Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/29x1QJlVqqEwJjl3ABGVVNU78BA.roa
File: 29x1QJlVqqEwJjl3ABGVVNU78BA.roa (raw, json)
Hash identifier: c4iCjGLVMVogsVhutXjzYJNzZXFOpI9qJhsIJM7+Ros=
Subject key identifier: DB:DC:75:40:99:55:AA:A1:30:26:39:77:00:11:95:54:D5:3B:F0:10
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 0704B607
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/29x1QJlVqqEwJjl3ABGVVNU78BA.roa
Signing time: Sat 01 Jan 2022 15:01:56 +0000
ROA not before: Sat 01 Jan 2022 15:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208378
IP address blocks: 193.138.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117749255 (0x704b607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Jan 1 15:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbdc75409955aaa13026397700119554d53bf010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:0f:f1:f6:f7:ed:75:9f:7b:65:76:4a:0a:
10:8c:0e:d7:f6:23:be:1e:fc:37:4f:46:4a:88:66:
7e:5a:c1:1f:e4:0f:9b:a2:e8:32:55:52:dd:37:ae:
15:4a:2e:b6:f0:96:4e:5a:ff:a9:01:c3:f0:98:f4:
0c:22:f5:ea:62:a2:2a:ae:c8:6e:c5:8a:33:24:cb:
94:18:34:e0:97:84:78:e8:40:7a:2d:29:ca:b2:68:
a9:7d:18:44:2b:a9:78:02:1e:31:3c:e6:f8:a2:1d:
15:1f:31:93:32:e8:37:d1:57:7f:73:28:b6:5a:f8:
55:c5:8f:a0:d9:06:ae:7b:c9:b9:c6:6f:a8:e9:46:
fd:05:4f:02:56:47:11:88:94:90:41:23:c2:b1:b5:
bf:8a:52:3a:5f:91:c9:21:d1:a9:71:54:03:09:d6:
f3:9a:83:65:54:b3:76:8f:cd:10:43:30:d0:14:13:
c7:8f:08:c0:34:9d:49:75:4e:6b:c7:f5:8d:5a:c8:
d0:58:2d:8f:05:e3:0a:81:a0:f1:16:c5:8d:d7:d3:
68:d8:18:33:c6:9a:18:ef:f0:83:cd:b0:c3:db:ce:
cf:f7:ff:2d:11:93:80:39:55:80:4c:9d:29:3a:36:
a5:54:da:fc:38:5f:e1:40:a0:92:b8:3c:86:8a:c5:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:75:40:99:55:AA:A1:30:26:39:77:00:11:95:54:D5:3B:F0:10
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/29x1QJlVqqEwJjl3ABGVVNU78BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fa:c8:ca:0b:11:81:4c:ae:b1:ba:2e:9b:9b:38:28:e3:2b:
32:b3:b2:c5:2f:47:10:99:09:b7:ab:5f:18:4b:c6:c7:5f:23:
3d:ec:cc:ac:53:72:41:a2:07:b4:55:77:df:50:cf:7b:b9:69:
f1:08:83:dd:ef:50:3f:c2:ae:2d:0f:0b:95:68:07:e1:48:b8:
74:40:2b:19:01:f6:09:06:65:34:0d:68:96:73:6d:e5:4c:28:
f1:3f:81:3c:6a:80:e6:82:61:12:b6:f3:a3:60:1a:e4:64:84:
99:1b:8f:ce:a5:3e:6d:ac:69:2a:27:28:84:d3:29:56:86:ae:
b7:47:c2:36:d5:37:04:88:8a:28:c4:7c:b8:00:52:28:c1:a8:
cd:48:ed:2c:ab:be:e0:3f:dc:9e:4a:79:fd:75:6a:d3:fb:ab:
b9:15:f7:37:90:59:cd:04:9d:3b:d5:a0:75:28:b7:f1:84:68:
fb:16:b8:cf:ca:97:83:ee:bf:d8:22:38:cb:42:1c:52:62:1b:
01:49:e8:ee:ef:e9:d1:ee:e1:13:d0:48:50:ef:58:ed:68:e0:
b0:7d:bb:24:d6:3f:3b:f4:a7:c5:e3:59:86:12:d3:81:09:65:
b3:91:92:ae:fb:4e:5d:02:51:5f:c1:88:55:f6:3a:1b:b1:c5:
1c:ad:f8:72
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEBwS2BzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OWNmNjZlZDc0MjhhMzllNjNmMGQyNzM2MDM3ZjQzMWM0MWFhMzRmMB4XDTIyMDEw
MTE1MDE1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGJkYzc1NDA5OTU1
YWFhMTMwMjYzOTc3MDAxMTk1NTRkNTNiZjAxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBID/H29+11n3tldkoKEIwO1/Yjvh78N09GSohmflrBH+QP
m6LoMlVS3TeuFUoutvCWTlr/qQHD8Jj0DCL16mKiKq7IbsWKMyTLlBg04JeEeOhA
ei0pyrJoqX0YRCupeAIeMTzm+KIdFR8xkzLoN9FXf3Motlr4VcWPoNkGrnvJucZv
qOlG/QVPAlZHEYiUkEEjwrG1v4pSOl+RySHRqXFUAwnW85qDZVSzdo/NEEMw0BQT
x48IwDSdSXVOa8f1jVrI0FgtjwXjCoGg8RbFjdfTaNgYM8aaGO/wg82ww9vOz/f/
LRGTgDlVgEydKTo2pVTa/Dhf4UCgkrg8horFFKMCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTb3HVAmVWqoTAmOXcAEZVU1TvwEDAfBgNVHSMEGDAWgBT5z2btdCijnmPw
0nNgN/QxxBqjTzAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDguY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzcxL2Q3ODRlZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNiZWQv
MS8yOXgxUUpsVnFxRXdKamwzQUJHVlZOVTc4QkEucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcx
L2Q3ODRlZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNiZWQvMS8xLWM5bTdYUW9v
NTVqOE5KellEZjBNY1FhbzA4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYodMA0GCSqGSIb3DQEBCwUA
A4IBAQA++sjKCxGBTK6xui6bmzgo4ysys7LFL0cQmQm3q18YS8bHXyM97MysU3JB
oge0VXffUM97uWnxCIPd71A/wq4tDwuVaAfhSLh0QCsZAfYJBmU0DWiWc23lTCjx
P4E8aoDmgmEStvOjYBrkZISZG4/OpT5trGkqJyiE0ylWhq63R8I21TcEiIooxHy4
AFIowajNSO0sq77gP9yeSnn9dWrT+6u5Ffc3kFnNBJ071aB1KLfxhGj7FrjPypeD
7r/YIjjLQhxSYhsBSeju7+nR7uET0EhQ71jtaOCwfbsk1j879KfF41mGEtOBCWWz
kZKu+05dAlFfwYhV9jobscUcrfhy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:47 2024 by rpki-client on console-fra.rpki-client.org