Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/DHPFrRVWlf6MMc-cGjLWIevMRDE.roa
File: DHPFrRVWlf6MMc-cGjLWIevMRDE.roa (raw, json)
Hash identifier: 3vOT/chtceAQ50UiBo6UBoJ4fFUGaWRG/+FgoYnuPqk=
Subject key identifier: 0C:73:C5:AD:15:56:95:FE:8C:31:CF:9C:1A:32:D6:21:EB:CC:44:31
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0184609F9F411449B33C733A3B8A5EADC943
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/DHPFrRVWlf6MMc-cGjLWIevMRDE.roa
Signing time: Thu 10 Nov 2022 08:19:44 +0000
ROA not before: Thu 10 Nov 2022 08:19:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.113.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:9f:9f:41:14:49:b3:3c:73:3a:3b:8a:5e:ad:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Nov 10 08:19:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c73c5ad155695fe8c31cf9c1a32d621ebcc4431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:44:5d:3f:c3:03:8d:69:7e:2a:5e:13:0f:
c6:66:53:11:6f:63:9f:a8:60:aa:8e:c3:02:30:74:
a3:72:fb:0a:b1:5f:28:25:e7:d9:eb:2b:3f:2f:f9:
59:12:5c:03:96:07:fb:25:09:66:31:05:18:13:b8:
25:2d:17:da:03:48:71:ec:82:a8:cd:12:cb:56:65:
36:34:ab:c6:4a:ae:0f:75:63:84:da:dd:95:e3:ab:
6c:e5:fe:7e:d2:3b:39:a3:4f:5f:04:8b:8c:1d:08:
17:53:63:d6:d9:32:8d:cf:b3:72:80:e2:59:42:42:
71:78:d5:e5:e3:26:3c:9b:7b:45:d9:7a:f3:aa:4a:
90:27:ce:19:73:cb:27:0d:e6:9f:7e:4c:34:96:bd:
bf:77:ca:0e:44:d3:be:a1:7b:7a:a1:a6:a6:5e:f7:
af:7d:07:0f:0f:02:c7:4c:dd:88:c7:5a:0c:e4:0c:
65:4d:7c:10:ee:64:ac:c4:b4:7f:65:76:26:11:49:
23:23:dc:d0:ed:f0:5c:e6:b7:51:81:35:c4:30:c5:
bb:a8:44:db:7f:a1:1d:4c:41:f2:8c:0e:c4:d8:b0:
c2:fe:7e:ac:ab:c7:7c:d3:2f:d3:04:66:2c:57:80:
92:5b:a3:98:c8:39:ae:25:db:03:bd:f5:e3:74:df:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:C5:AD:15:56:95:FE:8C:31:CF:9C:1A:32:D6:21:EB:CC:44:31
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/DHPFrRVWlf6MMc-cGjLWIevMRDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.113.0/24
193.160.130.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a8:26:79:12:aa:60:a2:48:d5:ab:38:14:bf:68:9d:66:73:
cb:92:e6:41:b3:9e:44:0d:7f:45:e7:ab:e6:4a:09:fb:f7:a4:
3c:15:d8:da:61:6a:7a:f7:10:ae:ee:f8:cd:b4:9a:48:9d:5a:
10:bb:b3:d5:90:29:f5:36:da:95:df:17:03:05:de:ca:db:c5:
df:c0:1b:78:c4:64:27:c8:c6:dd:e3:38:3a:e6:c4:53:c0:58:
a3:e3:84:7b:e5:cb:36:a3:16:1e:6d:5c:a6:8c:18:ee:e2:69:
78:08:7d:91:0a:cb:84:9f:ba:ae:91:50:c0:b0:c4:ad:8a:18:
51:b2:90:bc:8f:e3:a3:ef:78:fb:c3:69:af:01:99:11:8e:ab:
0d:40:6c:a3:dd:db:3a:a6:80:66:0a:c1:29:5d:39:f4:d7:3a:
f8:34:dc:cb:a1:4a:de:4c:4f:77:e8:91:8c:27:4d:a5:93:98:
5a:d5:6c:d6:94:f8:0f:cb:26:e7:f0:83:30:c7:a9:67:b3:db:
b5:7f:24:7e:56:55:54:f2:fc:6b:58:97:28:85:b0:57:95:1f:
1d:e4:17:a9:87:e9:75:01:52:e4:38:b4:07:e8:a7:57:f7:78:
b5:ba:8b:b1:56:09:b1:22:2f:85:77:0f:24:96:fc:f8:ca:df:
99:5c:17:34
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYRgn59BFEmzPHM6O4perclDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjIxMTEwMDgxOTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzczYzVhZDE1NTY5NWZlOGMzMWNmOWMxYTMyZDYyMWViY2M0NDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLtEXT/DA41pfipeEw/GZlMRb2Of
qGCqjsMCMHSjcvsKsV8oJefZ6ys/L/lZElwDlgf7JQlmMQUYE7glLRfaA0hx7IKo
zRLLVmU2NKvGSq4PdWOE2t2V46ts5f5+0js5o09fBIuMHQgXU2PW2TKNz7NygOJZ
QkJxeNXl4yY8m3tF2XrzqkqQJ84Zc8snDeaffkw0lr2/d8oORNO+oXt6oaamXvev
fQcPDwLHTN2Ix1oM5AxlTXwQ7mSsxLR/ZXYmEUkjI9zQ7fBc5rdRgTXEMMW7qETb
f6EdTEHyjA7E2LDC/n6sq8d80y/TBGYsV4CSW6OYyDmuJdsDvfXjdN8v5QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAxzxa0VVpX+jDHPnBoy1iHrzEQxMB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvREhQRnJSVldsZjZNTWMtY0dqTFdJZXZNUkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwaBmAwQA
waBxAwQAwaCCAwQAwaCIMA0GCSqGSIb3DQEBCwUAA4IBAQBAqCZ5EqpgokjVqzgU
v2idZnPLkuZBs55EDX9F56vmSgn796Q8FdjaYWp69xCu7vjNtJpInVoQu7PVkCn1
NtqV3xcDBd7K28XfwBt4xGQnyMbd4zg65sRTwFij44R75cs2oxYebVymjBju4ml4
CH2RCsuEn7qukVDAsMStihhRspC8j+Oj73j7w2mvAZkRjqsNQGyj3ds6poBmCsEp
XTn01zr4NNzLoUreTE936JGMJ02lk5ha1WzWlPgPyybn8IMwx6lns9u1fyR+VlVU
8vxrWJcohbBXlR8d5Beph+l1AVLkOLQH6KdX93i1uouxVgmxIi+Fdw8klvz4yt+Z
XBc0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org