Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/dA-CGvk1IctmMf4N-hVauf4pvCk.roa
File: dA-CGvk1IctmMf4N-hVauf4pvCk.roa (raw, json)
Hash identifier: T7g393egOjjbCSdhztzhc4hMsR3+PdgQDhFrOTVvdyY=
Subject key identifier: 74:0F:82:1A:F9:35:21:CB:66:31:FE:0D:FA:15:5A:B9:FE:29:BC:29
Certificate issuer: /CN=b2d9401eca6c8a9306d10092bbe0c2e19500e97f
Certificate serial: 06C85869
Authority key identifier: B2:D9:40:1E:CA:6C:8A:93:06:D1:00:92:BB:E0:C2:E1:95:00:E9:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stlAHspsipMG0QCSu-DC4ZUA6X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/dA-CGvk1IctmMf4N-hVauf4pvCk.roa
Signing time: Sat 01 Jan 2022 09:00:29 +0000
ROA not before: Sat 01 Jan 2022 09:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43427
IP address blocks: 193.228.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113793129 (0x6c85869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d9401eca6c8a9306d10092bbe0c2e19500e97f
Validity
Not Before: Jan 1 09:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=740f821af93521cb6631fe0dfa155ab9fe29bc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:09:61:97:32:7c:6d:e8:35:1a:e9:41:39:
37:97:c5:cf:02:50:2a:68:aa:c8:dd:d6:7d:79:57:
e6:2a:0e:30:f3:db:b0:41:99:7f:cd:41:38:d0:72:
13:2d:aa:cf:76:61:b2:fc:15:3a:51:f4:f2:f7:3e:
79:06:7b:02:98:83:fb:c6:4c:9e:d3:95:c8:73:4b:
05:89:53:2c:b6:67:00:1c:dc:20:4e:17:67:aa:0c:
1c:18:12:46:51:90:d4:24:93:6f:55:45:64:5e:ab:
58:91:f8:fb:94:23:6e:83:9a:15:d5:76:0f:4f:b3:
89:33:cd:fd:77:77:53:56:e2:17:1b:8c:6f:b8:53:
ff:ee:d9:38:e4:fb:bc:ed:12:82:7d:20:32:72:de:
be:9f:b5:40:d6:3d:81:b2:81:01:43:98:b8:c1:ac:
39:b4:fd:6d:27:d8:a9:a1:06:2c:94:5a:9e:f2:ff:
1b:25:84:75:1c:5b:30:00:41:57:21:83:1d:95:d8:
6b:1b:5d:b6:83:c2:77:5e:cd:69:13:c1:25:ea:60:
8c:a2:43:b4:d4:01:5f:95:10:b8:c2:ed:23:d5:4e:
7f:c6:f7:5c:9a:c1:59:cb:fa:90:c8:68:62:18:0c:
55:c7:de:d7:ae:26:81:2d:15:f0:8d:17:2d:8c:98:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0F:82:1A:F9:35:21:CB:66:31:FE:0D:FA:15:5A:B9:FE:29:BC:29
X509v3 Authority Key Identifier:
keyid:B2:D9:40:1E:CA:6C:8A:93:06:D1:00:92:BB:E0:C2:E1:95:00:E9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stlAHspsipMG0QCSu-DC4ZUA6X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/dA-CGvk1IctmMf4N-hVauf4pvCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/stlAHspsipMG0QCSu-DC4ZUA6X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.151.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cb:82:04:e6:51:e9:f6:56:a5:c1:fe:53:f9:d9:2f:12:16:
