Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QICxc4DC0ph6ZNwq_oCPbFrF1C4.roa
File: QICxc4DC0ph6ZNwq_oCPbFrF1C4.roa (raw, json)
Hash identifier: wDVD0q3lpnGnREBO4VAJA333+c8GhazuQkM1dr0sYJI=
Subject key identifier: 40:80:B1:73:80:C2:D2:98:7A:64:DC:2A:FE:80:8F:6C:5A:C5:D4:2E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0183C533A08D6927B6746CE1C7D9F57E7B80
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QICxc4DC0ph6ZNwq_oCPbFrF1C4.roa
Signing time: Tue 11 Oct 2022 04:00:38 +0000
ROA not before: Tue 11 Oct 2022 04:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61002
IP address blocks: 80.97.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:33:a0:8d:69:27:b6:74:6c:e1:c7:d9:f5:7e:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 11 04:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4080b17380c2d2987a64dc2afe808f6c5ac5d42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:15:13:37:01:44:f5:02:e1:76:ed:1e:13:
7c:6a:0b:84:26:56:cd:73:fc:18:19:ec:d1:31:c6:
37:39:d8:97:4a:e4:9d:84:57:2b:39:31:03:4b:91:
19:d5:0a:23:e6:53:71:53:16:f1:84:1e:cd:43:45:
5b:95:ae:99:f6:51:cf:50:39:9f:89:f5:0d:7d:e9:
86:9d:19:74:1c:88:07:26:14:93:f6:0e:26:f8:b4:
54:df:97:1b:2e:e7:aa:ed:62:b5:2e:4a:2a:3d:06:
d4:22:11:c2:ed:b9:33:b3:de:1c:2a:76:53:fd:01:
96:68:9f:0d:61:02:67:f8:e7:ea:79:5b:f3:ca:a0:
24:31:56:0b:2a:d6:f8:a7:4f:9a:f8:41:2b:fa:af:
37:6c:2c:92:0a:43:fc:1e:16:59:81:04:24:cc:2d:
01:33:48:f0:94:a2:5a:75:1b:ed:66:da:8a:93:76:
1a:98:2c:7c:1e:29:68:7b:c2:e1:fb:5a:61:8e:16:
7e:3c:88:32:f0:eb:de:7a:1d:36:36:bc:a0:0f:fe:
16:d0:cb:18:7b:77:c7:35:24:b7:26:11:01:e7:bd:
54:2b:d1:3f:56:b9:d9:16:40:3f:bc:fa:05:c2:2e:
a1:8b:b0:ff:c7:61:04:30:9a:b3:52:c6:26:2d:cd:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:B1:73:80:C2:D2:98:7A:64:DC:2A:FE:80:8F:6C:5A:C5:D4:2E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QICxc4DC0ph6ZNwq_oCPbFrF1C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.54.0/23
Signature Algorithm: sha256WithRSAEncryption
66:32:d8:94:02:d4:b9:fe:da:d0:32:51:20:5e:25:fa:95:b9:
b6:b4:25:8d:77:66:a5:00:fb:f6:88:48:c3:e7:99:32:71:c2:
93:5c:1c:e9:7f:34:c3:e4:c0:79:bc:38:55:cf:e0:e3:c4:6c:
00:50:1f:20:31:44:2c:be:cc:d2:ce:a8:cf:93:ab:23:d7:90:
5c:99:09:6b:66:32:d4:1c:d3:d3:83:cd:69:fc:ad:59:b2:00:
34:3d:f7:c1:3c:24:63:73:aa:11:2a:67:68:e6:3a:7e:7a:ad:
0f:64:a1:37:96:76:c5:f0:58:0a:3c:66:89:58:f1:f9:b1:9b:
e3:c9:89:bc:cf:b1:e9:ad:b8:0c:d3:f0:67:1a:fc:c2:de:39:
b3:fe:47:ab:49:9f:6f:29:8e:f7:3d:72:73:5d:e7:46:f8:c3:
dd:42:8b:fd:1d:34:eb:3b:17:a7:63:b5:6d:b6:44:36:ef:cd:
f7:37:54:6e:b3:f5:fd:13:98:44:91:48:9c:d1:cd:fd:4c:96:
ae:53:ca:bc:6f:12:12:06:c3:f0:f3:fe:4b:3b:b7:f2:8d:86:
45:45:ad:fc:dd:4d:e0:a8:f7:72:59:ff:f9:00:b6:eb:64:4e:
15:b5:4a:74:3c:91:a4:98:52:44:88:05:2a:34:d3:73:6e:78:
15:7b:f2:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPFM6CNaSe2dGzhx9n1fnuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjIxMDExMDQwMDM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDgwYjE3MzgwYzJkMjk4N2E2NGRjMmFmZTgwOGY2YzVhYzVkNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqQVEzcBRPUC4XbtHhN8aguEJlbN
c/wYGezRMcY3OdiXSuSdhFcrOTEDS5EZ1Qoj5lNxUxbxhB7NQ0Vbla6Z9lHPUDmf
ifUNfemGnRl0HIgHJhST9g4m+LRU35cbLueq7WK1LkoqPQbUIhHC7bkzs94cKnZT
/QGWaJ8NYQJn+OfqeVvzyqAkMVYLKtb4p0+a+EEr+q83bCySCkP8HhZZgQQkzC0B
M0jwlKJadRvtZtqKk3YamCx8Hiloe8Lh+1phjhZ+PIgy8Oveeh02NrygD/4W0MsY
e3fHNSS3JhEB571UK9E/VrnZFkA/vPoFwi6hi7D/x2EEMJqzUsYmLc0YTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECAsXOAwtKYemTcKv6Aj2xaxdQuMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvUUlDeGM0REMwcGg2Wk53cV9vQ1BiRnJGMUM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUGE2MA0G
CSqGSIb3DQEBCwUAA4IBAQBmMtiUAtS5/trQMlEgXiX6lbm2tCWNd2alAPv2iEjD
55kyccKTXBzpfzTD5MB5vDhVz+DjxGwAUB8gMUQsvszSzqjPk6sj15BcmQlrZjLU
HNPTg81p/K1ZsgA0PffBPCRjc6oRKmdo5jp+eq0PZKE3lnbF8FgKPGaJWPH5sZvj
yYm8z7HprbgM0/BnGvzC3jmz/kerSZ9vKY73PXJzXedG+MPdQov9HTTrOxenY7Vt
tkQ27833N1Rus/X9E5hEkUic0c39TJauU8q8bxISBsPw8/5LO7fyjYZFRa383U3g
qPdyWf/5ALbrZE4VtUp0PJGkmFJEiAUqNNNzbngVe/JZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org