Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/j3tqX4ThFhiB--y6dBZb8A9okPI.roa
File: j3tqX4ThFhiB--y6dBZb8A9okPI.roa (raw, json)
Hash identifier: ZoFkrcxE8Clt10P35ccBOTINEvTsIgiG5HSwqG8UlAM=
Subject key identifier: 8F:7B:6A:5F:84:E1:16:18:81:FB:EC:BA:74:16:5B:F0:0F:68:90:F2
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 10554304
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/j3tqX4ThFhiB--y6dBZb8A9okPI.roa
Signing time: Sat 01 Jan 2022 07:03:46 +0000
ROA not before: Sat 01 Jan 2022 07:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49234
IP address blocks: 193.17.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274023172 (0x10554304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jan 1 07:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f7b6a5f84e1161881fbecba74165bf00f6890f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:06:9d:48:82:9d:0e:13:fe:20:89:6f:cd:
6e:86:07:b3:df:2f:13:46:74:83:80:65:84:28:a5:
d5:ed:64:17:22:57:3e:7c:9c:97:06:93:33:c9:f2:
99:8a:af:35:e5:f8:88:f1:57:e5:a2:b3:14:5f:41:
99:21:85:7d:47:c5:a0:a5:be:80:66:83:cc:b2:e7:
b1:31:d7:d0:95:c5:ea:56:ca:34:81:63:bf:30:aa:
b7:e6:88:03:a2:b4:57:0a:11:ff:7d:96:73:21:4c:
2b:74:9f:f4:af:69:40:e9:a8:53:08:a8:15:31:a8:
c2:6c:c4:07:b1:78:07:44:02:b3:74:d2:10:66:6e:
8b:2c:21:5e:3f:47:47:e9:40:b7:e3:db:9d:6c:7f:
35:18:ff:56:77:0d:10:21:b6:8d:97:1b:2c:ef:6f:
bb:3b:4a:3d:1a:41:74:01:b4:f8:e0:8a:db:3a:04:
3a:de:b7:e6:3a:38:4f:95:3c:a5:23:b0:20:ab:c2:
e0:29:dc:05:70:5d:06:8a:8e:3b:d0:93:05:be:7c:
ed:ab:02:75:ae:ba:de:e7:1c:72:3b:dc:4d:42:72:
d7:35:3e:ee:11:64:b4:da:b7:fd:1c:28:84:ab:2a:
34:63:8a:e1:57:f1:a7:ad:0b:f4:2d:00:be:11:da:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:6A:5F:84:E1:16:18:81:FB:EC:BA:74:16:5B:F0:0F:68:90:F2
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/j3tqX4ThFhiB--y6dBZb8A9okPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.240.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:dc:f5:61:61:b3:b9:e6:d0:e0:91:fa:fe:23:da:34:60:5d:
b3:96:5c:39:ca:4e:d4:1f:bd:c5:e1:53:dd:ed:a5:a1:71:43:
16:50:61:b4:d4:d5:d5:f2:ed:39:96:fb:da:d1:48:f5:b2:66:
39:cd:72:48:b7:1c:85:f1:8d:34:e6:f0:b3:32:07:77:a8:d4:
5a:9a:28:57:db:3d:01:0e:1d:fd:34:e7:0c:16:42:23:bb:c5:
07:a9:4d:c4:05:5b:b3:e4:9e:89:b4:cd:92:d7:4d:9d:47:df:
80:b0:90:82:b9:34:38:8d:fe:91:54:6b:01:95:6c:99:fe:af:
93:1f:e6:39:1e:33:32:f7:6e:c1:10:15:f3:4f:09:a4:53:9c:
51:8b:12:aa:8d:6e:ce:8c:2b:07:0b:a7:68:bb:19:57:28:e7:
1b:c1:ac:74:ae:f7:55:b8:c7:5f:8c:c1:1a:dd:e9:80:3a:33:
a5:ce:ef:51:b4:ce:3d:fd:ce:0e:1c:13:55:18:e3:25:bd:e0:
0f:f9:65:61:fa:c3:ca:00:f5:aa:75:2a:c8:cf:a6:77:72:7e:
e0:78:37:ff:d0:51:56:6f:54:ec:6d:02:d5:b9:d7:c8:ce:68:
04:41:5b:eb:22:41:2a:5f:1e:9a:bd:89:cc:ce:6a:0c:e5:39:
97:db:94:d3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEFVDBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ODIzMmQxOWRkODFkNDVjMjU5MjNhZWI0ZDlhOTY4NTg3OWFlZmE2MB4XDTIyMDEw
MTA3MDM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGY3YjZhNWY4NGUx
MTYxODgxZmJlY2JhNzQxNjViZjAwZjY4OTBmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANJIBp1Igp0OE/4giW/NboYHs98vE0Z0g4BlhCil1e1kFyJX
PnyclwaTM8nymYqvNeX4iPFX5aKzFF9BmSGFfUfFoKW+gGaDzLLnsTHX0JXF6lbK
NIFjvzCqt+aIA6K0VwoR/32WcyFMK3Sf9K9pQOmoUwioFTGowmzEB7F4B0QCs3TS
EGZuiywhXj9HR+lAt+PbnWx/NRj/VncNECG2jZcbLO9vuztKPRpBdAG0+OCK2zoE
Ot635jo4T5U8pSOwIKvC4CncBXBdBoqOO9CTBb587asCda663ucccjvcTUJy1zU+
7hFktNq3/RwohKsqNGOK4Vfxp60L9C0AvhHakcMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSPe2pfhOEWGIH77Lp0FlvwD2iQ8jAfBgNVHSMEGDAWgBS4Iy0Z3YHUXCWS
OutNmpaFh5rvpjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VDTXRHZDJCMUZ3bGtqcnJUWnFXaFllYTc2WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTYvM2ZhNzE4LTkwYzUtNDI2Yy1iODVmLTFkZjA5ZTcwMTQzNC8x
L2ozdHFYNFRoRmhpQi0teTZkQlpiOEE5b2tQSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYv
M2ZhNzE4LTkwYzUtNDI2Yy1iODVmLTFkZjA5ZTcwMTQzNC8xL3VDTXRHZDJCMUZ3
bGtqcnJUWnFXaFllYTc2WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8ER8DANBgkqhkiG9w0BAQsFAAOC
AQEAO9z1YWGzuebQ4JH6/iPaNGBds5ZcOcpO1B+9xeFT3e2loXFDFlBhtNTV1fLt
OZb72tFI9bJmOc1ySLcchfGNNObwszIHd6jUWpooV9s9AQ4d/TTnDBZCI7vFB6lN
xAVbs+SeibTNktdNnUffgLCQgrk0OI3+kVRrAZVsmf6vkx/mOR4zMvduwRAV808J
pFOcUYsSqo1uzowrBwunaLsZVyjnG8GsdK73VbjHX4zBGt3pgDozpc7vUbTOPf3O
DhwTVRjjJb3gD/llYfrDygD1qnUqyM+md3J+4Hg3/9BRVm9U7G0C1bnXyM5oBEFb
6yJBKl8emr2JzM5qDOU5l9uU0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:43 2024 by rpki-client on console-ams.rpki-client.org