Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/EKWjUjOfqik5qcIdZc2UdQCrGnw.roa
File: EKWjUjOfqik5qcIdZc2UdQCrGnw.roa (raw, json)
Hash identifier: eP1D3Vygq/gedKkJLOPbvSQbIa3dNOaMeoqHBw6iNEU=
Subject key identifier: 10:A5:A3:52:33:9F:AA:29:39:A9:C2:1D:65:CD:94:75:00:AB:1A:7C
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 0307B222
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/EKWjUjOfqik5qcIdZc2UdQCrGnw.roa
Signing time: Sat 01 Jan 2022 14:56:07 +0000
ROA not before: Sat 01 Jan 2022 14:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197608
IP address blocks: 193.150.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50836002 (0x307b222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Jan 1 14:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10a5a352339faa2939a9c21d65cd947500ab1a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ba:47:16:59:95:95:24:93:fe:aa:14:f1:79:
8f:99:a8:22:76:8f:e0:c8:94:ce:f8:0d:19:55:d5:
be:82:ca:7b:c7:59:e3:c3:75:2e:e2:16:d0:06:ea:
e4:f2:d6:43:da:99:2d:64:70:18:90:3f:4b:73:80:
f0:fc:5e:8b:df:19:1d:ea:8d:60:c7:e8:0e:3e:29:
cf:f0:7f:57:0e:b3:a9:f7:4a:3b:49:10:4f:2b:21:
11:b1:ed:28:46:43:ed:d1:3e:8d:20:80:fa:f1:5f:
ef:9a:86:1a:94:be:17:a0:14:00:e6:eb:6d:95:6a:
75:cc:60:a3:09:02:2f:e0:fd:46:4d:01:3a:49:e1:
fc:b8:92:f2:9d:e4:05:fb:a9:d8:00:7c:c2:05:61:
d2:1d:11:0d:6e:ba:f4:2d:9a:9e:db:33:f7:1f:48:
2c:88:5b:e3:8d:c3:05:11:05:bc:e9:78:21:90:b8:
e0:8a:2c:ff:9d:68:2f:32:f5:53:9a:f2:4c:0f:ec:
53:97:ee:7c:58:41:72:85:88:5d:30:c8:6c:43:0f:
ed:7d:96:17:f6:14:72:a6:b3:a0:b5:49:aa:e8:f8:
f3:09:ed:33:cf:2e:71:09:3d:30:58:ed:1a:da:9c:
fc:a5:7d:0b:4d:43:95:73:08:6d:a0:8d:90:c9:f3:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A5:A3:52:33:9F:AA:29:39:A9:C2:1D:65:CD:94:75:00:AB:1A:7C
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/EKWjUjOfqik5qcIdZc2UdQCrGnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.41.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:57:c6:85:5a:19:e4:e9:18:7b:bb:28:be:f3:61:0d:38:48:
7b:bb:79:ca:b4:a6:ba:56:80:94:43:d2:3b:48:a1:6a:4e:b2:
bd:78:38:a0:3a:e8:1a:f3:a7:e5:05:13:05:16:4b:19:32:b6:
63:dc:61:48:06:a4:d1:f8:de:08:e6:57:2c:ed:7a:20:f4:d5:
9c:a7:b0:fd:84:7a:fa:ec:5c:97:45:6f:e6:04:69:b2:da:59:
76:a6:8c:d3:5c:c4:03:97:26:5e:28:d6:41:cf:b1:04:6c:cf:
ed:4a:44:24:08:e6:06:e1:12:17:a3:c0:7a:ce:fe:c1:f8:c3:
ed:a0:0c:70:a8:f8:39:9d:f8:ca:30:5b:ce:75:b9:39:67:4c:
ba:98:23:7b:b8:93:92:f6:a2:bb:c1:22:18:b7:55:a5:4e:15:
28:ba:14:73:06:4d:37:10:2a:e4:6c:48:e6:91:aa:79:1c:54:
c5:d8:e1:7d:23:8b:15:16:45:e7:c7:ac:8c:c0:87:c2:84:5a:
e2:d2:ba:09:af:77:5c:57:40:e5:c5:d9:cb:a7:b2:07:d1:63:
dd:b4:39:63:1d:66:bd:a2:c2:64:97:39:a1:1b:a4:64:db:08:
bf:96:cc:a5:58:3e:4e:e9:fd:13:84:a9:39:06:2f:72:e7:ee:
82:85:13:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAweyIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MThkYTdmZjU3NmU3OGRjMjM0ZWI3NGNiZjA3MzA3NmMxZjdlYmM5MB4XDTIyMDEw
MTE0NTYwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBhNWEzNTIzMzlm
YWEyOTM5YTljMjFkNjVjZDk0NzUwMGFiMWE3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPi6RxZZlZUkk/6qFPF5j5moInaP4MiUzvgNGVXVvoLKe8dZ
48N1LuIW0Abq5PLWQ9qZLWRwGJA/S3OA8Pxei98ZHeqNYMfoDj4pz/B/Vw6zqfdK
O0kQTyshEbHtKEZD7dE+jSCA+vFf75qGGpS+F6AUAObrbZVqdcxgowkCL+D9Rk0B
Oknh/LiS8p3kBfup2AB8wgVh0h0RDW669C2antsz9x9ILIhb443DBREFvOl4IZC4
4Ios/51oLzL1U5ryTA/sU5fufFhBcoWIXTDIbEMP7X2WF/YUcqazoLVJquj48wnt
M88ucQk9MFjtGtqc/KV9C01DlXMIbaCNkMnzsc0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQQpaNSM5+qKTmpwh1lzZR1AKsafDAfBgNVHSMEGDAWgBQhjaf/V2543CNO
t0y/BzB2wffryTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZMm5fMWR1ZU53alRyZE12d2N3ZHNIMzY4ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDEvOTJiMzgxLWU1MTQtNDM4Yy1iOGY5LWY4YWVkMzBkNTRjMy8x
L0VLV2pVak9mcWlrNXFjSWRaYzJVZFFDckdudy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEv
OTJiMzgxLWU1MTQtNDM4Yy1iOGY5LWY4YWVkMzBkNTRjMy8xL0lZMm5fMWR1ZU53
alRyZE12d2N3ZHNIMzY4ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGWKTANBgkqhkiG9w0BAQsFAAOC
AQEAzVfGhVoZ5OkYe7sovvNhDThIe7t5yrSmulaAlEPSO0ihak6yvXg4oDroGvOn
5QUTBRZLGTK2Y9xhSAak0fjeCOZXLO16IPTVnKew/YR6+uxcl0Vv5gRpstpZdqaM
01zEA5cmXijWQc+xBGzP7UpEJAjmBuESF6PAes7+wfjD7aAMcKj4OZ34yjBbznW5
OWdMupgje7iTkvaiu8EiGLdVpU4VKLoUcwZNNxAq5GxI5pGqeRxUxdjhfSOLFRZF
58esjMCHwoRa4tK6Ca93XFdA5cXZy6eyB9Fj3bQ5Yx1mvaLCZJc5oRukZNsIv5bM
pVg+Tun9E4SpOQYvcufugoUTXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:50 2023 by rpki-client on console-ams.rpki-client.org