Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/XepGqbZnCR4G__Pbco_SxhRL_B0.roa
File: XepGqbZnCR4G__Pbco_SxhRL_B0.roa (raw, json)
Hash identifier: kdK5Ya9JzUltn8IUQSt2qWSnNhEZPG5YdfI0K2zI+5w=
Subject key identifier: 5D:EA:46:A9:B6:67:09:1E:06:FF:F3:DB:72:8F:D2:C6:14:4B:FC:1D
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 018294578D0FC9FE7A650E2E0194B5329B2C
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/XepGqbZnCR4G__Pbco_SxhRL_B0.roa
Signing time: Fri 12 Aug 2022 23:15:41 +0000
ROA not before: Fri 12 Aug 2022 23:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.193.166.0/24 maxlen: 24
185.193.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:94:57:8d:0f:c9:fe:7a:65:0e:2e:01:94:b5:32:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Aug 12 23:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dea46a9b667091e06fff3db728fd2c6144bfc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:94:e8:2f:36:8d:29:ac:4b:51:c3:82:27:
b1:bf:4f:dd:4f:d9:33:bf:ab:12:28:41:89:d1:a6:
1a:27:9a:75:b4:92:fa:7c:57:5d:34:88:0e:71:f3:
e4:75:d1:e6:17:ca:0f:b9:eb:a0:04:95:02:bc:f3:
43:54:ce:78:cb:ea:59:46:5f:54:88:74:41:5c:79:
7d:16:e8:2a:d4:c9:0c:10:1c:bc:14:c8:c3:05:10:
ca:7e:45:da:2f:18:ea:66:ac:7b:8c:53:c0:aa:3c:
09:6e:de:92:99:15:3a:14:bd:b6:57:c0:aa:1e:9b:
68:46:df:2f:bb:63:54:93:f5:66:7e:39:0f:8b:b8:
c6:fc:a5:85:75:4f:81:57:f1:54:2a:df:c8:5c:73:
e3:4c:8e:e7:f0:e5:41:fe:13:2d:fb:1b:96:12:63:
9c:ae:4a:d6:d1:6b:5e:b7:80:8e:a6:b1:0d:a6:19:
3d:2d:de:49:4f:b1:e5:e2:74:57:9c:c8:4d:23:d7:
72:85:d0:83:25:27:73:97:61:15:ff:22:de:d9:2b:
4a:f5:a6:05:13:7b:34:d6:57:bc:e7:e4:df:04:33:
1d:89:88:e0:cf:6e:22:b0:ea:5d:b9:59:52:23:aa:
c2:75:63:4e:5d:dd:31:fc:ea:ed:7a:36:87:2f:ee:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:46:A9:B6:67:09:1E:06:FF:F3:DB:72:8F:D2:C6:14:4B:FC:1D
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/XepGqbZnCR4G__Pbco_SxhRL_B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.165.0-185.193.166.255
Signature Algorithm: sha256WithRSAEncryption
6e:43:68:e0:af:b0:14:c9:0f:95:b5:79:3b:44:55:da:20:2a:
5e:39:47:eb:b9:af:ac:df:15:67:84:a2:5f:f1:93:e1:48:6f:
5b:ed:e7:c4:bc:ea:2b:f8:b9:13:5f:c8:83:41:17:0b:38:a3:
95:8e:81:ce:3d:b6:ac:be:e5:cf:f0:1b:f3:29:51:90:06:95:
73:02:81:f7:bd:49:5d:e9:9d:e8:20:41:91:51:9d:ce:18:df:
b0:21:75:72:6e:24:e1:f5:f5:e0:53:01:4e:53:77:4c:68:0f:
8e:90:da:29:5e:79:36:87:98:a5:da:ea:03:6c:4a:60:69:b8:
fd:ec:0c:aa:43:69:14:f2:dc:d6:2e:fc:5e:1b:47:62:b0:6c:
b5:4f:8f:83:18:af:c8:9f:27:03:57:c3:17:30:d2:5d:bd:fe:
9e:c4:f9:26:c3:ee:6d:ad:48:69:a2:3d:d4:9c:d6:ad:b7:32:
f7:38:10:0a:03:2c:bd:4f:82:9f:59:6f:4d:4a:51:53:cd:52:
58:6d:6f:d5:ba:3b:49:84:03:e7:c9:e1:7e:c8:ee:b0:17:d0:
17:2d:ed:fc:c3:7b:d6:a1:db:5c:16:77:37:c7:87:58:b8:cb:
be:75:c9:2b:4e:99:8b:c5:e5:25:65:d6:ec:76:6a:c8:9a:9e:
99:0b:34:ca
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYKUV40Pyf56ZQ4uAZS1MpssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjIwODEyMjMxNTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGVhNDZhOWI2NjcwOTFlMDZmZmYzZGI3MjhmZDJjNjE0NGJmYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ2U6C82jSmsS1HDgiexv0/dT9kz
v6sSKEGJ0aYaJ5p1tJL6fFddNIgOcfPkddHmF8oPueugBJUCvPNDVM54y+pZRl9U
iHRBXHl9Fugq1MkMEBy8FMjDBRDKfkXaLxjqZqx7jFPAqjwJbt6SmRU6FL22V8Cq
HptoRt8vu2NUk/VmfjkPi7jG/KWFdU+BV/FUKt/IXHPjTI7n8OVB/hMt+xuWEmOc
rkrW0Wtet4COprENphk9Ld5JT7Hl4nRXnMhNI9dyhdCDJSdzl2EV/yLe2StK9aYF
E3s01le85+TfBDMdiYjgz24isOpduVlSI6rCdWNOXd0x/OrtejaHL+4AmwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFF3qRqm2ZwkeBv/z23KP0sYUS/wdMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEvWGVwR3FiWm5DUjRHX19QYmNvX1N4aFJMX0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5waUD
BAC5waYwDQYJKoZIhvcNAQELBQADggEBAG5DaOCvsBTJD5W1eTtEVdogKl45R+u5
r6zfFWeEol/xk+FIb1vt58S86iv4uRNfyINBFws4o5WOgc49tqy+5c/wG/MpUZAG
lXMCgfe9SV3pneggQZFRnc4Y37AhdXJuJOH19eBTAU5Td0xoD46Q2ileeTaHmKXa
6gNsSmBpuP3sDKpDaRTy3NYu/F4bR2KwbLVPj4MYr8ifJwNXwxcw0l29/p7E+SbD
7m2tSGmiPdSc1q23Mvc4EAoDLL1Pgp9Zb01KUVPNUlhtb9W6O0mEA+fJ4X7I7rAX
0Bct7fzDe9ah21wWdzfHh1i4y751yStOmYvF5SVl1ux2asianpkLNMo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-fra.rpki-client.org