Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/_ClI7bACIMnSoW2mmCXnf51CWrg.roa
File: _ClI7bACIMnSoW2mmCXnf51CWrg.roa (raw, json)
Hash identifier: wTtOq8T2WQZYdOe2FIIKw/HyKsRU0PN9zUi/yyXx4Xw=
Subject key identifier: FC:29:48:ED:B0:02:20:C9:D2:A1:6D:A6:98:25:E7:7F:9D:42:5A:B8
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 02FE5F11
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/_ClI7bACIMnSoW2mmCXnf51CWrg.roa
Signing time: Sat 01 Jan 2022 06:59:34 +0000
ROA not before: Sat 01 Jan 2022 06:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203384
IP address blocks: 193.223.224.0/20 maxlen: 24
193.73.106.0/23 maxlen: 24
193.223.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50224913 (0x2fe5f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jan 1 06:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc2948edb00220c9d2a16da69825e77f9d425ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:cc:13:bb:fd:a0:50:5e:ed:e5:26:f6:64:
59:ff:81:c3:2d:99:32:41:16:67:3d:d7:4e:5e:d0:
34:20:4f:4a:d9:f8:21:19:b9:04:1d:89:0a:44:9f:
c0:43:1c:89:55:bb:6e:a0:2a:be:5b:33:04:04:6a:
21:29:b5:f0:0b:0d:af:3e:21:98:17:d1:06:cd:5f:
3e:40:0d:18:83:e2:d6:8d:d5:ac:56:34:ce:17:10:
26:07:53:bc:17:75:30:f0:52:61:d5:8f:8e:f2:c6:
da:7a:83:ff:18:0b:a0:c2:29:41:ca:c8:0d:9d:20:
63:0a:fa:9a:42:9e:66:62:40:dc:da:88:2c:84:c4:
90:5a:74:5a:7f:cb:3f:01:f9:76:d7:d2:0c:4b:4e:
d4:ae:f8:8f:4b:dd:69:9e:c4:9d:54:2b:06:73:b7:
90:21:dd:00:a2:1a:34:85:7a:ce:bd:14:da:0f:40:
8c:0c:27:d4:6e:bc:d3:b7:6b:b1:e7:d1:46:d8:70:
71:20:5c:99:9f:0e:49:be:35:ff:47:b0:98:32:02:
9b:47:b0:01:23:87:4e:b0:21:50:37:58:db:82:6a:
4c:f5:05:fa:0e:86:15:91:0c:fa:13:4a:70:84:ed:
e4:b1:b2:8f:3e:7a:3c:b2:f7:8e:36:95:d2:2d:20:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:48:ED:B0:02:20:C9:D2:A1:6D:A6:98:25:E7:7F:9D:42:5A:B8
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/_ClI7bACIMnSoW2mmCXnf51CWrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.106.0/23
193.223.192.0/20
193.223.224.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:63:e6:26:4b:70:27:6b:db:91:97:81:08:0c:d1:d0:a5:75:
10:62:85:bd:c3:67:01:60:df:5a:60:ee:ac:cd:8d:f9:4e:13:
ca:16:92:63:1b:99:eb:cc:f8:00:91:27:5a:a3:3a:8f:0d:01:
56:b5:66:b5:5f:d0:90:d6:7e:f8:79:cc:21:58:66:10:f0:4f:
0a:de:cb:3c:54:b3:85:5c:d9:24:75:bf:9d:d3:87:26:28:2d:
ab:20:75:d3:5b:35:b9:40:2d:70:17:cf:47:c0:d4:b3:64:51:
1f:e9:21:4d:42:db:fb:35:3c:4d:ef:ce:a2:0c:4b:0b:76:7f:
ad:d7:17:f4:20:cc:d6:25:b6:de:13:f8:96:7c:04:89:77:96:
10:38:3b:87:ad:2b:3f:8a:67:a3:7f:53:8e:31:48:84:3e:49:
bb:4a:14:d6:a4:f0:32:5f:1f:68:aa:f7:ee:e7:dc:a1:6a:f3:
06:06:8f:ad:55:1a:05:27:88:51:60:03:99:8c:22:d8:23:36:
6e:3a:58:40:32:e5:8b:0d:19:4a:cf:b6:07:a8:36:2d:91:3f:
f3:a7:32:eb:0a:fa:d4:95:25:3e:2d:89:68:04:22:26:c5:b9:
17:fe:1f:56:bf:58:98:25:98:6a:46:04:e2:c0:fe:42:69:a9:
0f:8f:14:fe
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAv5fETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MWM2YmJhZjQwOWY1ZmQ2ZDcwOWM0ZDdkMjQzNDRhMjkyYTNjYWE1MB4XDTIyMDEw
MTA2NTkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmMyOTQ4ZWRiMDAy
MjBjOWQyYTE2ZGE2OTgyNWU3N2Y5ZDQyNWFiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYIzBO7/aBQXu3lJvZkWf+Bwy2ZMkEWZz3XTl7QNCBPStn4
IRm5BB2JCkSfwEMciVW7bqAqvlszBARqISm18AsNrz4hmBfRBs1fPkANGIPi1o3V
rFY0zhcQJgdTvBd1MPBSYdWPjvLG2nqD/xgLoMIpQcrIDZ0gYwr6mkKeZmJA3NqI
LITEkFp0Wn/LPwH5dtfSDEtO1K74j0vdaZ7EnVQrBnO3kCHdAKIaNIV6zr0U2g9A
jAwn1G6807drsefRRthwcSBcmZ8OSb41/0ewmDICm0ewASOHTrAhUDdY24JqTPUF
+g6GFZEM+hNKcITt5LGyjz56PLL3jjaV0i0gRjMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBT8KUjtsAIgydKhbaaYJed/nUJauDAfBgNVHSMEGDAWgBQxxruvQJ9f1tcJ
xNfSQ0SikqPKpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01jYTdyMENmWDliWENjVFgwa05Fb3BLanlxVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvY2JmOTNjLTZkZGEtNDgyNC04MDMzLTQxYzNjZjkwOGU5Ny8x
L19DbEk3YkFDSU1uU29XMm1tQ1huZjUxQ1dyZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
Y2JmOTNjLTZkZGEtNDgyNC04MDMzLTQxYzNjZjkwOGU5Ny8xL01jYTdyMENmWDli
WENjVFgwa05Fb3BLanlxVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAcFJagMEBMHfwAMEBMHf4DANBgkq
hkiG9w0BAQsFAAOCAQEAqmPmJktwJ2vbkZeBCAzR0KV1EGKFvcNnAWDfWmDurM2N
+U4TyhaSYxuZ68z4AJEnWqM6jw0BVrVmtV/QkNZ++HnMIVhmEPBPCt7LPFSzhVzZ
JHW/ndOHJigtqyB101s1uUAtcBfPR8DUs2RRH+khTULb+zU8Te/OogxLC3Z/rdcX
9CDM1iW23hP4lnwEiXeWEDg7h60rP4pno39TjjFIhD5Ju0oU1qTwMl8faKr37ufc
oWrzBgaPrVUaBSeIUWADmYwi2CM2bjpYQDLliw0ZSs+2B6g2LZE/86cy6wr61JUl
Pi2JaAQiJsW5F/4fVr9YmCWYakYE4sD+QmmpD48U/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:07 2024 by rpki-client on console-fra.rpki-client.org