Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lJaPTgrTiEzaDLOXdcv_-386oYw.roa
File: lJaPTgrTiEzaDLOXdcv_-386oYw.roa (raw, json)
Hash identifier: aAI5nA9OGsu35P4H7K+dlY3ZzmH2e7TE5KMCds5T3m8=
Subject key identifier: 94:96:8F:4E:0A:D3:88:4C:DA:0C:B3:97:75:CB:FF:FB:7F:3A:A1:8C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09385E2B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lJaPTgrTiEzaDLOXdcv_-386oYw.roa
Signing time: Sat 01 Jan 2022 16:01:01 +0000
ROA not before: Sat 01 Jan 2022 16:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212653
IP address blocks: 193.34.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154689067 (0x9385e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94968f4e0ad3884cda0cb39775cbfffb7f3aa18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:d6:7e:2e:32:e7:53:09:fd:03:90:dd:06:
70:79:da:87:ee:f7:cb:8a:10:a2:0a:b7:d7:65:3d:
25:d7:fc:c4:06:89:e9:1e:5e:99:20:4c:b4:fd:04:
6f:85:4c:30:49:5e:3f:a0:98:d7:36:ca:34:ae:8d:
13:17:23:87:a0:4a:c4:97:14:c3:ed:74:2d:96:b1:
5f:59:6d:e8:4e:8a:a8:65:7d:57:b0:20:2b:bc:1c:
c9:49:18:ae:3b:77:32:6c:b9:aa:88:27:59:4a:6c:
c6:29:87:24:a8:34:83:fd:35:b8:e3:f3:f3:f9:a3:
18:9c:67:f6:36:52:6b:6e:ac:06:c6:e0:5a:bc:2d:
99:2c:41:bc:35:84:8a:44:67:45:f4:a0:fb:ee:34:
fb:8b:20:a3:bc:37:8b:8c:ec:47:f4:56:e1:cb:08:
94:4b:ae:7a:73:d9:bf:aa:24:30:11:9f:6a:7b:df:
65:e9:0e:b4:df:91:cd:74:e1:34:48:c7:61:f8:62:
27:44:20:f6:5d:de:26:16:e2:c4:4e:eb:4d:e1:29:
76:12:d8:fe:09:3c:5b:d7:20:35:df:0f:43:a8:54:
53:42:fb:1f:8d:f4:31:da:b8:de:1b:49:41:51:79:
09:ae:21:58:6e:18:50:a4:92:71:b4:cd:65:64:00:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:8F:4E:0A:D3:88:4C:DA:0C:B3:97:75:CB:FF:FB:7F:3A:A1:8C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lJaPTgrTiEzaDLOXdcv_-386oYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:32:09:e3:9f:50:e1:44:61:3a:15:15:4a:f6:b6:e0:5a:51:
f8:dd:f3:2b:98:ae:0c:13:51:a4:ef:ce:a8:ab:14:95:00:10:
2b:45:ff:f6:b3:af:6d:90:0f:34:1a:75:1b:5c:47:5e:f6:f4:
77:59:50:69:b1:9e:03:a8:61:63:2b:a2:e4:b1:76:74:f6:10:
f3:0d:87:99:1b:8c:61:b3:e8:4a:8f:0d:94:19:30:a2:8e:11:
b0:1b:8c:e3:b8:6a:a2:a9:1e:a0:20:e2:ec:cc:39:11:79:81:
69:e2:53:6a:00:d8:8b:af:06:1e:10:b8:30:15:34:9f:33:6c:
87:06:9f:99:73:91:18:dc:82:64:69:cb:75:d4:d5:bb:78:62:
02:45:11:22:d6:63:9b:84:07:42:57:cd:0f:7e:55:b0:ae:e1:
0f:9a:65:b6:12:cd:76:f7:9d:12:7a:dc:ec:73:ec:72:9d:9c:
83:ae:f6:e1:a0:51:10:a9:c0:a3:97:09:9e:ee:9e:b6:f9:04:
8b:d6:83:71:11:10:dc:ff:dc:92:57:8e:f6:2b:30:df:53:7c:
2c:5e:a8:80:32:59:74:89:1b:79:32:e2:ca:7f:6c:32:61:d5:
7a:93:6b:d9:32:a6:45:5d:da:e1:07:22:d8:f0:b6:b2:59:5e:
8e:3b:91:aa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECTheKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDEwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQ5NjhmNGUwYWQz
ODg0Y2RhMGNiMzk3NzVjYmZmZmI3ZjNhYTE4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALju1n4uMudTCf0DkN0GcHnah+73y4oQogq312U9Jdf8xAaJ
6R5emSBMtP0Eb4VMMEleP6CY1zbKNK6NExcjh6BKxJcUw+10LZaxX1lt6E6KqGV9
V7AgK7wcyUkYrjt3Mmy5qognWUpsximHJKg0g/01uOPz8/mjGJxn9jZSa26sBsbg
WrwtmSxBvDWEikRnRfSg++40+4sgo7w3i4zsR/RW4csIlEuuenPZv6okMBGfanvf
ZekOtN+RzXThNEjHYfhiJ0Qg9l3eJhbixE7rTeEpdhLY/gk8W9cgNd8PQ6hUU0L7
H430Mdq43htJQVF5Ca4hWG4YUKSScbTNZWQAZB8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUlo9OCtOITNoMs5d1y//7fzqhjDAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
L2xKYVBUZ3JUaUV6YURMT1hkY3ZfLTM4Nm9Zdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEiTzANBgkqhkiG9w0BAQsFAAOC
AQEAtTIJ459Q4URhOhUVSva24FpR+N3zK5iuDBNRpO/OqKsUlQAQK0X/9rOvbZAP
NBp1G1xHXvb0d1lQabGeA6hhYyui5LF2dPYQ8w2HmRuMYbPoSo8NlBkwoo4RsBuM
47hqoqkeoCDi7Mw5EXmBaeJTagDYi68GHhC4MBU0nzNshwafmXORGNyCZGnLddTV
u3hiAkURItZjm4QHQlfND35VsK7hD5plthLNdvedEnrc7HPscp2cg6724aBREKnA
o5cJnu6etvkEi9aDcREQ3P/ckleO9isw31N8LF6ogDJZdIkbeTLiyn9sMmHVepNr
2TKmRV3a4Qci2PC2sllejjuRqg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org