Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CpurSuoXQ3_wx7OZM6xKjhvYqN0.roa
File: CpurSuoXQ3_wx7OZM6xKjhvYqN0.roa (raw, json)
Hash identifier: 7LSMBkAwMav01GaNKJghmBa91ItteA6ntbDUnOC3FhI=
Subject key identifier: 0A:9B:AB:4A:EA:17:43:7F:F0:C7:B3:99:33:AC:4A:8E:1B:D8:A8:DD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 275FE3F1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CpurSuoXQ3_wx7OZM6xKjhvYqN0.roa
Signing time: Sat 01 Jan 2022 16:07:53 +0000
ROA not before: Sat 01 Jan 2022 16:07:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20536
IP address blocks: 93.171.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660595697 (0x275fe3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a9bab4aea17437ff0c7b39933ac4a8e1bd8a8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:84:fc:37:df:08:57:1a:32:8b:62:e1:8a:
16:ca:1e:0c:f2:b6:2e:b1:68:18:2b:d4:07:ff:26:
80:0b:51:01:e2:61:5e:64:35:98:2e:cc:57:8b:3e:
48:aa:2e:23:b9:0d:b0:54:eb:cb:69:f0:f2:bf:66:
c9:a2:8c:39:40:85:29:65:38:87:8a:fb:b2:12:a5:
b5:13:f4:14:59:95:36:71:e9:b2:d3:17:de:bf:2d:
f5:80:7d:a2:17:5a:c0:ee:bf:62:2a:16:77:9a:1d:
cd:92:95:ed:4d:54:ab:27:bd:33:f6:91:12:93:46:
c6:91:a1:93:c0:eb:c6:23:59:3a:ee:64:46:8e:de:
08:fa:18:e5:3b:af:a1:e2:78:a1:11:81:b1:8e:f8:
c6:7d:01:dd:0b:63:cc:9d:65:20:4d:b5:7e:e4:2c:
6d:1e:60:7d:fe:ce:93:c8:ef:d7:18:79:08:89:f0:
f2:ea:4c:6e:ac:45:6a:8c:8a:4f:50:af:04:28:60:
ac:10:99:bd:c0:ea:12:c6:cc:21:1a:99:5c:dd:1b:
c0:93:7c:14:00:23:37:13:5d:8b:80:9b:92:c5:9d:
83:dc:30:05:2e:32:78:5b:b8:20:ac:46:d6:f1:49:
e9:f6:89:6a:77:5a:6b:20:61:b9:0d:a3:61:43:36:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:AB:4A:EA:17:43:7F:F0:C7:B3:99:33:AC:4A:8E:1B:D8:A8:DD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CpurSuoXQ3_wx7OZM6xKjhvYqN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.5.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4d:b3:54:2f:2a:55:87:25:75:d9:41:85:95:bb:90:ae:cc:
7b:6b:a8:e1:23:8c:ff:c0:8c:cf:01:0b:e7:4b:38:cf:96:59:
3d:9c:90:b0:b6:aa:d0:b8:77:37:51:b7:93:f7:d7:c9:25:83:
63:ac:78:e2:f5:6a:b7:d2:d6:82:bf:93:c6:58:e3:2c:58:6c:
f4:c2:5c:83:87:32:98:58:59:d2:65:0a:8f:32:ba:e1:42:b4:
b2:dd:dd:f8:ab:c0:c3:1d:b3:40:ec:3d:85:fa:ac:a9:22:46:
da:b7:52:6c:f2:05:f6:af:51:76:14:01:42:77:ea:e9:8a:2b:
db:62:94:8d:43:4a:ed:cb:3e:aa:3e:0a:ae:71:f5:ab:42:8f:
51:be:f5:8c:52:e9:ac:81:0f:65:aa:08:3e:0b:64:8f:79:37:
41:3b:10:c5:30:59:4e:34:bf:49:33:d4:9a:f6:ac:c4:d7:91:
99:95:8d:57:f6:e9:ed:6d:e1:a5:15:b8:cc:a6:be:a1:e8:05:
5d:5c:e3:36:5b:48:dc:42:1b:e0:94:31:6b:ba:74:69:33:e8:
19:4a:4e:67:56:72:51:14:51:c1:c6:c8:a9:a3:d2:20:9d:62:
3d:c1:d0:93:1b:0b:3d:f1:f3:30:3f:cc:08:46:ca:33:b9:56:
9e:46:29:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ1/j8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDc1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE5YmFiNGFlYTE3
NDM3ZmYwYzdiMzk5MzNhYzRhOGUxYmQ4YThkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMPhPw33whXGjKLYuGKFsoeDPK2LrFoGCvUB/8mgAtRAeJh
XmQ1mC7MV4s+SKouI7kNsFTry2nw8r9myaKMOUCFKWU4h4r7shKltRP0FFmVNnHp
stMX3r8t9YB9ohdawO6/YioWd5odzZKV7U1Uqye9M/aREpNGxpGhk8DrxiNZOu5k
Ro7eCPoY5TuvoeJ4oRGBsY74xn0B3QtjzJ1lIE21fuQsbR5gff7Ok8jv1xh5CInw
8upMbqxFaoyKT1CvBChgrBCZvcDqEsbMIRqZXN0bwJN8FAAjNxNdi4CbksWdg9ww
BS4yeFu4IKxG1vFJ6faJandaayBhuQ2jYUM2mGkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKm6tK6hdDf/DHs5kzrEqOG9io3TAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0NwdXJTdW9YUTNfd3g3T1pNNnhLamh2WXFOMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2rBTANBgkqhkiG9w0BAQsFAAOC
AQEAAU2zVC8qVYclddlBhZW7kK7Me2uo4SOM/8CMzwEL50s4z5ZZPZyQsLaq0Lh3
N1G3k/fXySWDY6x44vVqt9LWgr+TxljjLFhs9MJcg4cymFhZ0mUKjzK64UK0st3d
+KvAwx2zQOw9hfqsqSJG2rdSbPIF9q9RdhQBQnfq6Yor22KUjUNK7cs+qj4KrnH1
q0KPUb71jFLprIEPZaoIPgtkj3k3QTsQxTBZTjS/STPUmvasxNeRmZWNV/bp7W3h
pRW4zKa+oegFXVzjNltI3EIb4JQxa7p0aTPoGUpOZ1ZyURRRwcbIqaPSIJ1iPcHQ
kxsLPfHzMD/MCEbKM7lWnkYpmw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org