Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/FyNMXd4_KNDIjUJhvL178TwaBD8.roa
File: FyNMXd4_KNDIjUJhvL178TwaBD8.roa (raw, json)
Hash identifier: 0Xy0BFC2KhsYHjPnxwVFHkBkqrP16Zf4q+55UNvDInU=
Subject key identifier: 17:23:4C:5D:DE:3F:28:D0:C8:8D:42:61:BC:BD:7B:F1:3C:1A:04:3F
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018322EF7BDB86AEEAFF6F55544CC4EB9B69
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/FyNMXd4_KNDIjUJhvL178TwaBD8.roa
Signing time: Fri 09 Sep 2022 15:47:43 +0000
ROA not before: Fri 09 Sep 2022 15:47:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.239.236.0/23 maxlen: 24
193.239.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:ef:7b:db:86:ae:ea:ff:6f:55:54:4c:c4:eb:9b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 9 15:47:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17234c5dde3f28d0c88d4261bcbd7bf13c1a043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:89:72:27:06:9d:6a:46:d4:eb:a6:fd:a9:
ea:30:65:c6:20:51:37:66:b2:72:23:54:bb:33:bb:
e3:cc:cb:99:5f:db:ff:49:16:01:96:a6:9c:02:95:
83:ad:c9:c5:f9:ab:48:3e:c7:d1:a4:ff:e6:47:da:
aa:0e:5f:6d:0e:4c:39:9f:f6:83:4b:a8:56:84:17:
eb:a4:5f:01:38:86:3c:e9:3d:27:c5:ad:13:6d:6f:
1b:d3:4a:38:5b:56:ef:13:7e:83:19:3e:92:fe:57:
4c:ce:7a:44:aa:50:38:b9:e9:fc:72:cf:fc:2f:1e:
ac:f7:97:71:43:7c:7e:3b:f9:8a:22:5b:0f:82:7e:
31:e5:4a:2b:ff:01:8b:f4:dc:67:71:e2:79:bf:68:
75:10:a9:dd:79:2c:c5:4b:36:81:7d:15:c6:ec:83:
2d:e7:c7:4b:23:da:ff:f8:a4:90:59:e2:78:db:76:
48:0c:7c:7a:b0:f1:b3:ae:5c:56:27:92:2b:1b:70:
a2:11:9d:ab:70:ff:19:81:15:e8:2a:f2:d7:87:b6:
e1:8c:70:8f:ed:5d:18:ae:73:cb:b8:7d:b8:f7:d1:
c1:3f:71:ac:d7:5e:e5:11:ca:e4:be:de:df:38:a9:
d1:ca:e1:fa:5e:5b:5a:ca:a3:e7:9b:aa:0a:f1:69:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:23:4C:5D:DE:3F:28:D0:C8:8D:42:61:BC:BD:7B:F1:3C:1A:04:3F
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/FyNMXd4_KNDIjUJhvL178TwaBD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.196.0/23
193.239.236.0/23
Signature Algorithm: sha256WithRSAEncryption
72:e7:95:71:50:ab:12:35:b3:79:3a:72:a5:85:29:47:e9:e4:
5b:87:d3:83:d6:a1:e1:ff:8c:b1:16:15:f3:d3:85:62:e6:6d:
9f:8c:08:11:11:d4:60:3c:46:a6:98:3d:76:63:39:67:00:06:
eb:b1:99:f9:87:79:af:ad:e7:70:59:1a:ef:4e:62:a6:f0:d8:
c1:b3:59:2f:d0:8b:67:53:1b:c5:97:b0:fe:67:5b:2d:dd:0d:
ca:ee:55:5d:0c:62:85:e3:53:cb:65:31:dd:4a:a8:9f:14:99:
af:d5:d1:8f:1c:11:11:89:9d:67:1f:79:2d:cf:4c:dd:83:d2:
6b:86:47:1c:5f:c9:be:11:67:a5:34:9c:b3:56:fb:d7:ed:5d:
12:e0:b8:27:8e:04:71:4c:1c:fd:86:64:91:cf:3d:cb:b9:35:
06:ce:d8:6c:e4:7a:7b:e9:2d:d1:28:4d:5c:eb:26:23:62:5e:
fa:a2:bb:f2:fa:28:f2:dc:0e:22:a1:46:39:a9:e3:7f:b3:a4:
ea:68:31:51:6f:dd:1b:d4:07:d8:d5:00:9f:ba:8c:ef:d8:c9:
d0:a8:cc:79:e8:92:ed:6f:0b:6e:93:b6:ee:be:e3:14:61:78:
e2:91:cf:99:20:fb:55:c3:58:79:a9:b0:9b:90:1c:6d:fe:89:
0c:14:63:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMi73vbhq7q/29VVEzE65tpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjIwOTA5MTU0NzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzIzNGM1ZGRlM2YyOGQwYzg4ZDQyNjFiY2JkN2JmMTNjMWEwNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfGJcicGnWpG1Oum/anqMGXGIFE3
ZrJyI1S7M7vjzMuZX9v/SRYBlqacApWDrcnF+atIPsfRpP/mR9qqDl9tDkw5n/aD
S6hWhBfrpF8BOIY86T0nxa0TbW8b00o4W1bvE36DGT6S/ldMznpEqlA4uen8cs/8
Lx6s95dxQ3x+O/mKIlsPgn4x5Uor/wGL9NxnceJ5v2h1EKndeSzFSzaBfRXG7IMt
58dLI9r/+KSQWeJ423ZIDHx6sPGzrlxWJ5IrG3CiEZ2rcP8ZgRXoKvLXh7bhjHCP
7V0YrnPLuH2499HBP3Gs117lEcrkvt7fOKnRyuH6XltayqPnm6oK8Wm22wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBcjTF3ePyjQyI1CYby9e/E8GgQ/MB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvRnlOTVhkNF9LTkRJalVKaHZMMTc4VHdhQkQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwe/EAwQB
we/sMA0GCSqGSIb3DQEBCwUAA4IBAQBy55VxUKsSNbN5OnKlhSlH6eRbh9OD1qHh
/4yxFhXz04Vi5m2fjAgREdRgPEammD12YzlnAAbrsZn5h3mvredwWRrvTmKm8NjB
s1kv0ItnUxvFl7D+Z1st3Q3K7lVdDGKF41PLZTHdSqifFJmv1dGPHBERiZ1nH3kt
z0zdg9JrhkccX8m+EWelNJyzVvvX7V0S4LgnjgRxTBz9hmSRzz3LuTUGzths5Hp7
6S3RKE1c6yYjYl76orvy+ijy3A4ioUY5qeN/s6TqaDFRb90b1AfY1QCfuozv2MnQ
qMx56JLtbwtuk7buvuMUYXjikc+ZIPtVw1h5qbCbkBxt/okMFGPJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org