Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/E4Btn-vTb3NQOsx-HsqbCoHN85E.roa
File: E4Btn-vTb3NQOsx-HsqbCoHN85E.roa (raw, json)
Hash identifier: 7/U4XDG07urbneeAOYzAl2k5fQLqkaWIn5cKHllHK7c=
Subject key identifier: 13:80:6D:9F:EB:D3:6F:73:50:3A:CC:7E:1E:CA:9B:0A:81:CD:F3:91
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 01853085FFACFED1690CB82038B69742267E
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/E4Btn-vTb3NQOsx-HsqbCoHN85E.roa
Signing time: Tue 20 Dec 2022 17:12:46 +0000
ROA not before: Tue 20 Dec 2022 17:12:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202614
IP address blocks: 193.238.45.0/24 maxlen: 24
193.238.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:85:ff:ac:fe:d1:69:0c:b8:20:38:b6:97:42:26:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Dec 20 17:12:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13806d9febd36f73503acc7e1eca9b0a81cdf391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:2b:cc:ba:28:e8:9b:f0:f4:93:82:f1:c5:
06:68:f3:c2:d7:8b:d6:6f:80:8b:dd:de:28:91:09:
76:d8:04:61:f5:63:38:a9:2f:30:b4:b3:88:81:ab:
3a:c2:94:64:e1:68:8c:22:bf:07:b3:74:33:37:a2:
e5:ca:bb:5d:d9:1c:7f:eb:42:4f:c7:6e:6c:49:00:
c2:f9:c8:54:f4:ad:d6:9e:f6:0b:8b:7c:d9:41:98:
d8:3f:9c:ed:ec:50:ea:b7:3e:e9:de:78:d5:18:a2:
71:a7:c9:45:d3:d2:d0:bc:cb:22:bd:ad:44:ae:65:
1f:28:b8:dc:9d:5b:ea:05:99:9c:70:56:5e:c8:9f:
f4:e3:b5:79:00:7a:b7:f2:dd:13:62:18:02:6a:82:
29:7a:01:ea:fa:36:18:f9:7b:0f:0c:3b:db:0c:dd:
19:f4:4a:86:c5:b2:20:e9:01:67:27:cd:77:e5:35:
5f:a3:39:1d:87:a8:f0:c5:63:5a:45:83:02:69:eb:
6e:d3:9f:5a:a8:92:d6:8f:25:42:0e:d4:1b:55:d6:
92:db:37:c4:14:47:7d:fb:94:b3:ea:6e:1b:cc:90:
1c:d1:fa:d8:59:24:25:10:f0:a7:39:69:31:4d:a3:
be:fd:2d:ff:27:13:34:92:65:d1:28:e7:fe:c8:94:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:80:6D:9F:EB:D3:6F:73:50:3A:CC:7E:1E:CA:9B:0A:81:CD:F3:91
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/E4Btn-vTb3NQOsx-HsqbCoHN85E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.45.0/24
193.238.47.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b5:d1:8e:be:b1:30:0f:46:51:54:6f:0f:2e:c3:69:be:70:
26:6c:07:a1:9e:e1:67:1a:06:61:71:46:38:db:d9:22:e5:55:
9d:fe:a7:d7:9c:f6:ff:29:70:89:99:20:97:11:ac:59:03:1e:
1d:84:b3:c9:f7:05:5b:53:69:a8:42:bb:e7:b8:58:89:10:8d:
e0:95:5a:2e:08:1d:34:50:5f:34:4c:f7:8e:cd:e7:76:53:65:
bb:48:5b:43:f8:28:20:de:9e:77:d1:ce:8e:0f:42:45:7b:e4:
e3:84:d6:f3:e1:a0:01:79:90:59:9e:21:fa:23:d7:19:97:81:
2d:82:10:9c:b6:69:6e:61:11:d9:07:58:4a:06:36:cf:55:68:
14:51:23:ec:78:22:1b:0e:2c:b6:fd:21:02:bb:89:c3:80:9c:
ae:43:31:0f:ac:0d:dd:9a:d3:05:c3:47:d8:53:28:6b:e3:fa:
d0:27:25:27:02:ed:25:19:89:43:7d:e5:fb:7c:a4:56:df:f3:
34:87:1a:e5:83:f8:ab:0c:b6:e3:a7:8c:ab:86:b7:47:75:4b:
59:b1:90:22:a9:2b:fb:79:9d:4f:e2:7b:0f:48:9f:b1:eb:38:
2f:ae:1e:f8:71:9e:ab:e8:ba:fa:28:b3:14:a2:d3:2c:18:d7:
5b:9c:6c:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYUwhf+s/tFpDLggOLaXQiZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTIxM2RmOTczMjk1NTZkNjA4YjE1MGYwM2M0ZWU3NWZi
ZDk4YzEwHhcNMjIxMjIwMTcxMjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzgwNmQ5ZmViZDM2ZjczNTAzYWNjN2UxZWNhOWIwYTgxY2RmMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoErzLoo6Jvw9JOC8cUGaPPC14vW
b4CL3d4okQl22ARh9WM4qS8wtLOIgas6wpRk4WiMIr8Hs3QzN6Llyrtd2Rx/60JP
x25sSQDC+chU9K3WnvYLi3zZQZjYP5zt7FDqtz7p3njVGKJxp8lF09LQvMsiva1E
rmUfKLjcnVvqBZmccFZeyJ/047V5AHq38t0TYhgCaoIpegHq+jYY+XsPDDvbDN0Z
9EqGxbIg6QFnJ8135TVfozkdh6jwxWNaRYMCaetu059aqJLWjyVCDtQbVdaS2zfE
FEd9+5Sz6m4bzJAc0frYWSQlEPCnOWkxTaO+/S3/JxM0kmXRKOf+yJTj5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBOAbZ/r029zUDrMfh7KmwqBzfORMB8GA1UdIwQY
MBaAFLhSE9+XMpVW1gixUPA8TudfvZjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTkt
MWZiMWU5Yzg2YjUzLzEvRTRCdG4tdlRiM05RT3N4LUhzcWJDb0hOODVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTktMWZiMWU5Yzg2YjUz
LzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwe4tAwQA
we4vMA0GCSqGSIb3DQEBCwUAA4IBAQAltdGOvrEwD0ZRVG8PLsNpvnAmbAehnuFn
GgZhcUY429ki5VWd/qfXnPb/KXCJmSCXEaxZAx4dhLPJ9wVbU2moQrvnuFiJEI3g
lVouCB00UF80TPeOzed2U2W7SFtD+Cgg3p530c6OD0JFe+TjhNbz4aABeZBZniH6
I9cZl4EtghCctmluYRHZB1hKBjbPVWgUUSPseCIbDiy2/SECu4nDgJyuQzEPrA3d
mtMFw0fYUyhr4/rQJyUnAu0lGYlDfeX7fKRW3/M0hxrlg/irDLbjp4yrhrdHdUtZ
sZAiqSv7eZ1P4nsPSJ+x6zgvrh74cZ6r6Lr6KLMUotMsGNdbnGxo
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:21 2023 by rpki-client on console-ams.rpki-client.org