Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/IrYAlkiSrYhS4G2YylgHnRhHwiU.roa
File: IrYAlkiSrYhS4G2YylgHnRhHwiU.roa (raw, json)
Hash identifier: Ycit/Fy/LOVfeB/ffL2tNDFjmPtaMPAqWDsoxuF/KKU=
Subject key identifier: 22:B6:00:96:48:92:AD:88:52:E0:6D:98:CA:58:07:9D:18:47:C2:25
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0291EF69
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/IrYAlkiSrYhS4G2YylgHnRhHwiU.roa
Signing time: Sat 01 Jan 2022 11:59:28 +0000
ROA not before: Sat 01 Jan 2022 11:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203974
IP address blocks: 193.56.24.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43118441 (0x291ef69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 11:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22b600964892ad8852e06d98ca58079d1847c225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:b4:4a:9f:a8:24:34:a8:cf:f5:d6:11:9b:
7c:7f:ed:ce:0e:36:84:45:00:23:52:62:a8:89:d7:
99:f3:cf:fb:d5:4d:94:e2:0f:5d:72:0c:6c:52:3b:
d3:c1:92:9c:05:c6:cf:08:7a:a8:7c:d1:ac:14:14:
dc:f8:8b:11:94:7d:ea:f3:28:d2:e3:b6:29:ee:f0:
01:18:c9:d8:70:37:ee:c4:7b:10:e8:94:cf:01:28:
20:fb:fe:09:26:91:33:a7:04:66:f5:9c:2e:1d:81:
d7:c5:67:d3:c4:4b:a3:ea:34:01:6b:48:69:a6:e6:
b7:64:46:aa:c0:64:ac:b8:98:d4:39:f2:ef:04:b2:
e8:3c:d5:a9:8f:4b:07:0f:9c:4e:85:4d:4e:d7:08:
05:86:61:b1:8c:4c:37:31:a8:15:1f:e1:6e:bf:05:
00:83:e9:6c:e2:61:78:45:f0:0a:02:20:5d:e9:9a:
50:2e:4a:c7:68:54:cd:df:c5:d5:57:cd:7a:37:a6:
da:00:80:b3:5c:68:de:bb:11:7c:91:84:3c:f6:8f:
29:09:8f:84:4b:e6:d7:fb:18:c6:b4:93:f8:9b:ea:
e3:fd:ac:27:48:52:42:3f:7e:ef:b8:24:23:4d:43:
e9:73:62:4f:c5:d0:f4:48:c4:dd:19:04:0d:fc:58:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:00:96:48:92:AD:88:52:E0:6D:98:CA:58:07:9D:18:47:C2:25
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/IrYAlkiSrYhS4G2YylgHnRhHwiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:e4:1c:f6:b1:af:aa:03:01:7f:d0:86:68:b1:29:40:41:25:
7b:f3:b9:64:ab:30:4b:e3:3a:37:4d:45:8e:57:18:ce:db:d1:
5d:07:94:22:ea:98:c0:96:09:9c:10:16:ec:5e:8b:c1:8a:1d:
59:19:3b:b4:40:21:12:19:6b:c5:d3:d3:61:b6:c0:e2:e2:e0:
29:29:26:ce:ba:11:f9:20:bf:30:d5:c4:d7:a1:9a:ba:21:f4:
a4:5d:44:53:9d:fb:61:ad:4d:47:b0:39:e2:3a:73:4e:43:d8:
4b:58:aa:2d:2f:85:63:be:84:63:5a:2e:34:7f:0f:8c:b5:b9:
cf:e9:51:8c:33:5d:97:17:0c:7a:dd:3f:c8:b0:c0:38:81:c0:
b3:7b:38:3a:35:4d:4c:06:1f:39:52:69:89:97:cb:2f:92:cf:
a2:87:f6:b6:f8:5f:4a:b3:33:57:90:43:59:e1:86:bf:e5:f2:
61:c6:a5:10:7a:2d:9c:8b:44:c1:2b:46:54:1f:7e:a6:b4:ed:
33:ba:b5:2b:e7:19:92:c8:4b:e4:46:61:34:00:b6:42:61:27:
7d:46:2e:79:3c:5b:3d:af:91:d3:a4:11:51:35:40:47:a8:de:
c0:09:e8:6e:fd:06:c6:f3:a0:3f:f0:e2:d8:cf:67:a3:78:eb:
79:2a:2d:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEApHvaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDRkYjhiMDk4M2FjZjk3YTMyNTUxNTJjMmVhNTkyYWRhZTc3MzViMB4XDTIyMDEw
MTExNTkyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJiNjAwOTY0ODky
YWQ4ODUyZTA2ZDk4Y2E1ODA3OWQxODQ3YzIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKy/tEqfqCQ0qM/11hGbfH/tzg42hEUAI1JiqInXmfPP+9VN
lOIPXXIMbFI708GSnAXGzwh6qHzRrBQU3PiLEZR96vMo0uO2Ke7wARjJ2HA37sR7
EOiUzwEoIPv+CSaRM6cEZvWcLh2B18Vn08RLo+o0AWtIaabmt2RGqsBkrLiY1Dny
7wSy6DzVqY9LBw+cToVNTtcIBYZhsYxMNzGoFR/hbr8FAIPpbOJheEXwCgIgXema
UC5Kx2hUzd/F1VfNejem2gCAs1xo3rsRfJGEPPaPKQmPhEvm1/sYxrST+Jvq4/2s
J0hSQj9+77gkI01D6XNiT8XQ9EjE3RkEDfxYVbsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQitgCWSJKtiFLgbZjKWAedGEfCJTAfBgNVHSMEGDAWgBTETbiwmDrPl6Ml
UVLC6lkq2udzWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hFMjRzSmc2ejVlakpWRlN3dXBaS3RybmMxcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvNDM3ODk3LWFmNTgtNDk1OS04ZTc2LWVlZGQ5NGVjMTI4Yy8x
L0lyWUFsa2lTclloUzRHMll5bGdIblJoSHdpVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
NDM3ODk3LWFmNTgtNDk1OS04ZTc2LWVlZGQ5NGVjMTI4Yy8xL3hFMjRzSmc2ejVl
akpWRlN3dXBaS3RybmMxcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsE4GDANBgkqhkiG9w0BAQsFAAOC
AQEAfOQc9rGvqgMBf9CGaLEpQEEle/O5ZKswS+M6N01FjlcYztvRXQeUIuqYwJYJ
nBAW7F6LwYodWRk7tEAhEhlrxdPTYbbA4uLgKSkmzroR+SC/MNXE16GauiH0pF1E
U537Ya1NR7A54jpzTkPYS1iqLS+FY76EY1ouNH8PjLW5z+lRjDNdlxcMet0/yLDA
OIHAs3s4OjVNTAYfOVJpiZfLL5LPoof2tvhfSrMzV5BDWeGGv+XyYcalEHotnItE
wStGVB9+prTtM7q1K+cZkshL5EZhNAC2QmEnfUYueTxbPa+R06QRUTVAR6jewAno
bv0GxvOgP/Di2M9no3jreSotKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org