Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/f9CTPRYuONXsfw2JQH8TE-89SRk.roa
File: f9CTPRYuONXsfw2JQH8TE-89SRk.roa (raw, json)
Hash identifier: +4ppJ2tsvkPKCol1Jfrhj/crpJc+UimCmx7NBNbJus8=
Subject key identifier: 7F:D0:93:3D:16:2E:38:D5:EC:7F:0D:89:40:7F:13:13:EF:3D:49:19
Certificate issuer: /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial: 08FE28B3
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/f9CTPRYuONXsfw2JQH8TE-89SRk.roa
Signing time: Sat 01 Jan 2022 11:02:48 +0000
ROA not before: Sat 01 Jan 2022 11:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 192.150.194.0/23 maxlen: 23
192.150.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150874291 (0x8fe28b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
Validity
Not Before: Jan 1 11:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fd0933d162e38d5ec7f0d89407f1313ef3d4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:1c:2b:8f:ec:9c:f7:01:ea:95:15:9a:31:
94:a7:90:45:80:0c:c0:03:ad:5d:7a:ab:14:5e:8c:
2c:84:7c:8b:4f:54:c8:90:03:2a:8b:7c:f8:6f:b1:
3b:48:17:02:e6:6e:ac:d7:eb:62:86:9a:83:84:0e:
1c:e8:3e:32:f2:08:80:6c:84:fb:4b:30:a8:04:4a:
d9:f0:cd:0a:cf:18:af:9b:b9:ad:b3:bf:43:b1:65:
ac:3f:60:2b:4e:92:74:5a:5e:c7:39:f7:be:88:26:
db:fa:0d:80:2e:c1:18:95:db:c9:28:f4:70:d7:94:
6b:02:fb:39:1d:a1:d5:ed:2c:af:96:1e:fc:19:a5:
d7:37:cd:4d:2b:b4:b2:88:43:5c:76:1f:5d:17:9c:
b6:c4:0e:86:26:45:19:2d:83:bd:d6:e1:e1:4f:ea:
a0:0a:8f:0e:2b:0f:2e:94:70:1d:7f:e5:8c:88:04:
26:74:66:28:50:78:4c:34:1c:97:5b:17:19:fb:a7:
30:a5:29:fb:ee:82:98:78:31:db:22:63:33:6a:7b:
b9:1f:72:b8:ae:e6:02:a4:47:04:36:f0:8f:fb:b7:
6e:ad:8b:3e:99:4f:cd:9d:85:bc:62:a8:9e:48:ee:
b4:54:ee:94:cc:16:72:4a:ba:be:ac:73:b5:c5:12:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D0:93:3D:16:2E:38:D5:EC:7F:0D:89:40:7F:13:13:EF:3D:49:19
X509v3 Authority Key Identifier:
keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/f9CTPRYuONXsfw2JQH8TE-89SRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.150.194.0-192.150.196.255
Signature Algorithm: sha256WithRSAEncryption
99:c3:d0:1d:92:55:11:9c:cc:0e:7c:be:18:d2:e1:2c:3b:bb:
49:59:18:e4:81:34:8c:2b:d9:00:c9:db:4f:06:b1:a0:cc:70:
e7:bd:2c:b7:b7:fa:d9:c6:48:11:dc:15:e3:ea:09:39:26:21:
8f:a7:5d:50:c9:94:31:35:57:4a:bf:27:47:a8:1e:e2:83:85:
4b:13:83:5c:c2:3a:67:43:76:37:ce:4c:26:4e:6c:98:60:85:
aa:d3:db:50:84:46:6c:6a:d5:6f:c4:b6:78:b2:e9:a4:34:45:
eb:61:69:26:e2:8a:d8:db:3e:c3:b9:52:0a:34:52:ac:ee:46:
04:c8:21:ab:9b:8c:3f:e0:01:71:07:0d:ec:c6:7c:4c:ce:2e:
0c:55:af:0b:27:7d:00:e3:a7:73:8f:c7:26:e2:93:15:03:1f:
dc:58:21:7a:a5:f9:06:e2:f9:68:5e:69:f9:43:c1:b4:6d:c6:
dd:e2:a3:6d:ed:44:12:4b:6f:4d:11:eb:ee:75:f6:4d:04:11:
eb:cb:03:99:21:26:73:65:b3:77:73:14:52:df:3e:81:22:62:
e9:4d:b0:52:da:9e:69:e1:86:3f:96:e8:2c:97:82:b1:b7:d0:
dc:66:ed:f6:cd:41:e3:e9:3a:e8:82:7a:a0:d2:f9:62:67:79:
b5:e3:ec:ee
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECP4oszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
M2M2NGM2NjhlZmYzNDc0MDgxNmVkYTg1YTQ1OWQwYzQyMmUwNjNjMB4XDTIyMDEw
MTExMDI0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ZkMDkzM2QxNjJl
MzhkNWVjN2YwZDg5NDA3ZjEzMTNlZjNkNDkxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxPHCuP7Jz3AeqVFZoxlKeQRYAMwAOtXXqrFF6MLIR8i09U
yJADKot8+G+xO0gXAuZurNfrYoaag4QOHOg+MvIIgGyE+0swqARK2fDNCs8Yr5u5
rbO/Q7FlrD9gK06SdFpexzn3vogm2/oNgC7BGJXbySj0cNeUawL7OR2h1e0sr5Ye
/Bml1zfNTSu0sohDXHYfXRectsQOhiZFGS2Dvdbh4U/qoAqPDisPLpRwHX/ljIgE
JnRmKFB4TDQcl1sXGfunMKUp++6CmHgx2yJjM2p7uR9yuK7mAqRHBDbwj/u3bq2L
PplPzZ2FvGKonkjutFTulMwWckq6vqxztcUS/kMCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBR/0JM9Fi441ex/DYlAfxMT7z1JGTAfBgNVHSMEGDAWgBSTxkxmjv80dAgW
7ahaRZ0MQi4GPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2s4Wk1abzdfTkhRSUZ1Mm9Xa1dkREVJdUJqdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvNjJkMTViLTdiZDUtNGIzYi1iZTcyLTE0N2VjOTZlYTczMC8x
L2Y5Q1RQUll1T05Yc2Z3MkpRSDhURS04OVNSay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
NjJkMTViLTdiZDUtNGIzYi1iZTcyLTE0N2VjOTZlYTczMC8xL2s4Wk1abzdfTkhR
SUZ1Mm9Xa1dkREVJdUJqdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBwJbCAwQAwJbEMA0GCSqGSIb3
DQEBCwUAA4IBAQCZw9AdklURnMwOfL4Y0uEsO7tJWRjkgTSMK9kAydtPBrGgzHDn
vSy3t/rZxkgR3BXj6gk5JiGPp11QyZQxNVdKvydHqB7ig4VLE4NcwjpnQ3Y3zkwm
TmyYYIWq09tQhEZsatVvxLZ4sumkNEXrYWkm4orY2z7DuVIKNFKs7kYEyCGrm4w/
4AFxBw3sxnxMzi4MVa8LJ30A46dzj8cm4pMVAx/cWCF6pfkG4vloXmn5Q8G0bcbd
4qNt7UQSS29NEevudfZNBBHrywOZISZzZbN3cxRS3z6BImLpTbBS2p5p4YY/lugs
l4Kxt9DcZu32zUHj6Trognqg0vliZ3m14+zu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org