Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/qVWtWYvickNv7qg-3pfrXYaQVmE.roa
File: qVWtWYvickNv7qg-3pfrXYaQVmE.roa (raw, json)
Hash identifier: i6HmqDNgkKdxvBrjzCzN8IWF9Cogt4ZhKX6WmqpPUM0=
Subject key identifier: A9:55:AD:59:8B:E2:72:43:6F:EE:A8:3E:DE:97:EB:5D:86:90:56:61
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 06E5254F
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/qVWtWYvickNv7qg-3pfrXYaQVmE.roa
Signing time: Sat 01 Jan 2022 07:01:46 +0000
ROA not before: Sat 01 Jan 2022 07:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57291
IP address blocks: 193.194.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115680591 (0x6e5254f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jan 1 07:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a955ad598be272436feea83ede97eb5d86905661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:4d:7c:cf:e5:c4:99:0f:8b:60:fa:ad:21:
e3:67:07:48:2e:15:ce:39:01:85:9f:e1:bc:1d:b1:
a0:97:33:9c:b4:66:97:10:d9:21:f6:68:ec:5a:50:
b3:f2:4c:86:5e:aa:74:1f:4c:2e:d5:a8:77:bb:ae:
76:5c:17:91:df:d2:5b:9a:b7:f0:ac:6e:cb:9b:4a:
af:e2:4a:82:90:0e:e6:67:59:4c:1e:5c:53:ab:14:
fc:42:52:5b:7c:d6:1c:3a:94:05:b9:0d:16:5d:62:
b3:f7:be:a8:45:cd:1a:ab:77:88:33:72:60:8a:8c:
ad:61:1b:80:fe:97:d6:7c:8a:46:74:60:ee:44:2f:
25:2f:9b:22:8f:13:04:23:57:7a:50:71:89:9d:c5:
59:72:9b:b0:e0:62:6d:3d:71:35:8b:eb:40:56:d6:
38:e2:d0:1c:a2:f0:56:08:9f:71:11:f2:c7:38:b5:
b3:90:63:db:e9:55:bf:73:2f:68:5c:0d:e0:57:7f:
8d:fe:21:0e:ab:c6:97:30:08:24:aa:98:d4:27:74:
10:7a:5f:a4:92:eb:17:d9:13:12:f1:b7:86:37:3c:
7e:cd:7f:f3:6a:a8:25:f4:68:80:23:11:d3:4d:d6:
b8:12:6c:f7:69:da:34:02:92:e1:b4:bc:c7:13:7c:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:AD:59:8B:E2:72:43:6F:EE:A8:3E:DE:97:EB:5D:86:90:56:61
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/qVWtWYvickNv7qg-3pfrXYaQVmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.120.0/23
Signature Algorithm: sha256WithRSAEncryption
72:70:d0:6e:c5:cb:84:34:f0:83:49:4a:08:80:85:43:08:31:
f1:0b:bf:70:30:1a:af:b1:dc:87:5a:66:74:1d:fc:3a:0a:26:
eb:d6:47:eb:d1:5b:d7:32:b9:8c:3b:5a:7e:81:4d:66:ba:4f:
88:a5:74:d8:b3:ba:1f:05:65:8f:f2:94:03:da:03:f6:e0:1c:
7c:5c:a0:06:43:ed:27:27:9f:77:f7:c5:99:2f:90:92:ea:12:
1a:e0:fb:e6:5d:3e:55:e8:28:9f:cd:98:cc:fd:53:62:7e:f7:
05:4d:a0:8f:a3:28:eb:24:77:27:0b:50:89:82:18:f2:7a:cc:
70:76:50:c2:d0:6c:f5:b9:b3:12:0d:27:30:ec:06:c8:64:85:
d1:4b:10:e5:21:7a:7f:1e:bf:41:8a:a1:4f:62:f8:27:4f:93:
4b:e7:1b:06:01:81:05:8f:e0:c3:16:19:02:f2:1f:52:e9:bf:
88:66:4a:b1:51:bd:2d:3a:fd:85:71:25:57:56:ee:5e:7e:1c:
cb:15:cd:70:0c:9e:08:db:06:0b:d7:48:a2:a6:68:e2:49:4a:
d1:32:8f:1a:5f:31:a3:f9:75:d1:64:67:7b:af:76:55:f7:01:
b5:fe:00:40:1e:fe:c9:20:46:08:e5:2e:b0:4d:0b:10:69:e1:
96:70:30:70
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBuUlTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NjFkZTIwMzI0MDA4YjJkMjdlYjk3NDk1YWNjZTJlYmJjZGM4N2M3MB4XDTIyMDEw
MTA3MDE0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk1NWFkNTk4YmUy
NzI0MzZmZWVhODNlZGU5N2ViNWQ4NjkwNTY2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvtTXzP5cSZD4tg+q0h42cHSC4VzjkBhZ/hvB2xoJcznLRm
lxDZIfZo7FpQs/JMhl6qdB9MLtWod7uudlwXkd/SW5q38Kxuy5tKr+JKgpAO5mdZ
TB5cU6sU/EJSW3zWHDqUBbkNFl1is/e+qEXNGqt3iDNyYIqMrWEbgP6X1nyKRnRg
7kQvJS+bIo8TBCNXelBxiZ3FWXKbsOBibT1xNYvrQFbWOOLQHKLwVgifcRHyxzi1
s5Bj2+lVv3MvaFwN4Fd/jf4hDqvGlzAIJKqY1Cd0EHpfpJLrF9kTEvG3hjc8fs1/
82qoJfRogCMR003WuBJs92naNAKS4bS8xxN8hS0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSpVa1Zi+JyQ2/uqD7el+tdhpBWYTAfBgNVHSMEGDAWgBSGHeIDJACLLSfr
l0lazOLrvNyHxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hoM2lBeVFBaXkwbjY1ZEpXc3ppNjd6Y2g4Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvOTNhY2VjLWIxZWUtNGYzMS1hZjZlLTFlNDZhZTg3MjFlZi8x
L3FWV3RXWXZpY2tOdjdxZy0zcGZyWFlhUVZtRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
OTNhY2VjLWIxZWUtNGYzMS1hZjZlLTFlNDZhZTg3MjFlZi8xL2hoM2lBeVFBaXkw
bjY1ZEpXc3ppNjd6Y2g4Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcHCeDANBgkqhkiG9w0BAQsFAAOC
AQEAcnDQbsXLhDTwg0lKCICFQwgx8Qu/cDAar7Hch1pmdB38Ogom69ZH69Fb1zK5
jDtafoFNZrpPiKV02LO6HwVlj/KUA9oD9uAcfFygBkPtJyefd/fFmS+QkuoSGuD7
5l0+Vegon82YzP1TYn73BU2gj6Mo6yR3JwtQiYIY8nrMcHZQwtBs9bmzEg0nMOwG
yGSF0UsQ5SF6fx6/QYqhT2L4J0+TS+cbBgGBBY/gwxYZAvIfUum/iGZKsVG9LTr9
hXElV1buXn4cyxXNcAyeCNsGC9dIoqZo4klK0TKPGl8xo/l10WRne692VfcBtf4A
QB7+ySBGCOUusE0LEGnhlnAwcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:06 2024 by rpki-client on console-ams.rpki-client.org