Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/iT0yyGamTovGFruB3B0_YUJDDK0.roa
File: iT0yyGamTovGFruB3B0_YUJDDK0.roa (raw, json)
Hash identifier: hrhpZsvOoOAMFnHn8bKNmP6maS1b67I1+3mbzjezG9M=
Subject key identifier: 89:3D:32:C8:66:A6:4E:8B:C6:16:BB:81:DC:1D:3F:61:42:43:0C:AD
Certificate issuer: /CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Certificate serial: ECDFC9
Authority key identifier: E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/iT0yyGamTovGFruB3B0_YUJDDK0.roa
Signing time: Sat 01 Jan 2022 07:57:27 +0000
ROA not before: Sat 01 Jan 2022 07:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.162.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15523785 (0xecdfc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Validity
Not Before: Jan 1 07:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=893d32c866a64e8bc616bb81dc1d3f6142430cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:71:45:ba:8c:66:25:d0:25:d5:b1:63:93:
18:2b:f9:98:e1:33:44:23:51:77:a9:53:0e:fc:81:
28:3b:16:e9:db:f0:df:49:f1:9f:93:6f:90:03:6e:
e2:0c:43:1e:5d:8c:48:20:60:4f:fa:f3:e0:f5:c3:
22:81:d5:a0:23:3a:b2:02:54:d8:1a:f6:78:25:8c:
48:96:7c:fe:2f:28:87:29:2c:a4:9d:98:4f:8e:81:
17:1e:99:43:5f:eb:ca:80:86:01:23:fc:53:31:bb:
02:be:31:58:58:73:48:42:db:62:8b:0a:e0:09:6e:
89:6f:93:94:ff:8e:6a:9d:58:fa:12:ff:42:b6:ab:
e4:0d:1c:5a:91:33:a8:a3:cb:2e:ff:04:5b:3b:f0:
e8:d3:97:3f:69:25:5e:7d:34:26:ef:c9:e9:ea:bd:
59:73:68:a3:e1:e2:0e:82:03:27:7b:4c:43:22:da:
67:9d:1a:03:16:4e:09:93:63:7e:15:86:54:b2:6a:
b6:1c:c5:6e:33:28:d0:bb:aa:da:f9:98:0c:bb:06:
01:ab:c8:6e:90:29:a5:19:0d:48:b6:ac:26:0f:e4:
46:60:26:7a:c6:8a:00:bf:94:3c:f1:12:4b:d7:f2:
94:96:f4:ee:68:37:19:78:b8:38:d8:c7:50:5f:3d:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:32:C8:66:A6:4E:8B:C6:16:BB:81:DC:1D:3F:61:42:43:0C:AD
X509v3 Authority Key Identifier:
keyid:E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/iT0yyGamTovGFruB3B0_YUJDDK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.132.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4b:00:da:a4:d7:e6:55:0f:02:24:4e:cd:a7:01:5e:2f:74:
48:d0:46:72:4d:ac:be:e6:fd:68:08:10:27:9c:29:03:1c:0d:
23:6e:2c:3d:50:86:57:3e:b4:48:f9:b5:1e:ea:dc:29:ba:de:
7b:b0:e9:ae:9f:38:2b:ad:fe:e6:47:60:1c:7c:0e:b4:3c:06:
3b:4d:11:bc:ec:7f:cc:57:46:48:a6:a6:4d:1b:1f:c7:6c:df:
42:7a:89:46:02:86:18:0d:39:7e:90:dd:31:18:3f:f3:d1:78:
e9:db:94:58:cc:1b:82:ec:cf:19:19:3e:3e:d5:5d:fd:e1:5a:
87:bf:86:47:83:c9:a7:b4:4b:d2:a5:3e:a2:86:93:39:5c:b6:
fc:7b:b0:2d:1b:db:88:51:f3:4f:89:34:11:24:65:08:ab:ce:
4b:85:53:e6:8a:f0:e4:b1:23:c2:51:ab:53:32:d5:24:4e:cc:
42:69:c0:63:75:cd:bf:58:88:ed:ad:64:17:8b:17:5c:22:df:
e2:e2:c8:c0:6d:f1:0a:c7:ff:06:1a:a8:23:a3:99:0d:a3:74:
53:b9:ff:57:b6:23:c7:42:ba:39:c1:ac:c9:09:ef:76:cf:07:
c8:f6:14:17:b6:55:f6:ae:2d:f3:35:6c:9f:11:f0:e6:4d:3e:
f6:8a:71:5c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOzfyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NzI4NjFkMWM5ZTkwODM1ZWE5NDE2ZjA1OTNkMDYzZDE0OWE1M2UyMB4XDTIyMDEw
MTA3NTcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODkzZDMyYzg2NmE2
NGU4YmM2MTZiYjgxZGMxZDNmNjE0MjQzMGNhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJwucUW6jGYl0CXVsWOTGCv5mOEzRCNRd6lTDvyBKDsW6dvw
30nxn5NvkANu4gxDHl2MSCBgT/rz4PXDIoHVoCM6sgJU2Br2eCWMSJZ8/i8ohyks
pJ2YT46BFx6ZQ1/ryoCGASP8UzG7Ar4xWFhzSELbYosK4AluiW+TlP+Oap1Y+hL/
Qrar5A0cWpEzqKPLLv8EWzvw6NOXP2klXn00Ju/J6eq9WXNoo+HiDoIDJ3tMQyLa
Z50aAxZOCZNjfhWGVLJqthzFbjMo0Luq2vmYDLsGAavIbpAppRkNSLasJg/kRmAm
esaKAL+UPPESS9fylJb07mg3GXi4ONjHUF89cxMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSJPTLIZqZOi8YWu4HcHT9hQkMMrTAfBgNVHSMEGDAWgBTnKGHRyekINeqU
FvBZPQY9FJpT4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzV5aGgwY25wQ0RYcWxCYndXVDBHUFJTYVUtSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvZTFiMDE4LTQ3MTEtNDRlZi04Njg4LTU5NmUyOWJmN2VmZS8x
L2lUMHl5R2FtVG92R0ZydUIzQjBfWVVKRERLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
ZTFiMDE4LTQ3MTEtNDRlZi04Njg4LTU5NmUyOWJmN2VmZS8xLzV5aGgwY25wQ0RY
cWxCYndXVDBHUFJTYVUtSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGihDANBgkqhkiG9w0BAQsFAAOC
AQEAFEsA2qTX5lUPAiROzacBXi90SNBGck2svub9aAgQJ5wpAxwNI24sPVCGVz60
SPm1HurcKbree7Dprp84K63+5kdgHHwOtDwGO00RvOx/zFdGSKamTRsfx2zfQnqJ
RgKGGA05fpDdMRg/89F46duUWMwbguzPGRk+PtVd/eFah7+GR4PJp7RL0qU+ooaT
OVy2/HuwLRvbiFHzT4k0ESRlCKvOS4VT5orw5LEjwlGrUzLVJE7MQmnAY3XNv1iI
7a1kF4sXXCLf4uLIwG3xCsf/BhqoI6OZDaN0U7n/V7Yjx0K6OcGsyQnvds8HyPYU
F7ZV9q4t8zVsnxHw5k0+9opxXA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:08 2023 by rpki-client on console-ams.rpki-client.org