Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/w-S0IYeSactUOEmMjaHaGGKB_yU.roa
File: w-S0IYeSactUOEmMjaHaGGKB_yU.roa (raw, json)
Hash identifier: 4f79yPQAtoCPNWdHvHVEqLoaJi+27Q+HZ9Oi1100Tfk=
Subject key identifier: C3:E4:B4:21:87:92:69:CB:54:38:49:8C:8D:A1:DA:18:62:81:FF:25
Certificate issuer: /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial: 0A259AF4
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/w-S0IYeSactUOEmMjaHaGGKB_yU.roa
Signing time: Sat 01 Jan 2022 12:54:08 +0000
ROA not before: Sat 01 Jan 2022 12:54:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132372
IP address blocks: 193.160.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170236660 (0xa259af4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
Validity
Not Before: Jan 1 12:54:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3e4b421879269cb5438498c8da1da186281ff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:94:db:0b:17:f2:26:68:a2:9a:63:46:93:
95:96:15:e2:3c:e6:42:cf:8f:92:56:f7:e9:3a:4f:
7e:94:91:98:2d:a6:9b:b1:c0:d1:e8:27:8d:07:84:
9f:f7:a9:8f:4a:37:a8:bc:6c:bb:1e:d2:69:73:5d:
5a:14:92:85:83:34:10:80:04:7b:35:56:d4:dc:d6:
94:6e:13:46:40:4c:0c:7a:01:9e:0b:cd:45:65:95:
77:e2:81:a6:b1:cc:b1:49:9b:28:f0:a5:f5:c6:1d:
cb:3f:a4:d6:16:e0:3f:20:42:3c:90:ad:ac:6e:2b:
42:62:b4:08:04:32:64:e3:2d:c2:bc:93:67:ee:31:
bf:4b:8c:7c:97:87:63:d4:a0:5a:6e:1f:10:36:18:
de:9f:17:98:f5:e6:35:9d:65:1e:22:71:fc:e5:47:
03:e9:22:5c:da:74:36:de:16:8d:a2:c6:58:71:59:
99:0b:5a:b0:ed:fc:df:6e:39:dd:e4:e0:e9:af:d9:
21:5d:47:99:41:19:05:da:13:9c:23:3a:27:29:52:
16:ac:4c:41:d4:59:88:59:4f:cb:3f:62:b0:6f:f2:
cb:9c:d5:d2:f1:2c:ba:75:91:d5:4b:3e:60:78:c8:
c1:0d:11:83:81:0e:fd:88:b8:75:bc:72:48:ed:e5:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:B4:21:87:92:69:CB:54:38:49:8C:8D:A1:DA:18:62:81:FF:25
X509v3 Authority Key Identifier:
keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/w-S0IYeSactUOEmMjaHaGGKB_yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e0:f2:3b:83:90:ff:3d:e0:53:28:2c:b6:14:28:fe:e3:d6:
98:8c:04:9a:cd:2e:49:1a:ae:61:4c:d4:7b:ac:58:71:ca:53:
a8:58:0b:21:79:00:55:3d:aa:d1:55:3f:68:50:07:a1:55:b7:
22:c2:76:0f:8a:46:c0:eb:bb:e5:d6:47:34:26:b2:ba:ed:de:
ec:52:13:35:31:4f:ec:ca:a9:ea:3c:76:97:9a:6d:6b:6a:56:
04:64:68:2c:e4:00:3c:57:b1:bb:9c:42:dd:0e:41:25:7c:90:
78:e4:ce:96:0b:86:58:46:50:c8:ee:65:4e:83:c8:b9:14:97:
6f:54:84:2d:c4:ca:6c:04:c3:8f:ef:ad:59:90:f8:14:72:dc:
d3:d1:1d:fd:2f:ce:c1:34:b3:94:de:9d:3e:04:1a:c2:e3:a4:
d0:0a:1e:f7:e3:c0:f2:83:bd:23:b0:b0:02:4a:f7:0c:86:65:
0c:0d:32:de:56:a2:ae:1e:ba:95:b7:0c:63:60:6e:0d:6d:42:
8f:2f:aa:e2:61:46:44:4a:a1:a7:31:cc:83:2c:32:cb:5e:b4:
3f:5a:a1:0a:c4:dd:f6:8a:22:f4:52:79:19:f1:ad:b5:f6:4d:
28:be:d8:9f:57:54:ae:3d:df:42:b2:18:de:58:96:47:0e:fa:
3e:28:c0:4b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECiWa9DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Yzg0NzU2ZGM3NzJjMDY0ODMyNDlhOTg3YTNiMWJjNmU2MDVlODM1MB4XDTIyMDEw
MTEyNTQwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNlNGI0MjE4Nzky
NjljYjU0Mzg0OThjOGRhMWRhMTg2MjgxZmYyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKMllNsLF/ImaKKaY0aTlZYV4jzmQs+Pklb36TpPfpSRmC2m
m7HA0egnjQeEn/epj0o3qLxsux7SaXNdWhSShYM0EIAEezVW1NzWlG4TRkBMDHoB
ngvNRWWVd+KBprHMsUmbKPCl9cYdyz+k1hbgPyBCPJCtrG4rQmK0CAQyZOMtwryT
Z+4xv0uMfJeHY9SgWm4fEDYY3p8XmPXmNZ1lHiJx/OVHA+kiXNp0Nt4WjaLGWHFZ
mQtasO3832453eTg6a/ZIV1HmUEZBdoTnCM6JylSFqxMQdRZiFlPyz9isG/yy5zV
0vEsunWR1Us+YHjIwQ0Rg4EO/Yi4dbxySO3lDEECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTD5LQhh5Jpy1Q4SYyNodoYYoH/JTAfBgNVHSMEGDAWgBTchHVtx3LAZIMk
mph6OxvG5gXoNTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNJUjFiY2R5d0dTREpKcVllanNieHVZRjZEVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvZmRkOWVkLTcxN2MtNDYwZC04MWEzLTRjZDk5Y2Q1ZmIxYS8x
L3ctUzBJWWVTYWN0VU9FbU1qYUhhR0dLQl95VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
ZmRkOWVkLTcxN2MtNDYwZC04MWEzLTRjZDk5Y2Q1ZmIxYS8xLzNJUjFiY2R5d0dT
REpKcVllanNieHVZRjZEVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGgUjANBgkqhkiG9w0BAQsFAAOC
AQEAneDyO4OQ/z3gUygsthQo/uPWmIwEms0uSRquYUzUe6xYccpTqFgLIXkAVT2q
0VU/aFAHoVW3IsJ2D4pGwOu75dZHNCayuu3e7FITNTFP7Mqp6jx2l5pta2pWBGRo
LOQAPFexu5xC3Q5BJXyQeOTOlguGWEZQyO5lToPIuRSXb1SELcTKbATDj++tWZD4
FHLc09Ed/S/OwTSzlN6dPgQawuOk0Aoe9+PA8oO9I7CwAkr3DIZlDA0y3lairh66
lbcMY2BuDW1Cjy+q4mFGREqhpzHMgywyy160P1qhCsTd9ooi9FJ5GfGttfZNKL7Y
n1dUrj3fQrIY3liWRw76PijASw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-fra.rpki-client.org