Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/Xr8QYUWDSu8Ay2Q_KusUYHfAsp0.roa
File: Xr8QYUWDSu8Ay2Q_KusUYHfAsp0.roa (raw, json)
Hash identifier: kItu3kKKjdW2sciyhblUiFwcg8DBg0SYYiG3mgZOALk=
Subject key identifier: 5E:BF:10:61:45:83:4A:EF:00:CB:64:3F:2A:EB:14:60:77:C0:B2:9D
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 1A3A587D
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/Xr8QYUWDSu8Ay2Q_KusUYHfAsp0.roa
Signing time: Sat 01 Jan 2022 14:54:59 +0000
ROA not before: Sat 01 Jan 2022 14:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8978
IP address blocks: 193.43.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440031357 (0x1a3a587d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Jan 1 14:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ebf106145834aef00cb643f2aeb146077c0b29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:b9:a1:9f:21:35:ec:26:5e:ae:f2:63:f8:
20:98:88:71:94:0e:e8:81:dc:4c:e6:b6:e3:fc:4c:
b3:f1:73:7b:23:59:20:f7:9e:e1:b7:88:10:5d:81:
9c:e7:10:1b:a3:bd:19:c1:b9:28:00:c4:34:a5:c2:
db:c5:30:e8:49:6f:5a:31:8f:60:51:49:2e:78:e6:
41:cc:e4:9b:f3:48:a9:eb:a8:41:a6:cd:66:5e:9d:
2e:c4:cb:ce:22:fd:a4:c7:d6:78:78:5a:7b:84:ea:
bf:1e:53:38:45:ac:76:45:8b:4d:f8:5a:ce:07:0f:
d7:d6:9e:d4:d4:29:b0:41:da:a3:50:3a:8f:30:ca:
92:08:d7:31:d1:72:cc:b4:f4:42:97:47:ce:5d:2d:
a2:ce:c5:7c:34:9b:dd:20:23:d6:50:87:16:ed:88:
74:27:60:4f:89:02:f0:48:04:92:c2:60:62:fe:e2:
7f:4d:7c:71:23:85:d6:ca:b0:a7:df:9b:f5:8d:8d:
4a:fe:35:8d:75:b6:27:f7:73:91:51:97:8f:9d:e5:
b5:9c:ad:cf:da:0a:b2:eb:8d:2d:9f:58:be:8b:68:
48:9b:51:72:29:35:64:9c:a0:65:e5:e2:ed:5c:fb:
85:0b:48:9d:f0:08:72:45:4d:b5:df:48:e5:76:dd:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:10:61:45:83:4A:EF:00:CB:64:3F:2A:EB:14:60:77:C0:B2:9D
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/Xr8QYUWDSu8Ay2Q_KusUYHfAsp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:2a:b1:3a:32:48:16:70:eb:1c:10:7f:86:78:1a:0b:04:f2:
0e:db:54:b5:17:28:74:e2:01:0e:2b:7a:8b:16:1d:1b:2f:99:
92:03:74:b6:af:1d:5b:dd:c6:4d:a9:a9:73:fb:8e:9e:cf:4b:
c2:34:d1:c7:ca:01:eb:7a:08:4a:d9:49:ca:53:0f:0e:1a:44:
cf:6d:59:3b:19:a0:3b:65:26:53:46:e1:b6:c9:4b:c7:d2:00:
d0:d0:b8:97:67:1e:38:32:fd:b4:70:07:b0:a6:cd:2c:47:ef:
00:e4:84:36:ba:2a:8c:63:1b:31:fd:16:60:30:30:fd:1c:be:
f1:39:40:a4:dc:90:4d:15:bf:ba:2c:c5:95:84:86:4d:86:b8:
e7:3f:de:e3:0a:fb:ac:b1:91:d7:f4:4a:eb:8d:89:80:ff:6a:
d6:01:49:d9:89:2e:a3:7f:3f:ee:71:e0:42:cb:2e:19:a9:1b:
f9:f0:7a:96:e8:e4:34:c5:88:eb:1b:6a:ac:03:bd:27:4f:cb:
d0:cb:2b:65:a8:02:03:96:67:bf:97:55:8b:09:93:1a:1d:1f:
be:9b:6d:55:2e:48:96:de:f1:e2:2e:4b:99:b1:73:92:58:6c:
c0:ff:56:e4:d9:30:e4:71:e3:d0:22:b8:d5:43:23:64:af:c2:
25:d4:84:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGjpYfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NTMzY2QyZDFmNmRjZjFlZWM5N2U4Njk0M2M0ZTUzYjBjODhlYWFlMB4XDTIyMDEw
MTE0NTQ1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWViZjEwNjE0NTgz
NGFlZjAwY2I2NDNmMmFlYjE0NjA3N2MwYjI5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTuuaGfITXsJl6u8mP4IJiIcZQO6IHcTOa24/xMs/FzeyNZ
IPee4beIEF2BnOcQG6O9GcG5KADENKXC28Uw6ElvWjGPYFFJLnjmQczkm/NIqeuo
QabNZl6dLsTLziL9pMfWeHhae4Tqvx5TOEWsdkWLTfhazgcP19ae1NQpsEHao1A6
jzDKkgjXMdFyzLT0QpdHzl0tos7FfDSb3SAj1lCHFu2IdCdgT4kC8EgEksJgYv7i
f018cSOF1sqwp9+b9Y2NSv41jXW2J/dzkVGXj53ltZytz9oKsuuNLZ9YvotoSJtR
cik1ZJygZeXi7Vz7hQtInfAIckVNtd9I5Xbd/6MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRevxBhRYNK7wDLZD8q6xRgd8CynTAfBgNVHSMEGDAWgBQVM80tH23PHuyX
6GlDxOU7DIjqrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZUUE5MUjl0eng3c2wtaHBROFRsT3d5STZxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvNTY1MTkxLWQ5ODEtNDFlNS05NjFjLTlmZTU1YjE3MTY4My8x
L1hyOFFZVVdEU3U4QXkyUV9LdXNVWUhmQXNwMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
NTY1MTkxLWQ5ODEtNDFlNS05NjFjLTlmZTU1YjE3MTY4My8xL0ZUUE5MUjl0eng3
c2wtaHBROFRsT3d5STZxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsErgDANBgkqhkiG9w0BAQsFAAOC
AQEADCqxOjJIFnDrHBB/hngaCwTyDttUtRcodOIBDit6ixYdGy+ZkgN0tq8dW93G
Tampc/uOns9LwjTRx8oB63oIStlJylMPDhpEz21ZOxmgO2UmU0bhtslLx9IA0NC4
l2ceODL9tHAHsKbNLEfvAOSENroqjGMbMf0WYDAw/Ry+8TlApNyQTRW/uizFlYSG
TYa45z/e4wr7rLGR1/RK642JgP9q1gFJ2Ykuo38/7nHgQssuGakb+fB6lujkNMWI
6xtqrAO9J0/L0MsrZagCA5Znv5dViwmTGh0fvpttVS5Ilt7x4i5LmbFzklhswP9W
5Nkw5HHj0CK41UMjZK/CJdSEeg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org