Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/eAA-nQOKv9QOCeBxxgyUWYoIwEU.roa
File: eAA-nQOKv9QOCeBxxgyUWYoIwEU.roa (raw, json)
Hash identifier: QZRWJw8n2Ex3TpuNhzZjOZblzbbT7OKH8S0HwWOuE08=
Subject key identifier: 78:00:3E:9D:03:8A:BF:D4:0E:09:E0:71:C6:0C:94:59:8A:08:C0:45
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 022A7592
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/eAA-nQOKv9QOCeBxxgyUWYoIwEU.roa
Signing time: Wed 26 Jan 2022 22:33:19 +0000
ROA not before: Wed 26 Jan 2022 22:33:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 193.46.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36337042 (0x22a7592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 26 22:33:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78003e9d038abfd40e09e071c60c94598a08c045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:b5:15:f1:92:5a:77:4e:71:1f:03:92:6e:
ba:a9:27:80:a9:86:ff:c3:0a:88:66:8b:1a:c7:9a:
88:9e:6c:a9:82:80:fc:74:0b:de:45:4e:16:8d:32:
c9:3a:3a:c1:2c:d1:37:7a:5c:bd:8a:4d:17:17:4d:
d4:59:df:c0:a7:74:ae:b6:38:07:51:e8:3f:89:55:
4e:38:b4:0f:08:4f:4d:15:fd:23:22:ba:5d:b3:4e:
f3:b5:e1:8b:66:0a:31:e8:a1:de:bb:df:a4:d7:f4:
36:93:c4:ce:46:29:0e:13:16:02:3e:83:8e:25:ae:
0a:05:20:ee:c7:45:5b:71:58:8d:bd:83:53:6f:db:
10:32:cf:3e:59:c7:e4:4e:f2:77:c3:ec:78:1e:a1:
22:bf:e7:bf:be:bb:2d:6f:c1:84:11:1c:db:ab:6d:
4b:bf:b3:bd:b5:52:31:d8:70:c4:88:f3:e3:96:38:
f9:f4:2f:ac:b3:37:ef:0d:73:59:ee:92:c3:1e:70:
eb:de:8a:fb:af:57:ba:df:73:8f:c3:e6:f4:53:7b:
6d:91:bf:48:32:69:28:19:0b:5b:04:71:72:fc:2b:
90:cf:b4:bf:95:7f:12:e8:31:c6:f3:f4:c3:e3:93:
95:aa:fb:4a:f0:a1:82:35:9e:3a:0b:35:4d:c3:ca:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:00:3E:9D:03:8A:BF:D4:0E:09:E0:71:C6:0C:94:59:8A:08:C0:45
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/eAA-nQOKv9QOCeBxxgyUWYoIwEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.81.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0c:4a:b5:75:6f:2c:b4:08:27:31:4f:d3:57:b3:c1:13:0e:
e6:8a:23:47:a4:97:66:28:9c:3d:73:04:54:61:92:d5:72:60:
b2:7e:69:69:45:79:90:79:72:6e:d7:0f:1d:db:39:62:80:7f:
51:1f:fc:1b:91:91:90:75:87:87:f2:77:cc:1d:8c:34:ab:43:
42:43:4e:89:ec:af:8f:e6:d8:f7:bd:49:32:56:58:02:48:cf:
bf:3e:ec:13:6f:cf:a4:00:69:96:c1:13:ac:7e:68:ff:37:18:
47:77:d6:9a:5f:3a:f2:69:12:3f:f2:c6:4f:cc:39:d5:2f:a6:
a1:4a:bb:f3:b5:92:34:a8:ad:08:2a:25:cf:98:44:ca:21:57:
5c:d5:91:7b:90:07:7d:51:75:1b:ff:e5:67:a4:d1:0b:6d:a7:
b8:e2:b3:cf:80:a5:77:45:74:5c:78:44:18:20:44:26:c2:ef:
b3:20:11:0f:de:ea:05:26:1a:a7:1f:9b:7d:88:fd:ec:04:c7:
ca:66:41:59:64:71:f3:d8:31:81:e9:72:d9:90:fd:27:1b:6e:
5f:04:34:70:85:70:94:7c:5a:fe:d9:31:76:28:8b:37:46:6a:
7b:f0:9f:65:a0:01:16:c3:65:0b:ec:41:d1:36:d6:e0:f2:48:
cd:74:4b:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAip1kjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MGFmZjZiNGVmZmU3YzM2M2VmMjAwZjZmM2U1ODg4YjkxNWJhNjgxMB4XDTIyMDEy
NjIyMzMxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzgwMDNlOWQwMzhh
YmZkNDBlMDllMDcxYzYwYzk0NTk4YTA4YzA0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANcetRXxklp3TnEfA5JuuqkngKmG/8MKiGaLGseaiJ5sqYKA
/HQL3kVOFo0yyTo6wSzRN3pcvYpNFxdN1FnfwKd0rrY4B1HoP4lVTji0DwhPTRX9
IyK6XbNO87Xhi2YKMeih3rvfpNf0NpPEzkYpDhMWAj6DjiWuCgUg7sdFW3FYjb2D
U2/bEDLPPlnH5E7yd8PseB6hIr/nv767LW/BhBEc26ttS7+zvbVSMdhwxIjz45Y4
+fQvrLM37w1zWe6Swx5w696K+69Xut9zj8Pm9FN7bZG/SDJpKBkLWwRxcvwrkM+0
v5V/EugxxvP0w+OTlar7SvChgjWeOgs1TcPKIasCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR4AD6dA4q/1A4J4HHGDJRZigjARTAfBgNVHSMEGDAWgBQAr/a07/58Nj7y
APbz5YiLkVumgTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FLXzJ0T18tZkRZLThnRDI4LVdJaTVGYnBvRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvMDk4ZDEzLTZkNmQtNDI5NC05NzUzLWE4NzczZGU3NjhmNy8x
L2VBQS1uUU9LdjlRT0NlQnh4Z3lVV1lvSXdFVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
MDk4ZDEzLTZkNmQtNDI5NC05NzUzLWE4NzczZGU3NjhmNy8xL0FLXzJ0T18tZkRZ
LThnRDI4LVdJaTVGYnBvRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEuUTANBgkqhkiG9w0BAQsFAAOC
AQEAMAxKtXVvLLQIJzFP01ezwRMO5oojR6SXZiicPXMEVGGS1XJgsn5paUV5kHly
btcPHds5YoB/UR/8G5GRkHWHh/J3zB2MNKtDQkNOieyvj+bY971JMlZYAkjPvz7s
E2/PpABplsETrH5o/zcYR3fWml868mkSP/LGT8w51S+moUq787WSNKitCColz5hE
yiFXXNWRe5AHfVF1G//lZ6TRC22nuOKzz4Cld0V0XHhEGCBEJsLvsyARD97qBSYa
px+bfYj97ATHymZBWWRx89gxgely2ZD9JxtuXwQ0cIVwlHxa/tkxdiiLN0Zqe/Cf
ZaABFsNlC+xB0TbW4PJIzXRLRg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org