Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/I99-S_0hD0cUqj66FNBKDVijqN4.roa
File: I99-S_0hD0cUqj66FNBKDVijqN4.roa (raw, json)
Hash identifier: ykTkKSnE0rPvxu//Fl8GmaFYwJ9PdMusW15xMiV0E+A=
Subject key identifier: 23:DF:7E:4B:FD:21:0F:47:14:AA:3E:BA:14:D0:4A:0D:58:A3:A8:DE
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 0185E324C9E8EB8F5909EE24DB60A0E26F59
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/I99-S_0hD0cUqj66FNBKDVijqN4.roa
Signing time: Tue 24 Jan 2023 09:38:36 +0000
ROA not before: Tue 24 Jan 2023 09:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43374
IP address blocks: 193.228.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:24:c9:e8:eb:8f:59:09:ee:24:db:60:a0:e2:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Jan 24 09:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23df7e4bfd210f4714aa3eba14d04a0d58a3a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:bf:a5:65:f2:68:f6:aa:fa:5b:a2:ee:cb:
71:57:c2:8b:bd:1f:67:4a:f2:53:e1:04:c1:23:c1:
f0:bd:02:24:65:e8:1c:9d:b2:dd:b3:76:8b:8e:49:
f4:ec:a3:6e:32:75:43:c7:ab:40:3b:df:7a:07:f2:
b8:41:a3:7a:79:54:8c:13:67:ad:d2:ea:04:7e:72:
44:a2:36:53:d1:cd:53:b3:1f:5a:db:c4:2e:b2:39:
94:81:29:bd:6c:69:59:3d:b4:7d:76:24:4a:a8:e6:
44:f5:5f:db:22:82:f0:77:4e:b9:ca:a6:e1:a4:33:
92:47:d1:92:ce:aa:47:b3:47:19:ef:07:2c:81:09:
41:01:c4:f6:73:79:7d:24:9c:8c:e4:0f:48:a3:54:
75:83:54:8a:d5:7b:02:95:59:6d:a7:35:a7:6f:2d:
31:2e:5d:0d:e3:b2:b3:1f:df:23:a5:5e:f4:3a:ed:
cf:b8:27:c9:bf:7f:8a:67:62:1d:0e:4b:5b:95:8a:
a5:d8:49:9f:66:e4:64:11:a8:b1:8f:0f:eb:d8:02:
69:a5:05:49:eb:f2:e5:e6:96:34:26:dd:07:3e:e5:
31:da:29:4d:2f:d8:f3:25:e0:2b:5d:0b:78:f3:c1:
4e:4a:4d:37:56:da:b4:4f:6a:f4:e5:25:01:ce:96:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:7E:4B:FD:21:0F:47:14:AA:3E:BA:14:D0:4A:0D:58:A3:A8:DE
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/I99-S_0hD0cUqj66FNBKDVijqN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.159.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4e:d9:9f:17:f5:75:0e:8e:45:2b:fd:7c:88:53:b6:cc:26:
1f:0b:c3:94:74:ea:1b:fd:46:69:30:79:6b:fd:c4:a2:91:44:
52:0b:cc:37:df:3e:c1:3d:1f:f4:7c:6e:3d:6e:62:4a:f8:85:
6b:17:f9:88:1a:38:1a:e2:56:e4:e6:ec:4a:1d:c5:0a:d3:2d:
23:fe:8f:1e:d0:7e:f5:9b:02:10:64:f3:11:2e:85:29:48:77:
59:f3:0d:82:fd:db:19:1d:2f:9e:a5:76:0c:bd:b4:ed:4f:ff:
f1:9e:a4:dc:3c:11:d3:8e:77:49:84:27:73:02:d6:5c:a5:12:
13:89:10:1f:44:52:eb:0e:a1:9d:5e:82:1e:f1:74:d9:07:73:
a9:30:2f:41:94:ed:88:66:f4:39:39:94:74:98:17:17:99:23:
94:fb:62:8e:f2:68:ba:65:95:f4:f8:ba:63:15:fb:fb:09:6b:
ec:3e:2e:aa:cf:58:42:cf:55:2a:58:18:5a:da:af:95:7d:ae:
d4:36:0f:88:f5:38:e9:0b:eb:7f:12:6f:27:05:1c:12:7f:3c:
a5:04:70:bd:e9:d0:df:d6:43:0c:f6:76:c8:a5:68:3c:84:94:
dc:69:1d:3c:51:30:37:a5:1c:d5:9b:3f:98:dd:3a:a2:d9:01:
9a:73:a2:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXjJMno649ZCe4k22Cg4m9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2VkY2JkYTAzYzNiMzZjZDdkNzAzN2VhZDMzOWJjYjg4
YzlhMjQwHhcNMjMwMTI0MDkzODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2RmN2U0YmZkMjEwZjQ3MTRhYTNlYmExNGQwNGEwZDU4YTNhOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWq/pWXyaPaq+lui7stxV8KLvR9n
SvJT4QTBI8HwvQIkZegcnbLds3aLjkn07KNuMnVDx6tAO996B/K4QaN6eVSME2et
0uoEfnJEojZT0c1Tsx9a28QusjmUgSm9bGlZPbR9diRKqOZE9V/bIoLwd065yqbh
pDOSR9GSzqpHs0cZ7wcsgQlBAcT2c3l9JJyM5A9Io1R1g1SK1XsClVltpzWnby0x
Ll0N47KzH98jpV70Ou3PuCfJv3+KZ2IdDktblYql2EmfZuRkEaixjw/r2AJppQVJ
6/Ll5pY0Jt0HPuUx2ilNL9jzJeArXQt488FOSk03Vtq0T2r05SUBzpbDDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCPffkv9IQ9HFKo+uhTQSg1Yo6jeMB8GA1UdIwQY
MBaAFG/O3L2gPDs2zX1wN+rTOby4jJokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQt
NzQyNGZkZWUyMTBlLzEvSTk5LVNfMGhEMGNVcWo2NkZOQktEVmlqcU40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQtNzQyNGZkZWUyMTBl
LzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSfMA0G
CSqGSIb3DQEBCwUAA4IBAQBoTtmfF/V1Do5FK/18iFO2zCYfC8OUdOob/UZpMHlr
/cSikURSC8w33z7BPR/0fG49bmJK+IVrF/mIGjga4lbk5uxKHcUK0y0j/o8e0H71
mwIQZPMRLoUpSHdZ8w2C/dsZHS+epXYMvbTtT//xnqTcPBHTjndJhCdzAtZcpRIT
iRAfRFLrDqGdXoIe8XTZB3OpMC9BlO2IZvQ5OZR0mBcXmSOU+2KO8mi6ZZX0+Lpj
Ffv7CWvsPi6qz1hCz1UqWBha2q+Vfa7UNg+I9TjpC+t/Em8nBRwSfzylBHC96dDf
1kMM9nbIpWg8hJTcaR08UTA3pRzVmz+Y3Tqi2QGac6KW
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:14 2025 by rpki-client