00:8f:d4:63:3a:64:b8:ab:5a:1c:35:8c:36:d5:ad:7f:d5:b0:
58:4c:c8:94:ea:c4:e3:64:93:32:a0:95:e0:a0:02:4f:68:1d:
d7:8b:6f:c3:24:84:9c:42:31:ff:a4:74:3c:0b:21:32:10:d8:
a1:64:7f:9a:5f:0e:8b:23:42:93:09:9d:b4:18:49:91:f0:3a:
76:e2:f8:c0:47:ef:d3:b7:ce:57:58:8b:86:9d:fa:65:f1:42:
ea:5d:25:61:5b:0f:ac:5a:20:5d:2a:0a:6d:c8:70:98:4f:1d:
61:90:6a:c8:c7:36:fd:3c:85:91:f2:30:69:64:89:5b:9b:4a:
64:96:a9:57:ef:ad:50:d1:cf:e4:47:3d:29:87:a8:88:af:03:
46:34:b6:80:4a:71:bd:b8:a0:7e:31:3c:2d:78:ef:25:59:58:
78:ef:3f:64:8a:d4:90:8b:ec:2a:b2:cd:ca:d2:e2:28:f0:c4:
21:91:0c:ea:42:de:81:c5:76:93:cb:44:f8:63:e1:6e:23:de:
04:63:2f:e5:6b:d4:4f:3d:f8:0f:b2:0a:4a:67:7f:d7:eb:f1:
67:d3:fa:6c:26:08:00:12:b1:c2:04:50:ba:eb:ce:00:14:25:
5a:45:fb:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBshYaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MmQ5NDAxZWNhNmM4YTkzMDZkMTAwOTJiYmUwYzJlMTk1MDBlOTdmMB4XDTIyMDEw
MTA5MDAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzQwZjgyMWFmOTM1
MjFjYjY2MzFmZTBkZmExNTVhYjlmZTI5YmMyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJeSCWGXMnxt6DUa6UE5N5fFzwJQKmiqyN3WfXlX5ioOMPPb
sEGZf81BONByEy2qz3ZhsvwVOlH08vc+eQZ7ApiD+8ZMntOVyHNLBYlTLLZnABzc
IE4XZ6oMHBgSRlGQ1CSTb1VFZF6rWJH4+5QjboOaFdV2D0+ziTPN/Xd3U1biFxuM
b7hT/+7ZOOT7vO0Sgn0gMnLevp+1QNY9gbKBAUOYuMGsObT9bSfYqaEGLJRanvL/
GyWEdRxbMABBVyGDHZXYaxtdtoPCd17NaRPBJepgjKJDtNQBX5UQuMLtI9VOf8b3
XJrBWcv6kMhoYhgMVcfe164mgS0V8I0XLYyYUpUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR0D4Ia+TUhy2Yx/g36FVq5/im8KTAfBgNVHSMEGDAWgBSy2UAeymyKkwbR
AJK74MLhlQDpfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3N0bEFIc3BzaXBNRzBRQ1N1LURDNFpVQTZYOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvOTIyMGRhLTBmZDUtNGEyMi1hMTFiLWUxMzMyZTdmMDZmYy8x
L2RBLUNHdmsxSWN0bU1mNE4taFZhdWY0cHZDay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
OTIyMGRhLTBmZDUtNGEyMi1hMTFiLWUxMzMyZTdmMDZmYy8xL3N0bEFIc3BzaXBN
RzBRQ1N1LURDNFpVQTZYOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHklzANBgkqhkiG9w0BAQsFAAOC
AQEAmMuCBOZR6fZWpcH+U/nZLxIWAI/UYzpkuKtaHDWMNtWtf9WwWEzIlOrE42ST
MqCV4KACT2gd14tvwySEnEIx/6R0PAshMhDYoWR/ml8OiyNCkwmdtBhJkfA6duL4
wEfv07fOV1iLhp36ZfFC6l0lYVsPrFogXSoKbchwmE8dYZBqyMc2/TyFkfIwaWSJ
W5tKZJapV++tUNHP5Ec9KYeoiK8DRjS2gEpxvbigfjE8LXjvJVlYeO8/ZIrUkIvs
KrLNytLiKPDEIZEM6kLegcV2k8tE+GPhbiPeBGMv5WvUTz34D7IKSmd/1+vxZ9P6
bCYIABKxwgRQuuvOABQlWkX7wQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:47 2024 by rpki-client on console-fra.rpki-client.org