Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rSeRvx-v-seq114ovIQxvcgb6yY.roa
File: rSeRvx-v-seq114ovIQxvcgb6yY.roa (raw, json)
Hash identifier: bvg1UCG9fllfkSMzm28Doad7PItro72jDc1+AFCZTHY=
Subject key identifier: AD:27:91:BF:1F:AF:FA:C7:AA:D7:5E:28:BC:84:31:BD:C8:1B:EB:26
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 376008AF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rSeRvx-v-seq114ovIQxvcgb6yY.roa
Signing time: Sat 16 Apr 2022 07:36:14 +0000
ROA not before: Sat 16 Apr 2022 07:36:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209433
IP address blocks: 93.115.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929040559 (0x376008af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 16 07:36:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad2791bf1faffac7aad75e28bc8431bdc81beb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:a9:07:b8:1e:1c:3c:d0:93:d0:de:90:3a:
d5:69:9a:e6:cc:c2:b4:6f:b9:ff:06:50:a4:2a:e0:
0b:df:b8:4b:01:e8:b3:46:c5:90:6d:ed:70:f8:5f:
46:91:6b:54:86:0e:1d:61:09:93:21:ae:9a:d0:6b:
d2:52:da:d0:eb:46:ec:26:f1:6f:2e:2c:fa:76:b9:
3a:63:df:21:50:81:45:1d:f3:98:79:73:fd:57:64:
ac:e6:3f:8b:48:57:b7:85:91:a1:e7:c5:5b:41:fe:
db:77:b9:33:68:27:13:52:19:3a:b3:d8:7a:59:67:
df:03:4f:62:ff:8d:0b:97:5e:81:16:25:fe:b4:2c:
be:39:e1:0d:84:ad:b7:4e:f9:29:bb:c7:58:4a:c6:
e7:7c:31:42:b3:a1:7c:d5:f1:e3:21:b3:29:ec:39:
99:89:02:45:a3:73:37:99:7c:13:22:dc:4d:97:d4:
c3:c4:05:90:dd:77:0d:57:3f:a9:01:98:4c:21:68:
17:7f:9f:50:fa:7a:bd:be:8b:0a:d3:31:b8:6e:df:
8f:38:19:3a:f7:d2:19:71:86:b4:88:38:bc:ad:1a:
70:00:25:24:ba:ee:3d:bd:65:6d:88:84:3b:6e:67:
0b:c1:3d:bd:29:30:f5:c6:38:38:b0:78:4e:2a:30:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:91:BF:1F:AF:FA:C7:AA:D7:5E:28:BC:84:31:BD:C8:1B:EB:26
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rSeRvx-v-seq114ovIQxvcgb6yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.100.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e0:a5:e1:14:bf:f3:92:e3:64:73:76:76:27:0d:3c:aa:f5:
6c:15:96:de:f3:99:61:67:16:59:84:d0:71:f6:50:76:53:34:
bf:ec:91:50:df:08:5f:d5:ce:85:e0:a5:69:a0:cd:4a:21:a6:
b0:0c:d2:89:e1:df:60:72:52:40:48:ed:3b:91:d8:4d:d5:8f:
25:e3:61:53:99:23:a4:9c:f9:65:b2:8e:e1:cd:10:9a:11:de:
47:f7:f4:df:38:48:bd:35:ae:c2:7b:5f:53:54:36:d2:e5:96:
68:6f:3c:81:33:b0:c8:5d:23:76:ff:6a:82:d1:f9:1b:db:d4:
59:ea:38:b8:9e:99:79:e5:c5:e7:de:ba:06:fc:d1:07:b5:7f:
68:be:f0:22:7a:2b:13:5a:93:66:ef:bc:6b:51:f7:e3:61:13:
62:99:2a:da:bd:f0:e0:90:74:e2:81:6e:1d:f1:6f:26:fd:b1:
3e:88:ab:94:04:a9:0d:0e:bc:68:02:a8:f8:e2:8a:03:7b:61:
91:92:ff:ae:38:51:7e:80:73:f8:1e:2a:89:eb:a3:06:1b:a2:
2f:e6:67:4c:ce:6a:0b:0e:9a:08:98:89:57:ff:03:8b:b6:89:
50:4f:00:e6:60:42:69:fd:d4:ec:5f:5d:c1:e6:56:d2:f0:43:
85:c0:b2:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN2AIrzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MWQ0NmUwZTNlOGNhYWFlZDRhNTI5YmQ3ZDczMDhiZDFlZjAxYzFkMB4XDTIyMDQx
NjA3MzYxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQyNzkxYmYxZmFm
ZmFjN2FhZDc1ZTI4YmM4NDMxYmRjODFiZWIyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8DqQe4Hhw80JPQ3pA61Wma5szCtG+5/wZQpCrgC9+4SwHo
s0bFkG3tcPhfRpFrVIYOHWEJkyGumtBr0lLa0OtG7Cbxby4s+na5OmPfIVCBRR3z
mHlz/VdkrOY/i0hXt4WRoefFW0H+23e5M2gnE1IZOrPYelln3wNPYv+NC5degRYl
/rQsvjnhDYStt075KbvHWErG53wxQrOhfNXx4yGzKew5mYkCRaNzN5l8EyLcTZfU
w8QFkN13DVc/qQGYTCFoF3+fUPp6vb6LCtMxuG7fjzgZOvfSGXGGtIg4vK0acAAl
JLruPb1lbYiEO25nC8E9vSkw9cY4OLB4TiowrFUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBStJ5G/H6/6x6rXXii8hDG9yBvrJjAfBgNVHSMEGDAWgBTx1G4OPoyqrtSl
Kb19cwi9HvAcHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhkUnVEajZNcXE3VXBTbTlmWE1JdlI3d0hCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvODRlYjQ0LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4MjhjMy8x
L3JTZVJ2eC12LXNlcTExNG92SVF4dmNnYjZ5WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
ODRlYjQ0LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4MjhjMy8xLzhkUnVEajZNcXE3
VXBTbTlmWE1JdlI3d0hCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1zZDANBgkqhkiG9w0BAQsFAAOC
AQEAJ+Cl4RS/85LjZHN2dicNPKr1bBWW3vOZYWcWWYTQcfZQdlM0v+yRUN8IX9XO
heClaaDNSiGmsAzSieHfYHJSQEjtO5HYTdWPJeNhU5kjpJz5ZbKO4c0QmhHeR/f0
3zhIvTWuwntfU1Q20uWWaG88gTOwyF0jdv9qgtH5G9vUWeo4uJ6ZeeXF5966BvzR
B7V/aL7wInorE1qTZu+8a1H342ETYpkq2r3w4JB04oFuHfFvJv2xPoirlASpDQ68
aAKo+OKKA3thkZL/rjhRfoBz+B4qieujBhuiL+ZnTM5qCw6aCJiJV/8Di7aJUE8A
5mBCaf3U7F9dweZW0vBDhcCyKw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org