Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/57Fo9B9Nwydokbm3b6wN7cZhn9g.roa
File: 57Fo9B9Nwydokbm3b6wN7cZhn9g.roa (raw, json)
Hash identifier: NFq7Q54wtyatbpAwBfITZAlbws0qnSSxAR3dHDymCmQ=
Subject key identifier: E7:B1:68:F4:1F:4D:C3:27:68:91:B9:B7:6F:AC:0D:ED:C6:61:9F:D8
Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial: 01850616283DCF256294AD099AD3EA4EDE91
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/57Fo9B9Nwydokbm3b6wN7cZhn9g.roa
Signing time: Mon 12 Dec 2022 11:26:33 +0000
ROA not before: Mon 12 Dec 2022 11:26:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3304
IP address blocks: 193.28.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:16:28:3d:cf:25:62:94:ad:09:9a:d3:ea:4e:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Validity
Not Before: Dec 12 11:26:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7b168f41f4dc3276891b9b76fac0dedc6619fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:86:92:1c:7a:fe:0d:fc:64:7a:07:b8:bf:
92:aa:6b:55:23:28:32:6f:5e:05:f9:3f:fc:f0:92:
84:eb:d9:ca:6a:b0:92:8a:87:36:53:e6:be:20:77:
e7:9e:0f:7b:7c:38:47:67:62:dd:a3:72:49:51:38:
b2:2e:5e:a5:3f:83:63:c6:a9:24:0c:fb:62:bb:f8:
a6:05:76:0b:f6:ad:0c:a6:9a:2e:e5:eb:e5:84:d3:
7d:96:03:e7:24:3e:3c:90:f6:37:79:ad:26:ee:02:
fe:2a:da:82:3c:28:ee:ee:46:2a:fa:89:ec:88:5c:
fb:72:62:af:8e:c1:f3:4e:4e:e5:8d:86:9e:9b:f3:
e3:fa:00:71:c5:09:a3:f5:23:3e:21:0c:c6:d8:8b:
37:f5:ce:dd:7a:16:d7:9c:93:53:d8:28:ab:1a:93:
9a:06:68:35:37:84:ac:40:42:13:2f:9d:01:27:46:
7f:d9:e4:a8:e8:8d:5d:28:e0:eb:93:50:f0:12:a4:
55:d9:1a:80:51:f3:10:9e:25:c7:73:60:8d:a7:7d:
ad:7d:15:17:74:9a:6b:f5:66:df:ce:7b:ec:2b:72:
92:d8:58:b5:cf:6d:44:f5:8e:6c:8e:4d:67:8a:14:
32:14:21:1f:60:cb:63:fb:26:5b:a6:cc:d7:96:69:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:68:F4:1F:4D:C3:27:68:91:B9:B7:6F:AC:0D:ED:C6:61:9F:D8
X509v3 Authority Key Identifier:
keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/57Fo9B9Nwydokbm3b6wN7cZhn9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:21:ae:f9:e2:15:b6:4d:49:b7:76:1c:33:1b:c1:fb:fa:a6:
84:15:fc:97:90:9c:e5:c2:97:00:3f:57:a2:40:0a:33:e8:eb:
29:79:eb:26:53:34:4f:9f:c6:ce:bf:f0:9c:8d:e9:ad:17:9f:
77:67:7c:cc:13:67:1b:c9:37:88:84:65:dd:ce:fe:28:1b:6f:
dc:dd:56:68:dd:9a:00:6f:cf:12:6f:a0:de:e1:ab:e5:da:ff:
70:cc:cb:07:04:2a:73:2d:fd:77:a0:3f:16:a0:3b:1d:eb:61:
60:0b:32:b5:90:b9:3d:a6:45:4b:96:14:c1:cb:b8:aa:2c:74:
4a:c0:ef:b1:c0:4a:af:52:5a:7e:13:48:56:46:2e:bb:d7:f6:
05:d7:a3:15:6e:7e:ad:cc:89:7a:5e:30:68:fa:e9:e4:b3:7a:
36:f5:7a:7a:ce:57:b9:4c:36:fa:a2:2b:a6:25:24:08:40:d2:
8e:d5:c0:15:98:a0:16:eb:97:96:41:82:30:45:78:d7:b5:c2:
55:39:02:dc:54:21:0d:b7:08:fd:56:4c:35:e7:f6:a1:86:61:
5b:f3:b1:65:f0:d0:e7:20:ca:ef:3a:fa:06:1c:e0:1b:55:68:
7b:47:ff:62:85:e6:8e:41:93:78:5c:cf:ef:a2:90:91:9b:47:
ce:66:4c:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUGFig9zyVilK0JmtPqTt6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky
ZmM5OWEwHhcNMjIxMjEyMTEyNjMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2IxNjhmNDFmNGRjMzI3Njg5MWI5Yjc2ZmFjMGRlZGM2NjE5ZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsyGkhx6/g38ZHoHuL+SqmtVIygy
b14F+T/88JKE69nKarCSioc2U+a+IHfnng97fDhHZ2Ldo3JJUTiyLl6lP4Njxqkk
DPtiu/imBXYL9q0Mppou5evlhNN9lgPnJD48kPY3ea0m7gL+KtqCPCju7kYq+ons
iFz7cmKvjsHzTk7ljYaem/Pj+gBxxQmj9SM+IQzG2Is39c7dehbXnJNT2CirGpOa
Bmg1N4SsQEITL50BJ0Z/2eSo6I1dKODrk1DwEqRV2RqAUfMQniXHc2CNp32tfRUX
dJpr9WbfznvsK3KS2Fi1z21E9Y5sjk1nihQyFCEfYMtj+yZbpszXlmkHjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOexaPQfTcMnaJG5t2+sDe3GYZ/YMB8GA1UdIwQY
MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt
YWU3NzQ2ZjA5NjMwLzEvNTdGbzlCOU53eWRva2JtM2I2d043Y1pobjlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw
LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRwvMA0G
CSqGSIb3DQEBCwUAA4IBAQB+Ia754hW2TUm3dhwzG8H7+qaEFfyXkJzlwpcAP1ei
QAoz6OspeesmUzRPn8bOv/CcjemtF593Z3zME2cbyTeIhGXdzv4oG2/c3VZo3ZoA
b88Sb6De4avl2v9wzMsHBCpzLf13oD8WoDsd62FgCzK1kLk9pkVLlhTBy7iqLHRK
wO+xwEqvUlp+E0hWRi671/YF16MVbn6tzIl6XjBo+unks3o29Xp6zle5TDb6oium
JSQIQNKO1cAVmKAW65eWQYIwRXjXtcJVOQLcVCENtwj9Vkw15/ahhmFb87Fl8NDn
IMrvOvoGHOAbVWh7R/9iheaOQZN4XM/vopCRm0fOZkx7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:44 2024 by rpki-client on console-fra.rpki-client.org