Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/b7yBbt2xSZ8RFV1cU7uH9k_PPRs.roa
File: b7yBbt2xSZ8RFV1cU7uH9k_PPRs.roa (raw, json)
Hash identifier: bhTL7jz97sLtA+lui1+qKsXN3oj5xthjljpo+zfIvW8=
Subject key identifier: 6F:BC:81:6E:DD:B1:49:9F:11:15:5D:5C:53:BB:87:F6:4F:CF:3D:1B
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 449F79A2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/b7yBbt2xSZ8RFV1cU7uH9k_PPRs.roa
Signing time: Mon 03 Jan 2022 12:44:16 +0000
ROA not before: Mon 03 Jan 2022 12:44:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30990
IP address blocks: 193.251.224.0/24 maxlen: 24
193.251.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151302050 (0x449f79a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 3 12:44:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fbc816eddb1499f11155d5c53bb87f64fcf3d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:a3:d4:dd:ae:02:e2:df:9b:7a:84:fb:8e:
00:36:14:7c:88:da:28:f7:78:e2:27:09:73:24:34:
67:e0:43:80:95:e5:5d:62:02:05:25:73:13:be:c4:
df:8f:17:df:ae:4f:7e:85:45:cf:34:e2:4e:4a:25:
a7:ee:a3:0f:e5:26:39:2e:a3:5a:df:de:4e:fa:66:
f3:c3:d9:c1:99:e8:3b:1a:e5:c1:fc:e3:12:dc:b9:
65:c3:53:52:2d:95:f5:91:4c:5c:32:9f:21:15:ce:
1b:70:24:1d:70:fd:7d:b2:02:64:3a:fc:be:31:36:
15:39:45:17:29:03:47:2c:60:73:88:b6:45:25:81:
19:74:9c:ac:49:35:3b:3d:23:23:58:2a:9f:20:86:
1f:84:96:da:16:d2:ab:c7:54:d7:10:71:e7:15:80:
c2:44:34:a7:ff:d7:28:e3:ac:6f:d8:f0:39:cd:b4:
a8:f9:b4:00:a1:6c:ba:97:67:c8:4a:46:af:a8:65:
72:63:42:93:82:65:59:b3:cd:65:ef:71:33:d3:a8:
32:33:a8:ab:ca:5c:f9:f6:aa:66:41:75:e7:95:c4:
3a:37:0b:40:24:e0:ee:7d:47:9d:d5:5b:8b:3a:44:
6d:a8:40:de:9c:ad:53:7e:8a:c4:21:85:32:88:03:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:81:6E:DD:B1:49:9F:11:15:5D:5C:53:BB:87:F6:4F:CF:3D:1B
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/b7yBbt2xSZ8RFV1cU7uH9k_PPRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.143.0/24
193.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
08:43:0b:d1:d2:b7:49:27:d5:47:30:1a:a3:30:30:b6:60:2e:
8b:22:f9:1e:86:18:0b:e7:47:58:2f:e7:d5:78:93:34:b6:85:
56:28:1a:8e:04:50:91:59:d8:c3:9b:9f:5c:5f:5e:b4:23:a3:
e7:26:72:4f:4d:aa:76:e8:0f:22:ad:af:b6:fb:d9:04:c6:d5:
ca:e2:e5:42:76:f5:5c:51:7d:8b:21:b4:2a:16:9e:5a:a2:0e:
ee:38:b8:71:0b:1c:a8:33:8e:ca:1c:88:b1:f8:58:5e:65:d5:
40:a1:db:a3:96:b4:06:91:46:65:11:46:4d:4e:27:a6:73:35:
93:7e:f0:36:a0:40:02:cc:18:37:91:a1:a0:6e:87:30:16:3c:
a0:94:6f:51:2c:ef:d1:68:ad:87:54:e1:99:31:74:23:a2:5e:
93:86:a6:e9:31:a5:ca:c1:4d:de:0d:ae:a1:ca:98:25:d7:31:
23:0e:54:db:31:96:75:66:54:14:47:72:82:fc:d4:9e:f2:91:
59:28:ed:a2:bd:c5:25:a9:63:46:eb:c8:e7:15:3e:c9:78:13:
c6:7f:47:99:72:f5:4a:ba:7d:cf:c5:15:c1:04:69:48:51:ab:
2c:41:5b:f4:3b:00:d6:91:8c:a1:a0:7e:f0:8d:59:91:90:2e:
62:d1:4e:26
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIERJ95ojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDEw
MzEyNDQxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmZiYzgxNmVkZGIx
NDk5ZjExMTU1ZDVjNTNiYjg3ZjY0ZmNmM2QxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANAmo9TdrgLi35t6hPuOADYUfIjaKPd44icJcyQ0Z+BDgJXl
XWICBSVzE77E348X365PfoVFzzTiTkolp+6jD+UmOS6jWt/eTvpm88PZwZnoOxrl
wfzjEty5ZcNTUi2V9ZFMXDKfIRXOG3AkHXD9fbICZDr8vjE2FTlFFykDRyxgc4i2
RSWBGXScrEk1Oz0jI1gqnyCGH4SW2hbSq8dU1xBx5xWAwkQ0p//XKOOsb9jwOc20
qPm0AKFsupdnyEpGr6hlcmNCk4JlWbPNZe9xM9OoMjOoq8pc+faqZkF155XEOjcL
QCTg7n1HndVbizpEbahA3pytU36KxCGFMogDRs0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRvvIFu3bFJnxEVXVxTu4f2T889GzAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
L2I3eUJidDJ4U1o4UkZWMWNVN3VIOWtfUFBScy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMH7jwMEAMH74DANBgkqhkiG9w0B
AQsFAAOCAQEACEML0dK3SSfVRzAaozAwtmAuiyL5HoYYC+dHWC/n1XiTNLaFViga
jgRQkVnYw5ufXF9etCOj5yZyT02qdugPIq2vtvvZBMbVyuLlQnb1XFF9iyG0Khae
WqIO7ji4cQscqDOOyhyIsfhYXmXVQKHbo5a0BpFGZRFGTU4npnM1k37wNqBAAswY
N5GhoG6HMBY8oJRvUSzv0With1ThmTF0I6Jek4am6TGlysFN3g2uocqYJdcxIw5U
2zGWdWZUFEdygvzUnvKRWSjtor3FJaljRuvI5xU+yXgTxn9HmXL1Srp9z8UVwQRp
SFGrLEFb9DsA1pGMoaB+8I1ZkZAuYtFOJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org