Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/nIxIEg3d9birjqbkfl4hnIBSXig.roa
File: nIxIEg3d9birjqbkfl4hnIBSXig.roa (raw, json)
Hash identifier: PuoaZSeWRMnalSuGKIZWCtUJcGiUBlSs4lV0OKVn24M=
Subject key identifier: 9C:8C:48:12:0D:DD:F5:B8:AB:8E:A6:E4:7E:5E:21:9C:80:52:5E:28
Certificate issuer: /CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Certificate serial: 0423484C
Authority key identifier: 06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/nIxIEg3d9birjqbkfl4hnIBSXig.roa
Signing time: Sat 01 Jan 2022 13:04:24 +0000
ROA not before: Sat 01 Jan 2022 13:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211447
IP address blocks: 193.200.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69421132 (0x423484c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Validity
Not Before: Jan 1 13:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c8c48120dddf5b8ab8ea6e47e5e219c80525e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:a5:40:7f:6a:df:ae:31:f6:5b:23:31:1b:
84:33:d4:4d:9a:e9:2c:d5:23:6a:d6:13:80:2d:54:
bd:67:ee:d9:76:6f:15:99:0d:10:2a:a1:92:71:e8:
79:05:9d:c4:2c:a7:b4:d1:e9:c6:7c:a8:a4:c1:4c:
8a:88:2e:33:69:76:11:4a:f0:be:a6:73:fc:85:5e:
58:84:aa:aa:25:32:38:2b:f3:53:4c:ca:1f:d2:3d:
66:7b:c3:8c:db:94:05:14:ea:ae:20:75:dc:85:33:
6f:68:f1:f1:03:f5:83:32:25:4e:9e:4a:11:f6:4b:
01:ea:43:2a:63:c9:0b:a2:ec:69:20:49:26:a1:f2:
16:f6:80:48:56:a7:a4:74:1b:01:fb:d0:1f:dc:27:
1c:9b:ea:81:90:6e:e3:88:d8:d1:f9:e3:f5:27:e7:
03:5d:0d:7f:b4:d6:43:55:2a:33:86:e1:84:80:78:
2f:0c:ca:60:91:45:ab:68:7b:34:e0:30:88:68:b5:
f3:42:ac:b8:1b:29:d9:0a:ca:11:9f:c8:af:68:0f:
28:47:0f:a8:6c:00:df:0a:97:c6:bb:33:48:6f:77:
6e:16:4a:88:42:2e:39:83:32:8a:d3:89:7a:57:e8:
1c:db:9f:cf:0d:89:7c:8f:30:e1:f9:a2:46:0c:5b:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:48:12:0D:DD:F5:B8:AB:8E:A6:E4:7E:5E:21:9C:80:52:5E:28
X509v3 Authority Key Identifier:
keyid:06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/nIxIEg3d9birjqbkfl4hnIBSXig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.194.0/24
Signature Algorithm: sha256WithRSAEncryption
89:67:ea:32:80:28:46:b5:2e:14:2e:c2:16:7c:5c:1f:43:4e:
17:a9:d4:46:b8:49:d5:60:1f:34:a2:46:1a:fb:bb:92:67:bd:
b0:73:70:5c:9b:4c:de:fa:4c:13:cf:05:ed:c4:7a:6a:22:70:
a5:83:88:73:91:13:97:41:eb:61:3d:50:21:44:d1:ad:3a:4a:
bc:7e:e4:4a:9b:4e:6c:99:87:16:41:90:35:58:27:7a:ce:a7:
6c:6b:f4:da:66:5c:84:9e:b0:df:ef:4c:b6:43:8f:c0:f7:47:
49:05:de:11:60:24:41:14:89:6b:e1:a5:9e:06:14:13:cb:9d:
2e:56:3f:17:25:18:cd:e5:c1:ec:1f:64:7c:d0:69:bf:f8:26:
0c:0a:02:d9:ed:1f:2a:5b:f6:38:29:c0:44:e4:1f:0a:60:66:
3b:83:58:6e:86:2b:4e:c4:13:c6:ab:ea:87:7b:c4:06:4f:d6:
a6:65:a2:ba:c6:82:db:5d:eb:c8:a7:52:e6:55:49:0c:8a:16:
95:75:32:7a:b0:04:d0:d2:a9:99:9b:de:39:df:e3:74:5e:12:
66:5e:8a:9d:92:30:c3:bb:d3:ac:03:11:a6:55:0a:b4:68:04:
13:30:cc:89:e6:f6:ac:69:54:13:68:31:9f:a3:6c:1c:1c:aa:
41:21:27:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBCNITDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NmM5MmRmMmM5ZmFhMjkxNWZjNWZlYjVhNDI3MDE4MzQxOWZhZWYyMB4XDTIyMDEw
MTEzMDQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM4YzQ4MTIwZGRk
ZjViOGFiOGVhNmU0N2U1ZTIxOWM4MDUyNWUyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM1qpUB/at+uMfZbIzEbhDPUTZrpLNUjatYTgC1UvWfu2XZv
FZkNECqhknHoeQWdxCyntNHpxnyopMFMioguM2l2EUrwvqZz/IVeWISqqiUyOCvz
U0zKH9I9ZnvDjNuUBRTqriB13IUzb2jx8QP1gzIlTp5KEfZLAepDKmPJC6LsaSBJ
JqHyFvaASFanpHQbAfvQH9wnHJvqgZBu44jY0fnj9SfnA10Nf7TWQ1UqM4bhhIB4
LwzKYJFFq2h7NOAwiGi180KsuBsp2QrKEZ/Ir2gPKEcPqGwA3wqXxrszSG93bhZK
iEIuOYMyitOJelfoHNufzw2JfI8w4fmiRgxbTv8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBScjEgSDd31uKuOpuR+XiGcgFJeKDAfBgNVHSMEGDAWgBQGyS3yyfqikV/F
/rWkJwGDQZ+u8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Jza3Q4c242b3BGZnhmNjFwQ2NCZzBHZnJ2SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvYWFlOWExLWQwNWQtNDdjYS05MWRlLWQ2ZDU1YzE2OWUxNi8x
L25JeElFZzNkOWJpcmpxYmtmbDRobklCU1hpZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
YWFlOWExLWQwNWQtNDdjYS05MWRlLWQ2ZDU1YzE2OWUxNi8xL0Jza3Q4c242b3BG
ZnhmNjFwQ2NCZzBHZnJ2SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHIwjANBgkqhkiG9w0BAQsFAAOC
AQEAiWfqMoAoRrUuFC7CFnxcH0NOF6nURrhJ1WAfNKJGGvu7kme9sHNwXJtM3vpM
E88F7cR6aiJwpYOIc5ETl0HrYT1QIUTRrTpKvH7kSptObJmHFkGQNVgnes6nbGv0
2mZchJ6w3+9MtkOPwPdHSQXeEWAkQRSJa+GlngYUE8udLlY/FyUYzeXB7B9kfNBp
v/gmDAoC2e0fKlv2OCnAROQfCmBmO4NYboYrTsQTxqvqh3vEBk/WpmWiusaC213r
yKdS5lVJDIoWlXUyerAE0NKpmZveOd/jdF4SZl6KnZIww7vTrAMRplUKtGgEEzDM
ieb2rGlUE2gxn6NsHByqQSEnrQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:05 2023 by rpki-client on console-fra.rpki-client.org