Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/IfXpJZTKDRhpmDkljQ9GIcPETRc.roa
File: IfXpJZTKDRhpmDkljQ9GIcPETRc.roa (raw, json)
Hash identifier: 6QRc9x/FSogIiXN2Pdqolhn534bHb855iVYd/DM3OE0=
Subject key identifier: 21:F5:E9:25:94:CA:0D:18:69:98:39:25:8D:0F:46:21:C3:C4:4D:17
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 067C4DAA
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/IfXpJZTKDRhpmDkljQ9GIcPETRc.roa
Signing time: Sat 01 Jan 2022 05:53:13 +0000
ROA not before: Sat 01 Jan 2022 05:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 194.213.24.0/24 maxlen: 24
194.242.33.0/24 maxlen: 24
194.242.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108809642 (0x67c4daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Jan 1 05:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21f5e92594ca0d18699839258d0f4621c3c44d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:57:27:cc:44:60:d1:c4:9e:fd:e2:12:73:
8d:ae:96:c6:fc:cc:c2:eb:7e:00:ad:51:5a:01:bd:
4d:68:74:96:91:c6:0a:c9:19:cf:d1:43:2d:5f:89:
88:61:63:29:f2:16:44:bb:4f:a3:71:f7:a5:2f:45:
33:dc:a6:bc:a6:2f:c0:7a:15:fb:97:88:34:83:a2:
bb:63:84:18:a8:d3:60:de:a2:6f:3e:08:c7:3c:74:
e2:b6:da:f8:a2:70:66:7d:83:b4:f1:42:44:68:a1:
34:37:d9:7a:c7:b5:c5:7f:d4:17:26:20:a3:a3:41:
0a:9e:77:f0:c7:53:b5:52:17:5a:a9:06:5c:07:c1:
5e:d1:5e:8e:81:53:2a:04:20:56:67:ed:c1:02:7e:
1a:2c:8e:99:08:d2:ff:a8:a7:39:70:ab:76:29:d7:
54:d0:fb:3e:a9:0a:e0:1a:c5:e8:96:20:08:04:3b:
e2:1b:06:03:4c:3b:04:dc:9d:99:25:b4:08:b2:b5:
1a:dc:f5:d9:e8:81:e3:95:a7:cb:a7:e3:12:ff:d7:
3c:8e:7f:4d:a9:1a:85:28:e7:f5:41:73:3f:e7:10:
c3:db:6c:b3:fe:c8:84:5b:f5:b2:3e:5c:98:5b:ff:
08:2f:7e:82:86:98:d4:bc:b5:31:3f:65:48:42:db:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:E9:25:94:CA:0D:18:69:98:39:25:8D:0F:46:21:C3:C4:4D:17
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/IfXpJZTKDRhpmDkljQ9GIcPETRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.24.0/24
194.242.33.0/24
194.242.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:92:0d:5b:51:2f:2d:16:b8:35:a9:69:45:39:0b:85:de:39:
3b:27:16:49:e4:c3:a1:eb:c3:7f:a4:51:fd:ca:ec:30:8b:08:
b1:a6:7b:64:cc:2d:c1:f1:64:6e:47:1e:cd:e4:0d:5d:57:37:
5e:a0:2f:56:4b:38:f6:cb:37:df:4e:d7:3d:88:13:e7:ec:e6:
f8:12:8d:21:c7:84:83:5f:ad:f5:16:cf:ea:65:88:58:59:26:
0c:78:1a:55:db:20:74:4f:5e:1d:60:28:be:46:88:39:6c:9d:
d6:38:24:3f:0e:5c:0d:09:7f:0d:49:56:13:8b:96:79:c0:93:
29:86:db:57:5c:63:a4:0e:25:b0:10:dd:1c:e5:30:31:f7:ed:
94:02:2a:65:d2:be:a2:11:4f:c3:0f:41:d0:e3:18:c5:a7:43:
f3:35:a5:89:88:3e:d9:d6:41:53:e0:55:a9:f3:51:72:df:b5:
f8:52:90:e2:80:c8:b3:39:b7:bc:14:b7:89:df:fb:c6:fe:44:
b5:4c:a8:f4:8d:5b:8b:c5:36:27:5b:dc:4d:4f:5b:e5:76:f7:
28:1e:cd:1d:da:40:a9:65:af:e6:5a:ba:3b:15:a7:4d:cf:43:
ca:bb:32:b0:5a:2a:cd:28:c2:bb:8f:37:ca:fe:82:1d:65:9f:
99:92:10:e3
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBnxNqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDM5Y2U0YzI5YWIzZjgwMmY5ZGU5MzNmNDQ5NTAyNmM0ZDBlZTRhMB4XDTIyMDEw
MTA1NTMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjFmNWU5MjU5NGNh
MGQxODY5OTgzOTI1OGQwZjQ2MjFjM2M0NGQxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCBVyfMRGDRxJ794hJzja6WxvzMwut+AK1RWgG9TWh0lpHG
CskZz9FDLV+JiGFjKfIWRLtPo3H3pS9FM9ymvKYvwHoV+5eINIOiu2OEGKjTYN6i
bz4Ixzx04rba+KJwZn2DtPFCRGihNDfZese1xX/UFyYgo6NBCp538MdTtVIXWqkG
XAfBXtFejoFTKgQgVmftwQJ+GiyOmQjS/6inOXCrdinXVND7PqkK4BrF6JYgCAQ7
4hsGA0w7BNydmSW0CLK1Gtz12eiB45Wny6fjEv/XPI5/TakahSjn9UFzP+cQw9ts
s/7IhFv1sj5cmFv/CC9+goaY1Ly1MT9lSELbYBcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQh9ekllMoNGGmYOSWND0Yhw8RNFzAfBgNVHSMEGDAWgBRtOc5MKas/gC+d
6TP0SVAmxNDuSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JUbk9UQ21yUDRBdm5la3o5RWxRSnNUUTdrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNDRlOGY1LTM1ODQtNDkwZS05OTc5LWNkYzMxZDVmYjhhNC8x
L0lmWHBKWlRLRFJocG1Ea2xqUTlHSWNQRVRSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NDRlOGY1LTM1ODQtNDkwZS05OTc5LWNkYzMxZDVmYjhhNC8xL2JUbk9UQ21yUDRB
dm5la3o5RWxRSnNUUTdrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMLVGAMEAMLyIQMEAMLyLTANBgkq
hkiG9w0BAQsFAAOCAQEAW5INW1EvLRa4NalpRTkLhd45OycWSeTDoevDf6RR/crs
MIsIsaZ7ZMwtwfFkbkcezeQNXVc3XqAvVks49ss3307XPYgT5+zm+BKNIceEg1+t
9RbP6mWIWFkmDHgaVdsgdE9eHWAovkaIOWyd1jgkPw5cDQl/DUlWE4uWecCTKYbb
V1xjpA4lsBDdHOUwMfftlAIqZdK+ohFPww9B0OMYxadD8zWliYg+2dZBU+BVqfNR
ct+1+FKQ4oDIszm3vBS3id/7xv5EtUyo9I1bi8U2J1vcTU9b5Xb3KB7NHdpAqWWv
5lq6OxWnTc9DyrsysFoqzSjCu483yv6CHWWfmZIQ4w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-fra.rpki-client.org