Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/HIWu7m4LilORfWjsghRWHg6vb1Q.roa
File: HIWu7m4LilORfWjsghRWHg6vb1Q.roa (raw, json)
Hash identifier: r7a2iQElI/tdUSRSMIAaVzYu1toZrbRQIyJThR5znDI=
Subject key identifier: 1C:85:AE:EE:6E:0B:8A:53:91:7D:68:EC:82:14:56:1E:0E:AF:6F:54
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0184858E9DB46FCC59FFBA0A21289F3ABB06
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/HIWu7m4LilORfWjsghRWHg6vb1Q.roa
Signing time: Thu 17 Nov 2022 12:27:06 +0000
ROA not before: Thu 17 Nov 2022 12:27:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 193.106.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:8e:9d:b4:6f:cc:59:ff:ba:0a:21:28:9f:3a:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Nov 17 12:27:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c85aeee6e0b8a53917d68ec8214561e0eaf6f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:6e:79:62:76:45:a7:b3:e3:ad:47:d1:31:
4a:86:cd:88:f3:4c:5f:0b:67:a0:da:4c:23:b3:ce:
3a:0f:e2:1e:8b:45:a4:b4:ec:d1:82:6b:b1:3a:f8:
65:de:2d:eb:ad:8e:34:24:6c:89:e1:8f:93:0b:ca:
08:85:27:57:74:2a:1c:f4:a9:f0:17:1b:7f:58:49:
46:30:1e:de:51:b4:0d:de:e2:57:90:17:4b:15:ce:
48:dd:c7:db:7e:1e:3b:8e:ca:2d:a8:7d:3c:3d:2c:
76:9b:c7:33:5b:a5:ea:19:0f:7b:a5:cb:ed:d4:6d:
7d:8b:3b:98:18:3e:74:a4:11:50:45:f3:9c:c4:34:
95:2c:6c:9f:d8:9e:2d:c9:06:72:54:6b:33:53:dd:
fc:6f:e6:a3:26:ff:82:0b:dd:ed:52:6c:82:4d:17:
5e:a6:62:30:ab:63:01:82:b4:f2:bd:7c:e5:bb:c4:
14:d9:65:2b:3d:13:a1:4e:56:f4:c1:f2:2e:2f:a2:
bc:01:7e:8f:b8:06:5e:bc:ea:88:d1:f0:f8:ed:6d:
2d:e1:4c:2c:10:2b:33:5e:d4:a3:10:cc:ca:ac:df:
ff:cf:d9:90:4b:95:95:54:1f:32:a6:5b:8c:e0:3b:
9a:61:ec:73:6d:fb:fe:5f:5d:71:33:b3:25:46:a3:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:AE:EE:6E:0B:8A:53:91:7D:68:EC:82:14:56:1E:0E:AF:6F:54
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/HIWu7m4LilORfWjsghRWHg6vb1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.249.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9a:1c:43:af:6f:b5:0f:6d:64:50:97:75:46:93:6d:95:5d:
0b:63:ce:58:91:50:dc:13:7d:dd:96:67:cc:f1:9d:bb:a0:a6:
86:14:2f:fc:d2:44:8c:40:00:51:00:2e:ab:d2:db:b0:47:4d:
06:86:33:e0:e3:c5:2e:85:bf:45:76:8d:fd:f8:fc:e9:51:52:
32:5e:04:4a:39:02:d2:42:5f:2a:4a:1b:f6:be:6c:f7:cc:10:
9d:9a:90:47:3c:99:28:27:66:9c:90:b6:a7:84:13:16:99:39:
57:29:61:8f:2c:a0:14:bb:c6:f5:31:78:b9:ca:b2:b2:aa:8c:
1a:62:a9:e6:fc:f8:a9:4e:e6:62:0a:65:32:3f:50:7e:a1:4c:
33:ba:6e:99:35:1d:32:39:7e:fc:c6:bf:04:c8:37:12:76:e9:
9c:01:9c:c5:04:ba:05:ad:dd:4e:6b:af:5e:95:6e:e4:61:a2:
ab:48:b9:29:a4:90:ab:96:84:10:95:9e:8f:b1:11:72:1e:b5:
ae:16:e9:75:23:27:2c:f2:96:64:8e:2e:e6:09:46:16:0b:4a:
50:e9:2a:bc:89:2c:8a:5e:93:93:47:36:da:dd:0d:d0:44:8d:
50:fa:48:c5:69:06:7d:1f:d2:2f:67:19:50:59:77:eb:0a:e6:
5b:dc:6c:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSFjp20b8xZ/7oKISifOrsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjA5MTU3YmY3ODllNmJiYTM0ZTBkYmQzZWZlY2Q5YjIw
ZGQwNmIwHhcNMjIxMTE3MTIyNzA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzg1YWVlZTZlMGI4YTUzOTE3ZDY4ZWM4MjE0NTYxZTBlYWY2ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVueWJ2Raez461H0TFKhs2I80xf
C2eg2kwjs846D+Iei0WktOzRgmuxOvhl3i3rrY40JGyJ4Y+TC8oIhSdXdCoc9Knw
Fxt/WElGMB7eUbQN3uJXkBdLFc5I3cfbfh47jsotqH08PSx2m8czW6XqGQ97pcvt
1G19izuYGD50pBFQRfOcxDSVLGyf2J4tyQZyVGszU938b+ajJv+CC93tUmyCTRde
pmIwq2MBgrTyvXzlu8QU2WUrPROhTlb0wfIuL6K8AX6PuAZevOqI0fD47W0t4Uws
ECszXtSjEMzKrN//z9mQS5WVVB8ypluM4DuaYexzbfv+X11xM7MlRqOAIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFByFru5uC4pTkX1o7IIUVh4Or29UMB8GA1UdIwQY
MBaAFJwgkVe/eJ5rujTg29Pv7NmyDdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgt
MTE2OTA5ZTQzODI0LzEvSElXdTdtNExpbE9SZldqc2doUldIZzZ2YjFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgtMTE2OTA5ZTQzODI0
LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWr5MA0G
CSqGSIb3DQEBCwUAA4IBAQAhmhxDr2+1D21kUJd1RpNtlV0LY85YkVDcE33dlmfM
8Z27oKaGFC/80kSMQABRAC6r0tuwR00GhjPg48Uuhb9Fdo39+PzpUVIyXgRKOQLS
Ql8qShv2vmz3zBCdmpBHPJkoJ2ackLanhBMWmTlXKWGPLKAUu8b1MXi5yrKyqowa
Yqnm/PipTuZiCmUyP1B+oUwzum6ZNR0yOX78xr8EyDcSdumcAZzFBLoFrd1Oa69e
lW7kYaKrSLkppJCrloQQlZ6PsRFyHrWuFul1Iycs8pZkji7mCUYWC0pQ6Sq8iSyK
XpOTRzba3Q3QRI1Q+kjFaQZ9H9IvZxlQWXfrCuZb3GwZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:20 2024 by rpki-client on console-fra.rpki-client.org