Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/xgxJOA9pSyemlMltTEjKxNYMwnI.roa
File: xgxJOA9pSyemlMltTEjKxNYMwnI.roa (raw, json)
Hash identifier: lqkFrAppzSAKwyCPuCDV+gpZcskUtDa1YJComNO4xfY=
Subject key identifier: C6:0C:49:38:0F:69:4B:27:A6:94:C9:6D:4C:48:CA:C4:D6:0C:C2:72
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 2C2B
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/xgxJOA9pSyemlMltTEjKxNYMwnI.roa
Signing time: Thu 28 Apr 2022 12:32:54 +0000
ROA not before: Thu 28 Apr 2022 12:32:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.200.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11307 (0x2c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Apr 28 12:32:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c60c49380f694b27a694c96d4c48cac4d60cc272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:f4:8c:55:d4:2c:71:ef:a1:93:5b:e3:01:
0c:54:9e:ee:77:8f:8b:73:3b:21:85:f6:40:f4:52:
5d:39:66:bd:db:b0:7b:e6:36:60:45:a7:9a:1f:94:
48:25:7b:24:a0:11:6e:89:8e:6e:4d:6a:50:8b:40:
eb:cf:49:3f:a0:07:30:e8:af:79:cd:f7:cc:eb:54:
97:fc:77:7a:e1:6d:ff:aa:d0:51:4e:27:e9:da:c2:
df:cd:dd:88:02:37:b1:cb:76:9b:e5:78:6b:a0:ac:
24:a5:ab:55:73:8a:ed:5b:bc:f1:46:22:18:31:56:
92:a4:92:7e:45:f8:c4:58:6e:94:79:32:f8:49:11:
03:fb:b8:f6:23:cd:52:5c:2b:8d:f0:87:86:ec:f4:
5c:2e:1a:f0:82:6d:2c:7d:de:ab:de:1b:cd:7a:94:
bd:bb:66:3a:54:cc:9d:ac:85:c0:f6:9e:29:d7:1c:
2b:0a:67:43:93:06:46:a6:3d:ad:37:cc:ca:58:fb:
82:a6:51:b4:45:92:82:ba:4d:db:a8:8e:a2:26:19:
d6:0f:3b:9d:f4:be:c0:95:6b:ea:9c:10:60:55:ea:
6c:17:ae:1c:eb:79:9e:1b:cf:2e:0a:cb:8a:ae:98:
15:0d:d4:4d:e9:ad:09:96:f8:e0:e9:54:2f:dc:58:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0C:49:38:0F:69:4B:27:A6:94:C9:6D:4C:48:CA:C4:D6:0C:C2:72
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/xgxJOA9pSyemlMltTEjKxNYMwnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.5.0/24
Signature Algorithm: sha256WithRSAEncryption
73:72:c9:db:ce:f0:71:3e:b7:07:90:10:8d:c1:4a:b9:42:32:
63:2f:8f:7a:05:3c:da:da:c0:8b:02:78:3c:c9:cf:80:35:a9:
58:a6:a4:d0:d2:d3:e2:e7:61:31:b2:9e:d1:05:64:2e:6f:f9:
1e:29:bb:c2:71:4c:af:2e:77:08:b7:ad:8a:c4:67:be:34:ef:
29:38:70:2a:2d:d5:06:d5:59:4d:de:00:81:0a:12:96:a0:55:
94:8f:fd:da:3e:13:41:67:a0:d0:90:79:0d:1c:19:4e:7b:3b:
86:70:1c:3a:d9:a8:bc:85:81:39:fa:3f:53:46:4c:4a:cd:c6:
71:1f:b2:51:db:88:b6:17:e5:47:ef:24:04:5d:71:52:02:4e:
b7:d2:9a:f9:fe:19:0e:e5:8b:ca:c2:97:fe:ca:7e:8f:b8:65:
10:11:fc:d9:31:3f:0d:39:95:aa:4d:d9:9e:f0:6b:f6:15:f9:
43:4a:56:56:1f:37:ba:71:36:a0:3f:6f:5e:d3:51:7e:da:bc:
fa:ce:64:54:57:55:8d:73:82:f2:85:89:0e:80:7d:48:27:26:
a2:e6:b4:47:16:0a:5e:0e:8d:aa:63:83:fd:af:e2:72:34:6d:
24:4a:4d:a2:58:08:e0:9c:b0:76:dc:26:86:c2:a8:02:3d:27:
8d:5b:16:c2
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICLCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNmQ2
NWZlMDU1ZmI3ZWQwNDNkMTA5MzA3MDQ1YzBhYmRmNDA0ZDA1ZDAeFw0yMjA0Mjgx
MjMyNTRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGM2MGM0OTM4MGY2OTRi
MjdhNjk0Yzk2ZDRjNDhjYWM0ZDYwY2MyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaevSMVdQsce+hk1vjAQxUnu53j4tzOyGF9kD0Ul05Zr3bsHvm
NmBFp5oflEgleySgEW6Jjm5NalCLQOvPST+gBzDor3nN98zrVJf8d3rhbf+q0FFO
J+nawt/N3YgCN7HLdpvleGugrCSlq1Vziu1bvPFGIhgxVpKkkn5F+MRYbpR5MvhJ
EQP7uPYjzVJcK43wh4bs9FwuGvCCbSx93qveG816lL27ZjpUzJ2shcD2ninXHCsK
Z0OTBkamPa03zMpY+4KmUbRFkoK6TduojqImGdYPO530vsCVa+qcEGBV6mwXrhzr
eZ4bzy4Ky4qumBUN1E3prQmW+ODpVC/cWEMZAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUxgxJOA9pSyemlMltTEjKxNYMwnIwHwYDVR0jBBgwFoAUbWX+BV+37QQ9EJMH
BFwKvfQE0F0wDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9i
V1gtQlYtMzdRUTlFSk1IQkZ3S3ZmUUUwRjAuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzM3L2Y2MDc5OC0zMjAyLTQ4NGItODY0MC0xYjc0OWU5ODEwYjQvMS94
Z3hKT0E5cFN5ZW1sTWx0VEVqS3hOWU13bkkucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2Y2
MDc5OC0zMjAyLTQ4NGItODY0MC0xYjc0OWU5ODEwYjQvMS9iV1gtQlYtMzdRUTlF
Sk1IQkZ3S3ZmUUUwRjAuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADByAUwDQYJKoZIhvcNAQELBQADggEB
AHNyydvO8HE+tweQEI3BSrlCMmMvj3oFPNrawIsCeDzJz4A1qVimpNDS0+LnYTGy
ntEFZC5v+R4pu8JxTK8udwi3rYrEZ7407yk4cCot1QbVWU3eAIEKEpagVZSP/do+
E0FnoNCQeQ0cGU57O4ZwHDrZqLyFgTn6P1NGTErNxnEfslHbiLYX5UfvJARdcVIC
TrfSmvn+GQ7li8rCl/7Kfo+4ZRAR/NkxPw05lapN2Z7wa/YV+UNKVlYfN7pxNqA/
b17TUX7avPrOZFRXVY1zgvKFiQ6AfUgnJqLmtEcWCl4Ojapjg/2v4nI0bSRKTaJY
COCcsHbcJobCqAI9J41bFsI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-fra.rpki-client.org