Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/hFnuNjsmAml-_u__RPF37JfSMzA.roa
File: hFnuNjsmAml-_u__RPF37JfSMzA.roa (raw, json)
Hash identifier: XpqroalLJYkii+v2J4Gocb7UldqHtfCnGHQebCkwKXA=
Subject key identifier: 84:59:EE:36:3B:26:02:69:7E:FE:EF:FF:44:F1:77:EC:97:D2:33:30
Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial: 051388BC
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/hFnuNjsmAml-_u__RPF37JfSMzA.roa
Signing time: Sat 01 Jan 2022 14:58:10 +0000
ROA not before: Sat 01 Jan 2022 14:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207656
IP address blocks: 193.218.118.0/24 maxlen: 24
193.218.119.0/24 maxlen: 24
2a0f:e586::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85166268 (0x51388bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Validity
Not Before: Jan 1 14:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8459ee363b2602697efeefff44f177ec97d23330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:c9:a9:2d:3b:cc:3c:92:fc:5f:2a:de:4d:
bd:63:ed:37:58:26:dc:59:e9:e8:04:c4:1b:46:7b:
64:42:47:92:37:4c:7f:40:41:ac:99:5f:bf:bc:d3:
1a:58:92:24:76:9d:24:6c:78:8a:d4:f5:e0:91:3f:
c8:c3:6c:d7:83:7b:05:07:6d:7c:ba:16:74:3d:cc:
2e:5f:fd:c5:8c:22:35:17:2f:fd:a2:95:12:c7:12:
98:ad:04:f2:5f:80:d5:df:8d:ec:65:f6:79:74:89:
0c:f8:41:67:fa:86:5e:b8:3f:af:1a:e2:1c:c3:29:
4c:bf:28:d5:39:47:14:23:f5:ea:e9:3c:72:e5:f4:
d8:b6:35:e7:0f:26:98:bd:5b:ce:ca:85:09:c8:43:
6a:14:1e:01:83:54:0e:1e:77:22:22:c0:ee:24:85:
b4:df:69:2e:e7:d0:f3:77:6a:60:a4:a2:bb:d6:7d:
f5:8a:c0:c6:00:ff:34:c9:13:4a:00:c0:56:02:fa:
03:68:4e:4f:ed:dc:96:03:16:8c:9a:ae:28:bb:28:
d6:48:58:1a:67:44:ed:50:98:09:1c:e2:01:7a:8f:
d5:fb:98:72:0f:a1:13:ce:c9:cb:51:45:bc:6a:18:
9b:39:46:d6:e1:5f:b2:aa:56:63:7d:bc:2c:1d:46:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:EE:36:3B:26:02:69:7E:FE:EF:FF:44:F1:77:EC:97:D2:33:30
X509v3 Authority Key Identifier:
keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/hFnuNjsmAml-_u__RPF37JfSMzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.118.0/23
IPv6:
2a0f:e586::/32
Signature Algorithm: sha256WithRSAEncryption
1a:18:14:7d:d7:78:0f:cd:52:3c:8c:ee:d5:c4:fe:ba:b8:22:
66:e8:ed:f3:05:81:d6:33:f1:ec:b3:0d:2b:16:01:95:6b:be:
d2:dd:72:17:7f:c9:b1:5a:28:79:54:30:59:ca:2f:98:eb:10:
d7:c2:ba:f0:b4:b6:04:a9:79:49:92:de:29:d0:54:6b:bd:b2:
f8:92:e6:de:5f:be:ac:db:fb:7c:15:c4:cf:a9:15:f4:b6:de:
78:a0:67:1c:25:3d:3a:cb:ff:9a:ed:e5:b3:52:7f:59:ff:e5:
d3:67:cf:ad:c0:54:10:27:64:13:c7:e4:3b:c8:c6:16:53:e8:
10:cd:d1:f9:dc:a2:b7:21:69:81:4b:95:41:b4:c4:4f:15:68:
43:20:65:1e:74:6a:29:ad:b4:d3:f7:31:d2:62:83:89:18:db:
d0:dd:07:53:a0:8f:28:2e:10:73:98:ef:2b:75:d2:6f:19:49:
70:01:f1:2e:52:7f:56:d7:4b:f4:c7:7c:8c:5d:7b:3d:dc:9e:
78:46:ec:8f:2f:13:79:0b:1b:cc:67:de:38:64:34:57:c1:0e:
90:2a:70:20:60:53:9b:09:d8:7a:01:f2:70:0f:d6:29:7e:1a:
6c:fa:2f:c0:09:61:b2:a5:93:1e:86:9c:a0:06:ca:75:b4:6d:
fa:0e:8c:63
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBROIvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDJkN2Q5NzQzZGUyZWZhMmY2MzMzNzhhMjY4ZjU4ZjJhYTE2MDUwMB4XDTIyMDEw
MTE0NTgxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ1OWVlMzYzYjI2
MDI2OTdlZmVlZmZmNDRmMTc3ZWM5N2QyMzMzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+qyaktO8w8kvxfKt5NvWPtN1gm3Fnp6ATEG0Z7ZEJHkjdM
f0BBrJlfv7zTGliSJHadJGx4itT14JE/yMNs14N7BQdtfLoWdD3MLl/9xYwiNRcv
/aKVEscSmK0E8l+A1d+N7GX2eXSJDPhBZ/qGXrg/rxriHMMpTL8o1TlHFCP16uk8
cuX02LY15w8mmL1bzsqFCchDahQeAYNUDh53IiLA7iSFtN9pLufQ83dqYKSiu9Z9
9YrAxgD/NMkTSgDAVgL6A2hOT+3clgMWjJquKLso1khYGmdE7VCYCRziAXqP1fuY
cg+hE87Jy1FFvGoYmzlG1uFfsqpWY328LB1GA6UCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSEWe42OyYCaX7+7/9E8Xfsl9IzMDAfBgNVHSMEGDAWgBQtLX2XQ94u+i9j
M3iiaPWPKqFgUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xTMTlsMFBlTHZvdll6TjRvbWoxanlxaFlGQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODMvY2Y3YzE5LTFjN2QtNGViZS1iNGRkLWNiY2NmOTA0NTVmZS8x
L2hGbnVOanNtQW1sLV91X19SUEYzN0pmU016QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMv
Y2Y3YzE5LTFjN2QtNGViZS1iNGRkLWNiY2NmOTA0NTVmZS8xL0xTMTlsMFBlTHZv
dll6TjRvbWoxanlxaFlGQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAcHadjANBAIAAjAHAwUAKg/lhjAN
BgkqhkiG9w0BAQsFAAOCAQEAGhgUfdd4D81SPIzu1cT+urgiZujt8wWB1jPx7LMN
KxYBlWu+0t1yF3/JsVooeVQwWcovmOsQ18K68LS2BKl5SZLeKdBUa72y+JLm3l++
rNv7fBXEz6kV9LbeeKBnHCU9Osv/mu3ls1J/Wf/l02fPrcBUECdkE8fkO8jGFlPo
EM3R+dyityFpgUuVQbTETxVoQyBlHnRqKa200/cx0mKDiRjb0N0HU6CPKC4Qc5jv
K3XSbxlJcAHxLlJ/VtdL9Md8jF17PdyeeEbsjy8TeQsbzGfeOGQ0V8EOkCpwIGBT
mwnYegHycA/WKX4abPovwAlhsqWTHoacoAbKdbRt+g6MYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:07 2024 by rpki-client on console-ams.rpki-client.org