Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/ubWZizMew3D9R61e1GogVDD8ImI.roa
File: ubWZizMew3D9R61e1GogVDD8ImI.roa (raw, json)
Hash identifier: WfNb66kXbXPQMP7ZIA7Xd7Gp8NjWTFQPu6eex+pMcso=
Subject key identifier: B9:B5:99:8B:33:1E:C3:70:FD:47:AD:5E:D4:6A:20:54:30:FC:22:62
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 0234EF5E
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/ubWZizMew3D9R61e1GogVDD8ImI.roa
Signing time: Sat 01 Jan 2022 12:02:35 +0000
ROA not before: Sat 01 Jan 2022 12:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211384
IP address blocks: 193.3.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37023582 (0x234ef5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Jan 1 12:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9b5998b331ec370fd47ad5ed46a205430fc2262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:6f:1b:a5:53:db:1f:68:53:0f:83:50:6d:
45:35:12:2b:02:1f:42:8a:05:6a:15:23:aa:cc:a4:
53:00:30:f8:9b:74:be:ba:eb:8d:ec:ca:eb:e8:9c:
c7:d3:f9:54:07:1c:1c:7c:bc:7b:02:56:da:78:40:
a5:8f:57:1b:c6:65:73:e0:36:72:1f:94:a2:71:3f:
cf:9c:e6:85:7a:42:18:3a:2a:b1:8f:fa:b1:2e:0b:
f1:d2:ed:57:2d:99:6c:fb:1e:64:5b:8d:4e:ba:74:
81:e3:42:48:0a:00:3e:b0:1f:06:06:6e:c5:c9:4f:
c5:c5:73:97:19:f0:65:f7:93:05:e4:be:2e:52:f7:
51:d8:98:f4:4f:36:40:4a:62:76:79:00:9b:10:72:
fc:8e:1a:04:f9:4b:de:ac:f0:c0:1c:23:f8:c8:cc:
7c:b3:e8:b8:d5:37:8d:eb:de:18:c8:7a:57:7b:d4:
3f:c0:d7:2a:26:e7:52:d6:ea:1e:22:be:f1:ea:68:
ca:0b:d0:b1:b6:42:94:cf:40:8e:18:59:5c:46:dc:
f5:8e:9a:4e:85:ec:62:4c:57:ed:59:c9:c8:f5:a0:
57:13:c9:5f:5a:1c:73:9a:b1:95:68:ed:03:96:77:
12:2d:b4:eb:3e:b7:ae:4f:69:eb:b4:85:af:fc:e8:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B5:99:8B:33:1E:C3:70:FD:47:AD:5E:D4:6A:20:54:30:FC:22:62
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/ubWZizMew3D9R61e1GogVDD8ImI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:41:9f:d8:46:cb:54:2f:42:89:64:e3:c4:8b:09:a2:bc:4e:
90:68:fa:20:51:a0:b9:68:d0:21:b8:54:46:84:19:d0:19:33:
90:58:b0:bf:00:1e:f0:71:94:9b:ab:ee:17:b1:4b:25:68:c3:
1d:61:33:3b:25:d5:b1:21:fd:d3:b6:07:92:b6:16:b3:0e:8e:
39:c6:62:9b:ce:38:86:8f:de:51:78:e1:61:93:47:fd:c2:d6:
a5:f7:69:cf:11:0c:8a:fb:f5:c4:a5:24:6c:ca:cf:0d:1e:19:
d6:97:9d:98:37:55:b7:4d:dc:a3:69:9f:43:94:ab:5e:cc:dd:
f2:e2:bc:47:e9:a0:07:32:f3:14:ee:6c:c1:e4:d2:1d:de:cc:
9d:d8:e7:38:25:4f:45:7f:55:e7:3b:bb:5f:68:69:49:38:e1:
8f:00:23:40:01:af:db:4d:dc:f0:d2:e2:b2:0c:d0:c8:ea:b2:
3e:2d:d1:1c:7a:0b:fd:b0:3d:5a:96:37:e8:3c:e0:b7:67:bf:
7d:fe:7a:05:02:b2:50:aa:6c:d5:05:6b:83:40:0d:d1:5a:14:
c3:f7:c9:15:e8:71:fe:68:dd:01:c2:f8:99:7f:ab:19:66:2b:
b8:51:70:52:69:47:71:b8:78:06:b9:5b:ba:fd:ee:9b:9d:57:
b4:96:86:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAjTvXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWUwNzU1NmMxOTE4NjdhZGQ5MDEwMTU4MGVjZjVkNWI3NDI5NjcxMB4XDTIyMDEw
MTEyMDIzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjliNTk5OGIzMzFl
YzM3MGZkNDdhZDVlZDQ2YTIwNTQzMGZjMjI2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALFxbxulU9sfaFMPg1BtRTUSKwIfQooFahUjqsykUwAw+Jt0
vrrrjezK6+icx9P5VAccHHy8ewJW2nhApY9XG8Zlc+A2ch+UonE/z5zmhXpCGDoq
sY/6sS4L8dLtVy2ZbPseZFuNTrp0geNCSAoAPrAfBgZuxclPxcVzlxnwZfeTBeS+
LlL3UdiY9E82QEpidnkAmxBy/I4aBPlL3qzwwBwj+MjMfLPouNU3jeveGMh6V3vU
P8DXKibnUtbqHiK+8epoygvQsbZClM9AjhhZXEbc9Y6aToXsYkxX7VnJyPWgVxPJ
X1occ5qxlWjtA5Z3Ei206z63rk9p67SFr/zo9rsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS5tZmLMx7DcP1HrV7UaiBUMPwiYjAfBgNVHSMEGDAWgBQR4HVWwZGGet2Q
EBWA7PXVt0KWcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VlQjFWc0dSaG5yZGtCQVZnT3oxMWJkQ2xuRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvYWUyOTI5LTY3NGQtNDk0Ni04MDUzLWE0MzY4YTFiNWY2My8x
L3ViV1ppek1ldzNEOVI2MWUxR29nVkREOEltSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
YWUyOTI5LTY3NGQtNDk0Ni04MDUzLWE0MzY4YTFiNWY2My8xL0VlQjFWc0dSaG5y
ZGtCQVZnT3oxMWJkQ2xuRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEDIDANBgkqhkiG9w0BAQsFAAOC
AQEAs0Gf2EbLVC9CiWTjxIsJorxOkGj6IFGguWjQIbhURoQZ0BkzkFiwvwAe8HGU
m6vuF7FLJWjDHWEzOyXVsSH907YHkrYWsw6OOcZim844ho/eUXjhYZNH/cLWpfdp
zxEMivv1xKUkbMrPDR4Z1pedmDdVt03co2mfQ5SrXszd8uK8R+mgBzLzFO5sweTS
Hd7MndjnOCVPRX9V5zu7X2hpSTjhjwAjQAGv203c8NLisgzQyOqyPi3RHHoL/bA9
WpY36Dzgt2e/ff56BQKyUKps1QVrg0AN0VoUw/fJFehx/mjdAcL4mX+rGWYruFFw
UmlHcbh4Brlbuv3um51XtJaGgw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:25 2023 by rpki-client on console-fra.rpki-client.org