Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/R92uczOV2BG-Hl9TNXaCnyyGk18.roa
File: R92uczOV2BG-Hl9TNXaCnyyGk18.roa (raw, json)
Hash identifier: qOp56vvx+HHVWmdSfkuIAHHgqNQ4JuW4erQB99c6i/I=
Subject key identifier: 47:DD:AE:73:33:95:D8:11:BE:1E:5F:53:35:76:82:9F:2C:86:93:5F
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 0181F11193F63CC67D6E2CBEC51D89693089
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/R92uczOV2BG-Hl9TNXaCnyyGk18.roa
Signing time: Tue 12 Jul 2022 06:21:09 +0000
ROA not before: Tue 12 Jul 2022 06:21:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204715
IP address blocks: 194.183.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:11:93:f6:3c:c6:7d:6e:2c:be:c5:1d:89:69:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jul 12 06:21:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47ddae733395d811be1e5f533576829f2c86935f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:f0:e2:eb:9d:fe:b2:91:1b:0b:7b:98:bd:
c6:a1:7d:98:8d:5b:ac:99:27:b1:3b:5c:d8:94:ea:
93:6f:ed:57:fe:81:91:fe:8d:6e:e4:20:e0:e8:35:
d4:b4:04:54:3e:dc:ac:b8:49:36:75:a1:28:e9:55:
ff:9c:40:32:29:fb:cf:22:96:81:d1:31:4b:87:ca:
d1:45:df:6d:0a:37:3b:14:9f:f3:84:1e:0b:4c:b9:
ff:90:0d:6c:6e:10:c3:b2:81:66:fe:37:e1:c8:db:
77:b8:5c:41:cd:14:b0:a8:7d:81:c1:b4:26:ea:d9:
3c:69:b9:8b:7d:dc:2a:66:8a:30:cc:d2:34:fa:b9:
02:87:40:06:af:c4:71:1f:07:3e:b5:8d:e1:8c:69:
42:97:a3:eb:13:a6:0d:fe:bd:73:f6:7a:a0:4e:54:
35:76:b2:ba:a1:75:d9:a5:63:e8:78:71:d6:39:c5:
b8:61:6d:1b:ad:b4:b7:e0:58:b5:10:e1:d6:7c:f2:
f0:a6:62:7e:ee:04:ee:a3:c8:e2:8b:f9:39:9d:41:
fa:61:b7:f7:ac:ef:e2:54:37:ca:05:33:16:76:03:
d7:df:31:6a:f2:ce:03:37:20:21:59:09:42:4a:c9:
fd:f1:4d:4c:57:c6:44:51:69:e5:96:62:06:e4:33:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:AE:73:33:95:D8:11:BE:1E:5F:53:35:76:82:9F:2C:86:93:5F
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/R92uczOV2BG-Hl9TNXaCnyyGk18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a0:0c:43:93:9a:2e:28:04:eb:30:8f:95:4b:37:a7:a6:5a:
68:52:2a:ca:ca:d7:f8:70:7c:b0:75:11:54:6a:9d:1d:60:68:
e4:e1:dc:08:b0:f4:91:49:53:16:f8:52:50:97:d0:05:50:b5:
f9:c7:0d:ad:b2:24:33:57:45:fb:8d:2c:aa:a9:78:03:b8:e9:
3b:ff:89:d8:30:e6:38:b4:2a:14:eb:c3:09:54:80:dc:f2:f9:
5a:94:7c:83:55:18:2d:3e:44:09:e5:5d:c5:2d:44:3f:6b:54:
98:7f:6d:ee:21:f7:11:ad:23:4e:f2:49:f5:64:98:43:77:e1:
37:73:3f:17:91:21:ad:2d:27:8b:73:c3:cb:4f:03:08:45:3c:
90:46:50:70:42:5d:e9:4c:07:75:a7:59:f8:21:5c:cf:9f:04:
f7:85:28:98:6b:2f:5c:fa:f5:95:16:6d:06:90:18:30:48:c8:
45:81:09:cb:74:63:e5:ed:76:83:7a:55:57:84:13:74:d9:c5:
fa:17:cb:36:31:ff:0f:19:48:b1:46:70:c3:10:d4:ea:ac:22:
c3:ea:90:81:26:a8:e0:f3:9d:7f:22:49:b2:b9:ff:72:2e:0c:
7f:c8:f4:c0:3b:e0:5d:f4:2a:8b:80:6d:a9:87:38:92:e7:9c:
73:c5:02:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHxEZP2PMZ9biy+xR2JaTCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjIwNzEyMDYyMTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2RkYWU3MzMzOTVkODExYmUxZTVmNTMzNTc2ODI5ZjJjODY5MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDnw4uud/rKRGwt7mL3GoX2YjVus
mSexO1zYlOqTb+1X/oGR/o1u5CDg6DXUtARUPtysuEk2daEo6VX/nEAyKfvPIpaB
0TFLh8rRRd9tCjc7FJ/zhB4LTLn/kA1sbhDDsoFm/jfhyNt3uFxBzRSwqH2BwbQm
6tk8abmLfdwqZoowzNI0+rkCh0AGr8RxHwc+tY3hjGlCl6PrE6YN/r1z9nqgTlQ1
drK6oXXZpWPoeHHWOcW4YW0brbS34Fi1EOHWfPLwpmJ+7gTuo8jii/k5nUH6Ybf3
rO/iVDfKBTMWdgPX3zFq8s4DNyAhWQlCSsn98U1MV8ZEUWnllmIG5DNkpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfdrnMzldgRvh5fUzV2gp8shpNfMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvUjkydWN6T1YyQkctSGw5VE5YYUNueXlHazE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrejMA0G
CSqGSIb3DQEBCwUAA4IBAQBfoAxDk5ouKATrMI+VSzenplpoUirKytf4cHywdRFU
ap0dYGjk4dwIsPSRSVMW+FJQl9AFULX5xw2tsiQzV0X7jSyqqXgDuOk7/4nYMOY4
tCoU68MJVIDc8vlalHyDVRgtPkQJ5V3FLUQ/a1SYf23uIfcRrSNO8kn1ZJhDd+E3
cz8XkSGtLSeLc8PLTwMIRTyQRlBwQl3pTAd1p1n4IVzPnwT3hSiYay9c+vWVFm0G
kBgwSMhFgQnLdGPl7XaDelVXhBN02cX6F8s2Mf8PGUixRnDDENTqrCLD6pCBJqjg
851/Ikmyuf9yLgx/yPTAO+Bd9CqLgG2phziS55xzxQLV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org