Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/1-u8y5KkfFO5LbDtLYDEbbRhem3s.roa
File: 1-u8y5KkfFO5LbDtLYDEbbRhem3s.roa (raw, json)
Hash identifier: fyo1q7OqHvFVJpJufXFFSw8zSkoXAyMhQv3NeptBTeQ=
Subject key identifier: FA:EF:32:E4:A9:1F:14:EE:4B:6C:3B:4B:60:31:1B:6D:18:5E:9B:7B
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 09136A8B
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/1-u8y5KkfFO5LbDtLYDEbbRhem3s.roa
Signing time: Sat 01 Jan 2022 07:03:50 +0000
ROA not before: Sat 01 Jan 2022 07:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 193.43.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152267403 (0x9136a8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Jan 1 07:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faef32e4a91f14ee4b6c3b4b60311b6d185e9b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:3f:ce:08:c1:91:a2:68:3c:03:78:30:af:
e3:6b:97:18:a2:a4:10:1a:1f:9c:12:23:25:8a:f1:
b4:6d:71:97:a5:63:d1:d9:a8:5b:27:85:be:c2:fd:
13:0c:50:b9:72:b9:db:48:87:71:3d:62:2e:61:76:
ed:27:29:f1:88:d8:a5:e1:89:4a:1f:ae:b9:f0:7e:
16:0d:e1:ef:9b:61:45:e1:df:8d:cf:66:c6:58:08:
b0:c2:dc:12:c2:82:5e:37:d3:ef:f1:e8:61:37:8c:
27:7f:6e:3d:d7:d4:52:9d:99:6a:26:3c:db:76:ac:
10:5a:36:8c:cc:75:39:63:a3:c9:ca:58:81:5a:7d:
33:fd:78:db:92:89:a1:f3:1b:d2:45:1e:9e:c4:1a:
d9:e4:e0:b8:38:b7:c3:55:51:c6:36:b2:b9:9d:b3:
34:a0:69:ba:80:22:97:a1:29:ff:16:6c:7e:10:f9:
38:89:32:c3:a9:cb:a3:cf:93:88:7b:e2:50:ec:d4:
32:f0:4d:80:e3:91:0e:7e:f2:88:ed:e4:82:24:4d:
08:83:a1:d7:4d:37:c6:5d:20:bf:41:44:e1:7e:9b:
eb:84:74:6c:24:82:f1:a7:67:f2:50:86:ac:55:91:
9f:f2:59:85:2d:f8:14:fe:58:88:e4:91:15:e3:06:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:32:E4:A9:1F:14:EE:4B:6C:3B:4B:60:31:1B:6D:18:5E:9B:7B
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/1-u8y5KkfFO5LbDtLYDEbbRhem3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.97.0/24
Signature Algorithm: sha256WithRSAEncryption
70:12:f8:24:a5:28:15:e2:f1:b1:e4:68:d6:c2:89:97:1d:8e:
76:57:b9:66:33:25:b2:5b:c3:da:be:c5:18:c6:90:dd:86:d5:
5a:bd:03:68:8d:72:58:74:2e:a2:93:49:0a:40:af:12:50:24:
b3:bc:18:e6:4a:b0:27:e6:86:db:32:e7:62:4a:17:58:ae:d1:
29:66:8d:12:fe:a4:77:5a:72:f1:2c:cb:d0:b7:01:3e:02:e5:
30:66:e8:63:0e:7a:18:74:18:e1:24:a7:a3:e0:50:64:17:be:
83:ea:8d:40:a9:eb:df:57:5d:c9:55:38:d2:24:a5:28:77:f2:
7b:07:ea:a6:6a:66:e1:8d:1e:00:f6:49:ca:f5:2b:4c:ba:78:
c7:53:d8:33:6d:13:3c:79:d5:3e:4a:d2:b3:10:c0:1b:f9:96:
5e:b1:c9:90:42:35:90:39:5d:f1:93:ca:e0:28:1f:0d:2c:05:
3b:e0:67:0d:75:9e:95:1b:91:dd:23:84:b1:c4:a6:87:cd:cb:
81:f4:2e:b5:85:d1:e9:6f:98:7a:0d:54:d4:f8:29:44:6d:a8:
f2:d7:e1:c0:8a:20:d3:e7:24:58:28:8a:10:53:8b:81:a3:7e:
f5:53:40:46:7a:06:58:dc:4a:c6:c7:b6:67:81:68:c4:f3:64:
e4:65:88:21
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECRNqizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjgwMTZkYjU1ZTY2NGJhNzIxZTE5YWU5YWI0MzE2YzEwZDk2NzA4MB4XDTIyMDEw
MTA3MDM1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFlZjMyZTRhOTFm
MTRlZTRiNmMzYjRiNjAzMTFiNmQxODVlOWI3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqIP84IwZGiaDwDeDCv42uXGKKkEBofnBIjJYrxtG1xl6Vj
0dmoWyeFvsL9EwxQuXK520iHcT1iLmF27Scp8YjYpeGJSh+uufB+Fg3h75thReHf
jc9mxlgIsMLcEsKCXjfT7/HoYTeMJ39uPdfUUp2ZaiY823asEFo2jMx1OWOjycpY
gVp9M/1425KJofMb0kUensQa2eTguDi3w1VRxjayuZ2zNKBpuoAil6Ep/xZsfhD5
OIkyw6nLo8+TiHviUOzUMvBNgOORDn7yiO3kgiRNCIOh1003xl0gv0FE4X6b64R0
bCSC8adn8lCGrFWRn/JZhS34FP5YiOSRFeMG1nUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT67zLkqR8U7ktsO0tgMRttGF6bezAfBgNVHSMEGDAWgBSSgBbbVeZkunIe
Ga6atDFsENlnCDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tvQVcyMVhtWkxweUhobXVtclF4YkJEWlp3Zy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNzIxYTFjLWNmMzktNDQ0OC04ODNiLWU4OWNkYWI4MmUxYy8x
LzEtdTh5NUtrZkZPNUxiRHRMWURFYmJSaGVtM3Mucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Iw
LzcyMWExYy1jZjM5LTQ0NDgtODgzYi1lODljZGFiODJlMWMvMS9rb0FXMjFYbVpM
cHlIaG11bXJReGJCRFpad2cuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBK2EwDQYJKoZIhvcNAQELBQAD
ggEBAHAS+CSlKBXi8bHkaNbCiZcdjnZXuWYzJbJbw9q+xRjGkN2G1Vq9A2iNclh0
LqKTSQpArxJQJLO8GOZKsCfmhtsy52JKF1iu0SlmjRL+pHdacvEsy9C3AT4C5TBm
6GMOehh0GOEkp6PgUGQXvoPqjUCp699XXclVONIkpSh38nsH6qZqZuGNHgD2Scr1
K0y6eMdT2DNtEzx51T5K0rMQwBv5ll6xyZBCNZA5XfGTyuAoHw0sBTvgZw11npUb
kd0jhLHEpofNy4H0LrWF0elvmHoNVNT4KURtqPLX4cCKINPnJFgoihBTi4GjfvVT
QEZ6BljcSsbHtmeBaMTzZORliCE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:56 2024 by rpki-client on console-ams.rpki-client.org