Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/vEnJmUPIbAOlmjr4TviUh-uHNxE.roa
File: vEnJmUPIbAOlmjr4TviUh-uHNxE.roa (raw, json)
Hash identifier: 5ZHFd64fuFkUXh7WJb6Rhe4i8xHOtSzMfC2iB5kCdxU=
Subject key identifier: BC:49:C9:99:43:C8:6C:03:A5:9A:3A:F8:4E:F8:94:87:EB:87:37:11
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 0184B39498F2ECFECEC58043768F863FBC2B
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/vEnJmUPIbAOlmjr4TviUh-uHNxE.roa
Signing time: Sat 26 Nov 2022 10:56:10 +0000
ROA not before: Sat 26 Nov 2022 10:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48847
IP address blocks: 193.84.118.0/24 maxlen: 24
193.84.114.0/23 maxlen: 23
193.84.114.224/27 maxlen: 27
193.84.114.0/24 maxlen: 24
193.84.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b3:94:98:f2:ec:fe:ce:c5:80:43:76:8f:86:3f:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Nov 26 10:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc49c99943c86c03a59a3af84ef89487eb873711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:f5:dc:fc:29:0a:9f:3d:62:d0:a1:08:87:
4d:24:1d:5f:66:07:99:a2:4f:a7:ef:1b:cf:b4:ef:
5a:1c:4b:b7:93:50:5f:24:7b:35:ac:4b:b8:0d:d1:
9f:cf:35:19:bd:95:93:bb:75:1c:62:92:a4:4d:9a:
03:a5:57:9b:27:6d:22:a2:b7:d9:6c:1a:7b:1e:ce:
99:cd:35:ff:ab:5c:48:d8:ae:fc:f9:9c:1d:ee:d3:
65:b9:d9:ee:0f:25:67:04:1e:a9:86:00:40:36:6b:
17:12:6c:97:b5:04:45:c6:d1:a9:82:47:56:46:2b:
7c:f8:44:5b:88:48:b7:82:7c:27:79:0f:4d:4f:85:
9a:54:c9:ed:c0:9e:cc:af:03:99:e5:fb:a0:4c:41:
4e:64:9c:c0:4c:ac:88:2a:66:8e:88:77:7f:a8:42:
a9:2d:37:14:a5:05:21:34:ef:54:f9:c9:51:48:af:
f5:e6:97:d2:84:3f:41:f6:fb:06:a8:6b:9a:15:2f:
f9:08:1c:b7:d6:aa:ce:c5:75:63:c1:61:92:36:fe:
2c:6c:b3:57:94:a8:a5:59:b2:47:01:90:30:ec:ec:
36:ff:dc:0c:ae:63:cf:d8:3e:b7:3b:1f:28:14:40:
c9:ec:7a:40:81:09:90:19:d9:b8:27:af:00:97:16:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:C9:99:43:C8:6C:03:A5:9A:3A:F8:4E:F8:94:87:EB:87:37:11
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/vEnJmUPIbAOlmjr4TviUh-uHNxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.114.0/23
193.84.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b9:6b:f9:d6:30:46:e4:c9:0f:fa:38:bb:a7:1b:97:30:14:
59:f6:06:72:4a:f1:5a:a5:36:26:a4:14:6c:07:dc:0f:e7:5b:
7e:fe:98:41:39:12:c9:fe:54:5d:de:55:84:63:8b:67:cb:ba:
4e:52:5e:ee:e4:b6:16:12:7b:03:e2:72:a1:fe:76:67:f5:ad:
3d:d7:c2:36:f0:61:47:33:78:2d:bd:b9:87:fe:92:e6:be:81:
7a:84:b1:ba:9b:62:34:f7:0a:00:8e:2c:d7:88:6d:f8:35:a8:
ba:8d:14:f3:0b:d2:2d:87:23:b8:8e:a5:32:32:56:40:d9:18:
b4:d0:68:52:5f:63:30:7a:f6:57:a7:eb:c9:95:52:ce:fe:fd:
30:f0:5d:99:e4:6f:4e:b7:4f:40:d8:ac:b3:9c:e3:ef:91:68:
3f:b3:4b:80:11:3b:4e:9b:73:6e:df:b0:c2:bf:12:cb:e7:e7:
d8:50:bf:cb:7f:b6:e8:42:32:21:2f:4d:b2:e7:86:d5:54:91:
e0:1f:f0:54:4e:de:2e:ee:6a:c2:6a:91:d4:6c:bb:5a:e5:6a:
ff:8f:90:c1:80:9d:d7:86:1d:52:3f:ab:3d:98:c0:ef:36:3e:
e1:6d:bf:93:ed:8a:97:55:4a:6a:10:fe:89:1d:78:c7:e3:80:
a8:d5:02:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYSzlJjy7P7OxYBDdo+GP7wrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjIxMTI2MTA1NjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQ5Yzk5OTQzYzg2YzAzYTU5YTNhZjg0ZWY4OTQ4N2ViODczNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZv13PwpCp89YtChCIdNJB1fZgeZ
ok+n7xvPtO9aHEu3k1BfJHs1rEu4DdGfzzUZvZWTu3UcYpKkTZoDpVebJ20iorfZ
bBp7Hs6ZzTX/q1xI2K78+Zwd7tNludnuDyVnBB6phgBANmsXEmyXtQRFxtGpgkdW
Rit8+ERbiEi3gnwneQ9NT4WaVMntwJ7MrwOZ5fugTEFOZJzATKyIKmaOiHd/qEKp
LTcUpQUhNO9U+clRSK/15pfShD9B9vsGqGuaFS/5CBy31qrOxXVjwWGSNv4sbLNX
lKilWbJHAZAw7Ow2/9wMrmPP2D63Ox8oFEDJ7HpAgQmQGdm4J68AlxY6+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLxJyZlDyGwDpZo6+E74lIfrhzcRMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvdkVuSm1VUEliQU9sbWpyNFR2aVVoLXVITnhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwVRyAwQA
wVR2MA0GCSqGSIb3DQEBCwUAA4IBAQAKuWv51jBG5MkP+ji7pxuXMBRZ9gZySvFa
pTYmpBRsB9wP51t+/phBORLJ/lRd3lWEY4tny7pOUl7u5LYWEnsD4nKh/nZn9a09
18I28GFHM3gtvbmH/pLmvoF6hLG6m2I09woAjizXiG34Nai6jRTzC9IthyO4jqUy
MlZA2Ri00GhSX2MwevZXp+vJlVLO/v0w8F2Z5G9Ot09A2KyznOPvkWg/s0uAETtO
m3Nu37DCvxLL5+fYUL/Lf7boQjIhL02y54bVVJHgH/BUTt4u7mrCapHUbLta5Wr/
j5DBgJ3Xhh1SP6s9mMDvNj7hbb+T7YqXVUpqEP6JHXjH44Co1QIF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:49 2024 by rpki-client on console-fra.rpki-client.org