Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/iN0IzA9G7lcMCaIGFGUmOix-d_E.roa
File: iN0IzA9G7lcMCaIGFGUmOix-d_E.roa (raw, json)
Hash identifier: ndie5EeDI0LYVBzcGccJ/Osg8YC8UySOVRrsGMbtw2w=
Subject key identifier: 88:DD:08:CC:0F:46:EE:57:0C:09:A2:06:14:65:26:3A:2C:7E:77:F1
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0AB3240E
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/iN0IzA9G7lcMCaIGFGUmOix-d_E.roa
Signing time: Sat 01 Jan 2022 12:00:26 +0000
ROA not before: Sat 01 Jan 2022 12:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199515
IP address blocks: 213.153.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179512334 (0xab3240e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 12:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88dd08cc0f46ee570c09a2061465263a2c7e77f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:b1:de:c2:fd:63:b3:86:04:23:02:b8:6d:
67:09:1b:49:c2:c7:af:9a:1b:cb:7c:be:f4:cc:c6:
0f:dc:19:cf:74:1c:f1:cd:dc:97:3d:7b:ab:7d:3e:
92:d6:30:0a:16:ab:72:ae:b9:e8:df:cd:ea:7b:b8:
a4:df:b6:58:18:28:14:b6:58:cd:1a:38:42:dd:7f:
ce:af:c8:ec:1a:b8:1a:f0:6a:25:50:30:0a:d2:49:
a1:1d:e4:c7:48:b9:e5:b8:8f:fe:9c:7d:cd:52:a2:
b9:4a:63:68:96:dd:93:a9:75:5e:77:a3:92:a2:17:
5a:88:be:3b:44:3b:91:a3:48:9d:fb:cb:26:75:80:
9b:27:c0:19:e1:ed:8a:38:c8:9c:a3:aa:c1:91:ef:
be:d8:a3:80:34:90:49:3d:bd:c6:41:2e:d5:0f:94:
5f:23:99:e5:e4:fa:de:dd:87:96:e1:d8:66:36:fe:
76:2a:19:b0:be:75:54:62:44:67:19:b6:eb:3f:e4:
38:33:cc:98:fb:a2:4b:17:96:7d:a7:24:d5:d2:c5:
30:33:44:10:14:d8:6c:06:05:47:4a:d3:d0:f8:c1:
2d:19:eb:07:22:d6:b6:05:c0:17:2b:c7:50:4a:de:
da:88:e3:19:8e:a7:8f:4a:31:40:b8:8d:02:c0:10:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:08:CC:0F:46:EE:57:0C:09:A2:06:14:65:26:3A:2C:7E:77:F1
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/iN0IzA9G7lcMCaIGFGUmOix-d_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.153.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f8:0a:f5:01:bf:eb:f2:35:cf:9e:c3:55:8d:9d:fe:ea:2c:
69:ba:8c:80:1a:ac:49:3b:03:65:87:42:fe:db:a2:6b:b3:f1:
a3:68:ea:6d:cf:45:47:2c:32:c7:3f:a4:56:53:18:0d:84:1e:
c3:41:24:75:15:41:da:10:4a:e1:e8:13:d0:29:1e:48:16:39:
c1:d3:4c:d5:5e:fa:aa:d5:dd:4e:26:40:26:91:a2:c4:f4:8d:
3b:63:53:41:45:63:e0:ed:70:92:a7:87:db:d2:88:56:17:72:
26:52:1a:fb:ae:d8:e2:d4:98:d2:1f:29:77:0e:64:13:a5:07:
56:e6:2e:30:f3:0b:d5:ad:f1:ed:63:5d:34:68:b3:bf:55:05:
a8:a1:25:12:62:ff:0d:06:75:24:44:1f:32:93:65:79:65:0f:
ba:f3:08:d9:80:e8:24:ea:09:54:c5:1a:bd:7a:6f:76:08:2a:
df:e5:55:30:ad:b0:f5:58:3a:fb:e2:a2:63:0b:2d:77:bf:d7:
c9:0b:ee:be:95:d7:5a:df:3b:5a:ea:b0:f2:da:48:35:25:f1:
b9:90:64:6e:f1:23:a2:2d:bc:f3:ab:b0:60:1f:fa:c2:b4:21:
8b:c9:8a:ed:fd:1d:eb:60:8d:47:05:30:33:65:bd:49:f2:ef:
8f:c3:6e:82
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECrMkDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTlkMzBlNjAzNWJlOGI4Mzg2MDYxZjI3MTQ4MWM3MDdlMDRjZTJiMB4XDTIyMDEw
MTEyMDAyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODhkZDA4Y2MwZjQ2
ZWU1NzBjMDlhMjA2MTQ2NTI2M2EyYzdlNzdmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhzsd7C/WOzhgQjArhtZwkbScLHr5oby3y+9MzGD9wZz3Qc
8c3clz17q30+ktYwCharcq656N/N6nu4pN+2WBgoFLZYzRo4Qt1/zq/I7Bq4GvBq
JVAwCtJJoR3kx0i55biP/px9zVKiuUpjaJbdk6l1XnejkqIXWoi+O0Q7kaNInfvL
JnWAmyfAGeHtijjInKOqwZHvvtijgDSQST29xkEu1Q+UXyOZ5eT63t2HluHYZjb+
dioZsL51VGJEZxm26z/kODPMmPuiSxeWfack1dLFMDNEEBTYbAYFR0rT0PjBLRnr
ByLWtgXAFyvHUEre2ojjGY6nj0oxQLiNAsAQTz0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSI3QjMD0buVwwJogYUZSY6LH538TAfBgNVHSMEGDAWgBS6nTDmA1vouDhg
YfJxSBxwfgTOKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VwMHc1Z05iNkxnNFlHSHljVWdjY0g0RXppcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvYWM5YzMyLTdkYmMtNGQ2Yy1iYzA4LTVkNTg0ZmJjNWQyNy8x
L2lOMEl6QTlHN2xjTUNhSUdGR1VtT2l4LWRfRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
YWM5YzMyLTdkYmMtNGQ2Yy1iYzA4LTVkNTg0ZmJjNWQyNy8xL3VwMHc1Z05iNkxn
NFlHSHljVWdjY0g0RXppcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWZ6DANBgkqhkiG9w0BAQsFAAOC
AQEADfgK9QG/6/I1z57DVY2d/uosabqMgBqsSTsDZYdC/tuia7Pxo2jqbc9FRywy
xz+kVlMYDYQew0EkdRVB2hBK4egT0CkeSBY5wdNM1V76qtXdTiZAJpGixPSNO2NT
QUVj4O1wkqeH29KIVhdyJlIa+67Y4tSY0h8pdw5kE6UHVuYuMPML1a3x7WNdNGiz
v1UFqKElEmL/DQZ1JEQfMpNleWUPuvMI2YDoJOoJVMUavXpvdggq3+VVMK2w9Vg6
++KiYwstd7/XyQvuvpXXWt87Wuqw8tpINSXxuZBkbvEjoi2886uwYB/6wrQhi8mK
7f0d62CNRwUwM2W9SfLvj8Nugg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org