Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/1-ZUuH2Dx5thN_NLPar2u4WIHo1s.roa
File: 1-ZUuH2Dx5thN_NLPar2u4WIHo1s.roa (raw, json)
Hash identifier: iWTniwjKT+nOBy9fRNuJyZkBS+1lLYBSsnv8PZ0vXXQ=
Subject key identifier: F9:95:2E:1F:60:F1:E6:D8:4D:FC:D2:CF:6A:BD:AE:E1:62:07:A3:5B
Certificate issuer: /CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Certificate serial: ED229A
Authority key identifier: E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/1-ZUuH2Dx5thN_NLPar2u4WIHo1s.roa
Signing time: Sat 01 Jan 2022 07:57:27 +0000
ROA not before: Sat 01 Jan 2022 07:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.162.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15540890 (0xed229a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Validity
Not Before: Jan 1 07:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9952e1f60f1e6d84dfcd2cf6abdaee16207a35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:23:2c:cc:f3:0f:86:e9:6c:59:6c:d0:f4:
fd:a0:5e:2f:3b:3e:7a:2e:53:ad:6f:96:34:d1:b8:
f0:52:85:86:1c:15:8e:c6:4c:91:38:8c:5e:88:04:
7b:b8:f8:0b:77:0b:d5:11:85:0f:c2:09:4b:fd:d9:
90:58:ee:4b:b3:3d:ec:3a:df:80:a2:dd:cd:86:71:
3a:37:d1:f8:a6:76:cf:c6:71:a3:94:81:74:b6:e7:
ef:d8:72:0c:be:cf:d6:3b:29:b5:20:7d:f8:e6:f9:
95:4a:fe:2b:b6:b5:dd:15:10:b0:1f:3f:e3:d6:bc:
bd:a1:d7:2c:da:99:1e:2b:30:5e:32:45:03:16:b9:
c6:b4:43:b9:d1:a7:82:52:9f:78:0e:6b:75:44:f8:
f7:fe:93:95:0c:0f:95:df:f2:b1:6c:d9:31:26:74:
dc:d0:ae:b9:f9:7c:6d:7d:77:27:75:77:77:09:e2:
66:8c:8a:f9:a6:9e:fa:f1:dc:b9:03:83:36:2b:b7:
29:9c:65:d0:21:ba:82:f3:88:fa:7d:6c:44:ec:49:
d4:86:88:5e:e4:4d:7b:02:57:63:c6:b0:f7:c2:1b:
9c:4e:ee:ef:a7:dd:ff:29:cd:32:f1:b6:c5:8e:e4:
31:65:4b:e3:a8:0c:eb:ff:a7:ab:1d:ad:67:bc:46:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:2E:1F:60:F1:E6:D8:4D:FC:D2:CF:6A:BD:AE:E1:62:07:A3:5B
X509v3 Authority Key Identifier:
keyid:E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/1-ZUuH2Dx5thN_NLPar2u4WIHo1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.132.0/24
Signature Algorithm: sha256WithRSAEncryption
57:50:e6:cf:2c:b7:ef:8a:b0:e9:b0:fe:4f:8a:af:51:6c:05:
4b:5e:56:c2:81:2f:d9:06:78:60:5b:48:66:7e:26:38:cd:ee:
7b:9b:b2:87:08:d1:5a:36:57:c3:cc:59:13:6b:9e:4e:c5:89:
98:00:08:6b:d6:31:76:ff:93:33:06:70:d9:19:a7:7e:0c:4c:
0b:82:d2:6b:d2:3e:d3:b8:68:9f:5a:da:1c:e6:8d:90:41:29:
af:8f:13:a5:f4:4e:d5:cf:31:0d:1f:51:d2:8f:0c:b5:77:5c:
d3:88:0c:e8:52:9f:3d:66:4b:ff:cc:17:47:79:42:d5:92:3e:
f7:61:bf:e3:da:61:74:06:2d:46:ed:3e:ff:5b:b0:af:9d:bd:
8a:37:79:94:65:4c:20:4f:1f:b7:6c:52:f0:c6:94:73:59:8f:
c7:6a:0b:eb:ec:4b:55:57:3d:71:43:5b:5e:71:c5:43:e6:0a:
43:85:38:05:9e:b6:a7:71:bc:23:8e:c0:1e:c0:e2:69:17:49:
3c:7f:48:7b:a7:0a:1b:8a:de:73:7f:31:d0:52:5c:01:11:7a:
4f:48:f8:63:ab:36:9d:56:a7:9c:11:8e:2b:cd:39:47:5e:08:
6c:15:e4:c4:b0:6a:ca:31:ba:94:5e:15:18:74:c7:00:f1:0f:
a0:3e:f2:56
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAO0imjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NzI4NjFkMWM5ZTkwODM1ZWE5NDE2ZjA1OTNkMDYzZDE0OWE1M2UyMB4XDTIyMDEw
MTA3NTcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjk5NTJlMWY2MGYx
ZTZkODRkZmNkMmNmNmFiZGFlZTE2MjA3YTM1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnDIyzM8w+G6WxZbND0/aBeLzs+ei5TrW+WNNG48FKFhhwV
jsZMkTiMXogEe7j4C3cL1RGFD8IJS/3ZkFjuS7M97DrfgKLdzYZxOjfR+KZ2z8Zx
o5SBdLbn79hyDL7P1jsptSB9+Ob5lUr+K7a13RUQsB8/49a8vaHXLNqZHiswXjJF
Axa5xrRDudGnglKfeA5rdUT49/6TlQwPld/ysWzZMSZ03NCuufl8bX13J3V3dwni
ZoyK+aae+vHcuQODNiu3KZxl0CG6gvOI+n1sROxJ1IaIXuRNewJXY8aw98IbnE7u
76fd/ynNMvG2xY7kMWVL46gM6/+nqx2tZ7xGNa8CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5lS4fYPHm2E380s9qva7hYgejWzAfBgNVHSMEGDAWgBTnKGHRyekINeqU
FvBZPQY9FJpT4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzV5aGgwY25wQ0RYcWxCYndXVDBHUFJTYVUtSS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvZTFiMDE4LTQ3MTEtNDRlZi04Njg4LTU5NmUyOWJmN2VmZS8x
LzEtWlV1SDJEeDV0aE5fTkxQYXIydTRXSUhvMXMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdl
L2UxYjAxOC00NzExLTQ0ZWYtODY4OC01OTZlMjliZjdlZmUvMS81eWhoMGNucENE
WHFsQmJ3V1QwR1BSU2FVLUkuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBooQwDQYJKoZIhvcNAQELBQAD
ggEBAFdQ5s8st++KsOmw/k+Kr1FsBUteVsKBL9kGeGBbSGZ+JjjN7nubsocI0Vo2
V8PMWRNrnk7FiZgACGvWMXb/kzMGcNkZp34MTAuC0mvSPtO4aJ9a2hzmjZBBKa+P
E6X0TtXPMQ0fUdKPDLV3XNOIDOhSnz1mS//MF0d5QtWSPvdhv+PaYXQGLUbtPv9b
sK+dvYo3eZRlTCBPH7dsUvDGlHNZj8dqC+vsS1VXPXFDW15xxUPmCkOFOAWetqdx
vCOOwB7A4mkXSTx/SHunChuK3nN/MdBSXAERek9I+GOrNp1Wp5wRjivNOUdeCGwV
5MSwasoxupReFRh0xwDxD6A+8lY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:30 2023 by rpki-client on console-fra.rpki-client.org