Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/CqcMdyquztXiMen8ugue0_OvJIQ.roa
File: CqcMdyquztXiMen8ugue0_OvJIQ.roa (raw, json)
Hash identifier: Z6Rkv+b4r3kSb+uem4QCDvvrUa7rgtHBozWLlrKyxG4=
Subject key identifier: 0A:A7:0C:77:2A:AE:CE:D5:E2:31:E9:FC:BA:0B:9E:D3:F3:AF:24:84
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 01882E44168FD81E4AFD61AB68069B5CE953
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/CqcMdyquztXiMen8ugue0_OvJIQ.roa
Signing time: Thu 18 May 2023 09:49:54 +0000
ROA not before: Thu 18 May 2023 09:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8758
IP address blocks: 193.221.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:44:16:8f:d8:1e:4a:fd:61:ab:68:06:9b:5c:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: May 18 09:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa70c772aaeced5e231e9fcba0b9ed3f3af2484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:08:ee:91:cf:24:45:c0:9e:32:0a:c3:40:
65:bd:62:63:2a:cf:b1:9d:2b:88:6e:bb:19:67:78:
e9:a2:48:43:db:c6:ed:36:da:de:59:37:2e:2b:11:
06:62:86:9b:0e:8e:67:32:36:f4:9b:0a:ce:32:0c:
b6:20:0e:1b:dd:ee:6a:a3:35:58:61:b5:fc:fd:3b:
a5:dc:8f:2e:42:be:e0:70:de:90:50:4e:74:8d:db:
1a:aa:74:d3:b0:33:14:72:2e:94:16:5e:0e:8e:fe:
cc:2c:30:03:5f:e3:cb:a8:41:69:b6:78:13:30:30:
5d:fe:1c:32:3b:95:80:0b:a8:61:62:7f:1c:57:a4:
e7:da:6f:8f:7e:e4:51:9c:08:21:c1:91:26:d8:ae:
e2:c5:5f:b7:74:59:cc:37:9c:6e:2a:a2:56:ee:6f:
38:82:99:7e:28:57:a7:c2:ed:7e:6d:ae:b0:06:df:
05:ea:24:6d:41:3a:cb:02:5c:12:0a:a4:19:9a:4a:
b3:e2:8b:45:85:ce:d0:bb:ba:a0:95:9c:44:df:0d:
5d:88:cf:8b:27:56:cc:0f:8f:4c:17:14:4c:7c:eb:
63:28:a6:f2:b1:e7:9f:1b:40:f6:29:3b:87:98:13:
51:7d:ab:78:80:92:01:cb:4c:38:2b:0b:60:d9:fe:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:0C:77:2A:AE:CE:D5:E2:31:E9:FC:BA:0B:9E:D3:F3:AF:24:84
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/CqcMdyquztXiMen8ugue0_OvJIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ee:3d:d4:0a:68:71:fc:9b:1f:b5:51:bb:56:09:78:07:12:
f1:f5:8d:7f:94:00:02:2d:22:9c:d4:56:1f:86:b8:ea:65:ed:
f2:a8:33:aa:98:db:25:55:2f:54:66:39:fa:83:59:1f:46:88:
ef:b6:3d:26:4c:c3:75:e5:31:dc:50:21:52:55:c7:17:9d:68:
fd:1c:a4:ca:62:85:ef:7f:5c:22:0c:3e:85:f0:cf:82:79:f0:
be:87:4e:1b:3e:8d:a2:6b:75:72:2e:16:b4:4d:6c:b8:79:fc:
ce:ac:84:ef:d8:59:dc:09:da:23:d6:c7:75:15:68:d8:36:23:
44:56:70:55:a2:42:39:f2:54:d3:13:ca:aa:88:31:8c:30:57:
66:2f:0b:98:c9:13:f8:61:84:41:7d:4a:22:7f:a2:fa:10:f1:
cb:db:d1:f7:35:7f:5d:26:5f:ba:ba:9e:28:19:f1:d7:7b:77:
f5:ea:1a:bc:96:f6:b9:ae:17:cf:3c:18:8a:6c:1f:b1:be:80:
59:d2:14:39:ea:c4:38:93:27:9f:93:65:de:10:11:60:d2:3d:
90:20:66:2a:17:69:66:c3:cf:8a:e5:b8:f2:b4:95:ca:cf:a1:
8e:fe:0b:c8:c7:be:61:43:38:d0:e2:8f:fc:1d:dd:bf:f5:1f:
b3:31:7b:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYguRBaP2B5K/WGraAabXOlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDAzMDk4YjgzNTZmZmZjNWE1OTdlOWM0NWI4NGVkZjg3
Y2Y5OTQwHhcNMjMwNTE4MDk0OTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWE3MGM3NzJhYWVjZWQ1ZTIzMWU5ZmNiYTBiOWVkM2YzYWYyNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgkI7pHPJEXAnjIKw0BlvWJjKs+x
nSuIbrsZZ3jpokhD28btNtreWTcuKxEGYoabDo5nMjb0mwrOMgy2IA4b3e5qozVY
YbX8/Tul3I8uQr7gcN6QUE50jdsaqnTTsDMUci6UFl4Ojv7MLDADX+PLqEFptngT
MDBd/hwyO5WAC6hhYn8cV6Tn2m+PfuRRnAghwZEm2K7ixV+3dFnMN5xuKqJW7m84
gpl+KFenwu1+ba6wBt8F6iRtQTrLAlwSCqQZmkqz4otFhc7Qu7qglZxE3w1diM+L
J1bMD49MFxRMfOtjKKbyseefG0D2KTuHmBNRfat4gJIBy0w4Kwtg2f5wmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqnDHcqrs7V4jHp/LoLntPzrySEMB8GA1UdIwQY
MBaAFPDQMJi4NW//xaWX6cRbhO34fPmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQt
MzI3ZjgzMTk0NWZkLzEvQ3FjTWR5cXV6dFhpTWVuOHVndWUwX092SklRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQtMzI3ZjgzMTk0NWZk
LzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd10MA0G
CSqGSIb3DQEBCwUAA4IBAQBR7j3UCmhx/JsftVG7Vgl4BxLx9Y1/lAACLSKc1FYf
hrjqZe3yqDOqmNslVS9UZjn6g1kfRojvtj0mTMN15THcUCFSVccXnWj9HKTKYoXv
f1wiDD6F8M+CefC+h04bPo2ia3VyLha0TWy4efzOrITv2FncCdoj1sd1FWjYNiNE
VnBVokI58lTTE8qqiDGMMFdmLwuYyRP4YYRBfUoif6L6EPHL29H3NX9dJl+6up4o
GfHXe3f16hq8lva5rhfPPBiKbB+xvoBZ0hQ56sQ4kyefk2XeEBFg0j2QIGYqF2lm
w8+K5bjytJXKz6GO/gvIx75hQzjQ4o/8Hd2/9R+zMXuy
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:54 2025 by rpki-client