Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4C2j2HECsLqVQMu0gavjmMtXSvE.roa
File: 4C2j2HECsLqVQMu0gavjmMtXSvE.roa (raw, json)
Hash identifier: zvRx3YLLCLtEkOH35qlEJaTo5wrLfPL7KKNyOfy7bEk=
Subject key identifier: E0:2D:A3:D8:71:02:B0:BA:95:40:CB:B4:81:AB:E3:98:CB:57:4A:F1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CAB1154
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4C2j2HECsLqVQMu0gavjmMtXSvE.roa
Signing time: Sat 01 Jan 2022 05:04:52 +0000
ROA not before: Sat 01 Jan 2022 05:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 193.218.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212537684 (0xcab1154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e02da3d87102b0ba9540cbb481abe398cb574af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:65:3b:f6:c7:9e:e5:7b:31:52:46:cb:7b:
f7:0a:3a:57:f9:81:20:52:47:56:88:3e:8c:db:89:
1a:ce:3f:c3:91:f3:90:f0:b6:ad:17:71:63:c5:8e:
a9:b1:36:a5:01:b9:49:50:e3:ce:77:a5:d6:e8:9c:
c4:09:24:0b:54:16:68:3c:7a:58:e1:90:f0:cc:41:
fb:11:6b:c1:c6:f6:39:43:23:63:96:aa:ee:78:aa:
10:d3:09:ce:5f:67:66:45:6d:05:b9:d2:6f:e4:f2:
e8:94:5c:e8:1a:8e:28:ac:3c:89:53:7a:0e:21:27:
91:64:83:81:f1:32:17:cf:d3:b6:6f:0c:ab:f4:7d:
78:9a:28:3f:d2:28:f9:e8:ba:e1:d4:eb:41:c8:fd:
fe:59:76:4d:95:35:b8:3e:4b:50:ae:1a:b2:a4:1f:
97:d1:d5:7d:9b:8c:c3:bd:90:c6:75:a3:6f:f1:8f:
38:b8:0e:db:ab:36:71:9e:44:29:c2:9f:de:f4:59:
4a:ce:aa:6b:3e:2f:91:de:07:0d:cd:24:98:7f:d9:
4e:9d:fd:ce:b4:97:46:23:60:dc:95:38:29:f8:0d:
6d:85:31:f7:e9:7e:30:f8:4e:4a:3a:c6:91:46:02:
4f:0b:40:b7:71:1e:b1:88:81:88:14:4d:ee:02:e3:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2D:A3:D8:71:02:B0:BA:95:40:CB:B4:81:AB:E3:98:CB:57:4A:F1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4C2j2HECsLqVQMu0gavjmMtXSvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.34.0/24
Signature Algorithm: sha256WithRSAEncryption
29:32:0f:22:c7:35:39:99:3f:c1:be:69:48:93:3e:a9:f7:15:
3c:e4:ec:91:64:7b:43:51:5d:fd:5f:eb:9e:e4:08:6c:c3:fd:
40:e7:72:70:67:4a:b8:a8:c5:9d:1b:a3:27:f8:76:b1:e7:f2:
90:09:68:14:ca:f2:52:3a:ac:b0:c6:b5:bd:69:eb:cc:4c:f9:
cb:a5:ec:33:19:b3:3e:78:1a:d3:b1:95:3b:1d:39:5b:f4:f3:
f0:c7:37:5a:c8:da:57:3b:be:83:35:8d:1b:ea:77:ea:8d:37:
99:15:95:81:c0:dd:a7:8a:96:83:69:54:7f:af:6b:0a:a2:b1:
67:b7:e6:64:82:2f:af:44:76:ac:89:c1:4e:d6:7b:32:a5:25:
12:b4:fb:e0:65:71:b4:ee:4d:b9:48:57:6d:e2:6b:8f:20:aa:
a0:e3:fa:83:03:58:18:ff:af:8d:c8:a0:1c:19:b2:99:88:ee:
35:94:7d:83:41:50:39:fc:55:b1:e9:f5:8d:90:bc:6e:b1:af:
3e:03:fd:c3:41:43:aa:18:f8:2a:54:f0:ec:52:af:a4:48:59:
e4:55:b9:1a:7e:a3:90:6a:aa:fe:7a:3c:b5:49:0d:cc:f6:28:
9d:86:00:7f:e3:1c:bf:dc:bf:76:22:cd:70:14:af:2e:af:fb:
ca:66:dc:0f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDKsRVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDEw
MTA1MDQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTAyZGEzZDg3MTAy
YjBiYTk1NDBjYmI0ODFhYmUzOThjYjU3NGFmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyRZTv2x57lezFSRst79wo6V/mBIFJHVog+jNuJGs4/w5Hz
kPC2rRdxY8WOqbE2pQG5SVDjznel1uicxAkkC1QWaDx6WOGQ8MxB+xFrwcb2OUMj
Y5aq7niqENMJzl9nZkVtBbnSb+Ty6JRc6BqOKKw8iVN6DiEnkWSDgfEyF8/Ttm8M
q/R9eJooP9Io+ei64dTrQcj9/ll2TZU1uD5LUK4asqQfl9HVfZuMw72QxnWjb/GP
OLgO26s2cZ5EKcKf3vRZSs6qaz4vkd4HDc0kmH/ZTp39zrSXRiNg3JU4KfgNbYUx
9+l+MPhOSjrGkUYCTwtAt3EesYiBiBRN7gLjeEMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgLaPYcQKwupVAy7SBq+OYy1dK8TAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
LzRDMmoySEVDc0xxVlFNdTBnYXZqbU10WFN2RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHaIjANBgkqhkiG9w0BAQsFAAOC
AQEAKTIPIsc1OZk/wb5pSJM+qfcVPOTskWR7Q1Fd/V/rnuQIbMP9QOdycGdKuKjF
nRujJ/h2sefykAloFMryUjqssMa1vWnrzEz5y6XsMxmzPnga07GVOx05W/Tz8Mc3
WsjaVzu+gzWNG+p36o03mRWVgcDdp4qWg2lUf69rCqKxZ7fmZIIvr0R2rInBTtZ7
MqUlErT74GVxtO5NuUhXbeJrjyCqoOP6gwNYGP+vjcigHBmymYjuNZR9g0FQOfxV
sen1jZC8brGvPgP9w0FDqhj4KlTw7FKvpEhZ5FW5Gn6jkGqq/no8tUkNzPYonYYA
f+Mcv9y/diLNcBSvLq/7ymbcDw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org