Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/9v9HzHzpFCDxOHsmA4rG6Q-67nw.roa
File: 9v9HzHzpFCDxOHsmA4rG6Q-67nw.roa (raw, json)
Hash identifier: qzAFt1ZEkxX0YIttNMMv2YVqhx88okfcnrdecmvSCKE=
Subject key identifier: F6:FF:47:CC:7C:E9:14:20:F1:38:7B:26:03:8A:C6:E9:0F:BA:EE:7C
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 074B981A
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/9v9HzHzpFCDxOHsmA4rG6Q-67nw.roa
Signing time: Sat 01 Jan 2022 15:07:32 +0000
ROA not before: Sat 01 Jan 2022 15:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13101
IP address blocks: 193.143.2.0/23 maxlen: 23
193.143.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122394650 (0x74b981a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Jan 1 15:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6ff47cc7ce91420f1387b26038ac6e90fbaee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:1b:44:45:e1:09:d6:17:d9:cb:c6:05:5e:
79:18:89:ba:44:f4:c4:9e:29:3f:71:47:5f:04:7a:
27:cc:77:7a:d3:94:5b:e9:2e:7a:28:ec:58:ef:45:
ed:1f:93:64:c0:df:7b:75:c8:0c:35:3e:cd:b1:ff:
f3:f0:72:e4:6b:00:a7:95:8d:09:64:ec:57:be:36:
f8:4c:d1:35:99:c2:8b:20:78:6e:af:f4:6d:3a:56:
83:e5:37:75:8b:41:e2:dd:4c:d2:b7:90:91:30:58:
a5:21:37:8d:c9:e5:1f:50:f8:cd:9c:e5:3d:33:85:
23:48:98:f6:fb:3b:5e:61:85:62:b1:60:2e:b5:2f:
e2:7c:53:5f:b6:b6:16:06:7e:60:e4:a2:b8:36:ca:
15:f2:33:e4:44:4f:0c:1d:1f:73:2c:cd:90:48:af:
c0:f8:b2:88:b6:d7:d3:46:fb:3f:5e:47:f1:d7:05:
8e:ec:50:a2:f9:b4:18:cf:9d:92:6e:3e:66:10:e4:
56:19:d5:69:19:b1:35:6f:4d:26:5d:56:38:03:57:
2d:dc:c1:53:a2:51:8c:b8:50:e0:6c:5d:0c:b1:73:
21:ad:5a:5b:2b:e0:41:f1:45:de:7b:29:12:13:9d:
5a:03:34:e1:65:c8:34:84:f8:60:a6:d9:8f:88:6d:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:47:CC:7C:E9:14:20:F1:38:7B:26:03:8A:C6:E9:0F:BA:EE:7C
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/9v9HzHzpFCDxOHsmA4rG6Q-67nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.2.0/23
193.143.6.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:38:d7:7c:52:22:66:e7:c6:81:64:a6:9b:5f:7e:40:72:76:
79:e0:3d:9e:86:1b:0d:aa:29:79:f5:b7:b5:c5:12:0c:76:b8:
21:82:bb:3c:2a:ac:e9:4b:8f:ce:e4:17:2c:d9:b3:7f:05:25:
6e:e4:8a:fc:bc:2f:66:27:5b:46:70:38:32:03:be:d8:8e:28:
69:8c:57:10:ca:dc:b7:3c:81:88:43:11:22:8d:53:ce:95:93:
a1:b4:b8:17:1e:9b:07:fe:8f:db:d5:3f:1d:81:cb:09:76:73:
6a:09:ae:4c:f2:be:58:9e:0b:7e:96:f7:35:e8:45:b7:ce:00:
79:f9:c8:a0:6d:04:1c:cf:4b:78:1c:79:93:18:58:c7:75:f8:
10:5f:05:71:e9:2c:90:96:4b:50:1f:33:92:e4:48:d9:12:89:
f8:cf:b0:e8:b7:67:77:96:70:bc:aa:b6:dc:58:6d:1d:4a:cc:
5e:19:8a:26:12:64:20:2f:83:73:40:b3:18:b2:37:77:92:34:
20:cc:94:a6:f3:d7:b5:2d:76:88:53:f0:74:d3:c1:29:dc:06:
5c:04:f8:b3:76:e4:fd:89:d8:1d:59:ab:f6:87:97:91:4e:dd:
f2:61:6c:ed:45:cb:2a:74:ff:ba:98:88:86:4b:ec:0e:b6:52:
5b:0d:6e:b5
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB0uYGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTBkMjY4MTUxNGFlZmVlOWQzYzg2ZTFlYWUzNTczNmM4NGQxYzA5MB4XDTIyMDEw
MTE1MDczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjZmZjQ3Y2M3Y2U5
MTQyMGYxMzg3YjI2MDM4YWM2ZTkwZmJhZWU3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALTqG0RF4QnWF9nLxgVeeRiJukT0xJ4pP3FHXwR6J8x3etOU
W+kueijsWO9F7R+TZMDfe3XIDDU+zbH/8/By5GsAp5WNCWTsV742+EzRNZnCiyB4
bq/0bTpWg+U3dYtB4t1M0reQkTBYpSE3jcnlH1D4zZzlPTOFI0iY9vs7XmGFYrFg
LrUv4nxTX7a2FgZ+YOSiuDbKFfIz5ERPDB0fcyzNkEivwPiyiLbX00b7P15H8dcF
juxQovm0GM+dkm4+ZhDkVhnVaRmxNW9NJl1WOANXLdzBU6JRjLhQ4GxdDLFzIa1a
WyvgQfFF3nspEhOdWgM04WXINIT4YKbZj4htgQsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBT2/0fMfOkUIPE4eyYDisbpD7rufDAfBgNVHSMEGDAWgBTZDSaBUUrv7p08
huHq41c2yE0cCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJRMG1nVkZLNy02ZFBJYmg2dU5YTnNoTkhBay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvZTBkOTU2LTdiODctNGVkZC1iOTQ0LTFkMGYyOWI0Yjk3Zi8x
Lzl2OUh6SHpwRkNEeE9Ic21BNHJHNlEtNjdudy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
ZTBkOTU2LTdiODctNGVkZC1iOTQ0LTFkMGYyOWI0Yjk3Zi8xLzJRMG1nVkZLNy02
ZFBJYmg2dU5YTnNoTkhBay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcGPAgMEAcGPBjANBgkqhkiG9w0B
AQsFAAOCAQEALTjXfFIiZufGgWSmm19+QHJ2eeA9noYbDaopefW3tcUSDHa4IYK7
PCqs6UuPzuQXLNmzfwUlbuSK/LwvZidbRnA4MgO+2I4oaYxXEMrctzyBiEMRIo1T
zpWTobS4Fx6bB/6P29U/HYHLCXZzagmuTPK+WJ4Lfpb3NehFt84AefnIoG0EHM9L
eBx5kxhYx3X4EF8FcekskJZLUB8zkuRI2RKJ+M+w6Ldnd5ZwvKq23FhtHUrMXhmK
JhJkIC+Dc0CzGLI3d5I0IMyUpvPXtS12iFPwdNPBKdwGXAT4s3bk/YnYHVmr9oeX
kU7d8mFs7UXLKnT/upiIhkvsDrZSWw1utQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org