Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/xicHugvQDNzMCDJvfn7x0zbhY7g.roa
File: xicHugvQDNzMCDJvfn7x0zbhY7g.roa (raw, json)
Hash identifier: kfIrY388BadzUfCH+erX/crKB1RxgR5ermfbDxs5hnk=
Subject key identifier: C6:27:07:BA:0B:D0:0C:DC:CC:08:32:6F:7E:7E:F1:D3:36:E1:63:B8
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 072B723C
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/xicHugvQDNzMCDJvfn7x0zbhY7g.roa
Signing time: Sat 01 Jan 2022 04:56:39 +0000
ROA not before: Sat 01 Jan 2022 04:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.31.15.0/24 maxlen: 24
193.31.62.0/24 maxlen: 24
193.31.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120287804 (0x72b723c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 1 04:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c62707ba0bd00cdccc08326f7e7ef1d336e163b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:73:d9:ae:f6:a8:87:a3:19:f1:74:6d:30:
d1:4f:92:ab:0b:4a:15:3b:f7:d6:73:08:ee:b4:6c:
ba:e8:5a:70:eb:e3:43:dc:aa:b6:11:55:87:90:dd:
dd:e8:c6:01:98:c1:60:aa:2b:bf:46:e6:b8:a7:89:
5c:e2:51:57:70:56:1d:15:04:7f:26:c1:06:31:c0:
c9:2a:f9:e2:7d:2b:58:00:23:6f:e0:42:1a:26:57:
43:34:93:c7:a5:cb:40:d6:91:d1:ba:27:01:e9:7e:
a9:26:db:f7:03:47:49:93:d4:f6:7e:e0:19:5c:db:
3f:0f:1c:22:1a:df:af:03:c7:be:e7:64:d2:d6:5e:
ab:78:d5:a1:ed:e7:49:40:32:a8:ae:65:88:91:43:
5b:09:99:4c:31:d2:3c:d8:b2:af:fe:7e:92:a4:a0:
0f:94:7f:4f:d1:ce:00:e5:c8:17:56:9d:e9:19:34:
bd:4b:2a:c3:2f:82:af:01:53:c6:03:b5:92:05:68:
ef:99:6c:5b:9f:14:25:81:c7:d3:00:e3:0b:68:fb:
e3:a0:3a:75:b9:87:28:84:82:e2:6f:e1:31:81:29:
9e:28:05:b3:60:c2:96:2b:38:70:c2:98:83:cf:7d:
3c:20:5e:9f:7e:28:eb:c4:c3:69:2d:d5:7b:c4:2b:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:07:BA:0B:D0:0C:DC:CC:08:32:6F:7E:7E:F1:D3:36:E1:63:B8
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/xicHugvQDNzMCDJvfn7x0zbhY7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.15.0/24
193.31.60.0/24
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
45:61:7a:07:19:b4:7a:6c:28:f1:1b:91:79:cc:0f:1d:ed:96:
39:8f:0c:c4:23:98:4a:1c:14:ec:a8:54:6a:70:72:bf:cf:dc:
d8:51:e0:88:8a:a5:bb:53:fa:55:c2:b2:31:9e:01:fa:42:3c:
9f:6c:10:02:81:7f:5a:32:67:47:ec:18:cf:31:75:e9:2b:71:
5a:5b:9d:86:7d:03:10:37:9e:5e:25:a8:15:8c:d2:71:bc:41:
10:73:83:31:da:4f:22:86:97:67:b2:11:17:77:9a:34:fe:60:
f7:6f:e0:0f:6f:15:d2:ba:86:da:97:dd:0a:96:53:de:3d:14:
eb:69:ec:5b:dd:22:5c:5f:5c:e9:be:92:97:a3:b9:99:09:43:
a6:44:34:4b:ff:41:c4:46:8c:5d:8e:ea:24:68:b6:46:85:fa:
01:19:11:45:af:e2:70:ed:8e:0a:af:87:46:fd:d8:63:84:ad:
11:a0:bc:7c:a9:bd:7a:00:12:21:58:85:69:f3:59:c6:f7:d2:
c6:7a:b5:42:8c:f3:61:e8:7e:21:32:3a:21:ac:e8:bb:12:f7:
8c:24:b1:91:f0:c8:d6:49:a2:47:7f:92:b6:2f:d0:91:56:d3:
54:9e:ae:65:30:1f:e9:5a:c3:29:59:82:da:c5:85:09:b3:4e:
7b:a3:9d:12
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBytyPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZjFkNWZlYWZkMzkxNzQ3MjViZmU0YmVmOTFiZDI3YzdiMmY2ZjkxMB4XDTIyMDEw
MTA0NTYzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzYyNzA3YmEwYmQw
MGNkY2NjMDgzMjZmN2U3ZWYxZDMzNmUxNjNiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzEc9mu9qiHoxnxdG0w0U+SqwtKFTv31nMI7rRsuuhacOvj
Q9yqthFVh5Dd3ejGAZjBYKorv0bmuKeJXOJRV3BWHRUEfybBBjHAySr54n0rWAAj
b+BCGiZXQzSTx6XLQNaR0bonAel+qSbb9wNHSZPU9n7gGVzbPw8cIhrfrwPHvudk
0tZeq3jVoe3nSUAyqK5liJFDWwmZTDHSPNiyr/5+kqSgD5R/T9HOAOXIF1ad6Rk0
vUsqwy+CrwFTxgO1kgVo75lsW58UJYHH0wDjC2j746A6dbmHKISC4m/hMYEpnigF
s2DClis4cMKYg899PCBen34o68TDaS3Ve8QrgQkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTGJwe6C9AM3MwIMm9+fvHTNuFjuDAfBgNVHSMEGDAWgBS/HV/q/TkXRyW/
5L75G9J8ey9vkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Z4MWY2djA1RjBjbHYtUy0tUnZTZkhzdmI1RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvNjA2NWQyLTEwM2UtNGFiNy1iZmIzLTFhOGM4NDJhZmUyYS8x
L3hpY0h1Z3ZRRE56TUNESnZmbjd4MHpiaFk3Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
NjA2NWQyLTEwM2UtNGFiNy1iZmIzLTFhOGM4NDJhZmUyYS8xL3Z4MWY2djA1RjBj
bHYtUy0tUnZTZkhzdmI1RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMEfDwMEAMEfPAMEAMEfPjANBgkq
hkiG9w0BAQsFAAOCAQEARWF6Bxm0emwo8RuRecwPHe2WOY8MxCOYShwU7KhUanBy
v8/c2FHgiIqlu1P6VcKyMZ4B+kI8n2wQAoF/WjJnR+wYzzF16StxWludhn0DEDee
XiWoFYzScbxBEHODMdpPIoaXZ7IRF3eaNP5g92/gD28V0rqG2pfdCpZT3j0U62ns
W90iXF9c6b6Sl6O5mQlDpkQ0S/9BxEaMXY7qJGi2RoX6ARkRRa/icO2OCq+HRv3Y
Y4StEaC8fKm9egASIViFafNZxvfSxnq1QozzYeh+ITI6IazouxL3jCSxkfDI1kmi
R3+Sti/QkVbTVJ6uZTAf6VrDKVmC2sWFCbNOe6OdEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:32 2024 by rpki-client on console-fra.rpki-client.org