Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/RO9ZKCBqnrSjBbZkXoxkq8_RrmA.roa
File: RO9ZKCBqnrSjBbZkXoxkq8_RrmA.roa (raw, json)
Hash identifier: VbMc5VHFfQZ9nT8D6Y07bMSPKq0zUZENjrrU2AVewHk=
Subject key identifier: 44:EF:59:28:20:6A:9E:B4:A3:05:B6:64:5E:8C:64:AB:CF:D1:AE:60
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 0621104F
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/RO9ZKCBqnrSjBbZkXoxkq8_RrmA.roa
Signing time: Sat 01 Jan 2022 11:55:19 +0000
ROA not before: Sat 01 Jan 2022 11:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209256
IP address blocks: 194.6.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102830159 (0x621104f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Jan 1 11:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44ef5928206a9eb4a305b6645e8c64abcfd1ae60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:60:03:b7:1f:7b:3a:9c:05:03:07:b0:02:5c:
c3:67:44:05:27:bc:96:ee:0e:3d:1c:0f:52:13:e3:
56:ac:63:ff:a5:16:50:99:ab:97:f2:75:18:18:58:
41:e1:9c:80:8d:9c:ca:d3:2d:10:3f:ca:c2:d6:15:
f7:44:d5:78:a2:02:e1:31:9b:3c:ba:9a:4e:95:2f:
b3:9a:4b:87:e9:b7:7b:db:5e:2e:91:82:a5:b0:06:
d3:ba:ca:12:5a:8b:b9:47:cc:81:ea:ae:80:73:67:
f9:a1:aa:60:69:d0:ac:70:bc:5d:d4:da:da:0f:20:
b1:1a:66:2b:e7:fa:a7:1f:fa:b2:fa:13:24:21:98:
37:93:30:b1:c8:f7:d8:52:36:de:8e:af:31:a1:0a:
9a:b7:72:7f:a1:24:f6:50:5a:4f:01:36:5c:2c:42:
2c:7f:f4:4f:29:71:96:f4:1e:4f:dc:e5:10:02:39:
7a:96:3f:78:6e:ae:84:75:6b:f1:a3:14:5e:0a:d6:
3f:ad:31:9a:04:5a:dd:62:1a:6a:f7:d7:87:63:58:
a6:be:d9:90:67:ec:2e:fd:10:43:03:42:e3:f2:68:
8d:68:96:b0:0f:1f:be:5a:e0:fc:64:30:17:56:9a:
3c:76:7a:e5:01:5d:57:56:8a:f9:5c:6a:99:c1:07:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:59:28:20:6A:9E:B4:A3:05:B6:64:5E:8C:64:AB:CF:D1:AE:60
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/RO9ZKCBqnrSjBbZkXoxkq8_RrmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c2:98:6c:a8:9e:19:d4:70:79:12:55:cb:b5:2b:87:32:c5:
93:80:ad:be:bc:b4:39:68:ba:1c:05:d1:b8:fc:0c:f4:d6:7b:
d3:e0:07:40:13:f8:51:d8:aa:a1:ca:f1:de:aa:17:da:9f:d0:
da:66:2e:84:a7:69:7d:fc:aa:33:fa:f5:ed:6a:0e:c9:70:33:
df:ce:93:4a:ea:b6:5e:f8:37:34:d5:aa:0c:d8:1b:da:be:da:
3e:0a:e2:68:86:58:8e:39:88:1a:b1:83:4c:25:b2:98:51:87:
e1:15:ac:e0:73:94:0c:b3:f9:ae:dd:aa:d7:90:3a:a9:e3:09:
95:4e:ff:21:da:d9:b9:4c:55:2e:b4:09:0f:48:f3:89:ed:0a:
40:36:70:3d:c6:d6:83:57:bb:b2:45:2e:68:60:10:3a:33:a8:
80:31:8b:a6:25:9c:14:23:f5:2f:cd:2f:31:38:5a:78:3d:83:
1e:56:e1:77:ab:5d:b5:37:eb:a1:c7:95:d8:26:45:f9:15:3f:
39:18:52:59:4d:ad:5e:04:ff:f4:15:aa:93:21:db:16:d0:b7:
03:74:77:eb:0c:51:58:6e:1b:2d:ed:48:46:55:fb:48:53:b2:
e2:fc:32:af:46:cc:49:c2:e5:86:47:ec:4b:c8:8d:a6:d2:86:
ca:54:cf:51
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBiEQTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZmUxZmM2YTE1OTY1OTM0YzUzMzkzZDZlZDE4OTg0YzZiYTU2ZjU2MB4XDTIyMDEw
MTExNTUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDRlZjU5MjgyMDZh
OWViNGEzMDViNjY0NWU4YzY0YWJjZmQxYWU2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVgA7cfezqcBQMHsAJcw2dEBSe8lu4OPRwPUhPjVqxj/6UW
UJmrl/J1GBhYQeGcgI2cytMtED/KwtYV90TVeKIC4TGbPLqaTpUvs5pLh+m3e9te
LpGCpbAG07rKElqLuUfMgequgHNn+aGqYGnQrHC8XdTa2g8gsRpmK+f6px/6svoT
JCGYN5Mwscj32FI23o6vMaEKmrdyf6Ek9lBaTwE2XCxCLH/0TylxlvQeT9zlEAI5
epY/eG6uhHVr8aMUXgrWP60xmgRa3WIaavfXh2NYpr7ZkGfsLv0QQwNC4/JojWiW
sA8fvlrg/GQwF1aaPHZ65QFdV1aK+VxqmcEH2lUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRE71koIGqetKMFtmRejGSrz9GuYDAfBgNVHSMEGDAWgBTv4fxqFZZZNMUz
k9btGJhMa6VvVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzctSDhhaFdXV1RURk01UFc3UmlZVEd1bGIxWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNjNiNWVjLWMyYzktNGY2OC04ZDQ3LTRkMTk5MzdlMmYyMC8x
L1JPOVpLQ0JxbnJTakJiWmtYb3hrcThfUnJtQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NjNiNWVjLWMyYzktNGY2OC04ZDQ3LTRkMTk5MzdlMmYyMC8xLzctSDhhaFdXV1RU
Rk01UFc3UmlZVEd1bGIxWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIG8zANBgkqhkiG9w0BAQsFAAOC
AQEAx8KYbKieGdRweRJVy7UrhzLFk4Ctvry0OWi6HAXRuPwM9NZ70+AHQBP4Udiq
ocrx3qoX2p/Q2mYuhKdpffyqM/r17WoOyXAz386TSuq2Xvg3NNWqDNgb2r7aPgri
aIZYjjmIGrGDTCWymFGH4RWs4HOUDLP5rt2q15A6qeMJlU7/IdrZuUxVLrQJD0jz
ie0KQDZwPcbWg1e7skUuaGAQOjOogDGLpiWcFCP1L80vMThaeD2DHlbhd6tdtTfr
oceV2CZF+RU/ORhSWU2tXgT/9BWqkyHbFtC3A3R36wxRWG4bLe1IRlX7SFOy4vwy
r0bMScLlhkfsS8iNptKGylTPUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:31 2023 by rpki-client on console-fra.rpki-client.org