Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/yyUiyoCwDeHdxQca9j-Ag2ZtD30.roa
File: yyUiyoCwDeHdxQca9j-Ag2ZtD30.roa (raw, json)
Hash identifier: ocRPzhhOwS9oCYOYoieJbfwzMmmnhcPEOIypOMmuG0w=
Subject key identifier: CB:25:22:CA:80:B0:0D:E1:DD:C5:07:1A:F6:3F:80:83:66:6D:0F:7D
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 05008F01
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/yyUiyoCwDeHdxQca9j-Ag2ZtD30.roa
Signing time: Sat 01 Jan 2022 01:02:11 +0000
ROA not before: Sat 01 Jan 2022 01:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24961
IP address blocks: 193.176.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83922689 (0x5008f01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Jan 1 01:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb2522ca80b00de1ddc5071af63f8083666d0f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:3a:53:80:85:b3:b7:f2:74:37:24:5e:14:
0f:fd:de:0e:3a:b2:09:70:16:0e:34:6c:e3:a8:62:
06:8b:02:de:69:8e:88:7d:b2:3b:b8:cf:42:1b:7a:
62:17:b8:cf:a3:3f:8f:98:19:ae:c3:d5:7e:ad:e4:
53:cf:08:b3:1e:7c:6a:07:cb:45:72:a0:c6:7e:89:
bd:22:58:79:79:53:29:75:c2:37:67:e9:30:81:f3:
e1:ad:e6:25:a1:0b:91:3f:80:96:74:54:12:50:86:
f3:b1:55:1b:52:e2:c6:82:ae:d9:67:09:dc:80:b1:
43:08:15:2d:28:5c:3a:55:5e:77:fe:e2:3c:c6:cd:
57:8e:a7:8c:a8:70:e2:c1:b5:70:f9:b1:09:c8:b3:
2d:4c:56:18:0a:73:02:6b:56:97:29:d7:f4:8c:9e:
49:71:ba:3f:39:2b:a8:59:45:c5:d5:c3:e8:6e:a5:
6a:d4:cd:2b:89:e8:93:6b:a6:b1:1a:78:27:a7:4c:
0a:52:bd:14:25:d0:59:95:99:56:81:4c:aa:de:44:
96:c1:a0:17:b6:54:fc:f2:f7:c0:81:26:02:1a:26:
af:26:95:a1:63:ba:bf:5d:41:b2:a5:59:83:ed:f4:
17:b4:46:a2:eb:3f:c5:36:26:b5:41:37:34:53:cd:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:22:CA:80:B0:0D:E1:DD:C5:07:1A:F6:3F:80:83:66:6D:0F:7D
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/yyUiyoCwDeHdxQca9j-Ag2ZtD30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
07:12:27:7e:04:b1:32:f1:b7:f2:93:1e:de:fe:34:75:3e:1d:
a4:05:31:0a:76:34:79:a0:cf:00:1d:8b:8f:15:27:a2:bd:11:
48:03:c1:f5:7c:f7:a4:e9:7c:88:9c:ad:bb:d4:30:15:2c:e1:
b3:19:67:81:f1:98:4c:e3:13:e3:69:83:4d:0a:72:80:fe:a3:
91:b0:c5:ff:ab:0a:9c:73:a2:22:78:19:d2:98:19:3d:eb:b1:
da:e4:3a:45:6a:d0:f8:03:80:2f:87:ad:d1:9a:96:64:9c:43:
c1:6a:fb:b5:1e:3a:79:8e:e2:12:87:c1:b3:93:49:ca:91:59:
b5:23:a9:ac:b4:f4:6c:cf:f6:cc:3c:89:34:b4:b2:ab:44:75:
27:6d:d4:f4:6b:b4:6f:e7:fa:1d:09:c0:8d:dd:41:60:bb:53:
47:6d:8b:74:fc:cb:bf:d1:cb:b8:e1:84:fc:e5:e5:c9:75:bc:
4f:1c:ea:15:de:f3:80:14:e8:b4:4d:0a:60:44:03:8d:54:e0:
6c:53:f7:f6:55:73:91:29:77:47:6f:f4:ce:97:4d:e1:c7:8e:
75:79:56:98:15:cb:40:70:75:49:b4:5a:40:a2:78:69:aa:21:
3d:57:2c:f6:9b:a7:81:b2:15:c2:b6:70:62:3c:ab:df:08:7c:
52:98:4c:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBQCPATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YmY0ZTFmZGI0MjRhOTEyMDIyM2IzYTc1YzZjY2MzMWI2ZjYyMjRhMB4XDTIyMDEw
MTAxMDIxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2IyNTIyY2E4MGIw
MGRlMWRkYzUwNzFhZjYzZjgwODM2NjZkMGY3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALryOlOAhbO38nQ3JF4UD/3eDjqyCXAWDjRs46hiBosC3mmO
iH2yO7jPQht6Yhe4z6M/j5gZrsPVfq3kU88Isx58agfLRXKgxn6JvSJYeXlTKXXC
N2fpMIHz4a3mJaELkT+AlnRUElCG87FVG1LixoKu2WcJ3ICxQwgVLShcOlVed/7i
PMbNV46njKhw4sG1cPmxCcizLUxWGApzAmtWlynX9IyeSXG6PzkrqFlFxdXD6G6l
atTNK4nok2umsRp4J6dMClK9FCXQWZWZVoFMqt5ElsGgF7ZU/PL3wIEmAhomryaV
oWO6v11BsqVZg+30F7RGous/xTYmtUE3NFPNdFcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTLJSLKgLAN4d3FBxr2P4CDZm0PfTAfBgNVHSMEGDAWgBS79OH9tCSpEgIj
s6dcbMwxtvYiSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VfVGhfYlFrcVJJQ0k3T25YR3pNTWJiMklrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvMTFjZDEwLTNlZjctNDEwNS04MjQ4LWJhNTEzMjNkYjRlNS8x
L3l5VWl5b0N3RGVIZHhRY2E5ai1BZzJadEQzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
MTFjZDEwLTNlZjctNDEwNS04MjQ4LWJhNTEzMjNkYjRlNS8xL3VfVGhfYlFrcVJJ
Q0k3T25YR3pNTWJiMklrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGwATANBgkqhkiG9w0BAQsFAAOC
AQEABxInfgSxMvG38pMe3v40dT4dpAUxCnY0eaDPAB2LjxUnor0RSAPB9Xz3pOl8
iJytu9QwFSzhsxlngfGYTOMT42mDTQpygP6jkbDF/6sKnHOiIngZ0pgZPeux2uQ6
RWrQ+AOAL4et0ZqWZJxDwWr7tR46eY7iEofBs5NJypFZtSOprLT0bM/2zDyJNLSy
q0R1J23U9Gu0b+f6HQnAjd1BYLtTR22LdPzLv9HLuOGE/OXlyXW8TxzqFd7zgBTo
tE0KYEQDjVTgbFP39lVzkSl3R2/0zpdN4ceOdXlWmBXLQHB1SbRaQKJ4aaohPVcs
9pungbIVwrZwYjyr3wh8UphMew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:22 2024 by rpki-client on console-ams.rpki-client.org