Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/xdfOzfXuCcjzwiXgGA2rdIBiM7M.roa
File: xdfOzfXuCcjzwiXgGA2rdIBiM7M.roa (raw, json)
Hash identifier: 859KVvJUDkpOf5AY8K/1B6WrRFR7E+xowCOjmk6o35E=
Subject key identifier: C5:D7:CE:CD:F5:EE:09:C8:F3:C2:25:E0:18:0D:AB:74:80:62:33:B3
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0229EA57
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/xdfOzfXuCcjzwiXgGA2rdIBiM7M.roa
Signing time: Sat 12 Feb 2022 06:34:31 +0000
ROA not before: Sat 12 Feb 2022 06:34:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211392
IP address blocks: 193.106.189.0/24 maxlen: 24
91.192.106.0/24 maxlen: 24
91.192.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36301399 (0x229ea57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Feb 12 06:34:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5d7cecdf5ee09c8f3c225e0180dab74806233b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:5d:9a:48:0e:f3:fd:10:d7:a7:ea:cf:19:
5f:f4:ac:f9:f4:c0:c0:9b:ed:9c:40:17:1a:5f:f7:
44:c3:61:72:13:81:f4:d5:d8:28:53:75:38:3b:c7:
74:d6:9f:a1:3a:b2:2e:18:c3:1d:d8:5e:fa:89:d0:
c2:66:5c:06:8b:9f:51:06:d6:62:d4:c7:df:96:b0:
a8:bc:59:32:e8:c0:14:45:ce:09:48:da:35:b3:42:
21:1f:e6:e6:27:fb:c3:80:c5:ab:4f:21:85:d5:6f:
15:41:f1:16:c1:8f:30:c9:9c:83:05:cf:22:48:9c:
a8:72:82:30:24:d6:97:38:8e:30:12:59:66:c8:da:
48:87:2b:b0:c0:33:28:e5:5e:6e:31:63:ec:5b:ce:
b8:fc:f0:39:28:e9:3e:e0:71:b6:85:7f:62:df:83:
ba:28:0f:c4:16:45:f9:3f:02:6d:20:87:41:e0:14:
b8:35:60:48:0e:17:3a:21:a8:00:6f:92:68:6d:33:
5a:20:1c:e5:62:c3:b1:58:30:fe:10:36:5b:c1:4d:
a7:5e:6b:03:c6:a2:a1:a6:74:16:d4:f9:55:3f:41:
e6:cc:d7:ac:b8:d9:ad:82:c0:ff:3e:c5:aa:45:ea:
07:a6:18:f8:21:f1:57:1a:6b:bf:59:37:62:a8:7c:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:CE:CD:F5:EE:09:C8:F3:C2:25:E0:18:0D:AB:74:80:62:33:B3
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/xdfOzfXuCcjzwiXgGA2rdIBiM7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
193.106.189.0/24
Signature Algorithm: sha256WithRSAEncryption
36:84:1c:67:48:b9:02:82:37:87:b2:7e:44:3b:77:bc:55:e4:
31:a1:7e:91:2f:ba:2c:59:9d:32:59:83:c3:4b:c6:39:48:3b:
0b:85:49:60:bc:8c:6c:9d:6f:08:f2:13:82:2d:47:12:a9:3a:
e1:05:ac:c0:61:6f:c4:12:1a:93:47:e4:02:fa:ec:be:e7:f4:
f1:38:29:10:4d:d6:c3:37:39:55:7e:4c:ec:24:01:a0:11:7d:
8f:0d:a0:bf:88:41:58:5f:6a:5f:61:6e:e8:7d:60:10:fc:58:
3d:46:24:e7:c6:2c:df:0d:31:d6:04:64:d4:88:aa:76:06:b3:
76:77:e4:ca:94:55:7d:b0:7a:f6:2d:7d:08:fa:f6:02:fd:24:
c0:7a:2d:3b:46:cc:93:c2:b4:4d:05:19:24:1f:e3:74:16:0a:
86:e4:14:08:4b:16:c0:53:18:60:22:89:5d:cd:85:c9:e3:f4:
c8:11:f2:0d:ce:ab:bf:75:d3:11:06:69:f8:ff:b3:e3:7b:15:
5a:3e:a3:fc:62:9e:d3:79:14:61:20:23:59:a4:8f:85:11:22:
63:3e:ca:d7:78:a9:9b:40:44:4f:26:e6:71:d4:39:5f:d9:bc:
2b:96:28:f2:55:b0:7d:a7:ce:da:d4:57:ed:c1:64:30:bc:85:
76:21:8b:12
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAinqVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZTk0NjFjMjExYmYzNTUxYzU1MDdjOTMwYjQyMDRjNmVjNDNiMzIyMB4XDTIyMDIx
MjA2MzQzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzVkN2NlY2RmNWVl
MDljOGYzYzIyNWUwMTgwZGFiNzQ4MDYyMzNiMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUWXZpIDvP9ENen6s8ZX/Ss+fTAwJvtnEAXGl/3RMNhchOB
9NXYKFN1ODvHdNafoTqyLhjDHdhe+onQwmZcBoufUQbWYtTH35awqLxZMujAFEXO
CUjaNbNCIR/m5if7w4DFq08hhdVvFUHxFsGPMMmcgwXPIkicqHKCMCTWlziOMBJZ
ZsjaSIcrsMAzKOVebjFj7FvOuPzwOSjpPuBxtoV/Yt+DuigPxBZF+T8CbSCHQeAU
uDVgSA4XOiGoAG+SaG0zWiAc5WLDsVgw/hA2W8FNp15rA8aioaZ0FtT5VT9B5szX
rLjZrYLA/z7FqkXqB6YY+CHxVxprv1k3Yqh8fbsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTF187N9e4JyPPCJeAYDat0gGIzszAfBgNVHSMEGDAWgBTelGHCEb81UcVQ
fJMLQgTG7EOzIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNwUmh3aEdfTlZIRlVIeVRDMElFeHV4RHN5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvOTE4M2Q0LTA3NzktNDljNC05NmY3LTgyMDJhNDY3ZDc1My8x
L3hkZk96Zlh1Q2NqendpWGdHQTJyZElCaU03TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
OTE4M2Q0LTA3NzktNDljNC05NmY3LTgyMDJhNDY3ZDc1My8xLzNwUmh3aEdfTlZI
RlVIeVRDMElFeHV4RHN5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVvAagMEAMFqvTANBgkqhkiG9w0B
AQsFAAOCAQEANoQcZ0i5AoI3h7J+RDt3vFXkMaF+kS+6LFmdMlmDw0vGOUg7C4VJ
YLyMbJ1vCPITgi1HEqk64QWswGFvxBIak0fkAvrsvuf08TgpEE3Wwzc5VX5M7CQB
oBF9jw2gv4hBWF9qX2Fu6H1gEPxYPUYk58Ys3w0x1gRk1IiqdgazdnfkypRVfbB6
9i19CPr2Av0kwHotO0bMk8K0TQUZJB/jdBYKhuQUCEsWwFMYYCKJXc2FyeP0yBHy
Dc6rv3XTEQZp+P+z43sVWj6j/GKe03kUYSAjWaSPhREiYz7K13ipm0BETybmcdQ5
X9m8K5Yo8lWwfafO2tRX7cFkMLyFdiGLEg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-fra.rpki-client.org