Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/dL43exJb1vsVsgGTJFgyOb3svrg.roa
File: dL43exJb1vsVsgGTJFgyOb3svrg.roa (raw, json)
Hash identifier: gZcCg5iwn9nSZbQ9fpsO7QfGBZXAKbKQEyEuzAndotY=
Subject key identifier: 74:BE:37:7B:12:5B:D6:FB:15:B2:01:93:24:58:32:39:BD:EC:BE:B8
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 02497EB9
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/dL43exJb1vsVsgGTJFgyOb3svrg.roa
Signing time: Sat 01 Jan 2022 16:02:09 +0000
ROA not before: Sat 01 Jan 2022 16:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49074
IP address blocks: 194.40.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38371001 (0x2497eb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 16:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74be377b125bd6fb15b2019324583239bdecbeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:96:04:16:eb:53:22:16:53:29:40:51:a3:
c8:51:d4:d2:c6:d7:4a:2a:38:06:ae:4e:a8:0b:95:
b4:69:ba:6f:c7:14:6c:81:3b:a1:52:f6:bc:fc:bf:
ce:2e:c1:6f:5d:e6:7f:7d:1f:5b:c2:3b:92:0d:0a:
bb:1a:6e:67:f3:94:2e:81:22:34:2a:b5:90:9e:2f:
4d:b6:30:b9:87:3e:b9:61:93:16:21:4c:cb:da:a7:
fa:9f:60:95:1e:42:81:f3:16:36:c5:ed:9c:21:8e:
8b:b9:b6:d9:52:f4:a8:bb:14:18:87:5b:71:ac:45:
b7:d8:4c:58:97:c7:3b:a5:1d:64:b0:a7:80:90:56:
a8:31:10:95:6d:51:89:db:57:6b:9e:53:ce:03:c4:
8e:d9:56:5b:19:a4:76:8a:26:f6:98:9e:0b:de:5c:
97:87:df:67:7a:03:93:ae:9e:11:1e:a0:45:ac:5d:
9a:52:c2:af:ad:d1:2b:18:f2:af:01:93:56:f0:25:
29:54:8b:32:51:79:4c:f0:a8:8d:14:14:41:21:b4:
88:1e:c6:07:b2:5c:96:06:38:2d:f4:28:5c:f9:38:
19:6c:36:57:ce:3c:da:77:16:8c:b9:8f:bf:cd:f9:
c9:db:ad:4b:9a:ac:d5:26:ae:b2:6e:64:a1:ac:e7:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:37:7B:12:5B:D6:FB:15:B2:01:93:24:58:32:39:BD:EC:BE:B8
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/dL43exJb1vsVsgGTJFgyOb3svrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
34:3d:c7:dc:2e:9a:60:11:7e:aa:b1:ef:f3:db:86:86:e1:7c:
a3:b9:12:1a:16:d8:1e:f0:9e:e0:f8:96:21:ef:32:b3:95:ed:
a1:25:ee:54:2b:e3:16:17:1d:fb:b1:54:d6:38:3a:bc:1a:5e:
64:81:49:93:a4:07:b8:34:0d:0c:05:ca:54:43:df:f4:8a:38:
c8:01:58:b8:2e:22:f2:59:71:46:68:fd:4e:04:cd:51:ec:80:
22:c1:45:a5:1d:eb:35:7b:dc:65:7b:38:6a:b5:8f:c1:f1:d4:
e1:f8:78:02:e9:18:c7:f1:24:81:7b:d8:3b:15:8a:d7:57:31:
30:f1:9e:92:2d:40:1a:76:43:eb:d4:9f:95:b9:1a:2d:eb:71:
ca:44:c3:e8:c3:fd:d2:50:ec:38:72:af:54:f8:82:ef:ac:4c:
36:fa:ac:40:55:ea:d4:5a:22:51:65:4b:bd:66:ba:fd:59:02:
c8:42:ee:64:54:f7:5f:f9:f5:a2:74:d3:e9:2e:d6:26:5d:46:
a7:04:01:92:33:61:73:ce:44:df:97:8c:aa:29:b7:37:30:5b:
c4:8c:1c:60:78:0d:05:3c:8e:4d:de:c3:9c:c2:7f:8f:ee:46:
fc:31:49:f3:bf:99:68:61:a4:d2:61:6e:bc:7a:14:05:5f:3c:
96:cf:47:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAkl+uTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmYyYzJlN2JjMWRhNTRkOTE5Y2E1YjU5NDFkMzc4ODkyYjJjY2IyMB4XDTIyMDEw
MTE2MDIwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzRiZTM3N2IxMjVi
ZDZmYjE1YjIwMTkzMjQ1ODMyMzliZGVjYmViODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdflgQW61MiFlMpQFGjyFHU0sbXSio4Bq5OqAuVtGm6b8cU
bIE7oVL2vPy/zi7Bb13mf30fW8I7kg0KuxpuZ/OULoEiNCq1kJ4vTbYwuYc+uWGT
FiFMy9qn+p9glR5CgfMWNsXtnCGOi7m22VL0qLsUGIdbcaxFt9hMWJfHO6UdZLCn
gJBWqDEQlW1RidtXa55TzgPEjtlWWxmkdoom9pieC95cl4ffZ3oDk66eER6gRaxd
mlLCr63RKxjyrwGTVvAlKVSLMlF5TPCojRQUQSG0iB7GB7JclgY4LfQoXPk4GWw2
V8482ncWjLmPv835ydutS5qs1Sausm5koaznSHkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR0vjd7ElvW+xWyAZMkWDI5vey+uDAfBgNVHSMEGDAWgBQi8sLnvB2lTZGc
pbWUHTeIkrLMsjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l2TEM1N3dkcFUyUm5LVzFsQjAzaUpLeXpMSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvNjAyNTMwLTZkMjItNDZmMS04ZTA1LTAyZGVmNmU4NGM5MS8x
L2RMNDNleEpiMXZzVnNnR1RKRmd5T2Izc3ZyZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
NjAyNTMwLTZkMjItNDZmMS04ZTA1LTAyZGVmNmU4NGM5MS8xL0l2TEM1N3dkcFUy
Um5LVzFsQjAzaUpLeXpMSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsIozDANBgkqhkiG9w0BAQsFAAOC
AQEAND3H3C6aYBF+qrHv89uGhuF8o7kSGhbYHvCe4PiWIe8ys5XtoSXuVCvjFhcd
+7FU1jg6vBpeZIFJk6QHuDQNDAXKVEPf9Io4yAFYuC4i8llxRmj9TgTNUeyAIsFF
pR3rNXvcZXs4arWPwfHU4fh4AukYx/EkgXvYOxWK11cxMPGeki1AGnZD69Sflbka
LetxykTD6MP90lDsOHKvVPiC76xMNvqsQFXq1FoiUWVLvWa6/VkCyELuZFT3X/n1
onTT6S7WJl1GpwQBkjNhc85E35eMqim3NzBbxIwcYHgNBTyOTd7DnMJ/j+5G/DFJ
87+ZaGGk0mFuvHoUBV88ls9Hsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org