Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/IceXm2z2sbqWvh2RM9QcXPXUmNc.roa
File: IceXm2z2sbqWvh2RM9QcXPXUmNc.roa (raw, json)
Hash identifier: KhM8yaQe8+hQr9e2n+dgXrvLLTvmQ48QJtdf6Ohfu5c=
Subject key identifier: 21:C7:97:9B:6C:F6:B1:BA:96:BE:1D:91:33:D4:1C:5C:F5:D4:98:D7
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0426BDB0
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/IceXm2z2sbqWvh2RM9QcXPXUmNc.roa
Signing time: Thu 03 Feb 2022 06:05:47 +0000
ROA not before: Thu 03 Feb 2022 06:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6079
IP address blocks: 155.193.16.0/20 maxlen: 20
155.193.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69647792 (0x426bdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Feb 3 06:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21c7979b6cf6b1ba96be1d9133d41c5cf5d498d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:0b:cc:59:7f:cd:ef:58:f1:06:b0:26:94:
52:1c:f3:cf:8d:d2:e3:7d:17:2f:a4:10:8e:c8:9b:
80:f6:39:14:a2:e8:ac:9e:b5:5d:a0:1a:59:08:35:
8d:1b:79:f4:4d:99:f1:97:34:d7:c3:d2:a7:9e:1b:
8e:57:ff:f6:b3:3a:0c:d9:d3:0c:5a:a4:13:df:1a:
73:91:f0:83:fc:84:8d:d0:35:a2:e1:94:7e:af:37:
45:13:e6:05:ba:79:c1:0a:b8:5d:a8:0a:3d:7f:97:
c3:39:77:06:26:65:1d:0e:22:a2:81:13:07:6c:29:
1e:9d:90:eb:88:71:2a:38:11:9a:b4:19:91:ea:eb:
0b:ed:d0:e8:b0:0e:90:ac:84:a4:40:52:a3:80:fe:
4f:74:d6:8d:bc:d4:81:d0:e6:ff:16:76:16:94:d2:
5b:33:55:64:96:3f:12:ed:bc:e6:62:f4:32:75:3d:
0a:61:f7:ec:1b:e6:bb:1c:69:5c:5b:ab:f5:b8:b7:
b0:9c:1c:ec:7a:9e:45:82:a8:2e:56:9a:7f:1a:07:
46:55:2c:76:64:fb:2b:39:a6:41:95:73:91:09:2b:
aa:ca:b2:4b:b6:3b:44:e4:07:41:ca:61:54:49:9e:
2d:46:cc:57:a8:6b:10:d7:73:d5:11:cb:e0:31:c2:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:97:9B:6C:F6:B1:BA:96:BE:1D:91:33:D4:1C:5C:F5:D4:98:D7
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/IceXm2z2sbqWvh2RM9QcXPXUmNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.16.0/20
155.193.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ba:9d:d1:a4:92:bd:5e:47:ea:e5:26:b4:64:53:e0:3e:b1:d9:
d4:5f:5b:3a:ba:aa:d5:cb:1e:20:f4:73:c6:45:12:eb:7f:08:
c8:2b:fc:22:ee:97:1b:ed:1e:0e:05:c8:5c:55:a1:73:1f:71:
95:83:c0:8f:74:38:9e:3b:d8:00:48:3d:57:e0:ee:76:39:e5:
1f:c9:9a:28:48:e3:0d:27:78:5e:7c:b8:fb:25:9f:71:8d:f1:
7d:55:fc:24:12:d5:66:41:36:05:23:b6:19:50:63:d5:ad:2a:
23:37:8c:ef:ba:46:fc:47:7b:c9:23:88:92:f3:df:97:fe:7d:
c1:d8:82:c9:83:cd:a3:66:e1:8f:57:50:3a:1a:26:72:ac:0e:
7d:9d:b3:e3:84:a7:5a:39:69:94:32:d3:8e:75:28:9d:6a:54:
8c:17:d6:66:76:08:d2:2b:be:c0:bf:d1:31:fb:9b:ca:3b:dc:
af:7a:97:68:f3:76:fa:3d:5e:bc:c3:4e:b2:f1:94:2b:64:34:
2e:29:46:03:97:c2:f9:7e:0e:2f:45:cb:7d:e1:e1:5f:df:18:
d6:f8:1f:38:68:97:a8:61:d1:10:81:22:73:2d:ed:1d:9e:4d:
83:00:59:a4:7e:83:dc:bc:7f:29:82:fa:d0:2a:18:ff:3e:cd:
c8:da:db:d0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBCa9sDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDNlNDQ3ZWRiOGE1ZTBlMWIxZDdmNWNkYzI4N2MzNjRhNWZiMGI1MB4XDTIyMDIw
MzA2MDU0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjFjNzk3OWI2Y2Y2
YjFiYTk2YmUxZDkxMzNkNDFjNWNmNWQ0OThkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXWC8xZf83vWPEGsCaUUhzzz43S430XL6QQjsibgPY5FKLo
rJ61XaAaWQg1jRt59E2Z8Zc018PSp54bjlf/9rM6DNnTDFqkE98ac5Hwg/yEjdA1
ouGUfq83RRPmBbp5wQq4XagKPX+Xwzl3BiZlHQ4iooETB2wpHp2Q64hxKjgRmrQZ
kerrC+3Q6LAOkKyEpEBSo4D+T3TWjbzUgdDm/xZ2FpTSWzNVZJY/Eu285mL0MnU9
CmH37BvmuxxpXFur9bi3sJwc7HqeRYKoLlaafxoHRlUsdmT7KzmmQZVzkQkrqsqy
S7Y7ROQHQcphVEmeLUbMV6hrENdz1RHL4DHCGhkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQhx5ebbPaxupa+HZEz1Bxc9dSY1zAfBgNVHSMEGDAWgBR0PkR+24peDhsd
f1zcKHw2Sl+wtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RENUVmdHVLWGc0YkhYOWMzQ2g4TmtwZnNMVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvYTFhZTcwLTc5OTYtNDY4Ny1hMGQ3LTVlMGY0YWI4MDliYi8x
L0ljZVhtMnoyc2JxV3ZoMlJNOVFjWFBYVW1OYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
YTFhZTcwLTc5OTYtNDY4Ny1hMGQ3LTVlMGY0YWI4MDliYi8xL2RENUVmdHVLWGc0
YkhYOWMzQ2g4TmtwZnNMVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBJvBEAMEB5vBgDANBgkqhkiG9w0B
AQsFAAOCAQEAup3RpJK9Xkfq5Sa0ZFPgPrHZ1F9bOrqq1cseIPRzxkUS638IyCv8
Iu6XG+0eDgXIXFWhcx9xlYPAj3Q4njvYAEg9V+DudjnlH8maKEjjDSd4Xny4+yWf
cY3xfVX8JBLVZkE2BSO2GVBj1a0qIzeM77pG/Ed7ySOIkvPfl/59wdiCyYPNo2bh
j1dQOhomcqwOfZ2z44SnWjlplDLTjnUonWpUjBfWZnYI0iu+wL/RMfubyjvcr3qX
aPN2+j1evMNOsvGUK2Q0LilGA5fC+X4OL0XLfeHhX98Y1vgfOGiXqGHREIEicy3t
HZ5NgwBZpH6D3Lx/KYL60CoY/z7NyNrb0A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:40 2023 by rpki-client on console-ams.rpki-client.org