Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/yWUQazFEgLIroqvMWjhOJRphzs8.roa
File: yWUQazFEgLIroqvMWjhOJRphzs8.roa (raw, json)
Hash identifier: jZjBg8hRCr3Ydi3zTn8fVa9NQiC6EdAYSGjNTSWdA60=
Subject key identifier: C9:65:10:6B:31:44:80:B2:2B:A2:AB:CC:5A:38:4E:25:1A:61:CE:CF
Certificate issuer: /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial: 04E8A632
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/yWUQazFEgLIroqvMWjhOJRphzs8.roa
Signing time: Sat 01 Jan 2022 15:57:05 +0000
ROA not before: Sat 01 Jan 2022 15:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207861
IP address blocks: 193.57.21.0/24 maxlen: 24
193.56.247.0/24 maxlen: 24
193.57.4.0/24 maxlen: 24
193.57.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82355762 (0x4e8a632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Validity
Not Before: Jan 1 15:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c965106b314480b22ba2abcc5a384e251a61cecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:df:d4:f1:86:60:cf:59:52:7b:ba:00:5a:
bf:ac:d5:ba:41:8c:87:d9:da:ea:5a:c6:6f:af:18:
ba:4c:3a:61:65:f3:71:0f:5b:a7:53:0e:db:57:ee:
c0:0f:89:84:ae:da:c1:4d:c9:82:97:c9:42:0e:d3:
6e:48:d5:d6:0e:a2:74:d3:03:0e:bb:a3:c6:4d:1c:
78:34:6a:69:46:45:2c:36:c5:b2:a6:3f:c6:7c:9b:
fb:a8:42:71:71:fa:c9:4d:b3:e6:eb:b0:f4:69:0c:
61:ff:f7:68:22:84:c1:47:16:16:32:4a:0f:47:b8:
9b:87:df:95:f1:90:8c:87:52:48:8e:fe:99:e3:f7:
a9:6b:2b:ba:5d:47:99:11:06:da:03:b1:57:d5:17:
e3:55:e2:cd:fd:04:48:98:df:cf:8f:7f:59:74:45:
28:31:62:db:42:ec:8e:00:1e:27:3f:62:ce:96:32:
1d:93:7b:5f:01:c3:e1:d0:25:aa:67:4b:c0:8e:b1:
0e:c7:32:e1:0a:ce:37:12:70:b5:b0:f9:8d:ad:40:
1f:99:87:bf:16:2e:1c:e3:0a:4e:8e:5f:fa:71:af:
09:53:be:c6:d7:1b:bd:df:1a:9e:ff:d4:2e:ca:12:
66:3c:f3:05:76:7b:83:09:7e:d2:0a:64:9d:e3:3e:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:10:6B:31:44:80:B2:2B:A2:AB:CC:5A:38:4E:25:1A:61:CE:CF
X509v3 Authority Key Identifier:
keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/yWUQazFEgLIroqvMWjhOJRphzs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.247.0/24
193.57.4.0/24
193.57.7.0/24
193.57.21.0/24
Signature Algorithm: sha256WithRSAEncryption
05:90:55:27:5b:1f:b4:1e:54:d7:cb:3f:14:bd:df:4f:1d:25:
f4:26:bb:1a:62:1b:83:ea:f7:f9:de:9c:46:04:36:1c:20:f1:
89:8b:80:cf:c0:b6:16:b0:a3:06:96:7a:11:8c:66:d1:9e:87:
bb:05:13:d5:d0:3b:be:3f:ad:0c:08:de:03:ba:a5:98:b7:c0:
b0:b1:f3:c0:23:ee:9c:e0:98:2b:83:17:cf:90:fa:aa:6f:f3:
88:0d:d1:34:b3:09:bc:2a:e7:a1:4e:af:d2:6e:ff:14:aa:fe:
1d:4d:e3:32:f0:93:b0:9c:a6:cb:74:4d:27:20:af:c8:96:57:
ae:c6:be:fd:04:56:3e:10:15:cc:13:d6:54:9a:74:b2:0c:80:
10:79:0d:47:4e:fe:6c:39:ef:94:be:f2:ee:6d:6e:63:d8:5d:
ad:83:6c:21:9a:c4:5a:a9:98:d7:2e:af:0f:d1:2c:0c:75:c2:
80:fb:29:3b:2e:29:ba:fd:f3:bb:dd:8c:d1:9d:a7:31:af:a4:
a6:ce:28:3a:0c:06:3f:d1:cb:c2:d3:ac:54:c1:6a:e6:b3:b9:
d9:85:2f:08:69:e1:08:e2:f9:63:71:d8:80:c8:9a:79:46:ea:
ba:eb:58:ef:a4:8a:30:cb:e5:96:4c:cb:49:85:cd:9b:c2:79:
76:95:d5:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEBOimMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YWI2YmEwYTY2MGFhODhmYTU0ZWY4ZDc0NmVhN2U1Mjc3ODFmYzNjMB4XDTIyMDEw
MTE1NTcwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzk2NTEwNmIzMTQ0
ODBiMjJiYTJhYmNjNWEzODRlMjUxYTYxY2VjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMDa39TxhmDPWVJ7ugBav6zVukGMh9na6lrGb68Yukw6YWXz
cQ9bp1MO21fuwA+JhK7awU3JgpfJQg7TbkjV1g6idNMDDrujxk0ceDRqaUZFLDbF
sqY/xnyb+6hCcXH6yU2z5uuw9GkMYf/3aCKEwUcWFjJKD0e4m4fflfGQjIdSSI7+
meP3qWsrul1HmREG2gOxV9UX41Xizf0ESJjfz49/WXRFKDFi20LsjgAeJz9izpYy
HZN7XwHD4dAlqmdLwI6xDscy4QrONxJwtbD5ja1AH5mHvxYuHOMKTo5f+nGvCVO+
xtcbvd8anv/ULsoSZjzzBXZ7gwl+0gpkneM+vB8CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBTJZRBrMUSAsiuiq8xaOE4lGmHOzzAfBgNVHSMEGDAWgBT6troKZgqoj6VO
+NdG6n5Sd4H8PDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtcmE2Q21ZS3FJLWxUdmpYUnVwLVVuZUJfRHcuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzFhLzE1NzczZS1mZjFjLTQwZWUtYmEwYi0yYTFiYTQ4ODk2MzUv
MS95V1VRYXpGRWdMSXJvcXZNV2poT0pScGh6czgucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFh
LzE1NzczZS1mZjFjLTQwZWUtYmEwYi0yYTFiYTQ4ODk2MzUvMS8xLXJhNkNtWUtx
SS1sVHZqWFJ1cC1VbmVCX0R3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwTj3AwQAwTkEAwQAwTkHAwQA
wTkVMA0GCSqGSIb3DQEBCwUAA4IBAQAFkFUnWx+0HlTXyz8Uvd9PHSX0JrsaYhuD
6vf53pxGBDYcIPGJi4DPwLYWsKMGlnoRjGbRnoe7BRPV0Du+P60MCN4DuqWYt8Cw
sfPAI+6c4JgrgxfPkPqqb/OIDdE0swm8KuehTq/Sbv8Uqv4dTeMy8JOwnKbLdE0n
IK/Illeuxr79BFY+EBXME9ZUmnSyDIAQeQ1HTv5sOe+UvvLubW5j2F2tg2whmsRa
qZjXLq8P0SwMdcKA+yk7Lim6/fO73YzRnacxr6Smzig6DAY/0cvC06xUwWrms7nZ
hS8IaeEI4vljcdiAyJp5Ruq661jvpIowy+WWTMtJhc2bwnl2ldUK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org