Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/Z3cW0kBSoRV6scxt6dLr5KoPdnA.roa
File: Z3cW0kBSoRV6scxt6dLr5KoPdnA.roa (raw, json)
Hash identifier: eSwrEP/JSY3CCpExjBj37AibkmD9DuHKulMtnsmEu1E=
Subject key identifier: 67:77:16:D2:40:52:A1:15:7A:B1:CC:6D:E9:D2:EB:E4:AA:0F:76:70
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 6E45
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/Z3cW0kBSoRV6scxt6dLr5KoPdnA.roa
Signing time: Fri 11 Mar 2022 09:54:28 +0000
ROA not before: Fri 11 Mar 2022 09:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.100.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28229 (0x6e45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Mar 11 09:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=677716d24052a1157ab1cc6de9d2ebe4aa0f7670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:78:02:da:03:aa:e6:2c:f7:a3:56:59:f3:
c4:0b:77:f8:f4:79:13:f3:c0:81:c0:a7:48:2e:09:
99:fe:c8:cf:89:15:b5:30:22:9c:96:e9:f7:c4:4d:
89:7b:1a:64:55:1e:22:a3:1c:80:d3:12:4f:50:e2:
44:75:c8:59:4d:bf:36:8e:14:01:1c:d8:90:1d:ba:
81:91:e3:19:3b:d3:c9:5d:78:d7:b3:88:c8:e3:84:
11:71:28:5d:02:42:83:5c:19:af:93:62:a2:4b:86:
a2:2e:3a:a4:da:8c:b4:2f:22:ba:19:f7:c4:46:f2:
af:a4:c4:a3:6b:e5:69:5d:5a:8f:e6:67:f8:63:8f:
e2:4e:e3:f8:c8:7d:b4:30:6f:a9:e2:4c:8b:01:f5:
03:fa:a4:8f:71:94:cd:a6:26:16:09:f2:dc:5e:28:
24:c0:6a:cb:05:5c:02:0f:9c:a5:1a:c2:a4:79:67:
4c:4f:41:dc:86:e7:89:b9:4e:4d:66:f3:ce:83:5c:
87:89:9c:8a:61:81:21:bf:ce:0b:87:5c:e7:a0:e3:
6c:c3:26:f9:e3:d6:bb:f8:b9:48:9c:ac:5a:de:1d:
bf:90:d3:37:c8:e1:c2:77:bc:9c:9d:92:4a:88:97:
ad:1f:12:e5:18:ae:9c:21:9d:f1:bb:f4:de:94:aa:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:16:D2:40:52:A1:15:7A:B1:CC:6D:E9:D2:EB:E4:AA:0F:76:70
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/Z3cW0kBSoRV6scxt6dLr5KoPdnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.167.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5a:cd:40:b4:f8:47:25:36:37:99:f3:af:3b:39:a8:38:1c:
bd:0b:a6:e3:2c:06:56:2e:f1:0f:ce:7e:18:57:f3:61:fe:ad:
54:35:4a:8d:27:1f:eb:01:e7:76:24:64:9d:28:81:db:fd:80:
30:75:f0:b0:38:82:c4:9b:50:06:bf:ce:20:69:29:7f:92:91:
4e:ed:05:40:b8:33:22:d0:b8:f8:e1:e8:d8:63:a6:48:f9:69:
45:f6:0c:16:2a:57:ba:01:38:a4:c0:6f:00:41:b5:fa:78:e7:
dd:17:82:75:ef:c5:3a:7f:69:91:9e:ba:4f:bb:83:1f:7e:5e:
d7:57:6e:9c:6e:4c:95:5b:47:e9:b8:11:78:9e:45:07:8f:16:
67:dc:bc:a6:97:80:07:a9:38:14:73:33:58:fb:16:29:5d:8b:
6a:29:50:ba:3e:70:29:48:11:cf:af:a2:91:bd:6b:58:f3:37:
3b:17:7b:47:cd:b0:fc:1c:47:e7:66:54:b0:f6:b7:06:09:fa:
b1:7b:e2:7f:7f:53:ac:38:39:6a:e2:de:2e:92:0d:2e:c8:12:
ab:00:03:3d:c4:ae:0f:82:01:95:8d:5d:08:78:ad:2d:cb:b2:
29:70:ce:20:8c:17:cd:aa:c4:f2:af:69:13:12:cc:bb:b8:fb:
c2:e3:8b:4e
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICbkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZWRj
M2RmMDQ2ZTFlMWQ1YmYwNTIyYmI5MTNmMjk1NzI4N2E0OWI0YjAeFw0yMjAzMTEw
OTU0MjhaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY3NzcxNmQyNDA1MmEx
MTU3YWIxY2M2ZGU5ZDJlYmU0YWEwZjc2NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClI3gC2gOq5iz3o1ZZ88QLd/j0eRPzwIHAp0guCZn+yM+JFbUw
IpyW6ffETYl7GmRVHiKjHIDTEk9Q4kR1yFlNvzaOFAEc2JAduoGR4xk708ldeNez
iMjjhBFxKF0CQoNcGa+TYqJLhqIuOqTajLQvIroZ98RG8q+kxKNr5WldWo/mZ/hj
j+JO4/jIfbQwb6niTIsB9QP6pI9xlM2mJhYJ8txeKCTAassFXAIPnKUawqR5Z0xP
QdyG54m5Tk1m886DXIeJnIphgSG/zguHXOeg42zDJvnj1rv4uUicrFreHb+Q0zfI
4cJ3vJydkkqIl60fEuUYrpwhnfG79N6UqnKTAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUZ3cW0kBSoRV6scxt6dLr5KoPdnAwHwYDVR0jBBgwFoAU7cPfBG4eHVvwUiu5
E/KVcoekm0swDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83
Y1BmQkc0ZUhWdndVaXU1RV9LVmNvZWttMHMuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzRmL2FmZDYxMS05YWMwLTQxNGUtYmU0NC01MjNlNDQ1ZjkwZGMvMS9a
M2NXMGtCU29SVjZzY3h0NmRMcjVLb1BkbkEucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2Fm
ZDYxMS05YWMwLTQxNGUtYmU0NC01MjNlNDQ1ZjkwZGMvMS83Y1BmQkc0ZUhWdndV
aXU1RV9LVmNvZWttMHMuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBZKcwDQYJKoZIhvcNAQELBQADggEB
ADBazUC0+EclNjeZ8687Oag4HL0LpuMsBlYu8Q/OfhhX82H+rVQ1So0nH+sB53Yk
ZJ0ogdv9gDB18LA4gsSbUAa/ziBpKX+SkU7tBUC4MyLQuPjh6Nhjpkj5aUX2DBYq
V7oBOKTAbwBBtfp4590XgnXvxTp/aZGeuk+7gx9+XtdXbpxuTJVbR+m4EXieRQeP
FmfcvKaXgAepOBRzM1j7Fildi2opULo+cClIEc+vopG9a1jzNzsXe0fNsPwcR+dm
VLD2twYJ+rF74n9/U6w4OWri3i6SDS7IEqsAAz3Erg+CAZWNXQh4rS3LsilwziCM
F82qxPKvaRMSzLu4+8Lji04=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:48 2023 by rpki-client on console-ams.rpki-client.org