Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/67ll_pLX7tuv4ilSYydmJ9XdXW8.roa
File: 67ll_pLX7tuv4ilSYydmJ9XdXW8.roa (raw, json)
Hash identifier: XYEkU+7tPh1cNCLu13BYsUCGAH+M17RUwwe6ffpeInE=
Subject key identifier: EB:B9:65:FE:92:D7:EE:DB:AF:E2:29:52:63:27:66:27:D5:DD:5D:6F
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 0184AA09124493CE2C568CB0CEBB33324FE0
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/67ll_pLX7tuv4ilSYydmJ9XdXW8.roa
Signing time: Thu 24 Nov 2022 14:27:12 +0000
ROA not before: Thu 24 Nov 2022 14:27:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39357
IP address blocks: 193.84.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:09:12:44:93:ce:2c:56:8c:b0:ce:bb:33:32:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Nov 24 14:27:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebb965fe92d7eedbafe2295263276627d5dd5d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:72:a7:2b:0f:1b:13:68:90:43:dc:8f:c0:
b2:da:c2:a3:a0:75:69:63:22:dc:5f:95:06:de:2d:
5b:c6:7d:8e:ba:b6:6e:f7:7e:0c:05:9e:74:f0:d9:
0b:7d:2b:fe:97:90:29:7d:e2:5b:ae:61:93:49:dd:
6d:af:f6:d3:8b:91:50:8b:5a:7b:b5:a5:44:7e:9b:
0f:2f:a5:8c:72:06:5c:38:36:80:22:10:8d:28:47:
49:39:88:f4:d2:3e:29:ef:01:72:29:fe:bb:8d:16:
a0:68:05:fd:88:cf:ec:66:35:8a:39:fc:d5:10:26:
c9:6f:a9:3b:ed:f5:4a:c8:c0:c5:ec:03:09:44:94:
4f:61:ce:c8:b8:de:06:50:4a:9e:c4:77:79:5d:c3:
cd:4e:24:a5:9f:2e:35:35:55:c4:df:f9:9f:c3:ad:
c3:d6:7a:76:a3:ab:bc:3f:1e:f4:69:6c:e6:68:d6:
6a:12:49:1b:3a:2d:12:3f:61:2b:0d:36:c4:ea:54:
b2:fe:06:67:59:96:da:46:ab:21:a9:a6:e4:8f:2d:
01:53:cb:c5:00:78:15:d2:bf:5e:80:f3:5b:44:b1:
79:83:c3:d2:2b:32:3a:66:f4:95:ac:2f:b3:c9:c1:
cf:89:89:1c:c6:b7:ca:74:29:6c:a0:2f:25:a7:ec:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:65:FE:92:D7:EE:DB:AF:E2:29:52:63:27:66:27:D5:DD:5D:6F
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/67ll_pLX7tuv4ilSYydmJ9XdXW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:93:04:f5:8e:d2:94:34:50:15:a2:95:b4:ed:cc:8b:39:80:
b2:81:0d:b9:de:1d:d2:b5:e3:a6:e5:17:59:87:7d:6e:7f:78:
59:5a:57:7e:a6:e4:73:c1:52:ea:e3:d4:1d:cd:20:c1:fb:da:
ed:19:d0:d1:a1:a4:2a:00:d1:7a:dd:ae:0e:21:99:b9:f7:6f:
25:6c:ce:bc:82:0f:2d:85:cf:9d:54:db:ab:ae:94:66:b3:a6:
3e:e3:be:0b:26:41:cb:a7:df:52:18:c4:65:89:71:27:20:f0:
cf:f2:ce:9f:4b:6c:f4:b6:16:37:3d:22:23:00:77:2d:e6:89:
1a:06:7e:22:10:1b:c2:6c:54:30:b9:a8:4c:94:4e:07:f7:c4:
c4:80:88:a1:92:0f:51:b3:0b:8d:00:cc:11:26:64:ed:81:e4:
4b:4f:bf:86:98:9b:2f:f1:e6:21:cc:b7:a4:d0:9d:51:3e:06:
12:a0:d2:c5:60:ae:aa:43:38:99:96:95:50:57:36:58:0d:cf:
e0:91:ac:c3:85:4d:52:74:b5:67:23:9b:37:04:de:f0:3a:58:
b5:af:96:4a:e0:3e:ae:f8:40:f7:8c:3f:3b:32:e5:70:92:49:
2b:71:da:11:dd:5c:73:79:d2:34:bb:cf:74:28:99:76:6f:24:
65:5a:ef:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSqCRJEk84sVoywzrszMk/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZWU1YzFjODA0YzMzZmRlMzNkOWIwOGI5MTlmNzNkMzFk
MGI2ZDkwHhcNMjIxMTI0MTQyNzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmI5NjVmZTkyZDdlZWRiYWZlMjI5NTI2MzI3NjYyN2Q1ZGQ1ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp1ypysPGxNokEPcj8Cy2sKjoHVp
YyLcX5UG3i1bxn2OurZu934MBZ508NkLfSv+l5ApfeJbrmGTSd1tr/bTi5FQi1p7
taVEfpsPL6WMcgZcODaAIhCNKEdJOYj00j4p7wFyKf67jRagaAX9iM/sZjWKOfzV
ECbJb6k77fVKyMDF7AMJRJRPYc7IuN4GUEqexHd5XcPNTiSlny41NVXE3/mfw63D
1np2o6u8Px70aWzmaNZqEkkbOi0SP2ErDTbE6lSy/gZnWZbaRqshqabkjy0BU8vF
AHgV0r9egPNbRLF5g8PSKzI6ZvSVrC+zycHPiYkcxrfKdClsoC8lp+yNpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOu5Zf6S1+7br+IpUmMnZifV3V1vMB8GA1UdIwQY
MBaAFPfuXByATDP94z2bCLkZ9z0x0LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMt
ZTA4ZDUzZjA5NjEyLzEvNjdsbF9wTFg3dHV2NGlsU1l5ZG1KOVhkWFc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMtZTA4ZDUzZjA5NjEy
LzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVRWMA0G
CSqGSIb3DQEBCwUAA4IBAQCPkwT1jtKUNFAVopW07cyLOYCygQ253h3SteOm5RdZ
h31uf3hZWld+puRzwVLq49QdzSDB+9rtGdDRoaQqANF63a4OIZm5928lbM68gg8t
hc+dVNurrpRms6Y+474LJkHLp99SGMRliXEnIPDP8s6fS2z0thY3PSIjAHct5oka
Bn4iEBvCbFQwuahMlE4H98TEgIihkg9RswuNAMwRJmTtgeRLT7+GmJsv8eYhzLek
0J1RPgYSoNLFYK6qQziZlpVQVzZYDc/gkazDhU1SdLVnI5s3BN7wOli1r5ZK4D6u
+ED3jD87MuVwkkkrcdoR3VxzedI0u890KJl2byRlWu9U
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:43 2025 by rpki-client