Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/xL-RoeDAxTr6o9MSggATFM6Ud5w.roa
File: xL-RoeDAxTr6o9MSggATFM6Ud5w.roa (raw, json)
Hash identifier: 8MhUfjdg12a+gHo8JvsJw0DwQGbs3LaI4d1/00zqw/8=
Subject key identifier: C4:BF:91:A1:E0:C0:C5:3A:FA:A3:D3:12:82:00:13:14:CE:94:77:9C
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: 01430C79
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/xL-RoeDAxTr6o9MSggATFM6Ud5w.roa
Signing time: Sat 05 Feb 2022 07:40:32 +0000
ROA not before: Sat 05 Feb 2022 07:40:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21171321 (0x1430c79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Feb 5 07:40:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4bf91a1e0c0c53afaa3d31282001314ce94779c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:95:ec:e0:50:a7:7e:b7:59:41:00:2d:23:
c2:27:97:57:58:b2:0e:31:07:37:cd:da:23:f7:15:
37:16:cf:f6:63:1f:7c:de:dc:04:71:0e:cf:5b:4f:
77:40:d4:95:f1:2f:48:0a:b0:e1:98:01:8d:ec:ae:
8c:0d:96:74:d1:db:15:4b:33:c3:08:f8:88:55:e5:
9a:39:2c:2c:73:a4:b5:f8:bb:a5:85:7e:ae:63:aa:
f2:fe:4b:86:04:a7:54:10:6b:33:b4:2b:a8:bd:d7:
f3:55:54:c3:ad:76:a1:da:6a:21:08:7b:83:e5:fb:
66:6d:33:8b:b9:61:6c:4c:c8:f7:ad:5c:92:7d:d7:
8a:6a:e9:5a:2f:a5:97:c4:e0:1c:e6:b7:4f:a0:b6:
8b:a7:d9:44:17:58:e4:7f:eb:15:7a:4a:07:74:c1:
a4:13:a7:08:f7:98:d2:9f:1b:0a:ed:cc:1c:3f:69:
5e:d2:dd:d4:15:6d:ae:cc:8c:8e:32:22:8b:5d:f7:
97:a6:b2:30:c0:e1:31:be:bf:e8:01:62:4c:2c:90:
ab:de:08:a5:e1:96:c4:55:f2:e4:bb:44:d9:b2:68:
9a:03:e9:71:4c:fa:35:52:be:11:aa:0a:32:7d:03:
f9:ec:54:da:91:bb:4e:97:5e:71:9b:52:60:44:96:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BF:91:A1:E0:C0:C5:3A:FA:A3:D3:12:82:00:13:14:CE:94:77:9C
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/xL-RoeDAxTr6o9MSggATFM6Ud5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cf:63:e2:2b:d9:a3:8e:28:8a:80:24:d3:9c:40:41:b4:47:
59:ef:63:c0:04:09:7e:47:a5:ce:e5:11:f8:19:47:01:ce:3e:
bd:a2:b4:4f:87:bd:56:af:4f:85:7a:5b:3d:86:58:1f:d2:5b:
6f:ec:b5:00:c4:90:68:4b:22:bb:34:bb:1f:35:75:a4:5c:46:
44:11:be:a4:36:d2:cf:15:40:3c:fd:34:e4:e7:b2:16:eb:f9:
74:b2:09:fe:a1:c0:c0:6a:84:da:be:62:a6:09:9e:46:48:8e:
74:46:e0:05:80:97:86:42:70:a2:bb:2a:12:38:6c:67:cc:29:
69:72:c8:ec:5a:50:9b:ac:c9:ea:af:05:3e:aa:ab:21:15:80:
2a:68:20:80:94:4a:8c:7a:d7:98:4b:90:8e:30:7b:ea:b0:e9:
c4:91:a3:6f:81:f9:df:c6:e5:e5:1b:a1:0b:a4:f0:af:85:d3:
0c:cb:4e:d0:a0:10:a7:f1:56:77:b9:20:5a:77:65:48:d4:97:
5e:03:66:c2:c5:3c:ee:8f:2b:61:a7:c4:ab:79:89:6b:02:69:
28:e4:44:bb:9c:9d:d2:80:80:5a:6b:31:ab:e2:b8:7d:7d:36:
e7:57:4c:28:b9:1c:9c:1f:1b:25:b0:10:60:0f:68:5a:c6:01:
d1:1b:24:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUMMeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjFkNWYzNzUwNmRlNDkwNWUxNzNjMGY1ODExNTA4MTcyNTBlZmUxMB4XDTIyMDIw
NTA3NDAzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzRiZjkxYTFlMGMw
YzUzYWZhYTNkMzEyODIwMDEzMTRjZTk0Nzc5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNmlezgUKd+t1lBAC0jwieXV1iyDjEHN83aI/cVNxbP9mMf
fN7cBHEOz1tPd0DUlfEvSAqw4ZgBjeyujA2WdNHbFUszwwj4iFXlmjksLHOktfi7
pYV+rmOq8v5LhgSnVBBrM7QrqL3X81VUw612odpqIQh7g+X7Zm0zi7lhbEzI961c
kn3XimrpWi+ll8TgHOa3T6C2i6fZRBdY5H/rFXpKB3TBpBOnCPeY0p8bCu3MHD9p
XtLd1BVtrsyMjjIii133l6ayMMDhMb6/6AFiTCyQq94IpeGWxFXy5LtE2bJomgPp
cUz6NVK+EaoKMn0D+exU2pG7TpdecZtSYESWyAkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTEv5Gh4MDFOvqj0xKCABMUzpR3nDAfBgNVHSMEGDAWgBTyHV83UG3kkF4X
PA9YEVCBclDv4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhoMWZOMUJ0NUpCZUZ6d1BXQkZRZ1hKUTctRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNmM0ZDIyLThlZDctNDg0NC1hMjk4LTIxMjU5ZGZiNmFjMC8x
L3hMLVJvZURBeFRyNm85TVNnZ0FURk02VWQ1dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NmM0ZDIyLThlZDctNDg0NC1hMjk4LTIxMjU5ZGZiNmFjMC8xLzhoMWZOMUJ0NUpC
ZUZ6d1BXQkZRZ1hKUTctRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJFoDANBgkqhkiG9w0BAQsFAAOC
AQEABM9j4ivZo44oioAk05xAQbRHWe9jwAQJfkelzuUR+BlHAc4+vaK0T4e9Vq9P
hXpbPYZYH9Jbb+y1AMSQaEsiuzS7HzV1pFxGRBG+pDbSzxVAPP005OeyFuv5dLIJ
/qHAwGqE2r5ipgmeRkiOdEbgBYCXhkJworsqEjhsZ8wpaXLI7FpQm6zJ6q8FPqqr
IRWAKmgggJRKjHrXmEuQjjB76rDpxJGjb4H538bl5RuhC6Twr4XTDMtO0KAQp/FW
d7kgWndlSNSXXgNmwsU87o8rYafEq3mJawJpKOREu5yd0oCAWmsxq+K4fX0251dM
KLkcnB8bJbAQYA9oWsYB0Rskrg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org