Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/SqfgHERJxVzNmITd_CRlqzWI2_s.roa
File: SqfgHERJxVzNmITd_CRlqzWI2_s.roa (raw, json)
Hash identifier: trauog8XAEGiBRpSquhxoeCDDZ//lJZg1H5asv7NVe0=
Subject key identifier: 4A:A7:E0:1C:44:49:C5:5C:CD:98:84:DD:FC:24:65:AB:35:88:DB:FB
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 219B4A
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/SqfgHERJxVzNmITd_CRlqzWI2_s.roa
Signing time: Sat 01 Jan 2022 02:50:46 +0000
ROA not before: Sat 01 Jan 2022 02:50:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210364
IP address blocks: 193.200.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202442 (0x219b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Jan 1 02:50:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4aa7e01c4449c55ccd9884ddfc2465ab3588dbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:b3:55:70:e0:f5:d3:21:f4:18:5f:82:fe:
cf:44:91:2c:62:ac:7d:45:f6:16:d5:d3:50:4f:af:
54:0a:64:0e:f5:2d:7e:52:52:0b:1f:1b:20:08:38:
61:dd:f9:b8:96:cb:0d:d7:9f:e3:24:98:97:79:8c:
73:08:af:d4:e2:21:ef:5f:60:80:f9:fc:1f:ed:97:
42:0c:e7:78:d3:e4:55:6a:c5:20:25:09:10:60:c6:
f7:8a:96:4c:97:a3:76:91:b6:87:7c:01:a9:35:f4:
e6:31:4a:90:d9:f0:2b:6c:15:5d:4d:b9:f9:84:1f:
76:b7:41:21:7e:27:67:17:56:ec:62:79:1b:06:6a:
85:4d:98:fa:62:7a:71:db:87:6f:e8:1c:aa:51:6e:
75:a5:71:ff:a5:11:6e:c6:c4:60:4d:b8:2f:6c:bf:
b5:bc:34:f2:9d:c6:b6:50:94:6d:9d:32:0b:60:79:
c1:50:dc:be:ca:0c:ec:ce:0a:52:7d:a4:4e:85:de:
bf:14:98:a9:51:db:70:50:03:99:8f:7f:2a:8f:de:
ed:a8:12:6d:71:9e:91:39:76:c4:c9:ae:97:24:7f:
8d:ec:b4:87:74:24:f6:35:08:df:6b:e5:fa:e4:28:
de:41:3f:71:a2:eb:0b:0e:c8:9d:13:a0:cf:28:f3:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:E0:1C:44:49:C5:5C:CD:98:84:DD:FC:24:65:AB:35:88:DB:FB
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/SqfgHERJxVzNmITd_CRlqzWI2_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.33.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2e:cc:8e:22:31:b8:9e:1b:45:e3:a3:09:22:f3:b8:b4:f0:
dd:61:73:17:9e:81:c0:c1:86:36:e5:bc:87:8a:f0:66:c9:f3:
de:34:a9:35:8f:c2:6c:f4:d5:cc:34:f6:89:be:43:79:82:39:
2c:e0:84:0e:92:63:f7:24:f4:a0:d4:21:68:82:34:9b:e1:6d:
ae:0c:61:6d:74:de:8b:3f:0f:f7:f2:fb:2b:7d:97:ad:bb:a1:
66:6e:8e:1d:c4:ef:2a:4f:55:f8:fe:cb:70:a5:0b:0e:9e:c8:
ab:36:2f:30:dd:c9:82:4b:b1:86:15:f3:7b:b9:93:96:18:0e:
e2:08:06:6e:02:0e:50:50:28:81:2e:ad:86:53:a6:4b:af:24:
76:57:a6:0c:79:45:ac:e0:58:82:a0:6d:a1:1d:7f:40:55:d1:
74:a9:ff:fc:97:4c:70:6b:1e:b1:b1:83:45:4b:f3:8d:d7:63:
21:62:5e:a8:f8:fa:9a:5e:c0:99:f8:ee:24:bf:9d:60:15:6f:
fa:f4:bc:9c:7c:82:33:66:1f:97:2a:9b:33:64:cd:b8:92:81:
5c:1c:15:af:97:06:bc:8b:fc:97:2c:36:d3:7d:66:d2:ea:6e:
b0:ba:df:88:19:d3:38:24:f0:32:88:bc:e4:9c:0b:f5:37:e8:
36:11:ff:e5
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDIZtKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
ZGMyNmM2MjZjNTFjNWRlZjZmMjQ2NmYzOGY1NWIyNTAyOTY0MmYwHhcNMjIwMTAx
MDI1MDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0YWE3ZTAxYzQ0NDlj
NTVjY2Q5ODg0ZGRmYzI0NjVhYjM1ODhkYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAggCzVXDg9dMh9Bhfgv7PRJEsYqx9RfYW1dNQT69UCmQO9S1+
UlILHxsgCDhh3fm4lssN15/jJJiXeYxzCK/U4iHvX2CA+fwf7ZdCDOd40+RVasUg
JQkQYMb3ipZMl6N2kbaHfAGpNfTmMUqQ2fArbBVdTbn5hB92t0EhfidnF1bsYnkb
BmqFTZj6Ynpx24dv6ByqUW51pXH/pRFuxsRgTbgvbL+1vDTynca2UJRtnTILYHnB
UNy+ygzszgpSfaROhd6/FJipUdtwUAOZj38qj97tqBJtcZ6ROXbEya6XJH+N7LSH
dCT2NQjfa+X65CjeQT9xousLDsidE6DPKPMblQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEqn4BxEScVczZiE3fwkZas1iNv7MB8GA1UdIwQYMBaAFPTcJsYmxRxd728k
ZvOPVbJQKWQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZjLzEv
U3FmZ0hFUkp4VnpObUlUZF9DUmxxeldJMl9zLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8w
ODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZjLzEvOU53bXhpYkZIRjN2
YnlSbTg0OVZzbEFwWkM4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcghMA0GCSqGSIb3DQEBCwUAA4IB
AQBQLsyOIjG4nhtF46MJIvO4tPDdYXMXnoHAwYY25byHivBmyfPeNKk1j8Js9NXM
NPaJvkN5gjks4IQOkmP3JPSg1CFogjSb4W2uDGFtdN6LPw/38vsrfZetu6Fmbo4d
xO8qT1X4/stwpQsOnsirNi8w3cmCS7GGFfN7uZOWGA7iCAZuAg5QUCiBLq2GU6ZL
ryR2V6YMeUWs4FiCoG2hHX9AVdF0qf/8l0xwax6xsYNFS/ON12MhYl6o+PqaXsCZ
+O4kv51gFW/69LycfIIzZh+XKpszZM24koFcHBWvlwa8i/yXLDbTfWbS6m6wut+I
GdM4JPAyiLzknAv1N+g2Ef/l
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:24 2023 by rpki-client on console-fra.rpki-client.org