Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/4CN-AdYij395co2TSLXIh1KvZow.roa
File: 4CN-AdYij395co2TSLXIh1KvZow.roa (raw, json)
Hash identifier: TZrax5lUw2wUn3tIQ1zodgnR1RNgBjJ+0sQRroeeJ2g=
Subject key identifier: E0:23:7E:01:D6:22:8F:7F:79:72:8D:93:48:B5:C8:87:52:AF:66:8C
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 08CFA047
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/4CN-AdYij395co2TSLXIh1KvZow.roa
Signing time: Sat 01 Jan 2022 04:59:05 +0000
ROA not before: Sat 01 Jan 2022 04:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197185
IP address blocks: 194.213.102.0/23 maxlen: 23
194.213.103.0/24 maxlen: 24
194.213.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147824711 (0x8cfa047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Jan 1 04:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0237e01d6228f7f79728d9348b5c88752af668c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:1d:2c:4d:4b:78:19:46:30:d4:76:3a:cb:
b5:72:0f:c3:ac:eb:61:03:2d:ab:f9:c7:c6:e7:6f:
37:9c:6e:54:94:6d:5a:5e:2a:f0:86:19:dd:fa:02:
40:09:26:9a:37:6a:64:81:04:01:f9:13:ae:63:b9:
59:c6:ac:73:e0:f7:8f:41:c2:70:75:25:df:3e:ff:
aa:51:c8:82:f0:a3:d9:dd:00:af:a4:c2:e5:c3:63:
a7:a9:91:72:e0:fd:de:e4:80:71:18:f7:a4:c1:2e:
3a:0e:6c:64:18:c4:be:d0:a8:d3:86:73:1d:b4:ba:
d5:af:4b:74:ef:3a:6f:37:33:58:c9:e7:d2:f9:e3:
11:a3:7e:55:d9:f3:0a:f2:d1:de:59:4b:bc:7a:a8:
f2:d5:cc:f1:64:4a:a0:98:bd:c1:3d:a8:8c:d7:e2:
48:c7:f6:88:9c:58:c2:42:39:ea:19:25:2c:4c:e1:
eb:28:91:b4:d8:28:b4:4b:ec:35:ee:d3:89:0c:25:
d2:3f:57:a6:47:90:13:27:23:88:67:33:39:03:f7:
12:a6:90:b6:09:30:43:a1:c9:56:4a:fe:67:51:50:
6b:14:73:b4:f0:f7:8a:98:9c:00:64:c0:bb:f5:08:
19:30:dc:b7:4c:07:ee:c3:c2:2d:6c:11:a3:46:b1:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:7E:01:D6:22:8F:7F:79:72:8D:93:48:B5:C8:87:52:AF:66:8C
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/4CN-AdYij395co2TSLXIh1KvZow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.102.0/23
Signature Algorithm: sha256WithRSAEncryption
26:b2:7c:dc:6a:03:99:61:7f:38:e9:61:e3:1c:08:17:7f:ee:
d2:95:29:94:c3:2c:51:55:81:d8:ec:12:07:2d:35:85:a6:f5:
09:ca:8a:e6:c5:1a:f3:2b:7a:2f:5d:86:3d:84:c4:7e:55:ea:
de:c7:d9:2c:03:48:76:5e:23:3c:cf:92:b5:8d:65:5a:c9:d5:
fe:7e:00:fc:2b:46:1a:0f:6b:e4:8b:db:c6:49:35:fb:cc:a3:
2b:02:7d:be:67:43:de:9f:f4:dd:e7:3b:76:c5:bb:cf:d5:0d:
c2:52:e4:00:f9:27:8f:66:8e:75:eb:58:f0:9a:71:dc:a1:82:
65:c3:81:3d:14:d7:61:6d:05:64:81:17:3d:29:74:a1:c1:e1:
81:40:0a:f5:be:7f:c7:20:a7:41:8a:e9:7d:2f:15:2d:d5:e2:
01:30:07:50:15:91:06:fa:de:71:af:9b:36:1c:52:d2:4d:61:
bb:5a:b6:38:37:02:09:75:53:c2:99:61:e7:79:3a:99:35:69:
46:86:e3:4f:a3:6e:88:b7:60:f0:ed:7f:69:a3:d7:c1:9a:26:
e5:75:c3:f3:45:6f:8b:af:67:ce:80:e6:31:16:f2:36:18:8d:
0f:56:3b:0a:5a:e7:b7:ee:93:0e:3a:f5:4f:bd:52:34:e2:07:
8f:f0:d6:fd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECM+gRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YjRkNTJhYjA5YjE2ZDcyZjRjM2U0OGNjNGI0OTAyNWQwODM2NzZkMB4XDTIyMDEw
MTA0NTkwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTAyMzdlMDFkNjIy
OGY3Zjc5NzI4ZDkzNDhiNWM4ODc1MmFmNjY4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZjHSxNS3gZRjDUdjrLtXIPw6zrYQMtq/nHxudvN5xuVJRt
Wl4q8IYZ3foCQAkmmjdqZIEEAfkTrmO5Wcasc+D3j0HCcHUl3z7/qlHIgvCj2d0A
r6TC5cNjp6mRcuD93uSAcRj3pMEuOg5sZBjEvtCo04ZzHbS61a9LdO86bzczWMnn
0vnjEaN+VdnzCvLR3llLvHqo8tXM8WRKoJi9wT2ojNfiSMf2iJxYwkI56hklLEzh
6yiRtNgotEvsNe7TiQwl0j9XpkeQEycjiGczOQP3EqaQtgkwQ6HJVkr+Z1FQaxRz
tPD3ipicAGTAu/UIGTDct0wH7sPCLWwRo0axt1cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgI34B1iKPf3lyjZNItciHUq9mjDAfBgNVHSMEGDAWgBTbTVKrCbFtcvTD
5IzEtJAl0INnbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzIwMVNxd214YlhMMHctU014TFNRSmRDRFoyMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvYmEyYmFkLWVkMzUtNDVjMy1iODRlLTIyYmRlZjk5YmNlYS8x
LzRDTi1BZFlpajM5NWNvMlRTTFhJaDFLdlpvdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
YmEyYmFkLWVkMzUtNDVjMy1iODRlLTIyYmRlZjk5YmNlYS8xLzIwMVNxd214YlhM
MHctU014TFNRSmRDRFoyMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcLVZjANBgkqhkiG9w0BAQsFAAOC
AQEAJrJ83GoDmWF/OOlh4xwIF3/u0pUplMMsUVWB2OwSBy01hab1CcqK5sUa8yt6
L12GPYTEflXq3sfZLANIdl4jPM+StY1lWsnV/n4A/CtGGg9r5Ivbxkk1+8yjKwJ9
vmdD3p/03ec7dsW7z9UNwlLkAPknj2aOdetY8Jpx3KGCZcOBPRTXYW0FZIEXPSl0
ocHhgUAK9b5/xyCnQYrpfS8VLdXiATAHUBWRBvreca+bNhxS0k1hu1q2ODcCCXVT
wplh53k6mTVpRobjT6NuiLdg8O1/aaPXwZom5XXD80Vvi69nzoDmMRbyNhiND1Y7
Clrnt+6TDjr1T71SNOIHj/DW/Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:38 2023 by rpki-client on console-ams.rpki-client.org