Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/HVNkuc7CFPijK0z2Hi2IrsXOlC4.roa
File: HVNkuc7CFPijK0z2Hi2IrsXOlC4.roa (raw, json)
Hash identifier: bMMMnre5ycWc2c2GxlPwxA35nJRQzhmgOrghfuPkkEs=
Subject key identifier: 1D:53:64:B9:CE:C2:14:F8:A3:2B:4C:F6:1E:2D:88:AE:C5:CE:94:2E
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 060137C9
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/HVNkuc7CFPijK0z2Hi2IrsXOlC4.roa
Signing time: Sat 01 Jan 2022 16:01:19 +0000
ROA not before: Sat 01 Jan 2022 16:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205847
IP address blocks: 193.41.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100743113 (0x60137c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d5364b9cec214f8a32b4cf61e2d88aec5ce942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:b2:70:ce:94:48:6d:47:d9:e3:bb:51:a7:
c1:66:7c:2d:a7:39:d0:86:93:7e:87:48:e4:16:c3:
46:ea:44:97:93:8a:18:2c:a8:07:02:09:c8:92:2c:
2b:68:c2:27:21:d4:0d:6c:bb:ca:4a:eb:23:05:21:
b8:91:83:47:02:fd:89:f3:5c:2d:5c:5b:d8:51:9b:
c7:7b:d6:c8:d3:54:7b:d6:a8:02:1b:dc:8e:11:5a:
8b:cc:06:77:82:36:cc:ad:ca:ce:17:54:2b:0f:39:
ea:9d:45:7b:bf:fc:83:7b:68:59:dc:a0:6a:ea:7d:
0f:2f:89:86:78:0f:e4:13:76:d3:de:d3:f1:fe:61:
2a:59:b2:4b:86:f0:27:91:12:9f:df:2e:94:b1:a3:
c6:4c:f4:ac:ab:d5:d6:ed:3e:a8:50:b3:cc:e3:e8:
29:55:01:4c:b5:54:bb:1c:65:d2:af:30:b2:02:2f:
79:f2:ea:cd:ed:2d:42:1b:32:db:57:03:01:a9:46:
bb:75:aa:44:f0:32:73:b3:c7:8e:ce:cc:6d:3b:e7:
b0:44:8c:53:4e:2e:6c:e8:b8:c2:03:00:ff:bf:ea:
fb:3c:9e:59:af:ef:0a:eb:1d:f5:9c:06:1a:69:9f:
50:37:69:dd:da:ce:d3:d6:cb:9d:52:2c:23:61:16:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:53:64:B9:CE:C2:14:F8:A3:2B:4C:F6:1E:2D:88:AE:C5:CE:94:2E
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/HVNkuc7CFPijK0z2Hi2IrsXOlC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:00:b8:51:c6:b6:f4:10:62:00:1e:2c:d7:db:f2:0a:f1:d0:
e7:83:08:a1:c7:b2:0e:48:b3:e3:6f:c1:84:2e:cb:1f:d0:a6:
78:12:be:2c:03:b3:23:b7:8a:77:c6:5c:31:d7:38:98:c6:4f:
a5:d1:2e:a3:35:de:b1:1c:39:67:fb:f1:c8:97:97:33:fe:7c:
4a:5f:dd:d9:04:2a:3f:87:37:3c:28:2a:47:f1:46:51:06:18:
51:af:d7:56:91:45:ea:ae:d2:06:a8:9c:58:ac:12:65:74:91:
6a:48:ff:fd:d8:ff:66:eb:d9:be:75:61:ef:72:08:1c:ca:75:
70:11:10:bb:16:9d:47:5e:95:d9:c5:d5:c4:51:08:74:0c:a4:
a0:12:a6:06:6b:68:db:5e:39:c7:fc:8a:25:ad:64:4b:05:77:
11:22:0f:3f:d1:69:2e:27:44:ce:75:53:f7:c2:f3:9a:c0:b5:
5a:93:b4:96:9b:b0:89:6d:da:4c:f3:66:0c:2b:8d:0a:e8:c3:
e6:0d:f6:9e:12:d5:7d:17:fd:c1:94:f0:96:35:64:19:c7:91:
32:d5:ad:02:dd:7e:de:c6:b8:89:e8:18:b4:cc:e3:ba:a9:c1:
71:fd:9e:ef:38:e5:fa:c3:25:81:32:10:89:82:db:f8:9e:54:
87:4f:63:f6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBgE3yTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjZkOWQ1MGIzYjg5ZDUxYzhhYTI0OTNlN2VmNDcwMWQ2MjUxZGFkMB4XDTIyMDEw
MTE2MDExOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQ1MzY0YjljZWMy
MTRmOGEzMmI0Y2Y2MWUyZDg4YWVjNWNlOTQyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFBsnDOlEhtR9nju1GnwWZ8Lac50IaTfodI5BbDRupEl5OK
GCyoBwIJyJIsK2jCJyHUDWy7ykrrIwUhuJGDRwL9ifNcLVxb2FGbx3vWyNNUe9ao
AhvcjhFai8wGd4I2zK3KzhdUKw856p1Fe7/8g3toWdygaup9Dy+JhngP5BN2097T
8f5hKlmyS4bwJ5ESn98ulLGjxkz0rKvV1u0+qFCzzOPoKVUBTLVUuxxl0q8wsgIv
efLqze0tQhsy21cDAalGu3WqRPAyc7PHjs7MbTvnsESMU04ubOi4wgMA/7/q+zye
Wa/vCusd9ZwGGmmfUDdp3drO09bLnVIsI2EWonsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdU2S5zsIU+KMrTPYeLYiuxc6ULjAfBgNVHSMEGDAWgBTGbZ1Qs7idUciq
JJPn70cB1iUdrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3htMmRVTE80blZISXFpU1Q1LTlIQWRZbEhhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvNGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8x
L0hWTmt1YzdDRlBpakswejJIaTJJcnNYT2xDNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
NGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8xL3htMmRVTE80blZI
SXFpU1Q1LTlIQWRZbEhhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEp2DANBgkqhkiG9w0BAQsFAAOC
AQEAuQC4Uca29BBiAB4s19vyCvHQ54MIoceyDkiz42/BhC7LH9CmeBK+LAOzI7eK
d8ZcMdc4mMZPpdEuozXesRw5Z/vxyJeXM/58Sl/d2QQqP4c3PCgqR/FGUQYYUa/X
VpFF6q7SBqicWKwSZXSRakj//dj/ZuvZvnVh73IIHMp1cBEQuxadR16V2cXVxFEI
dAykoBKmBmto2145x/yKJa1kSwV3ESIPP9FpLidEznVT98LzmsC1WpO0lpuwiW3a
TPNmDCuNCujD5g32nhLVfRf9wZTwljVkGceRMtWtAt1+3sa4iegYtMzjuqnBcf2e
7zjl+sMlgTIQiYLb+J5Uh09j9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org