Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/K5Ymm_OIXA64VaGBqNd63FZfel8.roa
File: K5Ymm_OIXA64VaGBqNd63FZfel8.roa (raw, json)
Hash identifier: 9lyLanVvCULrYSmRv8Tmbu8LiW3bq7bkC0N0+qofdCY=
Subject key identifier: 2B:96:26:9B:F3:88:5C:0E:B8:55:A1:81:A8:D7:7A:DC:56:5F:7A:5F
Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial: 015AEB
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/K5Ymm_OIXA64VaGBqNd63FZfel8.roa
Signing time: Tue 03 May 2022 10:57:28 +0000
ROA not before: Tue 03 May 2022 10:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.138.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88811 (0x15aeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Validity
Not Before: May 3 10:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b96269bf3885c0eb855a181a8d77adc565f7a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4b:1e:4b:8d:bf:4f:5a:04:d6:fb:4d:2b:5e:
7f:18:9c:8e:c4:5b:60:58:e4:50:55:5b:ee:e6:42:
1e:81:17:7b:12:d9:08:b1:0f:34:12:c8:cf:0b:f1:
e9:9a:76:00:6f:a5:88:17:c0:53:69:b3:03:c9:cc:
dc:08:dd:6f:dc:ec:b7:d2:62:3b:27:d1:d1:03:0a:
d1:36:d4:01:26:15:dc:94:11:86:eb:d4:cb:0e:9c:
4e:a5:48:24:59:8e:36:03:48:93:87:af:bc:e8:7d:
9c:40:f4:2b:3c:24:1d:ad:cd:76:da:13:e6:34:92:
66:fd:8f:7d:74:5d:98:e7:cc:30:7d:df:b6:e6:98:
fa:d6:22:f7:4b:5a:45:83:48:47:3e:51:4c:6d:6d:
75:cb:c3:18:4a:16:71:17:20:f8:ed:3e:49:c5:80:
b7:62:47:6d:e8:8c:97:d6:bc:24:ab:f4:95:fc:8f:
21:e8:86:9d:02:8d:76:ed:80:4a:84:72:b7:ed:b0:
e8:90:07:5a:31:2e:ed:f8:0d:36:be:f7:8d:f3:ca:
e8:ed:6f:ea:5a:c1:bb:5b:f9:76:99:8b:d0:76:ef:
63:38:07:6d:34:7b:01:9f:18:53:ff:6e:5b:84:d3:
88:52:1b:5d:f2:9f:ed:67:66:47:96:8f:8d:56:51:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:26:9B:F3:88:5C:0E:B8:55:A1:81:A8:D7:7A:DC:56:5F:7A:5F
X509v3 Authority Key Identifier:
keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/K5Ymm_OIXA64VaGBqNd63FZfel8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.253.0/24
Signature Algorithm: sha256WithRSAEncryption
84:09:dd:b6:6b:a8:c9:0d:5c:bf:00:7f:0a:2f:80:88:25:65:
a6:c1:19:4e:dd:eb:22:0f:d0:74:0d:40:fc:46:27:02:78:bd:
f4:f9:e5:f8:f5:a2:de:60:dc:f8:26:b5:fa:7e:e8:d5:74:c7:
50:21:7d:5d:55:61:ba:12:09:87:ef:f4:e7:00:1b:df:80:90:
c2:3d:5f:42:97:c3:e5:cd:0f:22:96:97:6c:50:39:dd:08:7c:
b2:31:b1:63:b3:d8:1c:f6:a0:f4:d2:99:a3:94:58:44:02:6e:
cc:e1:38:11:b9:1a:5c:e9:c8:d8:51:30:86:89:3b:80:e7:df:
de:39:06:81:73:92:78:e5:b3:80:14:21:f5:05:fb:df:d4:fb:
d4:ba:ab:6a:c3:f6:8f:d1:67:25:ef:38:c5:60:9d:a6:58:80:
92:94:48:ac:ea:31:34:99:d5:9e:db:b8:b4:d0:73:30:37:bd:
4c:d2:72:1a:e4:80:4c:36:ad:b2:5e:d3:14:28:c8:f9:42:51:
9d:fa:3b:a9:17:d1:52:77:8c:1a:94:25:af:8f:dc:eb:8f:7c:
44:b1:34:1f:26:c6:79:09:28:68:01:67:6c:f4:f0:7e:91:42:
23:6c:db:8c:ce:ff:d9:a0:d2:5f:0b:b7:26:ba:a3:e9:ba:9f:
82:cb:ad:7e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAVrrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
ZDI2MWNhZDBkZmYyZDliYjJmOGM3YWQwZGIyNmVkNTczMGQzZGQwHhcNMjIwNTAz
MTA1NzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyYjk2MjY5YmYzODg1
YzBlYjg1NWExODFhOGQ3N2FkYzU2NWY3YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA+kseS42/T1oE1vtNK15/GJyOxFtgWORQVVvu5kIegRd7EtkI
sQ80EsjPC/HpmnYAb6WIF8BTabMDyczcCN1v3Oy30mI7J9HRAwrRNtQBJhXclBGG
69TLDpxOpUgkWY42A0iTh6+86H2cQPQrPCQdrc122hPmNJJm/Y99dF2Y58wwfd+2
5pj61iL3S1pFg0hHPlFMbW11y8MYShZxFyD47T5JxYC3Ykdt6IyX1rwkq/SV/I8h
6IadAo127YBKhHK37bDokAdaMS7t+A02vveN88ro7W/qWsG7W/l2mYvQdu9jOAdt
NHsBnxhT/25bhNOIUhtd8p/tZ2ZHlo+NVlFOUQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCuWJpvziFwOuFWhgajXetxWX3pfMB8GA1UdIwQYMBaAFK3SYcrQ3/LZuy+M
etDbJu1XMNPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85My8wYTQzNGEtZWIyZi00MDI2LWJjYzgtN2JjNDJkNWQ0MDcyLzEv
SzVZbW1fT0lYQTY0VmFHQnFOZDYzRlpmZWw4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8w
YTQzNGEtZWIyZi00MDI2LWJjYzgtN2JjNDJkNWQ0MDcyLzEvcmRKaHl0RGY4dG03
TDR4NjBOc203VmN3MDkwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYr9MA0GCSqGSIb3DQEBCwUAA4IB
AQCECd22a6jJDVy/AH8KL4CIJWWmwRlO3esiD9B0DUD8RicCeL30+eX49aLeYNz4
JrX6fujVdMdQIX1dVWG6EgmH7/TnABvfgJDCPV9Cl8PlzQ8ilpdsUDndCHyyMbFj
s9gc9qD00pmjlFhEAm7M4TgRuRpc6cjYUTCGiTuA59/eOQaBc5J45bOAFCH1Bfvf
1PvUuqtqw/aP0Wcl7zjFYJ2mWICSlEis6jE0mdWe27i00HMwN71M0nIa5IBMNq2y
XtMUKMj5QlGd+jupF9FSd4walCWvj9zrj3xEsTQfJsZ5CShoAWds9PB+kUIjbNuM
zv/ZoNJfC7cmuqPpup+Cy61+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org