Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/QlLwyvEcFOgo-wA7seFZDSEE-ic.roa
File: QlLwyvEcFOgo-wA7seFZDSEE-ic.roa (raw, json)
Hash identifier: 0bi2aMVJHrsWwxl0OerDHmEM/JP+OZ3UUuqwhsUZzjg=
Subject key identifier: 42:52:F0:CA:F1:1C:14:E8:28:FB:00:3B:B1:E1:59:0D:21:04:FA:27
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 072B25D6
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/QlLwyvEcFOgo-wA7seFZDSEE-ic.roa
Signing time: Thu 28 Apr 2022 10:09:44 +0000
ROA not before: Thu 28 Apr 2022 10:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43824
IP address blocks: 193.41.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120268246 (0x72b25d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Apr 28 10:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4252f0caf11c14e828fb003bb1e1590d2104fa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:0d:2a:46:77:07:56:dc:41:70:fd:4d:f4:
75:7c:d8:11:76:de:16:e6:9e:b7:0b:1d:5c:84:5c:
68:32:8e:4f:5d:3c:e7:ad:9f:e8:4f:28:00:9d:b2:
60:0f:dc:21:8e:4a:e4:6f:4c:ec:c0:df:ad:03:d2:
48:03:e2:75:75:9d:34:d7:d5:2b:fc:c1:ed:08:ed:
60:f1:59:fd:09:09:a1:a6:51:60:8e:45:53:6f:c3:
c2:c2:7d:8d:98:13:3a:03:c6:cc:e9:73:82:01:b0:
a7:42:77:0e:05:ec:e3:a2:51:9e:e8:5c:7b:6e:c5:
21:10:f1:ee:6b:17:44:6c:6d:5c:d2:df:3c:c5:37:
de:43:cd:55:25:75:5f:9d:12:c8:cb:65:ae:e5:5c:
73:1e:5f:ac:99:e3:02:a8:12:80:86:c6:88:70:9c:
19:0c:3e:49:cc:25:59:15:fe:8f:95:46:a5:6d:e1:
2a:b2:bc:a3:bd:c5:08:e8:03:73:20:85:82:f3:6f:
a2:d7:cc:7e:b4:bd:d7:5f:ef:8d:69:27:12:dc:1c:
da:a2:64:4b:94:e8:8a:e6:d8:eb:7c:5b:37:cb:90:
61:d3:f8:3e:9f:9c:5a:eb:ae:a5:97:b4:5e:47:85:
09:2c:f6:90:f7:d7:0d:76:87:15:54:50:1a:04:3b:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:F0:CA:F1:1C:14:E8:28:FB:00:3B:B1:E1:59:0D:21:04:FA:27
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/QlLwyvEcFOgo-wA7seFZDSEE-ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c0:47:38:9f:f8:2a:bb:fa:cc:53:3b:88:31:01:23:d8:23:
09:04:90:bc:f9:c8:93:59:7b:03:ed:cd:2e:26:ed:27:54:32:
8e:2f:0e:96:e9:d4:eb:78:78:53:b5:0e:75:65:02:81:fc:ce:
a2:b0:7c:c7:e2:ba:42:c5:dc:64:e8:c2:06:7f:9a:ef:a9:23:
16:1a:ca:05:71:1c:c2:e0:ec:40:fb:d6:52:83:34:28:14:04:
f4:b8:ef:30:31:05:b0:94:61:20:d2:bc:c3:be:06:86:4d:c0:
4d:01:d2:03:99:2e:68:7c:b2:89:22:fc:d3:2e:79:5d:51:dc:
f7:29:62:33:9d:09:13:be:e3:e2:a4:25:77:12:95:ba:fa:44:
1b:64:40:8d:48:98:14:69:41:52:5b:1f:fd:16:6d:6e:bd:1c:
ae:59:36:8f:21:1e:97:a2:60:ba:d4:c5:90:6c:a7:02:29:5b:
d3:ba:23:25:17:a4:47:09:53:84:b6:0a:2c:85:9e:c2:e9:a0:
a2:e3:18:2c:91:58:c5:31:bc:a2:6f:83:6b:c4:66:9b:7f:aa:
c2:de:17:d0:3a:03:07:da:ea:e2:c9:ba:0a:fe:9e:4e:ef:4f:
37:7a:63:26:61:f8:4c:2e:7a:48:8c:77:8d:f5:81:f9:8a:a1:
8f:8a:60:09
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBysl1jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjZkOWQ1MGIzYjg5ZDUxYzhhYTI0OTNlN2VmNDcwMWQ2MjUxZGFkMB4XDTIyMDQy
ODEwMDk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDI1MmYwY2FmMTFj
MTRlODI4ZmIwMDNiYjFlMTU5MGQyMTA0ZmEyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzeDSpGdwdW3EFw/U30dXzYEXbeFuaetwsdXIRcaDKOT108
562f6E8oAJ2yYA/cIY5K5G9M7MDfrQPSSAPidXWdNNfVK/zB7QjtYPFZ/QkJoaZR
YI5FU2/DwsJ9jZgTOgPGzOlzggGwp0J3DgXs46JRnuhce27FIRDx7msXRGxtXNLf
PMU33kPNVSV1X50SyMtlruVccx5frJnjAqgSgIbGiHCcGQw+ScwlWRX+j5VGpW3h
KrK8o73FCOgDcyCFgvNvotfMfrS911/vjWknEtwc2qJkS5ToiubY63xbN8uQYdP4
Pp+cWuuupZe0XkeFCSz2kPfXDXaHFVRQGgQ7eNMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRCUvDK8RwU6Cj7ADux4VkNIQT6JzAfBgNVHSMEGDAWgBTGbZ1Qs7idUciq
JJPn70cB1iUdrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3htMmRVTE80blZISXFpU1Q1LTlIQWRZbEhhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvNGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8x
L1FsTHd5dkVjRk9nby13QTdzZUZaRFNFRS1pYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
NGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8xL3htMmRVTE80blZI
SXFpU1Q1LTlIQWRZbEhhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEp2TANBgkqhkiG9w0BAQsFAAOC
AQEAfMBHOJ/4Krv6zFM7iDEBI9gjCQSQvPnIk1l7A+3NLibtJ1Qyji8OlunU63h4
U7UOdWUCgfzOorB8x+K6QsXcZOjCBn+a76kjFhrKBXEcwuDsQPvWUoM0KBQE9Ljv
MDEFsJRhINK8w74Ghk3ATQHSA5kuaHyyiSL80y55XVHc9yliM50JE77j4qQldxKV
uvpEG2RAjUiYFGlBUlsf/RZtbr0crlk2jyEel6JgutTFkGynAilb07ojJRekRwlT
hLYKLIWewumgouMYLJFYxTG8om+Da8Rmm3+qwt4X0DoDB9rq4sm6Cv6eTu9PN3pj
JmH4TC56SIx3jfWB+Yqhj4pgCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org