Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/aTS2DA-PUOEppzyMHe93GxI5xaE.roa
File: aTS2DA-PUOEppzyMHe93GxI5xaE.roa (raw, json)
Hash identifier: Jn8KIddPHm9/IIec+mmU/nbzeheRVYghj0AXdaKUrFQ=
Subject key identifier: 69:34:B6:0C:0F:8F:50:E1:29:A7:3C:8C:1D:EF:77:1B:12:39:C5:A1
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 092CC2DF
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/aTS2DA-PUOEppzyMHe93GxI5xaE.roa
Signing time: Sat 01 Jan 2022 06:53:29 +0000
ROA not before: Sat 01 Jan 2022 06:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12306
IP address blocks: 193.202.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153928415 (0x92cc2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jan 1 06:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6934b60c0f8f50e129a73c8c1def771b1239c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:64:f5:a5:21:07:57:64:25:a5:20:ea:d6:
62:86:67:45:73:a4:bb:e7:22:34:ed:95:ec:e8:16:
df:60:3f:aa:e4:96:6b:3a:60:07:f6:83:34:58:fb:
71:e5:67:74:61:56:22:fc:b0:93:61:c3:49:3d:0a:
2c:b7:1d:77:cb:9c:a4:8e:36:f5:13:f3:75:6b:39:
e7:8d:11:ca:11:14:b4:2d:17:b3:09:2c:1c:c5:51:
a9:10:5e:3c:21:8f:f3:86:ef:df:39:c7:2c:13:88:
55:c1:86:83:31:f9:5b:f1:5f:e5:b0:8a:6e:16:54:
bf:14:55:66:3b:cb:85:fd:89:45:36:d7:81:ae:62:
5f:43:ba:8e:c2:38:3f:e4:ca:40:99:b0:55:01:68:
6c:0f:f6:60:74:8c:3b:14:2e:6b:b6:0d:b4:d7:a6:
bc:f9:e5:b6:f8:34:94:ff:33:44:44:97:5d:74:83:
45:ee:6d:1b:a2:a3:9a:08:4a:80:ac:5d:86:b8:da:
30:af:8d:90:d4:70:f8:5d:0a:e0:20:90:7f:69:3a:
95:a4:bc:ad:7d:77:42:7b:8d:95:e8:63:41:42:89:
9b:2a:bf:7b:0f:b0:9e:2b:2b:fc:a8:ea:0a:38:29:
b4:a6:38:71:19:4e:68:b0:aa:1a:88:2c:48:79:c0:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:B6:0C:0F:8F:50:E1:29:A7:3C:8C:1D:EF:77:1B:12:39:C5:A1
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/aTS2DA-PUOEppzyMHe93GxI5xaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:4a:0b:36:d3:3d:8b:28:fe:93:f6:02:76:da:ee:d0:81:f4:
54:64:b0:e3:99:78:77:00:1c:86:88:06:2e:1d:82:04:93:b9:
f9:4a:93:52:f1:ad:cb:ea:ae:17:5f:55:b4:20:8f:f9:20:b8:
86:02:a9:5c:c5:a6:97:fb:18:9c:c2:f1:67:09:d6:15:55:af:
41:b3:04:eb:ae:ee:fb:6b:65:a7:57:ca:1f:49:52:49:a7:43:
7b:37:39:6b:95:93:03:ce:cb:6a:11:0b:cd:a6:12:07:27:d4:
03:24:5d:81:6c:54:27:73:b5:75:45:e2:84:c6:d8:74:b6:89:
1a:37:89:16:74:84:0f:1b:2e:8e:c7:da:bd:87:16:20:63:ef:
34:61:88:db:df:83:4b:72:50:3d:ac:68:61:72:c4:a1:6d:17:
20:4c:38:39:0b:7c:21:55:1d:4a:07:13:bd:2a:26:e7:94:57:
67:c2:27:3f:d6:77:f9:a9:1b:c5:96:62:45:2c:26:65:d5:3d:
a3:9f:fd:72:88:46:a5:71:a8:02:52:c6:67:27:26:4f:5e:f8:
f0:0b:a2:10:fc:f2:d2:4b:e5:d0:e1:01:29:6a:da:0f:fb:f5:
83:3c:35:36:95:13:18:c5:82:98:56:84:b9:0e:41:cf:86:7c:
b6:d9:e0:ca
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECSzC3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NmVhYjE5YmVjMjIyYzcwNWExZWIwM2E4MGRmMzQxNTM5ZDk3ZjE0MB4XDTIyMDEw
MTA2NTMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjkzNGI2MGMwZjhm
NTBlMTI5YTczYzhjMWRlZjc3MWIxMjM5YzVhMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCfZPWlIQdXZCWlIOrWYoZnRXOku+ciNO2V7OgW32A/quSW
azpgB/aDNFj7ceVndGFWIvywk2HDST0KLLcdd8ucpI429RPzdWs5540RyhEUtC0X
swksHMVRqRBePCGP84bv3znHLBOIVcGGgzH5W/Ff5bCKbhZUvxRVZjvLhf2JRTbX
ga5iX0O6jsI4P+TKQJmwVQFobA/2YHSMOxQua7YNtNemvPnltvg0lP8zRESXXXSD
Re5tG6KjmghKgKxdhrjaMK+NkNRw+F0K4CCQf2k6laS8rX13QnuNlehjQUKJmyq/
ew+wnisr/KjqCjgptKY4cRlOaLCqGogsSHnA//kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRpNLYMD49Q4SmnPIwd73cbEjnFoTAfBgNVHSMEGDAWgBSW6rGb7CIscFoe
sDqA3zQVOdl/FDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2x1cXhtLXdpTEhCYUhyQTZnTjgwRlRuWmZ4US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvZDc3YTYwLTEyMjctNGRlNy05N2JiLTQxMDA2MWUzNTc2YS8x
L2FUUzJEQS1QVU9FcHB6eU1IZTkzR3hJNXhhRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
ZDc3YTYwLTEyMjctNGRlNy05N2JiLTQxMDA2MWUzNTc2YS8xL2x1cXhtLXdpTEhC
YUhyQTZnTjgwRlRuWmZ4US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHKdzANBgkqhkiG9w0BAQsFAAOC
AQEAxUoLNtM9iyj+k/YCdtru0IH0VGSw45l4dwAchogGLh2CBJO5+UqTUvGty+qu
F19VtCCP+SC4hgKpXMWml/sYnMLxZwnWFVWvQbME667u+2tlp1fKH0lSSadDezc5
a5WTA87LahELzaYSByfUAyRdgWxUJ3O1dUXihMbYdLaJGjeJFnSEDxsujsfavYcW
IGPvNGGI29+DS3JQPaxoYXLEoW0XIEw4OQt8IVUdSgcTvSom55RXZ8InP9Z3+akb
xZZiRSwmZdU9o5/9cohGpXGoAlLGZycmT1748AuiEPzy0kvl0OEBKWraD/v1gzw1
NpUTGMWCmFaEuQ5Bz4Z8ttngyg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:53 2024 by rpki-client on console-fra.rpki-client.org