Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/IXcP_3CEQX9QtRlmLBTqIPT6vZs.roa
File: IXcP_3CEQX9QtRlmLBTqIPT6vZs.roa (raw, json)
Hash identifier: /1goRyQ4iGx1iD77R+/M2qSrMW4GUYEsBFpXVsM+QFE=
Subject key identifier: 21:77:0F:FF:70:84:41:7F:50:B5:19:66:2C:14:EA:20:F4:FA:BD:9B
Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial: 018AADCEDE67B321FF768EB59050CFE6EEEC
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/IXcP_3CEQX9QtRlmLBTqIPT6vZs.roa
Signing time: Tue 19 Sep 2023 14:18:50 +0000
ROA not before: Tue 19 Sep 2023 14:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48584
IP address blocks: 193.68.114.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:ce:de:67:b3:21:ff:76:8e:b5:90:50:cf:e6:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Validity
Not Before: Sep 19 14:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21770fff7084417f50b519662c14ea20f4fabd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:c5:97:a7:c9:21:7a:7d:f0:24:30:6b:b7:
15:37:00:5a:4f:6f:62:37:e4:b6:1b:c6:a0:50:c4:
28:21:df:40:d2:30:5b:b8:5a:26:e1:7e:d0:a1:cd:
be:7b:6f:00:49:37:db:8c:78:8a:bb:f8:3b:40:ef:
a7:10:c8:02:53:60:99:47:4c:19:66:4d:48:e2:6d:
46:8d:3c:98:52:89:a6:43:b6:2e:2c:8e:d1:fc:2c:
ab:24:d6:08:46:97:93:06:d3:05:ee:cc:9d:80:91:
22:f5:bf:dd:55:4f:ec:14:a2:7a:7f:f3:1e:fa:01:
c1:93:cf:ad:7e:ec:91:cd:71:e0:bd:9d:e0:6b:a7:
67:1e:cd:a6:ce:0b:c4:2b:1d:8f:d9:ab:2b:54:55:
11:ed:6d:27:60:51:e9:22:bd:78:7b:d6:fe:82:74:
c2:da:a5:3a:51:fa:c2:07:76:f0:c6:44:66:de:d9:
88:86:3c:1b:aa:da:d5:e5:83:1f:20:b8:f1:bd:a1:
e2:55:09:27:f4:76:85:2b:47:9a:65:1f:7c:1e:da:
18:7a:41:ec:9b:f3:50:00:7f:6d:ae:4b:31:26:15:
88:b1:28:36:40:44:be:38:25:e9:44:9a:33:8e:31:
57:de:7f:de:cc:c5:6d:c9:b5:2a:7f:80:4d:a9:57:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:0F:FF:70:84:41:7F:50:B5:19:66:2C:14:EA:20:F4:FA:BD:9B
X509v3 Authority Key Identifier:
keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/IXcP_3CEQX9QtRlmLBTqIPT6vZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.114.0/23
Signature Algorithm: sha256WithRSAEncryption
20:dd:cc:60:29:0e:36:ae:aa:4f:54:e2:ab:5d:88:93:bd:12:
8f:8f:b9:f0:d7:52:34:79:00:74:03:4e:ff:27:d8:1b:8c:fd:
83:c4:09:bd:8a:8d:8c:37:2b:92:99:af:96:34:27:b7:b1:7d:
b0:88:4a:cb:84:5c:54:7b:df:27:87:0d:d9:4f:55:8e:9f:0e:
d1:da:16:c2:10:60:66:6d:90:90:14:1d:00:0a:c3:74:1c:d0:
d0:0c:3c:51:2d:92:c3:c4:8d:68:fa:3f:f0:32:40:3c:0f:2d:
82:8d:60:11:50:2d:e0:3d:45:3a:c6:1b:0f:aa:79:79:14:ed:
38:e3:4d:1b:23:ff:5f:bf:da:f2:ed:7f:be:c6:f1:1b:87:9f:
9e:65:82:b6:34:9f:97:71:75:fc:30:11:dc:d1:7c:73:83:6f:
76:6a:5f:92:55:fe:e8:3b:2b:2c:fa:f2:6b:0b:bb:11:86:c3:
20:df:05:ae:7a:6c:82:7c:f3:80:e6:64:c1:ec:86:8d:21:f3:
f9:5f:1a:59:18:eb:9c:97:1e:0e:9b:63:89:48:50:33:89:97:
82:53:cf:37:40:2d:74:a1:ee:90:a4:1d:23:ac:b0:8f:6c:4f:
46:95:7c:cb:fa:66:78:9b:42:99:b3:b0:68:13:18:1f:51:82:
70:d7:7f:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqtzt5nsyH/do61kFDP5u7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi
MjBmNTcwHhcNMjMwOTE5MTQxODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTc3MGZmZjcwODQ0MTdmNTBiNTE5NjYyYzE0ZWEyMGY0ZmFiZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb/Fl6fJIXp98CQwa7cVNwBaT29i
N+S2G8agUMQoId9A0jBbuFom4X7Qoc2+e28ASTfbjHiKu/g7QO+nEMgCU2CZR0wZ
Zk1I4m1GjTyYUommQ7YuLI7R/CyrJNYIRpeTBtMF7sydgJEi9b/dVU/sFKJ6f/Me
+gHBk8+tfuyRzXHgvZ3ga6dnHs2mzgvEKx2P2asrVFUR7W0nYFHpIr14e9b+gnTC
2qU6UfrCB3bwxkRm3tmIhjwbqtrV5YMfILjxvaHiVQkn9HaFK0eaZR98HtoYekHs
m/NQAH9trksxJhWIsSg2QES+OCXpRJozjjFX3n/ezMVtybUqf4BNqVfwnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCF3D/9whEF/ULUZZiwU6iD0+r2bMB8GA1UdIwQY
MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt
NDlkNDBhMTNjYmMyLzEvSVhjUF8zQ0VRWDlRdFJsbUxCVHFJUFQ2dlpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy
LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwURyMA0G
CSqGSIb3DQEBCwUAA4IBAQAg3cxgKQ42rqpPVOKrXYiTvRKPj7nw11I0eQB0A07/
J9gbjP2DxAm9io2MNyuSma+WNCe3sX2wiErLhFxUe98nhw3ZT1WOnw7R2hbCEGBm
bZCQFB0ACsN0HNDQDDxRLZLDxI1o+j/wMkA8Dy2CjWARUC3gPUU6xhsPqnl5FO04
400bI/9fv9ry7X++xvEbh5+eZYK2NJ+XcXX8MBHc0Xxzg292al+SVf7oOyss+vJr
C7sRhsMg3wWuemyCfPOA5mTB7IaNIfP5XxpZGOuclx4Om2OJSFAziZeCU883QC10
oe6QpB0jrLCPbE9GlXzL+mZ4m0KZs7BoExgfUYJw13+R
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:45 2025 by rpki-client