Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/drajdL0Y-SIkZ_p6tp9ueDHZrPE.roa
File: drajdL0Y-SIkZ_p6tp9ueDHZrPE.roa (raw, json)
Hash identifier: gQyqTdOv/enYDInCm0wWrJilYc357VbrTLprAKM13Oc=
Subject key identifier: 76:B6:A3:74:BD:18:F9:22:24:67:FA:7A:B6:9F:6E:78:31:D9:AC:F1
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 069676CB
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/drajdL0Y-SIkZ_p6tp9ueDHZrPE.roa
Signing time: Sat 01 Jan 2022 10:02:57 +0000
ROA not before: Sat 01 Jan 2022 10:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 93.188.144.0/21 maxlen: 21
178.22.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110524107 (0x69676cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Jan 1 10:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76b6a374bd18f9222467fa7ab69f6e7831d9acf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:e1:65:8a:c1:d8:e2:04:92:7a:3d:9f:ad:
2d:3a:5e:e3:95:69:0b:c1:74:19:57:57:fd:b9:bb:
44:29:fe:07:86:93:d9:cb:21:5a:2f:95:93:f1:5a:
a5:4b:a2:ca:52:c6:fa:98:27:37:3b:99:0f:e2:26:
75:b2:38:bd:78:9a:31:89:25:4d:0c:8d:5d:a6:80:
29:e5:00:22:55:f2:09:ed:c9:55:82:ee:77:c8:1d:
00:39:cc:23:12:c3:da:5a:a5:a0:8f:bc:a5:ec:27:
11:99:ca:ee:0c:a8:15:5e:25:c7:de:19:97:52:58:
a3:3d:aa:db:54:a3:3f:86:4d:75:9d:d2:27:c8:f7:
2f:ef:f7:ef:8c:64:ae:9d:05:0a:89:d1:15:f3:fa:
0c:a8:a7:d7:7a:2c:9f:2b:a6:e2:1b:4a:60:4d:e6:
48:fe:2b:49:9e:2d:e3:8e:07:6d:db:eb:6c:66:c9:
9f:99:b6:42:14:34:00:96:c1:6c:18:c0:02:b0:f3:
45:7b:d2:7e:53:fa:b8:f3:82:95:4e:1e:7c:c6:56:
52:0a:b1:45:c6:80:ef:2a:2c:6c:3c:32:08:4e:cd:
7c:57:8f:a0:ff:47:4d:76:95:8d:e3:3c:3c:ba:9b:
c8:06:1c:0f:b2:8c:70:64:ba:fc:ca:26:29:af:b5:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:A3:74:BD:18:F9:22:24:67:FA:7A:B6:9F:6E:78:31:D9:AC:F1
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/drajdL0Y-SIkZ_p6tp9ueDHZrPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.144.0/21
178.22.176.0/21
Signature Algorithm: sha256WithRSAEncryption
89:75:12:47:45:76:d2:ef:a8:b1:bf:6b:7e:d7:aa:36:f0:a1:
79:5a:bd:eb:04:f9:09:10:71:58:e3:84:09:47:1e:7c:63:06:
b0:82:d5:69:22:b8:30:10:3a:a7:83:de:99:ef:db:f9:ff:09:
ba:48:09:e0:32:af:a6:de:bb:07:b5:2e:77:ca:b6:25:8f:d6:
b7:d5:ad:8f:bd:53:2a:71:e4:72:4f:f1:13:91:03:03:0f:71:
e0:cf:a7:3d:ca:c4:17:97:7d:2b:aa:20:87:f3:e4:c9:70:a1:
e6:23:bd:15:be:e0:99:50:cf:65:70:69:29:11:bb:ab:19:33:
1c:da:a1:15:73:30:07:19:df:f5:e0:30:22:97:be:80:38:22:
a1:8d:f4:a2:bb:75:99:83:34:5c:3f:e3:a0:be:e9:a2:c9:69:
08:47:8f:16:30:36:ee:09:ea:21:ad:9a:91:88:71:a8:90:78:
f6:85:3e:36:7e:cd:51:08:9e:50:86:cb:6d:89:53:1f:11:c7:
09:6c:d8:bc:67:26:a5:b3:6b:2e:b0:8b:fb:f6:45:5b:e3:65:
cf:8c:e3:6f:f0:7c:aa:20:99:7f:35:dd:12:21:01:73:c3:85:
c0:04:e1:be:c0:82:e7:e7:01:b5:34:47:ff:f5:9c:5a:7a:d2:
b2:2a:81:03
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBpZ2yzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NzA1YTRlZDE3YTY4MTg0MjEwMmNjOGY2ZWYwM2E1NjllMTU2MTJhMB4XDTIyMDEw
MTEwMDI1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzZiNmEzNzRiZDE4
ZjkyMjI0NjdmYTdhYjY5ZjZlNzgzMWQ5YWNmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIYi4WWKwdjiBJJ6PZ+tLTpe45VpC8F0GVdX/bm7RCn+B4aT
2cshWi+Vk/FapUuiylLG+pgnNzuZD+ImdbI4vXiaMYklTQyNXaaAKeUAIlXyCe3J
VYLud8gdADnMIxLD2lqloI+8pewnEZnK7gyoFV4lx94Zl1JYoz2q21SjP4ZNdZ3S
J8j3L+/374xkrp0FConRFfP6DKin13osnyum4htKYE3mSP4rSZ4t444HbdvrbGbJ
n5m2QhQ0AJbBbBjAArDzRXvSflP6uPOClU4efMZWUgqxRcaA7yosbDwyCE7NfFeP
oP9HTXaVjeM8PLqbyAYcD7KMcGS6/MomKa+1kOUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR2tqN0vRj5IiRn+nq2n254Mdms8TAfBgNVHSMEGDAWgBQnBaTtF6aBhCEC
zI9u8DpWnhVhKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0p3V2s3UmVtZ1lRaEFzeVBidkE2VnA0VllTby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWUvM2M4NzVkLTllNjUtNGUwNi04ODY1LTY1MzY4ZjQwOGRhMy8x
L2RyYWpkTDBZLVNJa1pfcDZ0cDl1ZURIWnJQRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUv
M2M4NzVkLTllNjUtNGUwNi04ODY1LTY1MzY4ZjQwOGRhMy8xL0p3V2s3UmVtZ1lR
aEFzeVBidkE2VnA0VllTby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA128kAMEA7IWsDANBgkqhkiG9w0B
AQsFAAOCAQEAiXUSR0V20u+osb9rfteqNvCheVq96wT5CRBxWOOECUcefGMGsILV
aSK4MBA6p4Peme/b+f8JukgJ4DKvpt67B7Uud8q2JY/Wt9Wtj71TKnHkck/xE5ED
Aw9x4M+nPcrEF5d9K6ogh/PkyXCh5iO9Fb7gmVDPZXBpKRG7qxkzHNqhFXMwBxnf
9eAwIpe+gDgioY30ort1mYM0XD/joL7poslpCEePFjA27gnqIa2akYhxqJB49oU+
Nn7NUQieUIbLbYlTHxHHCWzYvGcmpbNrLrCL+/ZFW+Nlz4zjb/B8qiCZfzXdEiEB
c8OFwAThvsCC5+cBtTRH//WcWnrSsiqBAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-fra.rpki-client.org