Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/xpdKWCbLQitvlb14S_XDZf6dVvg.roa
File: xpdKWCbLQitvlb14S_XDZf6dVvg.roa (raw, json)
Hash identifier: zqq2sOQ49R6alp3jiZaltIZKteYpXf7qD+3R/nc02B0=
Subject key identifier: C6:97:4A:58:26:CB:42:2B:6F:95:BD:78:4B:F5:C3:65:FE:9D:56:F8
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0FC599A2
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/xpdKWCbLQitvlb14S_XDZf6dVvg.roa
Signing time: Wed 12 Jan 2022 08:53:48 +0000
ROA not before: Wed 12 Jan 2022 08:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14969
IP address blocks: 193.118.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264608162 (0xfc599a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 12 08:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6974a5826cb422b6f95bd784bf5c365fe9d56f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:ec:c0:a7:c1:f5:0c:cc:d7:07:0d:61:14:
bd:9a:de:92:43:c6:68:3e:6c:3a:4c:6c:a3:4f:40:
a5:97:8b:56:af:a5:53:e6:75:b6:1e:f6:bb:9b:a4:
b6:be:60:73:ba:f1:ce:a1:91:03:e5:e3:60:0b:37:
90:70:4f:39:fe:54:93:59:b1:be:14:a0:2b:2b:4a:
66:ec:d3:55:13:14:14:8e:b5:0c:35:74:45:b0:cf:
95:c9:eb:83:3e:db:a7:b7:7a:4d:ed:ed:81:79:dd:
38:32:9b:2c:58:30:20:c0:a4:16:ba:d5:97:3c:9b:
24:d3:cb:51:65:2d:e0:ab:bb:7a:f3:02:21:fb:be:
94:c5:ae:52:4c:7d:16:67:24:64:e6:49:94:a5:a4:
f3:84:e8:88:fe:2d:ac:4e:9a:01:a7:f7:cf:28:a9:
c9:1a:e4:13:40:53:28:5f:76:9c:43:86:15:76:51:
bd:8a:25:73:98:54:46:d6:70:8a:9e:4d:6b:11:2d:
4b:72:06:aa:08:c6:25:d4:53:1c:eb:56:a6:4e:09:
ae:5e:2b:13:62:7f:b3:2f:09:c8:9b:a0:12:a9:d1:
1d:7c:be:5b:f0:ca:12:00:31:f9:5d:b4:63:3b:68:
4a:ac:81:df:90:02:3a:ab:b7:ec:56:33:5e:f2:78:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:4A:58:26:CB:42:2B:6F:95:BD:78:4B:F5:C3:65:FE:9D:56:F8
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/xpdKWCbLQitvlb14S_XDZf6dVvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.163.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b9:82:05:ab:09:b7:90:23:56:66:04:d6:38:f1:e9:8c:11:
3d:61:d9:66:8a:c5:87:6f:ec:e2:cf:e1:9e:2b:4b:03:23:6d:
9d:39:ee:b6:f2:9b:87:33:b8:c8:a4:63:5d:20:b1:6d:2d:5b:
1a:df:69:8a:cc:9d:30:5e:c7:83:f4:ee:7d:92:4a:d3:fc:4b:
0d:da:e1:eb:32:a9:bf:1b:5d:29:a1:b6:bb:f4:04:f1:d9:4a:
c3:67:4c:f2:48:ff:99:ff:02:34:f6:cb:e4:e6:b9:8a:ad:67:
c9:7b:a5:87:8e:0f:e4:70:ff:15:cd:a2:26:30:a5:e2:cf:36:
dd:f3:5b:93:5f:75:30:84:ac:bb:a4:92:be:12:e8:4c:c3:1b:
bb:f8:b7:25:47:02:f3:dc:7c:f1:b9:40:06:a8:1e:0a:db:17:
2e:58:50:18:ab:fb:3b:29:eb:ff:9d:ea:18:3e:e0:f9:d4:9d:
5e:f1:41:36:2b:27:3a:d8:1e:b9:53:1e:eb:f2:15:65:19:4a:
c8:aa:1d:a2:2f:97:18:3c:ee:ed:e2:e1:4c:c8:d1:98:97:b9:
bb:e0:4d:9c:ba:a3:54:85:2b:96:18:cb:5b:53:96:9e:b7:e6:
70:04:77:4e:e2:c6:3f:f1:ae:f2:bf:a5:c6:ef:39:3e:fa:85:
91:81:b6:18
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED8WZojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2Y4ZmZjMDg4NTkxZTRmMjQzYmFhZmEyMWI0Mjk4YmZiMzY2MDI2MB4XDTIyMDEx
MjA4NTM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzY5NzRhNTgyNmNi
NDIyYjZmOTViZDc4NGJmNWMzNjVmZTlkNTZmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN3J7MCnwfUMzNcHDWEUvZrekkPGaD5sOkxso09ApZeLVq+l
U+Z1th72u5uktr5gc7rxzqGRA+XjYAs3kHBPOf5Uk1mxvhSgKytKZuzTVRMUFI61
DDV0RbDPlcnrgz7bp7d6Te3tgXndODKbLFgwIMCkFrrVlzybJNPLUWUt4Ku7evMC
Ifu+lMWuUkx9FmckZOZJlKWk84ToiP4trE6aAaf3zyipyRrkE0BTKF92nEOGFXZR
vYolc5hURtZwip5NaxEtS3IGqgjGJdRTHOtWpk4Jrl4rE2J/sy8JyJugEqnRHXy+
W/DKEgAx+V20YztoSqyB35ACOqu37FYzXvJ48uECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTGl0pYJstCK2+VvXhL9cNl/p1W+DAfBgNVHSMEGDAWgBRM+P/AiFkeTyQ7
qvohtCmL+zZgJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RQal93SWhaSGs4a082cjZJYlFwaV9zMllDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvYTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8x
L3hwZEtXQ2JMUWl0dmxiMTRTX1hEWmY2ZFZ2Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
YTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8xL1RQal93SWhaSGs4
a082cjZJYlFwaV9zMllDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMF2ozANBgkqhkiG9w0BAQsFAAOC
AQEANLmCBasJt5AjVmYE1jjx6YwRPWHZZorFh2/s4s/hnitLAyNtnTnutvKbhzO4
yKRjXSCxbS1bGt9pisydMF7Hg/TufZJK0/xLDdrh6zKpvxtdKaG2u/QE8dlKw2dM
8kj/mf8CNPbL5Oa5iq1nyXulh44P5HD/Fc2iJjCl4s823fNbk191MISsu6SSvhLo
TMMbu/i3JUcC89x88blABqgeCtsXLlhQGKv7Oynr/53qGD7g+dSdXvFBNisnOtge
uVMe6/IVZRlKyKodoi+XGDzu7eLhTMjRmJe5u+BNnLqjVIUrlhjLW1OWnrfmcAR3
TuLGP/Gu8r+lxu85PvqFkYG2GA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:28 2024 by rpki-client on console-ams.rpki-client.org