Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/LKiO7p3mfZQpWbfVaLf98LH5nkM.roa
File: LKiO7p3mfZQpWbfVaLf98LH5nkM.roa (raw, json)
Hash identifier: KsL/y4mLiUKrw5qdUGEChssrESB8oiku1ngoE0D06qI=
Subject key identifier: 2C:A8:8E:EE:9D:E6:7D:94:29:59:B7:D5:68:B7:FD:F0:B1:F9:9E:43
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 37E22BB6
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/LKiO7p3mfZQpWbfVaLf98LH5nkM.roa
Signing time: Sat 01 Jan 2022 14:58:54 +0000
ROA not before: Sat 01 Jan 2022 14:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62421
IP address blocks: 193.33.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937569206 (0x37e22bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 1 14:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ca88eee9de67d942959b7d568b7fdf0b1f99e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:94:f9:33:db:83:9e:7c:c9:31:df:57:f8:
45:1a:7f:57:5e:28:c6:43:59:78:c3:0a:60:75:1c:
b9:04:ea:5b:97:a3:39:a0:ee:5d:03:eb:6c:2d:f6:
6b:0c:d4:b3:92:a3:0d:76:b1:a6:fc:8d:39:12:cf:
fc:68:47:a0:97:09:05:b2:99:fd:f9:2b:c9:32:38:
87:28:60:99:06:fe:56:0b:af:a9:50:db:3c:3f:e1:
bc:9c:a1:21:75:9d:89:7f:44:b0:eb:91:7e:8f:e8:
d9:f8:42:e2:df:a0:4b:11:f4:dc:1c:8f:d6:8c:1e:
3e:4b:9b:20:bc:1e:fd:79:c4:6f:d8:67:0f:70:5e:
dc:ac:0d:16:eb:cc:0a:41:b0:20:7f:99:a8:6e:c6:
9b:bd:07:fd:f1:a3:ce:42:18:1f:4d:c7:86:cb:97:
8f:16:7b:42:9a:4c:34:08:f0:6c:81:e7:10:f6:e3:
52:02:65:33:3f:91:fe:ef:86:42:7a:f3:5f:16:8f:
77:8f:9c:5a:ab:32:d9:99:92:c1:8b:75:7a:e9:08:
88:15:a9:a2:6f:13:c0:2f:6d:14:f0:cd:b4:20:dd:
13:3e:8f:90:7e:5f:49:e0:85:59:4b:e1:5e:5a:41:
66:f3:87:65:03:12:62:e4:ad:2f:55:75:22:ef:63:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:8E:EE:9D:E6:7D:94:29:59:B7:D5:68:B7:FD:F0:B1:F9:9E:43
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/LKiO7p3mfZQpWbfVaLf98LH5nkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.4.0/23
Signature Algorithm: sha256WithRSAEncryption
84:60:ad:95:87:1e:e7:4e:32:41:9c:24:05:59:04:ee:60:80:
a9:31:b0:e9:8c:7e:7a:a9:95:77:d5:3f:0e:62:db:6c:a4:1a:
32:62:d2:d0:b7:02:9c:86:95:ee:f7:22:a2:ed:9d:4d:67:db:
f2:58:8a:26:e3:1f:87:cf:df:6b:43:3b:78:1a:22:18:ea:5a:
95:ad:e8:62:93:7b:2d:8d:ad:cd:8d:0e:6f:ff:6e:87:72:64:
79:4f:1f:ef:dd:8b:cb:f5:6e:37:69:3b:c6:37:2e:62:b5:dd:
81:ac:7f:83:f3:86:48:2b:71:45:70:7b:96:5c:6a:c3:f8:7d:
af:3c:14:85:f5:80:50:8a:24:f1:e8:03:9a:99:86:67:0d:f5:
3c:be:c7:b3:8e:f1:d4:f8:a6:f1:f2:0b:22:cc:13:f7:e5:f8:
30:a7:dc:3f:eb:02:85:14:23:11:bd:6a:9b:9f:a7:87:bb:7a:
ff:75:4c:17:f9:9c:0e:5e:b1:17:1b:91:44:bb:bf:28:1f:7b:
16:f3:94:34:17:46:af:e7:ce:52:c8:da:4d:93:4f:5a:5b:ed:
6a:3e:94:45:8f:da:38:06:b0:42:7c:1d:b4:b3:5b:3b:60:4f:
b7:6b:5f:f8:94:bd:b6:d0:8f:71:9c:35:93:a2:2b:db:a7:1b:
4d:47:f2:67
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN+IrtjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmZjYTdjOTZlODA0NTA1YTQ4Yjk5NjAzZDliMjEyNGYxZGQzNzAyMB4XDTIyMDEw
MTE0NTg1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmNhODhlZWU5ZGU2
N2Q5NDI5NTliN2Q1NjhiN2ZkZjBiMWY5OWU0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM7SlPkz24OefMkx31f4RRp/V14oxkNZeMMKYHUcuQTqW5ej
OaDuXQPrbC32awzUs5KjDXaxpvyNORLP/GhHoJcJBbKZ/fkryTI4hyhgmQb+Vguv
qVDbPD/hvJyhIXWdiX9EsOuRfo/o2fhC4t+gSxH03ByP1owePkubILwe/XnEb9hn
D3Be3KwNFuvMCkGwIH+ZqG7Gm70H/fGjzkIYH03HhsuXjxZ7QppMNAjwbIHnEPbj
UgJlMz+R/u+GQnrzXxaPd4+cWqsy2ZmSwYt1eukIiBWpom8TwC9tFPDNtCDdEz6P
kH5fSeCFWUvhXlpBZvOHZQMSYuStL1V1Iu9jhaECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQsqI7uneZ9lClZt9Vot/3wsfmeQzAfBgNVHSMEGDAWgBSL/KfJboBFBaSL
mWA9myEk8d03AjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lfeW55VzZBUlFXa2k1bGdQWnNoSlBIZE53SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvOGYzYjZmLWU4NmYtNDY3ZC1hYTkwLTE4YjFhOTM3YTU2Ny8x
L0xLaU83cDNtZlpRcFdiZlZhTGY5OExINW5rTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMv
OGYzYjZmLWU4NmYtNDY3ZC1hYTkwLTE4YjFhOTM3YTU2Ny8xL2lfeW55VzZBUlFX
a2k1bGdQWnNoSlBIZE53SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcEhBDANBgkqhkiG9w0BAQsFAAOC
AQEAhGCtlYce504yQZwkBVkE7mCAqTGw6Yx+eqmVd9U/DmLbbKQaMmLS0LcCnIaV
7vciou2dTWfb8liKJuMfh8/fa0M7eBoiGOpala3oYpN7LY2tzY0Ob/9uh3JkeU8f
792Ly/VuN2k7xjcuYrXdgax/g/OGSCtxRXB7llxqw/h9rzwUhfWAUIok8egDmpmG
Zw31PL7Hs47x1Pim8fILIswT9+X4MKfcP+sChRQjEb1qm5+nh7t6/3VMF/mcDl6x
FxuRRLu/KB97FvOUNBdGr+fOUsjaTZNPWlvtaj6URY/aOAawQnwdtLNbO2BPt2tf
+JS9ttCPcZw1k6Ir26cbTUfyZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:19 2024 by rpki-client on console-ams.rpki-client.org