Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f9Fqf1QC1nR08A6nuDZVR-3yrG8.roa
File: f9Fqf1QC1nR08A6nuDZVR-3yrG8.roa (raw, json)
Hash identifier: q3bnvdBLmZ0nZ0dFr9inXNz+ZpCZLMyssF+0X6SrMWs=
Subject key identifier: 7F:D1:6A:7F:54:02:D6:74:74:F0:0E:A7:B8:36:55:47:ED:F2:AC:6F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0182A2EB227EFD80D6F4633A85ED818B46A3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f9Fqf1QC1nR08A6nuDZVR-3yrG8.roa
Signing time: Mon 15 Aug 2022 19:11:34 +0000
ROA not before: Mon 15 Aug 2022 19:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a2:eb:22:7e:fd:80:d6:f4:63:3a:85:ed:81:8b:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 15 19:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fd16a7f5402d67474f00ea7b8365547edf2ac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:39:70:5e:ba:b8:44:5b:4c:b6:33:5d:4a:
19:5d:f3:3e:32:98:d9:79:21:7b:a0:f7:61:ff:5a:
42:27:5c:5d:a1:96:70:33:cb:b7:af:cc:36:a7:b8:
aa:e3:f4:6c:2d:26:29:aa:bf:0a:78:13:d5:65:f0:
ab:b4:a8:5a:62:5c:1b:54:d2:94:cc:c2:26:bc:2b:
c7:2c:0f:42:28:fc:50:c2:8d:70:58:a9:32:87:76:
aa:8c:68:0c:6f:7a:e6:87:7d:06:bb:f3:3b:ea:0e:
88:ae:79:a4:c2:c8:06:9a:5d:44:46:0d:c9:1d:8d:
12:cf:53:6b:b3:02:f8:56:5a:e0:4b:4c:49:fb:6b:
bc:87:a2:7d:e5:cc:4f:e2:27:09:60:b8:c8:82:75:
5e:a4:bf:bb:f2:bb:0e:3c:64:56:cd:0e:c0:db:1b:
3a:06:16:56:83:b8:d1:e8:58:d3:38:11:c9:4e:81:
49:41:32:46:db:63:8e:dd:eb:59:f1:6f:c7:bf:94:
57:fc:fe:02:1d:95:b1:1e:61:27:8b:3b:5f:c8:71:
0a:54:63:ad:c3:1f:6c:8c:e4:b9:53:65:d6:72:f2:
06:a6:99:d5:fe:17:49:5e:d0:3d:e7:53:0c:41:2c:
ad:41:e9:ee:b2:8b:39:57:33:78:52:30:49:09:62:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:6A:7F:54:02:D6:74:74:F0:0E:A7:B8:36:55:47:ED:F2:AC:6F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f9Fqf1QC1nR08A6nuDZVR-3yrG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:22:79:a9:ed:59:d7:2a:56:bb:99:43:72:a2:8d:60:d2:24:
b7:e6:da:32:59:5b:ac:3f:21:fe:c7:39:8d:a3:96:79:0e:47:
9b:d2:c1:72:0f:74:0a:c7:e3:b6:87:54:ef:21:97:b9:fb:5d:
cc:36:9a:99:1d:08:89:56:e1:c8:91:3b:10:33:a3:08:1d:81:
10:28:28:6a:8d:35:de:0f:72:15:64:39:c3:28:2f:18:4c:c5:
4a:f2:ad:f0:95:7d:6a:33:4e:3e:46:d4:bb:44:30:46:cd:e0:
60:e0:f7:6b:df:95:a5:b5:84:9f:c5:c1:11:a1:c1:e9:5c:c7:
ce:b7:78:cd:05:42:30:c2:5b:b9:d9:18:50:89:cc:66:bc:ee:
2b:f3:fc:6c:a8:c0:cd:69:6b:4a:62:c1:de:5f:59:ad:f4:58:
32:e2:26:6b:7d:f7:18:1e:0d:ab:92:4c:e9:63:d4:b8:71:e4:
2c:f7:f3:86:d3:66:75:6b:5c:0a:59:b8:dc:76:4c:63:82:26:
d6:aa:1f:03:70:ae:45:10:0d:c7:66:eb:3b:0c:1f:fd:92:5b:
37:33:11:48:29:b9:9b:5a:fc:2a:bc:df:58:7d:8d:58:25:21:
4f:0b:4c:fb:65:52:c0:52:be:94:22:34:32:80:6b:91:11:92:
12:44:ad:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKi6yJ+/YDW9GM6he2Bi0ajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIwODE1MTkxMTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmQxNmE3ZjU0MDJkNjc0NzRmMDBlYTdiODM2NTU0N2VkZjJhYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweE5cF66uERbTLYzXUoZXfM+MpjZ
eSF7oPdh/1pCJ1xdoZZwM8u3r8w2p7iq4/RsLSYpqr8KeBPVZfCrtKhaYlwbVNKU
zMImvCvHLA9CKPxQwo1wWKkyh3aqjGgMb3rmh30Gu/M76g6IrnmkwsgGml1ERg3J
HY0Sz1NrswL4VlrgS0xJ+2u8h6J95cxP4icJYLjIgnVepL+78rsOPGRWzQ7A2xs6
BhZWg7jR6FjTOBHJToFJQTJG22OO3etZ8W/Hv5RX/P4CHZWxHmEniztfyHEKVGOt
wx9sjOS5U2XWcvIGppnV/hdJXtA951MMQSytQenusos5VzN4UjBJCWL2rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/Ran9UAtZ0dPAOp7g2VUft8qxvMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZjlGcWYxUUMxblIwOEE2bnVEWlZSLTN5ckc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS7SMA0G
CSqGSIb3DQEBCwUAA4IBAQCeInmp7VnXKla7mUNyoo1g0iS35toyWVusPyH+xzmN
o5Z5Dkeb0sFyD3QKx+O2h1TvIZe5+13MNpqZHQiJVuHIkTsQM6MIHYEQKChqjTXe
D3IVZDnDKC8YTMVK8q3wlX1qM04+RtS7RDBGzeBg4Pdr35WltYSfxcERocHpXMfO
t3jNBUIwwlu52RhQicxmvO4r8/xsqMDNaWtKYsHeX1mt9Fgy4iZrffcYHg2rkkzp
Y9S4ceQs9/OG02Z1a1wKWbjcdkxjgibWqh8DcK5FEA3HZus7DB/9kls3MxFIKbmb
WvwqvN9YfY1YJSFPC0z7ZVLAUr6UIjQygGuREZISRK3D
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org