Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/UEotIJkTDeKhBSxGR_JShv7BF1Q.roa
File: UEotIJkTDeKhBSxGR_JShv7BF1Q.roa (raw, json)
Hash identifier: t4vlXVE9fhzV5DFn3cfQDA+HWFHR9UhVpdXVXMl4pS0=
Subject key identifier: 50:4A:2D:20:99:13:0D:E2:A1:05:2C:46:47:F2:52:86:FE:C1:17:54
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01F320E2
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/UEotIJkTDeKhBSxGR_JShv7BF1Q.roa
Signing time: Sat 01 Jan 2022 15:06:18 +0000
ROA not before: Sat 01 Jan 2022 15:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30475
IP address blocks: 193.8.172.0/24 maxlen: 24
147.189.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32710882 (0x1f320e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 15:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=504a2d2099130de2a1052c4647f25286fec11754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:59:c5:12:cc:c2:44:54:5f:f8:11:39:e6:
8b:0c:8b:88:b6:db:53:fc:f8:2d:54:ca:ac:53:11:
c2:9c:ec:da:ad:d2:ef:36:6c:82:59:26:3e:a9:48:
93:32:fb:e4:b3:44:0d:4f:38:1a:4e:d2:08:e8:c7:
7f:38:b7:e8:00:fb:0f:57:18:2f:86:70:1b:3f:75:
e8:99:4a:ea:8d:c2:a6:45:c8:f4:3c:df:91:4c:42:
e8:f4:09:1a:42:cd:f4:a2:e1:78:e7:ea:1b:5d:1a:
93:ab:df:af:c1:84:d7:ee:47:89:99:96:d7:3c:8b:
b7:40:68:16:a3:9e:86:e0:76:7d:b5:49:a9:25:65:
dd:82:7d:c8:6a:c9:34:e9:9e:bc:5f:31:cf:1a:01:
b0:ba:f2:4b:57:54:70:73:9f:1a:5f:e1:f5:e4:dc:
18:20:c3:2d:1c:0c:99:27:29:fd:47:fa:9f:c7:37:
37:86:bd:81:59:6c:71:9c:cf:3d:66:29:81:bd:1d:
2f:4e:4a:83:5e:bf:15:02:50:fe:6b:1c:f6:db:df:
9d:1f:55:09:a3:bf:6d:0e:ae:d5:57:c0:0f:e4:4e:
5e:b2:06:fb:ba:76:75:3d:ec:02:61:b1:d9:9a:5b:
3b:8e:84:b4:3b:ac:59:3b:d0:31:09:56:d3:fb:dd:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:2D:20:99:13:0D:E2:A1:05:2C:46:47:F2:52:86:FE:C1:17:54
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/UEotIJkTDeKhBSxGR_JShv7BF1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.136.0/24
193.8.172.0/24
Signature Algorithm: sha256WithRSAEncryption
23:22:24:ee:cf:8f:7f:fd:de:12:d8:1a:14:7e:56:1b:2d:e4:
92:81:be:28:90:e4:a6:6a:79:3c:d5:16:c7:6d:5c:8c:61:87:
ba:77:dd:38:c3:96:00:22:03:19:9e:97:f2:41:71:43:85:8b:
0d:e0:3d:9d:3f:68:1e:08:95:b1:5c:d3:1b:e3:fe:d3:8f:3c:
de:8d:5c:b9:56:30:ba:0f:d6:41:9c:b6:f4:2b:e3:b6:e1:70:
b3:92:04:a3:40:e3:dc:ea:d5:92:a3:82:5b:85:57:67:76:c1:
9e:b2:f9:74:06:5c:c6:4d:05:b6:5b:4c:a6:b8:90:1f:40:c6:
85:30:cd:7d:6e:39:32:6d:ff:a5:d0:05:0d:97:9f:f5:8a:f5:
d9:2a:06:83:de:8e:83:29:88:d9:6d:a5:3e:44:44:ae:93:4f:
b7:2a:12:cf:f0:1a:6d:77:dd:94:bc:ce:70:5b:99:79:bb:69:
f7:59:fd:20:46:44:17:c8:7f:f3:7c:66:fb:f2:c9:c5:2c:a4:
4d:c9:08:99:df:a0:cd:9c:b6:27:30:cd:9a:28:22:16:8a:db:
19:5c:a1:2a:4b:31:51:eb:6f:29:c6:0e:c0:a8:3c:69:0b:59:
5b:c5:4d:4f:3f:7a:30:80:db:c1:d3:39:8e:4c:63:61:59:8a:
12:b1:b3:e4
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAfMg4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OTNhYzZjZDIyNDAyNDliYmE2MDE3MWYwODZlOTEwMWNjODdjYTI0MB4XDTIyMDEw
MTE1MDYxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTA0YTJkMjA5OTEz
MGRlMmExMDUyYzQ2NDdmMjUyODZmZWMxMTc1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ1yWcUSzMJEVF/4ETnmiwyLiLbbU/z4LVTKrFMRwpzs2q3S
7zZsglkmPqlIkzL75LNEDU84Gk7SCOjHfzi36AD7D1cYL4ZwGz916JlK6o3CpkXI
9DzfkUxC6PQJGkLN9KLheOfqG10ak6vfr8GE1+5HiZmW1zyLt0BoFqOehuB2fbVJ
qSVl3YJ9yGrJNOmevF8xzxoBsLryS1dUcHOfGl/h9eTcGCDDLRwMmScp/Uf6n8c3
N4a9gVlscZzPPWYpgb0dL05Kg16/FQJQ/msc9tvfnR9VCaO/bQ6u1VfAD+ROXrIG
+7p2dT3sAmGx2ZpbO46EtDusWTvQMQlW0/vdYEMCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRQSi0gmRMN4qEFLEZH8lKG/sEXVDAfBgNVHSMEGDAWgBT5OsbNIkAkm7pg
Fx8IbpEBzIfKJDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzk4L2IwMzIxMy01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1ZmIv
MS9VRW90SUprVERlS2hCU3hHUl9KU2h2N0JGMVEucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4
L2IwMzIxMy01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1ZmIvMS8xLVRyR3pTSkFK
SnU2WUJjZkNHNlJBY3lIeWlRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk72IAwQAwQisMA0GCSqGSIb3
DQEBCwUAA4IBAQAjIiTuz49//d4S2BoUflYbLeSSgb4okOSmank81RbHbVyMYYe6
d904w5YAIgMZnpfyQXFDhYsN4D2dP2geCJWxXNMb4/7TjzzejVy5VjC6D9ZBnLb0
K+O24XCzkgSjQOPc6tWSo4JbhVdndsGesvl0BlzGTQW2W0ymuJAfQMaFMM19bjky
bf+l0AUNl5/1ivXZKgaD3o6DKYjZbaU+RESuk0+3KhLP8Bptd92UvM5wW5l5u2n3
Wf0gRkQXyH/zfGb78snFLKRNyQiZ36DNnLYnMM2aKCIWitsZXKEqSzFR628pxg7A
qDxpC1lbxU1PP3owgNvB0zmOTGNhWYoSsbPk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:12 2024 by rpki-client on console-fra.rpki-client.org