Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Xn7R4z07HHpTDKYv8o5fyChxlJA.roa
File: Xn7R4z07HHpTDKYv8o5fyChxlJA.roa (raw, json)
Hash identifier: FqMTBya6HzZ07O+NnadyhLIbkGvGoFF845Ir4LnbC0c=
Subject key identifier: 5E:7E:D1:E3:3D:3B:1C:7A:53:0C:A6:2F:F2:8E:5F:C8:28:71:94:90
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 097E5495
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Xn7R4z07HHpTDKYv8o5fyChxlJA.roa
Signing time: Thu 03 Feb 2022 12:27:10 +0000
ROA not before: Thu 03 Feb 2022 12:27:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.193.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159274133 (0x97e5495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Feb 3 12:27:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e7ed1e33d3b1c7a530ca62ff28e5fc828719490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:73:f9:66:53:9c:ca:44:a0:94:08:7d:46:
5f:c5:7e:fb:e4:ba:a3:10:29:fa:ff:81:26:72:2c:
d1:46:7e:fa:0a:16:31:be:a8:13:a3:c7:ae:f3:f1:
39:d3:e1:26:74:a8:38:6f:5f:03:de:7f:7d:dd:c6:
b9:b9:c2:6d:54:58:16:ad:59:41:ea:77:c0:78:97:
f2:35:d4:10:de:c9:d7:42:8d:00:8c:28:3b:9a:40:
41:44:dd:a3:05:c6:1c:5c:f7:8b:d6:7c:d4:66:48:
30:a3:82:75:97:41:38:69:a7:bd:03:5a:d0:c3:90:
58:1e:40:b9:7d:8c:33:6b:fa:da:b7:2d:b7:8d:29:
b8:5e:06:6b:18:21:f9:f3:67:a8:e3:4f:a6:3d:f4:
ea:81:e0:4d:3c:61:fd:c1:d7:55:08:50:dd:f3:bb:
9b:06:67:c1:6c:07:60:53:ae:b9:9f:61:8e:7e:cc:
af:61:da:b0:96:c1:c2:9a:a4:ef:12:c6:a3:09:7d:
67:b2:18:e2:fc:65:d0:f4:cb:ef:af:08:2e:3e:ff:
86:45:9e:78:f9:ad:9e:53:a0:22:9b:b4:7e:5a:bb:
d2:4a:5c:e7:8c:c5:61:04:1a:3d:6c:72:21:9d:28:
dd:92:97:1c:1a:50:ac:1a:67:1b:f0:e9:8c:d9:2b:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:D1:E3:3D:3B:1C:7A:53:0C:A6:2F:F2:8E:5F:C8:28:71:94:90
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Xn7R4z07HHpTDKYv8o5fyChxlJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:82:a1:2c:0d:9f:ab:70:9e:c5:d6:91:64:20:e6:5c:f0:a7:
40:ed:67:10:73:1e:18:00:f9:28:68:cc:5d:11:c3:b8:63:95:
5f:01:60:03:48:01:93:55:d3:6d:93:f4:64:64:08:a0:61:73:
6b:09:b9:df:7f:48:ab:87:74:bc:31:6b:38:e5:58:9e:73:20:
bb:79:c1:cd:0a:eb:95:00:a8:be:9c:98:01:1d:d4:87:c2:74:
d1:4c:41:23:bd:46:3d:57:d4:0f:8d:f1:57:0a:5b:a0:c1:e1:
b6:42:96:c9:9a:3a:6f:a0:1d:31:08:91:10:30:f0:13:eb:e0:
53:3f:06:82:51:37:ee:c4:48:96:ea:ec:6f:06:60:9e:af:cb:
c8:1b:9a:f5:f3:de:70:4c:89:63:f9:c0:6e:31:d4:7a:5a:3c:
b9:23:63:c5:f3:5c:2e:41:47:e0:10:2a:7f:a9:2c:cb:7c:32:
bb:11:08:32:90:ed:ea:d4:56:f5:ee:5f:3b:94:ed:93:95:55:
41:b5:e1:28:90:a1:0f:1a:9e:eb:10:c7:d8:99:e7:ff:a1:be:
7f:05:30:ce:2c:02:7b:53:09:b3:a5:bc:a4:bc:4c:f7:fd:c1:
4a:26:a1:6b:48:bd:e8:6d:8c:e6:b4:fa:04:97:a4:0b:5f:2a:
31:c6:b8:e0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECX5UlTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWQ2YjU5YTkzZTMyNDA4M2ZiY2E0MjM3ZTQ3ZTlmNWViZjM3MWFiMB4XDTIyMDIw
MzEyMjcxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWU3ZWQxZTMzZDNi
MWM3YTUzMGNhNjJmZjI4ZTVmYzgyODcxOTQ5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJzdc/lmU5zKRKCUCH1GX8V+++S6oxAp+v+BJnIs0UZ++goW
Mb6oE6PHrvPxOdPhJnSoOG9fA95/fd3GubnCbVRYFq1ZQep3wHiX8jXUEN7J10KN
AIwoO5pAQUTdowXGHFz3i9Z81GZIMKOCdZdBOGmnvQNa0MOQWB5AuX2MM2v62rct
t40puF4Gaxgh+fNnqONPpj306oHgTTxh/cHXVQhQ3fO7mwZnwWwHYFOuuZ9hjn7M
r2HasJbBwpqk7xLGowl9Z7IY4vxl0PTL768ILj7/hkWeePmtnlOgIpu0flq70kpc
54zFYQQaPWxyIZ0o3ZKXHBpQrBpnG/DpjNkrTp8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBReftHjPTscelMMpi/yjl/IKHGUkDAfBgNVHSMEGDAWgBTJ1rWak+MkCD+8
pCN+R+n16/NxqzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lkYTFtcFBqSkFnX3ZLUWpma2ZwOWV2emNhcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvNjgyYjA3LTc3M2YtNDZmZC04MmUyLWI5MjExZTFmYzFhYy8x
L1huN1I0ejA3SEhwVERLWXY4bzVmeUNoeGxKQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
NjgyYjA3LTc3M2YtNDZmZC04MmUyLWI5MjExZTFmYzFhYy8xL3lkYTFtcFBqSkFn
X3ZLUWpma2ZwOWV2emNhcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnBpzANBgkqhkiG9w0BAQsFAAOC
AQEAoYKhLA2fq3CexdaRZCDmXPCnQO1nEHMeGAD5KGjMXRHDuGOVXwFgA0gBk1XT
bZP0ZGQIoGFzawm5339Iq4d0vDFrOOVYnnMgu3nBzQrrlQCovpyYAR3Uh8J00UxB
I71GPVfUD43xVwpboMHhtkKWyZo6b6AdMQiREDDwE+vgUz8GglE37sRIlursbwZg
nq/LyBua9fPecEyJY/nAbjHUelo8uSNjxfNcLkFH4BAqf6ksy3wyuxEIMpDt6tRW
9e5fO5Ttk5VVQbXhKJChDxqe6xDH2Jnn/6G+fwUwziwCe1MJs6W8pLxM9/3BSiah
a0i96G2M5rT6BJekC18qMca44A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:41 2024 by rpki-client on console-ams.rpki-client.org