Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/YPqLQkwT7t3qJU0_GXB_wP8xDjY.roa
File: YPqLQkwT7t3qJU0_GXB_wP8xDjY.roa (raw, json)
Hash identifier: CqGqRSwWPOZIl/TnUmtNyLTqaLsD6xs1RpDV/iRw6ms=
Subject key identifier: 60:FA:8B:42:4C:13:EE:DD:EA:25:4D:3F:19:70:7F:C0:FF:31:0E:36
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 18A2E954
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/YPqLQkwT7t3qJU0_GXB_wP8xDjY.roa
Signing time: Sat 01 Jan 2022 14:07:44 +0000
ROA not before: Sat 01 Jan 2022 14:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12757
IP address blocks: 194.0.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413329748 (0x18a2e954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Jan 1 14:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60fa8b424c13eeddea254d3f19707fc0ff310e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:e0:65:27:ca:e1:a9:6c:ca:cd:1a:aa:70:
f1:39:e6:3d:22:9e:4f:9b:f5:ff:b9:20:c6:10:2c:
df:2f:eb:9c:03:44:4d:3a:7b:40:8e:dc:d5:49:94:
ca:2f:b9:3d:0f:e2:30:7e:d2:9b:44:56:53:f3:a8:
25:ca:e3:94:25:5f:a6:95:d6:d6:c4:46:a0:14:57:
ab:4c:ff:af:ed:b5:20:50:b3:02:64:c3:37:7d:c2:
29:32:21:9b:b0:99:a8:0a:ab:f3:d4:2c:82:de:c7:
2a:98:fd:5d:db:8e:2d:6b:56:a4:d9:19:2a:15:60:
86:06:ab:9c:72:d4:75:b1:8e:aa:47:cc:63:c3:8e:
a5:4f:ef:a4:2d:44:5b:be:35:41:fd:a8:e8:c1:38:
5c:de:17:cc:f4:d1:dc:0e:32:6a:93:ce:fd:cb:57:
86:7d:45:81:a7:3a:87:4d:ac:7f:c9:e4:38:4a:f2:
41:d4:7d:0f:2c:5a:58:64:ed:aa:ff:21:07:ce:8c:
42:1f:c1:2e:37:e2:59:d6:b8:b6:fb:b4:10:ca:ad:
63:a9:f0:79:18:71:b9:f7:7c:17:fe:b1:fa:6a:eb:
20:ec:52:29:20:72:cb:d4:32:2b:2a:84:9c:8e:0c:
07:66:34:63:7d:dc:6f:5a:01:4e:b2:13:a3:15:41:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:8B:42:4C:13:EE:DD:EA:25:4D:3F:19:70:7F:C0:FF:31:0E:36
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/YPqLQkwT7t3qJU0_GXB_wP8xDjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:af:c1:df:d9:15:c3:36:f6:63:5f:74:69:fd:31:bd:95:15:
96:3e:18:c5:3d:84:6f:b5:44:8d:55:01:e0:c4:60:3e:1c:7f:
e4:e0:af:0c:8d:48:57:33:6b:22:f9:33:84:c0:5d:4d:40:60:
9d:d6:80:33:dd:f1:81:bb:96:82:bb:a6:d0:67:af:f6:79:cd:
44:17:e8:1d:d1:3d:b7:82:9f:66:4a:7b:13:0e:85:2e:4c:c9:
2d:63:25:0d:a5:96:6b:18:30:22:5d:ec:a0:08:8a:68:43:f4:
26:e1:30:ee:4d:8b:31:a2:99:97:96:88:c7:e9:74:9c:c5:1d:
0c:dc:43:f4:c1:56:32:7d:9d:5f:4c:6f:96:73:21:30:8b:f0:
71:46:96:0a:b1:1d:d1:52:bc:0f:9f:76:47:a4:f4:19:4c:98:
4f:34:f4:ac:5a:f3:bd:89:66:2d:a1:c7:ca:39:6d:85:51:2e:
5b:81:e5:63:8d:8d:6f:cc:4e:28:bc:2d:42:ca:b6:3a:df:65:
9d:99:a0:67:27:23:7a:bb:7c:e6:5c:53:09:48:04:5d:26:1b:
65:42:88:86:05:be:93:79:95:9c:19:84:48:d5:33:0b:0c:a1:
a6:32:bb:95:63:16:34:60:0c:69:ef:ce:50:bb:77:84:56:19:
f5:1b:b8:bf
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGKLpVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjE1MWJmNTdmNTMxNmIyZGQ1Y2Q4YTNmNzk4NTI3ZWFjMTRiNzc0MB4XDTIyMDEw
MTE0MDc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjBmYThiNDI0YzEz
ZWVkZGVhMjU0ZDNmMTk3MDdmYzBmZjMxMGUzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL444GUnyuGpbMrNGqpw8TnmPSKeT5v1/7kgxhAs3y/rnANE
TTp7QI7c1UmUyi+5PQ/iMH7Sm0RWU/OoJcrjlCVfppXW1sRGoBRXq0z/r+21IFCz
AmTDN33CKTIhm7CZqAqr89Qsgt7HKpj9XduOLWtWpNkZKhVghgarnHLUdbGOqkfM
Y8OOpU/vpC1EW741Qf2o6ME4XN4XzPTR3A4yapPO/ctXhn1Fgac6h02sf8nkOEry
QdR9DyxaWGTtqv8hB86MQh/BLjfiWda4tvu0EMqtY6nweRhxufd8F/6x+mrrIOxS
KSByy9QyKyqEnI4MB2Y0Y33cb1oBTrIToxVB+WMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRg+otCTBPu3eolTT8ZcH/A/zEONjAfBgNVHSMEGDAWgBQSFRv1f1MWst1c
2KP3mFJ+rBS3dDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VoVWI5WDlURnJMZFhOaWo5NWhTZnF3VXQzUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzUwZDBjLTM4OGUtNGMwMC1iZWY0LTRkYzZhNGY0ZWU1NS8x
L1lQcUxRa3dUN3QzcUpVMF9HWEJfd1A4eERqWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzUwZDBjLTM4OGUtNGMwMC1iZWY0LTRkYzZhNGY0ZWU1NS8xL0VoVWI5WDlURnJM
ZFhOaWo5NWhTZnF3VXQzUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIAMzANBgkqhkiG9w0BAQsFAAOC
AQEAqa/B39kVwzb2Y190af0xvZUVlj4YxT2Eb7VEjVUB4MRgPhx/5OCvDI1IVzNr
IvkzhMBdTUBgndaAM93xgbuWgrum0Gev9nnNRBfoHdE9t4KfZkp7Ew6FLkzJLWMl
DaWWaxgwIl3soAiKaEP0JuEw7k2LMaKZl5aIx+l0nMUdDNxD9MFWMn2dX0xvlnMh
MIvwcUaWCrEd0VK8D592R6T0GUyYTzT0rFrzvYlmLaHHyjlthVEuW4HlY42Nb8xO
KLwtQsq2Ot9lnZmgZycjert85lxTCUgEXSYbZUKIhgW+k3mVnBmESNUzCwyhpjK7
lWMWNGAMae/OULt3hFYZ9Ru4vw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org