Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/1-kaNbHIQPjv22eDqXwbrp1Chlg0.roa
File: 1-kaNbHIQPjv22eDqXwbrp1Chlg0.roa (raw, json)
Hash identifier: xYR9CsvUjE97FjCZcDgn5t3clpPJxAF+0sniUYvvyVE=
Subject key identifier: FA:46:8D:6C:72:10:3E:3B:F6:D9:E0:EA:5F:06:EB:A7:50:A1:96:0D
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 02B3DA3F
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/1-kaNbHIQPjv22eDqXwbrp1Chlg0.roa
Signing time: Sat 01 Jan 2022 03:56:12 +0000
ROA not before: Sat 01 Jan 2022 03:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 193.100.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45341247 (0x2b3da3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Jan 1 03:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa468d6c72103e3bf6d9e0ea5f06eba750a1960d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:ba:ff:c6:7f:15:26:f2:6c:e4:af:cb:ca:
f2:65:ef:30:02:9c:4e:72:16:11:b7:6e:d6:f5:8d:
a6:da:6a:68:60:3b:fe:71:e0:0a:15:06:d9:f8:fa:
c5:b1:f4:9e:23:06:1d:fa:a7:af:45:72:41:8b:b6:
e2:59:0d:60:2a:76:ba:a3:57:48:ce:6d:ca:b5:21:
46:d8:0c:2a:87:5c:e7:8d:2d:44:d9:bd:b6:56:ff:
18:ed:1a:48:bc:a6:db:c9:53:6c:45:bd:98:f7:48:
00:08:cb:6a:09:d0:f7:b6:ac:fb:03:98:57:36:70:
35:67:d3:1e:9c:ca:53:ed:6a:2e:e8:33:55:14:42:
26:00:0e:8b:04:af:a1:16:83:52:0c:66:8a:d6:b5:
71:01:32:48:d9:30:59:17:f6:81:ca:fc:b1:ce:ba:
90:2d:ec:9b:ce:af:9a:66:6d:73:21:b4:48:00:c3:
4b:cd:97:f8:f5:e0:28:13:4b:0f:a8:2c:97:5b:ef:
46:04:69:ba:29:ba:31:b2:73:68:e5:12:b8:a1:59:
f5:73:ac:8c:70:73:c9:73:93:17:57:fe:a9:1a:bc:
e2:fb:af:51:b9:6c:24:71:1e:e3:07:7b:b5:f4:7f:
7a:ef:d2:09:b8:83:62:a8:c2:6d:4f:3e:18:59:29:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:8D:6C:72:10:3E:3B:F6:D9:E0:EA:5F:06:EB:A7:50:A1:96:0D
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/1-kaNbHIQPjv22eDqXwbrp1Chlg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fe:13:36:86:ac:fd:1e:de:af:e7:ea:1c:ce:a8:a2:36:85:
3e:3c:92:fc:f2:7c:c0:83:c6:c6:0e:1b:7e:32:b2:14:a2:12:
39:34:d0:40:e1:3e:56:64:29:de:79:e4:f1:10:1f:c7:b3:2f:
83:34:a8:b8:df:84:b2:d9:06:f3:43:4e:3e:8b:86:db:e3:90:
16:83:40:74:ce:c2:3c:5f:b7:ca:1f:0a:4c:8d:5d:a3:7a:c2:
69:e9:8f:49:af:13:fa:19:af:48:a1:2b:cc:32:92:b9:7b:22:
1f:50:e3:94:5c:04:b8:c7:76:48:04:30:46:c9:c9:5b:0e:bc:
4d:a0:d8:33:72:d2:a7:15:85:4d:13:c2:61:b3:48:ac:8a:fb:
1f:b8:97:df:a1:c8:40:01:f4:c0:23:5d:61:25:da:d4:8f:b7:
00:5f:91:df:2c:cb:dd:d8:60:fb:c4:ab:09:3d:38:17:61:76:
de:6b:71:be:c9:56:90:ed:55:21:74:24:2e:b4:90:17:e0:4b:
46:74:2b:db:91:9d:3e:84:b8:b3:1d:a5:a5:43:e9:38:e8:44:
16:0c:55:78:0f:9f:ca:7c:67:8f:51:38:07:1f:47:70:07:a0:
69:da:b7:39:cd:a0:12:1e:b3:29:1e:a6:d8:3d:b4:cd:59:50:
c6:35:b6:45
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEArPaPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTcyODg5ODJhZGQ4MzY0MmY4MWEzZGViYThmODU2ZjE0ZTA5OTBhMB4XDTIyMDEw
MTAzNTYxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmE0NjhkNmM3MjEw
M2UzYmY2ZDllMGVhNWYwNmViYTc1MGExOTYwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALn/uv/GfxUm8mzkr8vK8mXvMAKcTnIWEbdu1vWNptpqaGA7
/nHgChUG2fj6xbH0niMGHfqnr0VyQYu24lkNYCp2uqNXSM5tyrUhRtgMKodc540t
RNm9tlb/GO0aSLym28lTbEW9mPdIAAjLagnQ97as+wOYVzZwNWfTHpzKU+1qLugz
VRRCJgAOiwSvoRaDUgxmita1cQEySNkwWRf2gcr8sc66kC3sm86vmmZtcyG0SADD
S82X+PXgKBNLD6gsl1vvRgRpuim6MbJzaOUSuKFZ9XOsjHBzyXOTF1f+qRq84vuv
UblsJHEe4wd7tfR/eu/SCbiDYqjCbU8+GFkpXvMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT6Ro1schA+O/bZ4OpfBuunUKGWDTAfBgNVHSMEGDAWgBQucoiYKt2DZC+B
o966j4VvFOCZCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xuS0ltQ3JkZzJRdmdhUGV1by1GYnhUZ21Rby5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZDVjNDVhLTg0NDgtNDdiOC1iNTc3LWFmOWQ2OTVlOTQwZi8x
LzEta2FOYkhJUVBqdjIyZURxWHdicnAxQ2hsZzAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Ew
L2Q1YzQ1YS04NDQ4LTQ3YjgtYjU3Ny1hZjlkNjk1ZTk0MGYvMS9MbktJbUNyZGcy
UXZnYVBldW8tRmJ4VGdtUW8uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBZOMwDQYJKoZIhvcNAQELBQAD
ggEBAEr+EzaGrP0e3q/n6hzOqKI2hT48kvzyfMCDxsYOG34yshSiEjk00EDhPlZk
Kd555PEQH8ezL4M0qLjfhLLZBvNDTj6LhtvjkBaDQHTOwjxft8ofCkyNXaN6wmnp
j0mvE/oZr0ihK8wykrl7Ih9Q45RcBLjHdkgEMEbJyVsOvE2g2DNy0qcVhU0TwmGz
SKyK+x+4l9+hyEAB9MAjXWEl2tSPtwBfkd8sy93YYPvEqwk9OBdhdt5rcb7JVpDt
VSF0JC60kBfgS0Z0K9uRnT6EuLMdpaVD6TjoRBYMVXgPn8p8Z49ROAcfR3AHoGna
tznNoBIesykeptg9tM1ZUMY1tkU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:50 2024 by rpki-client on console-ams.rpki-client.org