Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/d_dUPvbn3BQxUg0h5o7_AwdeY0w.roa
File: d_dUPvbn3BQxUg0h5o7_AwdeY0w.roa (raw, json)
Hash identifier: K6P/DTxTCoREL5+ykUZv5CwRHn6/fXM/zorNwpVo8oI=
Subject key identifier: 77:F7:54:3E:F6:E7:DC:14:31:52:0D:21:E6:8E:FF:03:07:5E:63:4C
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 042BF36C
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/d_dUPvbn3BQxUg0h5o7_AwdeY0w.roa
Signing time: Sat 01 Jan 2022 10:55:31 +0000
ROA not before: Sat 01 Jan 2022 10:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 131.220.0.0/16 maxlen: 17
193.23.254.0/24 maxlen: 24
193.30.3.0/24 maxlen: 24
2a00:5ba0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69989228 (0x42bf36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jan 1 10:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77f7543ef6e7dc1431520d21e68eff03075e634c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:21:4b:d2:3f:a8:d2:9a:35:55:c6:ef:c3:
19:36:17:62:5f:09:d4:41:3f:aa:37:f0:5e:2c:27:
67:7d:28:27:58:05:55:1c:9f:38:a7:56:7b:70:cf:
2f:85:94:7c:ae:27:88:98:07:79:50:85:11:d0:09:
b7:46:a1:bb:af:07:b6:41:28:30:01:7d:39:a4:5c:
80:33:36:f0:18:d0:39:03:f1:a7:c0:07:a2:03:f2:
63:e1:96:c0:41:a6:f1:04:a2:d6:0c:13:6c:db:ac:
e1:cd:4f:72:10:0f:f5:fe:a1:b2:66:63:73:61:55:
b8:f0:22:7f:de:14:05:88:c0:4b:3f:10:2a:97:d9:
19:10:8d:62:ac:55:b3:6e:58:70:82:14:11:ec:fd:
98:d6:5e:0d:a2:e8:ad:5d:c0:38:ee:ea:6b:0e:8a:
b7:8b:df:5d:3a:3f:9f:33:55:68:0b:26:b1:32:fa:
eb:21:37:48:a2:a5:57:a7:70:c3:c0:f7:92:c0:72:
4d:b9:09:e3:f0:df:1b:3d:ab:19:b9:8f:c3:1a:49:
41:5d:3e:01:fe:13:73:3c:f5:7d:f1:a1:68:78:21:
de:0c:32:38:c7:2c:df:9b:1e:0b:9d:9b:c1:6e:77:
34:e1:fe:cc:38:bc:76:75:48:84:22:ee:ed:2a:92:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F7:54:3E:F6:E7:DC:14:31:52:0D:21:E6:8E:FF:03:07:5E:63:4C
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/d_dUPvbn3BQxUg0h5o7_AwdeY0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.220.0.0/16
193.23.254.0/24
193.30.3.0/24
IPv6:
2a00:5ba0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:19:b0:24:cc:3e:78:09:9c:ad:58:9e:92:40:7b:2e:19:93:
c5:5c:69:69:78:c1:f5:ac:f8:b8:82:73:f8:83:bf:5c:12:d3:
d2:f6:72:83:58:e3:de:4f:84:7f:6d:8c:72:f7:3f:1e:77:80:
37:f8:8a:19:18:ad:82:36:ef:16:a7:1e:55:80:80:f1:a8:ed:
7d:4e:7b:41:f9:f4:16:50:77:95:c1:10:e6:ce:e1:ff:32:00:
5b:d6:6f:bc:9f:e2:ae:b0:f3:4b:70:82:61:4a:97:45:0e:4d:
a0:80:fa:3a:8c:60:47:c1:83:61:94:01:8c:30:0f:d1:4f:f9:
67:9d:65:6a:e6:c3:a1:5f:2d:88:25:f8:6e:1f:c3:ea:5e:08:
7d:0c:71:45:09:e0:79:ed:11:5b:8d:1e:c2:53:d1:d0:c4:80:
ca:50:c5:8f:16:02:00:ee:c9:d9:08:32:e3:0e:64:c2:0a:4d:
bd:7b:07:1d:7f:a5:39:ba:41:43:88:6c:eb:f4:9b:7b:0a:c9:
87:24:fe:e3:f1:99:01:8d:06:0c:13:7e:e0:2c:63:a6:52:1b:
1c:9c:51:b3:49:5e:af:91:69:9c:4d:57:6b:a9:3c:1c:18:27:
bc:2c:4c:af:4f:05:7f:a1:41:f9:0e:1a:2c:0b:90:4c:4f:c6:
47:f6:26:c2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEBCvzbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDk2MmUyYWZhNzc0OGY0NTI2NWQ4OWZkMTU2MjRiNTg0ZTcyNDY2MB4XDTIyMDEw
MTEwNTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdmNzU0M2VmNmU3
ZGMxNDMxNTIwZDIxZTY4ZWZmMDMwNzVlNjM0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9aIUvSP6jSmjVVxu/DGTYXYl8J1EE/qjfwXiwnZ30oJ1gF
VRyfOKdWe3DPL4WUfK4niJgHeVCFEdAJt0ahu68HtkEoMAF9OaRcgDM28BjQOQPx
p8AHogPyY+GWwEGm8QSi1gwTbNus4c1PchAP9f6hsmZjc2FVuPAif94UBYjASz8Q
KpfZGRCNYqxVs25YcIIUEez9mNZeDaLorV3AOO7qaw6Kt4vfXTo/nzNVaAsmsTL6
6yE3SKKlV6dww8D3ksByTbkJ4/DfGz2rGbmPwxpJQV0+Af4Tczz1ffGhaHgh3gwy
OMcs35seC52bwW53NOH+zDi8dnVIhCLu7SqSHs0CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBR391Q+9ufcFDFSDSHmjv8DB15jTDAfBgNVHSMEGDAWgBSUli4q+ndI9FJl
2J/RViS1hOckZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xKWXVLdnAzU1BSU1pkaWYwVllrdFlUbkpHWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvMmRiNjgzLWM5ZTktNDY0Ny04MjNiLWNkNDAzYmRlZTRkZi8x
L2RfZFVQdmJuM0JReFVnMGg1bzdfQXdkZVkwdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
MmRiNjgzLWM5ZTktNDY0Ny04MjNiLWNkNDAzYmRlZTRkZi8xL2xKWXVLdnAzU1BS
U1pkaWYwVllrdFlUbkpHWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwFwQCAAEwEQMDAIPcAwQAwRf+AwQAwR4DMA0EAgAC
MAcDBQMqAFugMA0GCSqGSIb3DQEBCwUAA4IBAQBdGbAkzD54CZytWJ6SQHsuGZPF
XGlpeMH1rPi4gnP4g79cEtPS9nKDWOPeT4R/bYxy9z8ed4A3+IoZGK2CNu8Wpx5V
gIDxqO19TntB+fQWUHeVwRDmzuH/MgBb1m+8n+KusPNLcIJhSpdFDk2ggPo6jGBH
wYNhlAGMMA/RT/lnnWVq5sOhXy2IJfhuH8PqXgh9DHFFCeB57RFbjR7CU9HQxIDK
UMWPFgIA7snZCDLjDmTCCk29ewcdf6U5ukFDiGzr9Jt7CsmHJP7j8ZkBjQYME37g
LGOmUhscnFGzSV6vkWmcTVdrqTwcGCe8LEyvTwV/oUH5DhosC5BMT8ZH9ibC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:29 2024 by rpki-client on console-ams.rpki-client.org