Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/n6u4agzfZ4w2c9yS-DvGVlwt8C0.roa
File: n6u4agzfZ4w2c9yS-DvGVlwt8C0.roa (raw, json)
Hash identifier: IeH0ad8TQe1nrNx+zGuXFQo+6p++oRrxCDt6DEDwtBs=
Subject key identifier: 9F:AB:B8:6A:0C:DF:67:8C:36:73:DC:92:F8:3B:C6:56:5C:2D:F0:2D
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 05978CBC
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/n6u4agzfZ4w2c9yS-DvGVlwt8C0.roa
Signing time: Sat 01 Jan 2022 16:05:18 +0000
ROA not before: Sat 01 Jan 2022 16:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48152
IP address blocks: 193.143.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93818044 (0x5978cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jan 1 16:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fabb86a0cdf678c3673dc92f83bc6565c2df02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:3d:60:67:1d:e2:f5:7e:9f:cf:2d:65:38:
fd:87:9f:25:b7:fd:c0:c8:e6:24:de:e8:ae:4c:5b:
c9:a7:c8:66:39:1e:0e:85:a0:41:8b:65:d4:a1:01:
bc:05:9e:1f:6a:07:a4:22:29:d8:c4:ab:a5:f3:6c:
80:c0:84:05:f9:ee:79:59:bb:d2:3f:bc:ff:52:2c:
c7:fd:0d:17:80:02:ce:56:2c:9c:44:73:50:52:c4:
80:4e:d8:81:1a:ab:04:cb:bb:45:79:01:87:16:d2:
34:b8:e7:4f:37:a4:93:a2:a6:80:c0:b8:69:d6:c9:
95:ef:45:dc:e6:46:98:04:a8:7c:d5:67:02:45:14:
ba:af:15:7a:f4:ef:8b:ba:1c:24:2b:de:fe:5e:99:
1e:bd:2b:5a:ae:3c:da:b8:a4:7a:4e:9c:ad:f9:35:
80:6c:5a:45:ca:e4:5d:b8:8f:5b:40:05:a2:39:e0:
3f:ea:fa:33:e0:ed:a3:e1:55:e8:35:c8:08:c7:49:
c6:b5:e5:31:51:3d:83:fe:22:63:7a:a7:43:39:bf:
88:62:74:48:92:4c:14:64:18:4f:15:3f:80:7a:0b:
08:8d:20:b0:ca:ce:88:49:70:18:fd:15:45:04:04:
a0:05:96:2b:de:5c:bd:f5:2e:03:fa:c5:d6:44:f5:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:B8:6A:0C:DF:67:8C:36:73:DC:92:F8:3B:C6:56:5C:2D:F0:2D
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/n6u4agzfZ4w2c9yS-DvGVlwt8C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d1:f5:3e:44:cc:bb:2f:8a:75:41:3e:2c:7c:9e:b5:ad:7d:
25:75:7d:53:bb:33:0e:11:7d:47:9a:ea:69:6d:38:5d:f2:67:
3d:c3:43:bb:f7:cc:36:08:9a:9f:b9:27:37:07:ff:0c:3b:f8:
fc:fc:c1:68:cd:10:1b:67:81:f6:b6:56:b9:6c:08:3e:45:7a:
3a:dd:00:a7:d9:be:c0:cd:03:8a:16:b5:4c:2a:10:e0:87:89:
f8:36:5a:23:c3:12:57:b4:b6:37:1e:f5:0e:25:bc:04:60:cb:
31:02:f1:66:1f:8e:ac:c7:21:39:38:96:2a:01:92:d6:fa:46:
29:93:19:42:fb:b7:f8:8e:ef:b0:61:46:95:2b:c0:f5:2f:61:
c8:2e:62:33:e3:33:80:72:5d:c4:06:30:48:2c:75:75:56:9a:
4f:0f:d9:b9:12:86:59:a1:50:0a:ea:8d:d3:28:09:d7:f8:78:
ae:97:3d:48:a5:ce:8a:71:c5:a7:9d:b6:84:e1:65:03:ad:c6:
3b:b0:13:f9:e7:d4:be:0f:5d:44:03:b9:e1:b0:7f:67:06:97:
92:82:9c:47:18:96:45:c4:b0:12:12:64:b9:87:1c:99:83:35:
39:8e:9c:9e:4c:0d:61:98:e1:3e:ac:af:c3:a6:56:9d:72:1d:
6a:1e:48:a1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBZeMvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWZlMzkwMGUxNDFjM2IxNjlhM2NjY2IzNTU3YmNjZWYyODk1ZTg1MB4XDTIyMDEw
MTE2MDUxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWZhYmI4NmEwY2Rm
Njc4YzM2NzNkYzkyZjgzYmM2NTY1YzJkZjAyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK92PWBnHeL1fp/PLWU4/YefJbf9wMjmJN7orkxbyafIZjke
DoWgQYtl1KEBvAWeH2oHpCIp2MSrpfNsgMCEBfnueVm70j+8/1Isx/0NF4ACzlYs
nERzUFLEgE7YgRqrBMu7RXkBhxbSNLjnTzekk6KmgMC4adbJle9F3OZGmASofNVn
AkUUuq8VevTvi7ocJCve/l6ZHr0rWq482rikek6crfk1gGxaRcrkXbiPW0AFojng
P+r6M+Dto+FV6DXICMdJxrXlMVE9g/4iY3qnQzm/iGJ0SJJMFGQYTxU/gHoLCI0g
sMrOiElwGP0VRQQEoAWWK95cvfUuA/rF1kT17O8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSfq7hqDN9njDZz3JL4O8ZWXC3wLTAfBgNVHSMEGDAWgBQR/jkA4UHDsWmj
zMs1V7zO8olehTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VmNDVBT0ZCdzdGcG84ekxOVmU4enZLSlhvVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvN2VlOTgxLTBkN2MtNGE1My1hZGExLWNlMWE4ZGM5NDA0OC8x
L242dTRhZ3pmWjR3MmM5eVMtRHZHVmx3dDhDMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
N2VlOTgxLTBkN2MtNGE1My1hZGExLWNlMWE4ZGM5NDA0OC8xL0VmNDVBT0ZCdzdG
cG84ekxOVmU4enZLSlhvVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGPejANBgkqhkiG9w0BAQsFAAOC
AQEAbNH1PkTMuy+KdUE+LHyeta19JXV9U7szDhF9R5rqaW04XfJnPcNDu/fMNgia
n7knNwf/DDv4/PzBaM0QG2eB9rZWuWwIPkV6Ot0Ap9m+wM0Diha1TCoQ4IeJ+DZa
I8MSV7S2Nx71DiW8BGDLMQLxZh+OrMchOTiWKgGS1vpGKZMZQvu3+I7vsGFGlSvA
9S9hyC5iM+MzgHJdxAYwSCx1dVaaTw/ZuRKGWaFQCuqN0ygJ1/h4rpc9SKXOinHF
p522hOFlA63GO7AT+efUvg9dRAO54bB/ZwaXkoKcRxiWRcSwEhJkuYccmYM1OY6c
nkwNYZjhPqyvw6ZWnXIdah5IoQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:21 2023 by rpki-client on console-fra.rpki-client.org