Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/phdbjoFtlI6EhhrYYyObpSTXhE4.roa
File: phdbjoFtlI6EhhrYYyObpSTXhE4.roa (raw, json)
Hash identifier: L2OL02V4koA6dLYfErFajoYQmcNQL8cVU/PZVD5a6ug=
Subject key identifier: A6:17:5B:8E:81:6D:94:8E:84:86:1A:D8:63:23:9B:A5:24:D7:84:4E
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 03A3D5BF
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/phdbjoFtlI6EhhrYYyObpSTXhE4.roa
Signing time: Sat 01 Jan 2022 10:02:08 +0000
ROA not before: Sat 01 Jan 2022 10:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24579
IP address blocks: 193.110.89.0/24 maxlen: 24
193.111.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61068735 (0x3a3d5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Jan 1 10:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6175b8e816d948e84861ad863239ba524d7844e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:98:c3:5e:3a:3a:0c:56:e9:2f:92:8a:dd:
98:75:7e:45:b2:c2:aa:11:cc:5d:c4:d7:08:43:98:
c6:2d:49:b0:87:3a:79:80:12:17:76:b1:e3:12:9c:
3c:a6:60:5b:8b:93:4f:25:33:19:e0:2a:68:38:a7:
43:04:46:a3:23:9e:3d:56:ee:7d:91:00:40:80:00:
85:7c:07:4f:89:31:0b:6c:11:59:d5:12:c0:5d:69:
dd:05:c6:ff:9c:cd:88:1d:92:ea:78:5e:5b:de:fa:
5a:1d:b5:ed:d6:85:5c:ee:da:12:ca:47:20:d2:f7:
7d:4e:8d:a8:3f:b6:de:78:45:32:f5:c3:61:17:b7:
ce:21:da:75:af:c3:ba:ed:2e:16:bc:74:1a:0d:0d:
7d:d8:b0:21:bb:fd:dd:61:37:0c:f8:e1:ee:cd:f6:
a4:77:2c:b6:2f:ef:27:dc:bd:3e:4b:05:ac:c4:7e:
1b:b5:b4:2f:f2:6f:91:df:f3:15:31:a3:7d:45:e7:
4d:be:9d:8a:29:d4:fd:54:67:14:bd:94:1f:66:1d:
2e:f5:69:ea:bb:4b:a7:c1:c6:4e:77:5c:bc:57:e4:
c1:50:d8:4e:4e:20:05:b5:00:2a:b3:67:08:9b:40:
30:57:d4:b5:29:07:a1:d4:ca:03:86:c0:b3:d9:b8:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:17:5B:8E:81:6D:94:8E:84:86:1A:D8:63:23:9B:A5:24:D7:84:4E
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/phdbjoFtlI6EhhrYYyObpSTXhE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.89.0/24
193.111.188.0/22
Signature Algorithm: sha256WithRSAEncryption
45:a1:53:f8:a6:6a:74:82:52:48:fc:a0:8b:fd:f1:85:db:4b:
47:7c:c2:66:28:57:1e:f7:58:d5:0e:2c:f9:1f:0c:b6:6a:ae:
a0:a1:22:6d:0d:64:75:a1:d4:a6:50:e8:1b:dc:9a:5c:b8:85:
9a:54:a0:b8:d8:fa:23:de:40:e3:5a:71:13:e1:05:7f:e2:7e:
a0:31:84:d3:74:d0:63:23:00:48:b8:11:ad:44:e6:96:23:9f:
4e:ed:5d:97:69:c5:7e:1c:8f:80:47:7f:cb:5b:98:95:81:05:
81:5b:8e:e1:f5:05:04:b4:08:a4:6a:2d:4d:9f:c2:fc:e9:89:
23:70:57:7b:25:3b:1c:77:e4:81:63:53:18:ba:ba:c5:f1:f9:
b5:f3:4a:d6:8b:d5:7e:bf:88:9e:9c:c5:89:58:74:45:e1:d3:
e9:d9:57:4e:50:89:6b:6d:80:4d:60:34:d9:38:b3:6d:1f:70:
16:ad:97:9d:5f:8f:c1:7a:b6:ce:12:ba:2f:87:e2:6e:d2:5a:
b2:e1:d8:fb:e8:83:fa:be:15:4d:fb:21:f1:87:5d:0c:3e:39:
86:51:4e:d6:b4:a7:06:c6:f6:a4:ad:56:6d:d6:2b:84:8d:eb:
62:9a:91:7f:4d:9b:c0:32:a2:bd:ac:1b:d8:db:48:8f:0b:be:
ee:ff:a1:d3
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA6PVvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OGZlYjJiMDUwZDUwYWQ4Y2UxMGMxYzJmNTA3ZmRiOGE1MmQwMjhjMB4XDTIyMDEw
MTEwMDIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTYxNzViOGU4MTZk
OTQ4ZTg0ODYxYWQ4NjMyMzliYTUyNGQ3ODQ0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK95mMNeOjoMVukvkordmHV+RbLCqhHMXcTXCEOYxi1JsIc6
eYASF3ax4xKcPKZgW4uTTyUzGeAqaDinQwRGoyOePVbufZEAQIAAhXwHT4kxC2wR
WdUSwF1p3QXG/5zNiB2S6nheW976Wh217daFXO7aEspHINL3fU6NqD+23nhFMvXD
YRe3ziHada/Duu0uFrx0Gg0NfdiwIbv93WE3DPjh7s32pHcsti/vJ9y9PksFrMR+
G7W0L/Jvkd/zFTGjfUXnTb6diinU/VRnFL2UH2YdLvVp6rtLp8HGTndcvFfkwVDY
Tk4gBbUAKrNnCJtAMFfUtSkHodTKA4bAs9m4RgECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSmF1uOgW2UjoSGGthjI5ulJNeETjAfBgNVHSMEGDAWgBSI/rKwUNUK2M4Q
wcL1B/24pS0CjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lQNnlzRkRWQ3RqT0VNSEM5UWY5dUtVdEFvdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvMWQzMTJmLWJlOWUtNGEyNy1iMjJjLTJmMjFmNDUyNDY4My8x
L3BoZGJqb0Z0bEk2RWhocllZeU9icFNUWGhFNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
MWQzMTJmLWJlOWUtNGEyNy1iMjJjLTJmMjFmNDUyNDY4My8xL2lQNnlzRkRWQ3Rq
T0VNSEM5UWY5dUtVdEFvdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMFuWQMEAsFvvDANBgkqhkiG9w0B
AQsFAAOCAQEARaFT+KZqdIJSSPygi/3xhdtLR3zCZihXHvdY1Q4s+R8MtmquoKEi
bQ1kdaHUplDoG9yaXLiFmlSguNj6I95A41pxE+EFf+J+oDGE03TQYyMASLgRrUTm
liOfTu1dl2nFfhyPgEd/y1uYlYEFgVuO4fUFBLQIpGotTZ/C/OmJI3BXeyU7HHfk
gWNTGLq6xfH5tfNK1ovVfr+InpzFiVh0ReHT6dlXTlCJa22ATWA02TizbR9wFq2X
nV+PwXq2zhK6L4fibtJasuHY++iD+r4VTfsh8YddDD45hlFO1rSnBsb2pK1WbdYr
hI3rYpqRf02bwDKivawb2NtIjwu+7v+h0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:49 2024 by rpki-client on console-fra.rpki-client.org