Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/jh28s0AzYCGCibJ-VxfszBHsGtc.roa
File: jh28s0AzYCGCibJ-VxfszBHsGtc.roa (raw, json)
Hash identifier: v+GKaySety3bqlwokpBXuEs/EWzOuTBkHs/EllMBczI=
Subject key identifier: 8E:1D:BC:B3:40:33:60:21:82:89:B2:7E:57:17:EC:CC:11:EC:1A:D7
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 01A08839
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/jh28s0AzYCGCibJ-VxfszBHsGtc.roa
Signing time: Sat 01 Jan 2022 03:01:42 +0000
ROA not before: Sat 01 Jan 2022 03:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211345
IP address blocks: 193.36.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27297849 (0x1a08839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Jan 1 03:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e1dbcb3403360218289b27e5717eccc11ec1ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:17:9d:ea:4a:44:b1:25:0e:81:23:02:78:
91:e5:3a:bd:db:ec:67:78:69:45:5d:b4:24:d5:a6:
06:62:f0:3f:5a:fe:9c:bb:19:81:36:b2:36:4d:74:
1a:fd:de:27:d0:a6:04:b1:08:c8:b7:fd:e2:79:ab:
80:78:1c:f5:22:e0:d6:8e:1c:da:1c:62:e4:91:09:
e8:a8:b8:c0:d0:18:3b:ac:3a:fb:79:76:60:fc:92:
43:50:b6:e1:a9:84:35:07:e5:bd:d8:07:c4:30:bf:
80:69:06:1e:1b:fa:49:48:6f:27:2b:4b:f1:b8:c1:
23:6a:82:89:f5:f2:42:22:9e:7e:d2:0b:6b:95:89:
29:75:2f:24:4f:6a:a4:7e:8f:e0:f7:18:4d:5c:5c:
39:a7:e1:92:77:4a:0d:1b:ab:0c:a8:75:7d:71:0e:
87:44:47:2f:2a:30:2a:80:66:f5:c0:2d:ba:cf:e9:
2a:c3:a4:22:38:60:c0:49:4a:d7:ae:c1:52:0c:c9:
fa:7d:8f:e4:63:1a:9e:9e:fb:77:d7:5b:d8:bd:7b:
68:bd:99:38:c0:3d:06:21:68:2b:10:db:eb:fc:b2:
85:8e:b4:87:cb:f3:61:a9:3f:99:cc:be:5f:50:c7:
aa:b5:e4:96:47:14:7a:aa:ae:2a:0e:46:d6:05:f7:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1D:BC:B3:40:33:60:21:82:89:B2:7E:57:17:EC:CC:11:EC:1A:D7
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/jh28s0AzYCGCibJ-VxfszBHsGtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.88.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d6:28:69:f3:f4:6b:cc:26:1d:a5:cd:19:d8:06:36:a7:08:
0d:b2:2b:67:4b:83:3a:bb:79:fb:95:1a:37:45:f8:ab:cc:d7:
f9:6f:b5:a1:a2:39:0d:df:6e:52:b8:34:68:af:c1:eb:be:9c:
cd:0f:68:ee:9f:63:d4:a0:2e:24:ac:84:a3:c0:19:b5:48:09:
0b:c4:16:6d:98:6b:b8:40:30:91:90:3f:82:a1:f2:ed:08:36:
2d:f8:91:1d:19:bb:dd:48:f2:66:5b:23:6d:86:62:d2:92:85:
e1:31:52:84:09:95:af:24:e0:b5:33:c9:ec:ae:0f:38:96:3d:
fa:98:83:7e:dc:1d:47:fd:8a:08:7d:eb:fe:f4:c9:09:c0:d3:
09:4b:d4:a5:15:9b:48:b9:2f:9a:e4:c4:ed:49:54:8a:a0:6e:
8d:1e:0a:c4:72:66:d9:a3:b2:a3:3d:35:59:92:4d:09:09:cf:
b8:f0:48:f1:53:be:72:e6:6a:33:7f:1d:6a:25:c6:dd:21:4a:
d9:0e:dc:01:37:df:58:5f:9a:2b:77:f1:ab:df:9c:24:a6:61:
26:18:ed:1f:6c:07:d7:50:19:67:a0:3f:bf:ac:5a:c8:43:4e:
8e:d1:48:54:dd:a4:03:dd:8b:c9:47:0e:d4:3f:1f:6c:38:f9:
30:f4:4a:ca
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAaCIOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NmQ5M2JlMTE0ZjgyZDAyNTg5MTZhOTc4Y2FjYmZiMTViYjU4NDBhMB4XDTIyMDEw
MTAzMDE0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGUxZGJjYjM0MDMz
NjAyMTgyODliMjdlNTcxN2VjY2MxMWVjMWFkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALLUF53qSkSxJQ6BIwJ4keU6vdvsZ3hpRV20JNWmBmLwP1r+
nLsZgTayNk10Gv3eJ9CmBLEIyLf94nmrgHgc9SLg1o4c2hxi5JEJ6Ki4wNAYO6w6
+3l2YPySQ1C24amENQflvdgHxDC/gGkGHhv6SUhvJytL8bjBI2qCifXyQiKeftIL
a5WJKXUvJE9qpH6P4PcYTVxcOafhkndKDRurDKh1fXEOh0RHLyowKoBm9cAtus/p
KsOkIjhgwElK167BUgzJ+n2P5GManp77d9db2L17aL2ZOMA9BiFoKxDb6/yyhY60
h8vzYak/mcy+X1DHqrXklkcUeqquKg5G1gX3lHcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSOHbyzQDNgIYKJsn5XF+zMEewa1zAfBgNVHSMEGDAWgBTW2TvhFPgtAliR
apeMrL+xW7WECjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzF0azc0UlQ0TFFKWWtXcVhqS3lfc1Z1MWhBby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvODQ3Y2Y1LTIyNTMtNDI5MC1iNzQ1LWExNDc0NGQxOGE1NC8x
L2poMjhzMEF6WUNHQ2liSi1WeGZzekJIc0d0Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
ODQ3Y2Y1LTIyNTMtNDI5MC1iNzQ1LWExNDc0NGQxOGE1NC8xLzF0azc0UlQ0TFFK
WWtXcVhqS3lfc1Z1MWhBby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEkWDANBgkqhkiG9w0BAQsFAAOC
AQEAI9YoafP0a8wmHaXNGdgGNqcIDbIrZ0uDOrt5+5UaN0X4q8zX+W+1oaI5Dd9u
Urg0aK/B676czQ9o7p9j1KAuJKyEo8AZtUgJC8QWbZhruEAwkZA/gqHy7Qg2LfiR
HRm73UjyZlsjbYZi0pKF4TFShAmVryTgtTPJ7K4POJY9+piDftwdR/2KCH3r/vTJ
CcDTCUvUpRWbSLkvmuTE7UlUiqBujR4KxHJm2aOyoz01WZJNCQnPuPBI8VO+cuZq
M38daiXG3SFK2Q7cATffWF+aK3fxq9+cJKZhJhjtH2wH11AZZ6A/v6xayENOjtFI
VN2kA92LyUcO1D8fbDj5MPRKyg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:05 2023 by rpki-client on console-ams.rpki-client.org