Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/3aXk8ACiXOupK9DtrisLv9SOTgM.roa
File: 3aXk8ACiXOupK9DtrisLv9SOTgM.roa (raw, json)
Hash identifier: Or/7h/dqpEODKnazb7hZdqzhnhvdWERW7I2dNUNGCLQ=
Subject key identifier: DD:A5:E4:F0:00:A2:5C:EB:A9:2B:D0:ED:AE:2B:0B:BF:D4:8E:4E:03
Certificate issuer: /CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Certificate serial: 015993B5
Authority key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/3aXk8ACiXOupK9DtrisLv9SOTgM.roa
Signing time: Sat 01 Jan 2022 11:54:40 +0000
ROA not before: Sat 01 Jan 2022 11:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15889
IP address blocks: 193.23.137.0/24 maxlen: 24
91.208.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22647733 (0x15993b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Validity
Not Before: Jan 1 11:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dda5e4f000a25ceba92bd0edae2b0bbfd48e4e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:74:c9:99:26:17:c0:2f:70:26:f0:9c:b4:
83:a4:32:e0:8c:27:f9:b2:b4:c0:cc:13:dd:b4:c8:
43:ce:04:df:87:ff:8c:71:23:7e:3f:37:c1:43:11:
5e:7d:62:c1:e5:c6:de:00:3d:39:62:e6:27:cf:8a:
67:4c:1c:02:d2:63:60:d8:19:cd:43:66:1b:65:93:
87:55:6b:32:13:7c:0f:ca:a5:f1:ec:13:09:a6:f6:
77:72:6b:8c:a7:a7:ee:e8:ae:d0:5d:0f:0d:8f:2f:
2b:cb:c7:0d:a4:37:9d:6b:9c:25:25:3c:7c:5c:e6:
da:c8:d3:a8:c4:c9:10:dd:b4:45:54:c3:1b:ad:62:
eb:c0:e2:e0:de:69:c2:12:cc:25:82:76:f0:b4:1e:
d8:62:93:e8:20:4e:c6:0c:34:39:9d:a3:0a:a4:12:
c0:42:05:7a:36:c0:02:54:50:55:71:5d:f3:bc:86:
03:13:67:e6:d6:45:dd:05:68:c9:a0:91:23:d6:23:
f4:9b:97:ab:d7:8b:43:b5:17:19:9b:68:41:75:24:
91:03:8f:f6:68:a0:c1:08:30:d7:41:b6:04:96:82:
ef:b4:69:d7:89:c3:f5:0f:60:3a:56:80:ce:24:d5:
8c:a4:90:d5:2d:d9:e6:9b:2e:ff:4f:c5:2b:52:2e:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:E4:F0:00:A2:5C:EB:A9:2B:D0:ED:AE:2B:0B:BF:D4:8E:4E:03
X509v3 Authority Key Identifier:
keyid:79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/3aXk8ACiXOupK9DtrisLv9SOTgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.125.0/24
193.23.137.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d8:5f:1a:79:89:5c:67:e1:a8:1d:de:a4:ff:52:e3:1c:81:
c5:c7:58:b5:0a:0f:72:23:81:18:f9:8e:51:81:0b:b3:a3:2c:
5d:f8:be:47:ac:89:3e:6c:47:e8:bd:e2:75:c3:2b:7d:2b:c9:
48:7b:e7:56:b4:ee:f5:3b:b7:0f:68:73:e9:df:69:2a:80:a1:
0b:04:a7:9b:14:31:1d:ae:aa:56:1b:d8:8c:85:31:cf:1c:ae:
5d:97:fc:89:24:41:22:69:3d:0e:17:1b:b4:18:1e:cc:5a:39:
82:6c:df:60:2e:5d:5c:1a:2b:4c:ee:59:a8:96:9c:be:80:10:
e8:49:9c:b8:f2:c5:46:c4:f4:4f:c3:89:ea:2a:81:5e:85:d0:
18:f5:44:1e:0f:0e:f5:99:96:f9:69:cf:f5:bd:84:98:c4:95:
01:ff:28:99:16:fe:30:a3:e3:e1:56:39:f2:9d:e0:65:d5:47:
3f:c4:68:96:98:c4:08:6a:f4:88:47:ae:4f:aa:41:33:89:ef:
d8:89:fd:d3:bd:21:09:93:5d:18:ac:db:88:44:04:17:4b:65:
d0:54:e1:6c:ed:ab:28:d3:c0:74:c9:29:77:fb:69:28:9a:41:
71:56:7a:66:0d:10:7f:96:58:84:ed:be:ca:d4:2d:62:13:6f:
3b:d6:4b:ac
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAVmTtTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTg1YzViYzc1NGNhNTg1YmQyNTkyZTZiZjFjZmE2ZjY0OWNkOWY0MB4XDTIyMDEw
MTExNTQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGRhNWU0ZjAwMGEy
NWNlYmE5MmJkMGVkYWUyYjBiYmZkNDhlNGUwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOXXdMmZJhfAL3Am8Jy0g6Qy4Iwn+bK0wMwT3bTIQ84E34f/
jHEjfj83wUMRXn1iweXG3gA9OWLmJ8+KZ0wcAtJjYNgZzUNmG2WTh1VrMhN8D8ql
8ewTCab2d3JrjKen7uiu0F0PDY8vK8vHDaQ3nWucJSU8fFzm2sjTqMTJEN20RVTD
G61i68Di4N5pwhLMJYJ28LQe2GKT6CBOxgw0OZ2jCqQSwEIFejbAAlRQVXFd87yG
AxNn5tZF3QVoyaCRI9Yj9JuXq9eLQ7UXGZtoQXUkkQOP9migwQgw10G2BJaC77Rp
14nD9Q9gOlaAziTVjKSQ1S3Z5psu/0/FK1IusXMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTdpeTwAKJc66kr0O2uKwu/1I5OAzAfBgNVHSMEGDAWgBR5hcW8dUylhb0l
kua/HPpvZJzZ9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VZWEZ2SFZNcFlXOUpaTG12eHo2YjJTYzJmUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvMWY5YmQ0LTJmNmMtNGRhMi1iZGQ3LTFjNjdkMjRhZTY3Mi8x
LzNhWGs4QUNpWE91cEs5RHRyaXNMdjlTT1RnTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
MWY5YmQ0LTJmNmMtNGRhMi1iZGQ3LTFjNjdkMjRhZTY3Mi8xL2VZWEZ2SFZNcFlX
OUpaTG12eHo2YjJTYzJmUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvQfQMEAMEXiTANBgkqhkiG9w0B
AQsFAAOCAQEAaNhfGnmJXGfhqB3epP9S4xyBxcdYtQoPciOBGPmOUYELs6MsXfi+
R6yJPmxH6L3idcMrfSvJSHvnVrTu9Tu3D2hz6d9pKoChCwSnmxQxHa6qVhvYjIUx
zxyuXZf8iSRBImk9DhcbtBgezFo5gmzfYC5dXBorTO5ZqJacvoAQ6EmcuPLFRsT0
T8OJ6iqBXoXQGPVEHg8O9ZmW+WnP9b2EmMSVAf8omRb+MKPj4VY58p3gZdVHP8Ro
lpjECGr0iEeuT6pBM4nv2In9070hCZNdGKzbiEQEF0tl0FThbO2rKNPAdMkpd/tp
KJpBcVZ6Zg0Qf5ZYhO2+ytQtYhNvO9ZLrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org