Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/E_ZwcIIGX7QImmuKOrBmW049daw.roa
File: E_ZwcIIGX7QImmuKOrBmW049daw.roa (raw, json)
Hash identifier: WlSklhcKM4ekYIOtG/W7vjoJtudruwgiei5wmFAMRjI=
Subject key identifier: 13:F6:70:70:82:06:5F:B4:08:9A:6B:8A:3A:B0:66:5B:4E:3D:75:AC
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4496B67E
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/E_ZwcIIGX7QImmuKOrBmW049daw.roa
Signing time: Sat 01 Jan 2022 03:58:41 +0000
ROA not before: Sat 01 Jan 2022 03:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206443
IP address blocks: 194.2.82.0/24 maxlen: 24
194.2.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150727806 (0x4496b67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13f6707082065fb4089a6b8a3ab0665b4e3d75ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:ec:99:99:0f:26:10:b5:f4:7c:28:cf:2c:
ee:5e:4e:11:4f:ef:13:43:17:de:78:c3:74:e7:8d:
6f:f4:ba:e8:5e:d0:1b:cb:05:27:5b:60:b0:db:ff:
b7:a0:a8:c5:a5:b6:1a:dc:7b:d2:28:91:b3:4e:74:
f3:4b:83:3c:b6:a3:0b:f5:19:42:fa:7e:98:a3:39:
58:a8:8b:54:25:1b:b7:4c:28:b4:f5:5f:52:89:6a:
50:0e:d0:a9:7b:74:e1:a1:96:0d:2b:36:b7:f5:ba:
be:b8:a8:b6:87:56:e7:91:bd:c9:66:fc:74:65:1d:
7e:c3:74:49:f6:93:a3:af:f4:46:fe:6c:67:6a:a9:
42:27:53:4f:74:39:90:c3:69:38:16:e7:6d:4f:fc:
89:9f:b0:d4:c0:62:18:ab:25:9a:32:4c:2f:f2:47:
31:97:29:68:13:4a:a9:53:1b:78:8e:94:f2:4a:36:
d0:c8:b1:75:a0:9a:7e:08:50:d5:23:49:18:51:02:
f9:85:62:e3:2d:88:08:0d:e6:f2:a5:0e:c4:aa:46:
6c:b3:99:f5:93:c1:4c:35:be:c6:64:5a:56:00:19:
53:12:98:af:ff:23:83:c6:62:df:45:d0:a9:a9:a9:
5c:f4:26:24:45:a9:b6:89:f8:e6:5e:cc:3f:c6:ef:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F6:70:70:82:06:5F:B4:08:9A:6B:8A:3A:B0:66:5B:4E:3D:75:AC
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/E_ZwcIIGX7QImmuKOrBmW049daw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.2.82.0/24
194.2.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a4:1d:1d:53:15:75:0c:c4:4d:5c:92:fa:df:b9:d5:25:1f:
12:ed:bc:bc:d8:3d:82:37:bf:03:9e:b7:4e:5e:d6:17:d7:3e:
b6:9d:8e:92:6e:32:5d:40:31:e4:d3:ad:05:96:23:0f:9b:8c:
05:3f:c9:c1:59:3e:ab:c5:87:05:d5:d1:ad:e0:83:52:94:9b:
ea:1f:e2:5c:0e:25:e7:94:ce:d4:83:44:cd:a6:c7:a8:fb:f6:
12:a7:4c:22:f3:d7:bc:01:11:f3:00:05:f9:64:df:3a:5e:2e:
85:11:c3:ac:c3:ab:49:90:f6:02:24:22:1b:73:cf:f4:fb:e6:
1c:05:a4:56:64:43:c7:f0:f3:cd:27:5c:8f:17:e2:ea:6b:f9:
2a:f1:e4:98:6f:e3:05:7a:63:a5:73:83:51:c0:b1:a7:2d:4c:
b2:5a:f4:50:b7:a9:c5:5f:d1:54:95:62:8a:57:7e:97:4c:34:
2b:b3:3c:de:ae:79:8f:b0:8f:28:ce:29:ce:4a:67:28:cc:8a:
5c:9e:6d:41:54:fc:73:42:f9:3d:ae:28:09:07:76:c8:ed:45:
4d:ff:98:ae:38:54:6d:6a:dc:77:70:d8:d7:41:3d:10:81:9b:
70:ca:f1:3b:d3:3a:c7:bb:41:bd:d7:d8:95:04:b7:09:2f:48:
af:63:30:1e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIERJa2fjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDEw
MTAzNTg0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNmNjcwNzA4MjA2
NWZiNDA4OWE2YjhhM2FiMDY2NWI0ZTNkNzVhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOET7JmZDyYQtfR8KM8s7l5OEU/vE0MX3njDdOeNb/S66F7Q
G8sFJ1tgsNv/t6CoxaW2Gtx70iiRs05080uDPLajC/UZQvp+mKM5WKiLVCUbt0wo
tPVfUolqUA7QqXt04aGWDSs2t/W6vriotodW55G9yWb8dGUdfsN0SfaTo6/0Rv5s
Z2qpQidTT3Q5kMNpOBbnbU/8iZ+w1MBiGKslmjJML/JHMZcpaBNKqVMbeI6U8ko2
0MixdaCafghQ1SNJGFEC+YVi4y2ICA3m8qUOxKpGbLOZ9ZPBTDW+xmRaVgAZUxKY
r/8jg8Zi30XQqampXPQmJEWpton45l7MP8bviokCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQT9nBwggZftAiaa4o6sGZbTj11rDAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
L0VfWndjSUlHWDdRSW1tdUtPckJtVzA0OWRhdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMICUgMEAMICVDANBgkqhkiG9w0B
AQsFAAOCAQEAjaQdHVMVdQzETVyS+t+51SUfEu28vNg9gje/A563Tl7WF9c+tp2O
km4yXUAx5NOtBZYjD5uMBT/JwVk+q8WHBdXRreCDUpSb6h/iXA4l55TO1INEzabH
qPv2EqdMIvPXvAER8wAF+WTfOl4uhRHDrMOrSZD2AiQiG3PP9PvmHAWkVmRDx/Dz
zSdcjxfi6mv5KvHkmG/jBXpjpXODUcCxpy1Mslr0ULepxV/RVJViild+l0w0K7M8
3q55j7CPKM4pzkpnKMyKXJ5tQVT8c0L5Pa4oCQd2yO1FTf+YrjhUbWrcd3DY10E9
EIGbcMrxO9M6x7tBvdfYlQS3CS9Ir2MwHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org