Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/8BNFwNI8QQdMIbM8eAM4AzWUWfc.roa
File: 8BNFwNI8QQdMIbM8eAM4AzWUWfc.roa (raw, json)
Hash identifier: BvVxpFx8vUxPmQUzvcgsKW16AypGPUtI06VDlm6bqJQ=
Subject key identifier: F0:13:45:C0:D2:3C:41:07:4C:21:B3:3C:78:03:38:03:35:94:59:F7
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 0B4C97CB
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/8BNFwNI8QQdMIbM8eAM4AzWUWfc.roa
Signing time: Sat 01 Jan 2022 16:02:13 +0000
ROA not before: Sat 01 Jan 2022 16:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202328
IP address blocks: 193.56.220.0/24 maxlen: 24
193.56.220.0/22 maxlen: 22
193.56.223.0/24 maxlen: 24
193.56.222.0/24 maxlen: 24
193.56.221.0/24 maxlen: 24
2a0c:9040::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189568971 (0xb4c97cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Jan 1 16:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f01345c0d23c41074c21b33c78033803359459f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:cb:6b:48:cc:c8:e9:a6:58:6b:16:33:f4:
2e:42:a0:ee:89:cf:59:15:4c:68:a4:0e:fc:c2:3e:
e5:ad:68:3c:89:bb:8c:1a:09:17:3a:8b:e4:1b:a5:
de:97:b3:af:a8:18:3f:39:aa:a6:0c:ac:c2:70:fe:
31:7d:35:80:03:41:6c:81:19:e5:0b:32:65:1a:3f:
06:7a:2a:42:58:ac:1f:a7:84:3f:d2:21:2d:cf:14:
86:7a:6a:c5:54:ef:3d:9f:7d:30:a9:42:92:1d:56:
17:42:67:76:8f:22:f0:c6:ba:de:f5:b7:f6:ef:3f:
8b:93:2e:ce:bf:90:42:39:1f:cf:c7:94:3d:17:80:
89:51:15:ab:14:6d:94:c2:73:9e:be:1a:b8:35:89:
fd:e9:fd:12:a8:04:de:58:80:90:54:b3:1c:ec:5e:
a2:dc:7f:88:7f:fb:ca:1a:4a:94:04:3b:ee:db:61:
9c:7e:a8:ce:21:35:ac:b8:7b:d5:fb:c1:a0:c4:45:
14:4e:ba:fb:6c:35:5f:08:6e:25:33:07:cb:ea:b6:
43:3c:1f:21:7a:01:cf:b7:90:03:2b:a3:07:5b:9c:
1d:9a:ce:33:21:2b:e8:83:3f:bc:39:c7:00:b1:59:
69:26:39:b2:87:d3:2a:b3:57:94:19:ba:dd:34:d6:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:13:45:C0:D2:3C:41:07:4C:21:B3:3C:78:03:38:03:35:94:59:F7
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/8BNFwNI8QQdMIbM8eAM4AzWUWfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.220.0/22
IPv6:
2a0c:9040::/30
Signature Algorithm: sha256WithRSAEncryption
49:c9:d5:c8:47:37:83:51:96:a0:fe:9f:0b:b1:02:0c:d9:30:
b3:20:fb:0c:e7:d2:7c:c2:48:ff:ba:3b:ff:8e:ca:b8:17:5b:
87:c6:e6:5b:1b:7b:b5:42:d5:88:26:bb:23:90:89:f8:5a:19:
0e:18:e4:fd:0d:df:06:38:56:49:87:51:c2:55:d4:c4:94:c5:
64:8a:12:db:f7:9e:39:2b:93:d4:bd:34:34:9d:89:d6:fa:48:
8b:8c:69:d9:9c:29:32:4a:d7:cb:7c:01:46:eb:a7:8a:1a:d8:
33:c8:16:2f:3e:30:34:9a:09:a5:87:72:72:7e:ef:56:cb:fa:
89:a7:cf:33:b7:b7:a6:d6:75:d6:54:a7:c9:e3:9e:f7:35:79:
8f:47:34:0e:2f:87:24:56:6b:9a:21:13:bd:d0:14:05:92:c2:
b3:4f:4d:27:2d:68:cb:e4:8f:7c:a0:f6:e0:c9:39:ad:d3:a0:
f5:be:9b:83:61:92:12:d8:d9:8f:86:b3:c4:2a:f9:92:c5:9c:
86:fa:c6:c3:fe:b8:cd:17:46:a6:8c:4e:c3:33:28:cd:8a:c4:
94:2b:1d:3e:55:03:4d:d5:27:ba:25:e1:35:09:e3:2e:c5:a0:
2d:0b:e9:0f:f2:3d:db:9f:30:c3:62:b0:14:74:cd:70:b7:70:
d9:67:b9:6a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEC0yXyzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OWJjMzY0N2UxYjIxMjRlOTZiODhmNzM2ZWRkNWVmOGNhZDg4ZmUzMB4XDTIyMDEw
MTE2MDIxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjAxMzQ1YzBkMjNj
NDEwNzRjMjFiMzNjNzgwMzM4MDMzNTk0NTlmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALE8y2tIzMjpplhrFjP0LkKg7onPWRVMaKQO/MI+5a1oPIm7
jBoJFzqL5Bul3pezr6gYPzmqpgyswnD+MX01gANBbIEZ5QsyZRo/BnoqQlisH6eE
P9IhLc8UhnpqxVTvPZ99MKlCkh1WF0Jndo8i8Ma63vW39u8/i5Muzr+QQjkfz8eU
PReAiVEVqxRtlMJznr4auDWJ/en9EqgE3liAkFSzHOxeotx/iH/7yhpKlAQ77tth
nH6oziE1rLh71fvBoMRFFE66+2w1XwhuJTMHy+q2QzwfIXoBz7eQAyujB1ucHZrO
MyEr6IM/vDnHALFZaSY5sofTKrNXlBm63TTWjesCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTwE0XA0jxBB0whszx4AzgDNZRZ9zAfBgNVHSMEGDAWgBQJvDZH4bISTpa4
j3Nu3V74ytiP4zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NidzJSLUd5RWs2V3VJOXpidDFlLU1yWWotTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvYjlkYjk4LWMwMjctNGU3NS1iYmY5LTUzNTk1MDkwNDdiYy8x
LzhCTkZ3Tkk4UVFkTUliTThlQU00QXpXVVdmYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
YjlkYjk4LWMwMjctNGU3NS1iYmY5LTUzNTk1MDkwNDdiYy8xL0NidzJSLUd5RWs2
V3VJOXpidDFlLU1yWWotTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsE43DANBAIAAjAHAwUCKgyQQDAN
BgkqhkiG9w0BAQsFAAOCAQEAScnVyEc3g1GWoP6fC7ECDNkwsyD7DOfSfMJI/7o7
/47KuBdbh8bmWxt7tULViCa7I5CJ+FoZDhjk/Q3fBjhWSYdRwlXUxJTFZIoS2/ee
OSuT1L00NJ2J1vpIi4xp2ZwpMkrXy3wBRuunihrYM8gWLz4wNJoJpYdycn7vVsv6
iafPM7e3ptZ11lSnyeOe9zV5j0c0Di+HJFZrmiETvdAUBZLCs09NJy1oy+SPfKD2
4Mk5rdOg9b6bg2GSEtjZj4azxCr5ksWchvrGw/64zRdGpoxOwzMozYrElCsdPlUD
TdUnuiXhNQnjLsWgLQvpD/I9258ww2KwFHTNcLdw2We5ag==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:36 2023 by rpki-client on console-ams.rpki-client.org