Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VFi2cqYyizsOwZxbh3Bib9XgcxE.roa
File: VFi2cqYyizsOwZxbh3Bib9XgcxE.roa (raw, json)
Hash identifier: V+GUW1iW99ZNQNE+z7wC4ltyjUQvjJf8Dnq0bHPtfA4=
Subject key identifier: 54:58:B6:72:A6:32:8B:3B:0E:C1:9C:5B:87:70:62:6F:D5:E0:73:11
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0ACB762E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VFi2cqYyizsOwZxbh3Bib9XgcxE.roa
Signing time: Sat 01 Jan 2022 03:02:36 +0000
ROA not before: Sat 01 Jan 2022 03:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 193.160.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181106222 (0xacb762e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5458b672a6328b3b0ec19c5b8770626fd5e07311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:6e:a7:b9:a1:87:af:f5:97:be:08:1c:90:
ed:73:ca:f5:c1:b4:4a:9c:13:aa:5d:f7:8a:5f:75:
20:da:b6:63:50:71:13:1c:17:2a:53:60:4c:1d:64:
ed:fc:4b:d0:88:94:97:f1:64:3c:2e:a7:40:b9:b6:
f1:1c:f2:53:52:2c:eb:28:f2:2a:1e:5e:81:d2:b3:
f1:b2:19:0e:30:e9:e6:13:5c:7f:a0:12:69:70:cb:
fc:eb:d1:d1:e7:de:eb:a8:d8:d5:d7:fd:83:f9:2c:
80:e9:c8:5c:63:4e:96:f9:7f:5e:f5:52:fd:d6:fd:
93:86:6d:17:48:80:eb:fd:b4:93:b0:64:c7:3b:40:
52:6f:b8:f9:df:da:c0:cb:46:e9:d0:4e:fd:83:ba:
92:6b:4d:23:6a:b6:eb:d6:86:a4:d9:5a:29:f1:72:
48:fd:1d:a1:bf:41:96:18:0b:77:12:be:01:0c:27:
8c:1f:85:19:f4:16:5c:24:5e:3a:09:81:df:a7:ea:
a0:ce:25:20:45:f6:26:eb:cc:fa:ad:db:46:2c:e0:
1d:0d:db:98:35:a4:9f:28:cd:65:3a:b5:34:64:4b:
dc:1e:31:2c:9c:46:5d:34:26:97:72:ea:ab:3c:4e:
d5:4a:7a:29:a9:97:d5:15:2f:9c:88:dd:d3:24:4a:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:B6:72:A6:32:8B:3B:0E:C1:9C:5B:87:70:62:6F:D5:E0:73:11
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VFi2cqYyizsOwZxbh3Bib9XgcxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:72:eb:d6:51:a6:b9:a9:4c:17:53:2e:87:4a:77:a6:73:12:
25:1b:09:60:b9:c0:1a:a9:a3:ad:9f:42:57:6e:bd:85:42:c4:
ae:0b:33:21:33:06:35:ea:f7:aa:25:64:a4:37:7c:4d:7f:94:
ee:bf:03:71:23:95:f3:3c:33:4f:14:59:af:61:f8:58:ec:64:
73:63:4f:6c:e5:29:4b:04:84:7f:5c:9b:9a:8e:5c:2b:1f:06:
15:aa:e9:1a:9f:1b:65:50:49:71:19:78:dc:f2:a1:00:6e:7f:
61:f2:a0:d8:f0:39:24:43:fc:43:aa:2a:1b:f7:6e:81:23:ec:
6c:d9:a4:3c:f6:6e:2d:d5:48:e1:99:98:c8:06:34:d7:f3:46:
8a:a2:18:fe:01:58:a2:ac:19:f1:ae:bc:31:53:ac:6a:07:65:
a9:3a:68:38:1c:ab:fc:d6:1c:e4:13:f1:bf:f0:3b:57:7f:af:
fb:e8:fc:a6:c2:a2:c7:31:0e:bd:b7:d3:fd:be:d5:54:50:6a:
e7:a2:c7:f5:86:4c:c0:9e:33:0e:c7:ed:ba:92:31:11:88:1c:
f3:04:18:cf:b3:48:e1:1d:82:e3:2b:aa:9a:b0:01:34:e3:81:
d4:9d:5c:fc:73:4b:b4:67:68:45:c4:c6:05:13:81:eb:b1:55:
35:0a:d4:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECst2LjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjE2YzQxOTUxNTJlZmZlZGJmN2IzYWZlZTJhYTcyZTE5MDkwZTRkMB4XDTIyMDEw
MTAzMDIzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTQ1OGI2NzJhNjMy
OGIzYjBlYzE5YzViODc3MDYyNmZkNWUwNzMxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbqbqe5oYev9Ze+CByQ7XPK9cG0SpwTql33il91INq2Y1Bx
ExwXKlNgTB1k7fxL0IiUl/FkPC6nQLm28RzyU1Is6yjyKh5egdKz8bIZDjDp5hNc
f6ASaXDL/OvR0efe66jY1df9g/ksgOnIXGNOlvl/XvVS/db9k4ZtF0iA6/20k7Bk
xztAUm+4+d/awMtG6dBO/YO6kmtNI2q269aGpNlaKfFySP0dob9BlhgLdxK+AQwn
jB+FGfQWXCReOgmB36fqoM4lIEX2JuvM+q3bRizgHQ3bmDWknyjNZTq1NGRL3B4x
LJxGXTQml3LqqzxO1Up6KamX1RUvnIjd0yRK1DsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRUWLZypjKLOw7BnFuHcGJv1eBzETAfBgNVHSMEGDAWgBTGFsQZUVLv/tv3
s6/uKqcuGQkOTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hoYkVHVkZTN183Yjk3T3Y3aXFuTGhrSkRrMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvYWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8x
L1ZGaTJjcVl5aXpzT3daeGJoM0JpYjlYZ2N4RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
YWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8xL3hoYkVHVkZTN183
Yjk3T3Y3aXFuTGhrSkRrMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGgjTANBgkqhkiG9w0BAQsFAAOC
AQEAfnLr1lGmualMF1Muh0p3pnMSJRsJYLnAGqmjrZ9CV269hULErgszITMGNer3
qiVkpDd8TX+U7r8DcSOV8zwzTxRZr2H4WOxkc2NPbOUpSwSEf1ybmo5cKx8GFarp
Gp8bZVBJcRl43PKhAG5/YfKg2PA5JEP8Q6oqG/dugSPsbNmkPPZuLdVI4ZmYyAY0
1/NGiqIY/gFYoqwZ8a68MVOsagdlqTpoOByr/NYc5BPxv/A7V3+v++j8psKixzEO
vbfT/b7VVFBq56LH9YZMwJ4zDsftupIxEYgc8wQYz7NI4R2C4yuqmrABNOOB1J1c
/HNLtGdoRcTGBROB67FVNQrUew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org