU3oR0T2+
k9Rp59Bv0GMPh5Gio3B6AnsrQ7J/lcDkDVr6E9nOnxjIlHJBeFCWruds78S0BPK9
Ugbby8OLi4tGjWj9qISW9LB6r0xXlN+mESab8wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMYdy9y8b9JdY7l9BPRiICzWHS2UMB8GA1UdIwQYMBaAFDR4wIoGOsLTShsZ
HiQ2OJu+7V6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTItOTE3YzM1NzdmMzRmLzEv
eGgzTDNMeHYwbDFqdVgwRTlHSWdMTllkTFpRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8x
ZjEwYzItMDJlMi00MzhhLTkwYTItOTE3YzM1NzdmMzRmLzEvTkhqQWlnWTZ3dE5L
R3hrZUpEWTRtNzd0WHBjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWyOMA0GCSqGSIb3DQEBCwUAA4IB
AQBEQBY3k7EKp80wX6H6P6dYWFdKXjuKUwfrOfzXwtdF1CTtXnfJYqwQWwnDwKRF
mStIW1G7TtPSsWwQbLC3Y5+jd74xw8QbWOXa2ynJAQKumTccoc9BDJw15qNzQp9k
1LBPUV9uW3xt/rRKrqby0BqqHMHDWCicvDutcG8dKmtyRtAd/dQLd8HnzE7bLAmQ
wXRjfqEA+VSGz9Ta18RLGBaRdC2qkfu4DYinccdAlFyzUJY6ECQHKIQcAKkxVbrg
YW3ssyl4HVkPpizaLOwTpWKufq9vYKFUHPyTsfTFKwrUVEUpuZ8wM7l4cCqPAZoK
n+7DgWdJ5XiqIOPInGUyuca+
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:22 2024 by rpki-client on console-ams.rpki-client.org