Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dFgkXbQWRSVCzA2eY9FZsvt4TiE.roa
File: dFgkXbQWRSVCzA2eY9FZsvt4TiE.roa (raw, json)
Hash identifier: 7Nd1QpaT3WAsbhgR05efY3T9ZHNS1QLlD3KE6vg++Nk=
Subject key identifier: 74:58:24:5D:B4:16:45:25:42:CC:0D:9E:63:D1:59:B2:FB:78:4E:21
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 193007E5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dFgkXbQWRSVCzA2eY9FZsvt4TiE.roa
Signing time: Sat 01 Jan 2022 11:57:08 +0000
ROA not before: Sat 01 Jan 2022 11:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12302
IP address blocks: 80.97.37.0/24 maxlen: 24
193.231.120.0/24 maxlen: 24
193.231.121.0/24 maxlen: 24
193.231.126.0/24 maxlen: 24
194.102.90.0/24 maxlen: 24
80.96.134.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422578149 (0x193007e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 11:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7458245db416452542cc0d9e63d159b2fb784e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:07:2c:08:09:c0:1f:cd:89:57:83:a9:0f:
9e:6f:87:01:f6:34:37:e8:2b:2a:80:7e:55:67:fa:
15:97:c5:4f:46:31:ef:59:ed:b8:39:5f:bc:43:d5:
b0:fe:0d:1c:f6:6e:ed:d8:a1:5e:97:da:07:90:77:
5e:1d:a9:fa:fa:ca:02:28:f4:1e:51:6f:b9:73:0c:
07:94:2c:73:fc:23:56:03:46:71:41:3c:b9:f2:f6:
df:e4:80:67:67:21:e1:ef:d9:3e:6f:fe:10:06:6e:
46:8f:e3:01:b1:e0:7b:72:c9:1d:38:53:c2:41:b3:
43:e9:69:9a:be:2e:4f:77:dd:ef:a9:97:e0:75:a7:
7a:23:81:6a:a0:dd:e4:73:f1:1f:ce:53:1e:41:73:
96:b4:a2:bc:bb:6e:74:aa:da:ac:da:2f:1e:ed:24:
0f:0f:74:45:6d:9d:d7:cf:60:62:95:2f:05:e9:84:
b4:d2:4f:bd:d8:66:50:3e:65:7a:ac:75:9e:73:e8:
6a:3a:3d:50:a7:74:0a:ba:d4:a5:9d:21:85:d0:e7:
1e:e1:5e:c0:36:ab:e3:e9:60:9f:cb:70:b4:db:99:
9d:e6:ac:56:40:0b:a7:93:2f:3f:02:0b:2b:7d:c0:
5a:b4:6e:ce:56:3e:ce:af:39:c3:15:17:0e:5c:ae:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:24:5D:B4:16:45:25:42:CC:0D:9E:63:D1:59:B2:FB:78:4E:21
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dFgkXbQWRSVCzA2eY9FZsvt4TiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.134.0/23
80.97.37.0/24
193.231.120.0/23
193.231.126.0/24
194.102.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4f:78:e0:27:7f:41:08:ac:ed:d8:19:cf:b2:56:f0:94:be:
b5:1a:36:ff:af:24:d9:e2:ab:15:b9:18:79:79:37:9c:39:6b:
f7:13:bb:8a:b9:8b:23:4e:2a:7d:59:fa:9b:af:09:07:01:da:
6b:df:40:45:b6:be:0d:a4:b3:eb:28:6d:cf:5d:ca:b8:c9:0a:
4f:ff:d7:4b:68:cf:cc:ce:b6:23:7d:05:09:5a:9e:ba:49:af:
9d:19:68:bb:73:dc:eb:e1:a3:60:19:c8:30:4a:3f:61:0a:ab:
fe:eb:9d:73:8b:08:6a:e7:8c:6d:87:ad:4e:57:a0:d0:7b:f5:
76:e3:e8:21:e5:2e:0b:0e:ee:69:57:d9:c8:72:42:03:ce:be:
57:fc:49:42:93:e2:b8:13:e8:90:7c:a3:43:91:5d:db:2a:c7:
d1:6d:dd:45:f4:c7:64:75:4d:3a:77:98:fa:76:bc:c4:91:3c:
d8:97:35:4e:c2:8a:74:bd:a3:98:c7:fa:9f:3b:bf:62:fd:b3:
9d:35:67:54:f5:7f:66:36:fb:0f:d7:f8:e3:0a:9d:df:d7:a2:
6d:85:73:f3:eb:1b:ed:17:f6:22:ab:1e:50:bd:78:3d:7c:c2:
84:d7:a7:fd:8c:46:33:02:37:12:93:e7:ea:73:af:17:bc:76:
e7:59:e1:4a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEGTAH5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDEw
MTExNTcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzQ1ODI0NWRiNDE2
NDUyNTQyY2MwZDllNjNkMTU5YjJmYjc4NGUyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKamBywICcAfzYlXg6kPnm+HAfY0N+grKoB+VWf6FZfFT0Yx
71ntuDlfvEPVsP4NHPZu7dihXpfaB5B3Xh2p+vrKAij0HlFvuXMMB5Qsc/wjVgNG
cUE8ufL23+SAZ2ch4e/ZPm/+EAZuRo/jAbHge3LJHThTwkGzQ+lpmr4uT3fd76mX
4HWneiOBaqDd5HPxH85THkFzlrSivLtudKrarNovHu0kDw90RW2d189gYpUvBemE
tNJPvdhmUD5leqx1nnPoajo9UKd0CrrUpZ0hhdDnHuFewDar4+lgn8twtNuZneas
VkALp5MvPwILK33AWrRuzlY+zq85wxUXDlyuNbUCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBR0WCRdtBZFJULMDZ5j0Vmy+3hOITAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L2RGZ2tYYlFXUlNWQ3pBMmVZOUZac3Z0NFRpRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAVBghgMEAFBhJQMEAcHneAMEAMHn
fgMEAMJmWjANBgkqhkiG9w0BAQsFAAOCAQEAPE944Cd/QQis7dgZz7JW8JS+tRo2
/68k2eKrFbkYeXk3nDlr9xO7irmLI04qfVn6m68JBwHaa99ARba+DaSz6yhtz13K
uMkKT//XS2jPzM62I30FCVqeukmvnRlou3Pc6+GjYBnIMEo/YQqr/uudc4sIaueM
bYetTleg0Hv1duPoIeUuCw7uaVfZyHJCA86+V/xJQpPiuBPokHyjQ5Fd2yrH0W3d
RfTHZHVNOneY+na8xJE82Jc1TsKKdL2jmMf6nzu/Yv2znTVnVPV/Zjb7D9f44wqd
39eibYVz8+sb7Rf2IqseUL14PXzChNen/YxGMwI3EpPn6nOvF7x251nhSg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org