Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ejzC-EUzQHulSrPciKuim41NyQw.roa
File: ejzC-EUzQHulSrPciKuim41NyQw.roa (raw, json)
Hash identifier: ot5ahSqp8wfxlXWtBvouvJz3nQrIxlAJ4z4D0Kas4Cs=
Subject key identifier: 7A:3C:C2:F8:45:33:40:7B:A5:4A:B3:DC:88:AB:A2:9B:8D:4D:C9:0C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CBC48A8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ejzC-EUzQHulSrPciKuim41NyQw.roa
Signing time: Sat 01 Jan 2022 05:05:02 +0000
ROA not before: Sat 01 Jan 2022 05:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62904
IP address blocks: 193.19.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213665960 (0xcbc48a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a3cc2f84533407ba54ab3dc88aba29b8d4dc90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:b8:c0:76:9d:5f:67:34:10:81:e4:a1:d0:
2a:cc:eb:bc:8e:51:d2:fa:1d:25:18:cd:55:a1:d4:
fe:59:c6:49:d9:c7:03:d1:78:a7:9e:f4:97:80:5c:
88:cb:5f:e1:6b:55:a0:55:c8:cb:e1:98:03:92:91:
04:6a:13:d1:d3:e7:8a:f8:e7:95:2b:82:1c:1a:e5:
80:e7:06:eb:61:91:1c:d9:3c:29:e3:e9:b5:24:82:
aa:ab:13:62:83:b4:c8:b2:48:91:7f:0a:93:ab:58:
54:3d:6b:2c:2b:cf:9b:24:1e:16:cb:e2:d2:b2:68:
17:3d:33:ba:37:74:77:55:1b:0e:9a:bc:8b:b9:86:
b7:94:44:1a:8f:d6:a3:fd:94:0d:80:95:e8:45:09:
a8:2e:45:dc:7c:8c:61:ff:36:e1:18:23:cc:64:7b:
1c:49:bc:76:e6:5a:c2:d0:bc:8f:c5:ea:f5:07:95:
3b:bd:7d:97:2e:c9:70:82:e6:e8:76:f0:b3:76:4f:
d6:e4:88:8b:97:3f:86:42:9e:c4:78:85:21:8c:86:
6d:6a:cf:21:18:14:2a:ef:a2:26:4d:f0:8f:3c:4f:
d0:24:0e:8a:d9:20:67:35:5b:e1:ef:36:45:c4:a4:
75:41:c1:21:e7:25:59:bb:30:41:22:f1:b2:6d:49:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:C2:F8:45:33:40:7B:A5:4A:B3:DC:88:AB:A2:9B:8D:4D:C9:0C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ejzC-EUzQHulSrPciKuim41NyQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fe:3a:98:35:fb:b7:a6:e1:b6:be:a4:d5:1a:f7:9a:4a:a3:
0f:1c:16:e8:0e:ea:0d:0d:ab:d6:78:e9:4f:d7:59:a0:01:60:
86:7c:97:79:3e:14:05:4e:74:ba:6a:db:7e:e5:00:77:69:e7:
36:68:52:99:4b:22:a0:ad:48:43:1f:3a:45:f1:58:67:98:be:
30:c6:fc:8f:60:b5:28:fc:68:22:0e:e2:5b:e9:56:81:ba:c2:
44:c9:d6:ed:8a:89:f3:99:ca:c2:91:8f:1c:4c:86:af:03:0b:
54:13:f1:0b:1f:7a:aa:78:58:36:2e:f5:23:8e:d1:84:56:f8:
33:82:05:d3:d9:5e:aa:3d:23:48:01:3b:6f:42:e4:98:2f:e7:
05:db:aa:d5:35:7d:19:0f:1a:3c:f1:f3:12:08:15:38:35:50:
45:89:8e:50:c4:56:6a:d3:6a:2f:89:ac:84:9c:b8:f3:27:a1:
bf:ae:e7:83:7f:80:e8:9e:6a:a0:21:be:9f:1a:25:33:57:fe:
c9:62:5a:c7:26:aa:19:dd:29:db:11:d0:81:66:79:bc:da:e8:
5f:da:0e:54:bf:88:8b:67:60:4b:8f:51:ea:62:a3:34:df:ae:
50:ef:69:f5:cc:f3:73:2b:3a:f6:c8:7b:75:fa:28:65:ae:32:
fe:23:0d:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDLxIqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDEw
MTA1MDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2EzY2MyZjg0NTMz
NDA3YmE1NGFiM2RjODhhYmEyOWI4ZDRkYzkwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJbsuMB2nV9nNBCB5KHQKszrvI5R0vodJRjNVaHU/lnGSdnH
A9F4p570l4BciMtf4WtVoFXIy+GYA5KRBGoT0dPnivjnlSuCHBrlgOcG62GRHNk8
KePptSSCqqsTYoO0yLJIkX8Kk6tYVD1rLCvPmyQeFsvi0rJoFz0zujd0d1UbDpq8
i7mGt5REGo/Wo/2UDYCV6EUJqC5F3HyMYf824RgjzGR7HEm8duZawtC8j8Xq9QeV
O719ly7JcILm6Hbws3ZP1uSIi5c/hkKexHiFIYyGbWrPIRgUKu+iJk3wjzxP0CQO
itkgZzVb4e82RcSkdUHBIeclWbswQSLxsm1JNbECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR6PML4RTNAe6VKs9yIq6KbjU3JDDAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
L2VqekMtRVV6UUh1bFNyUGNpS3VpbTQxTnlRdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMETbTANBgkqhkiG9w0BAQsFAAOC
AQEAWv46mDX7t6bhtr6k1Rr3mkqjDxwW6A7qDQ2r1njpT9dZoAFghnyXeT4UBU50
umrbfuUAd2nnNmhSmUsioK1IQx86RfFYZ5i+MMb8j2C1KPxoIg7iW+lWgbrCRMnW
7YqJ85nKwpGPHEyGrwMLVBPxCx96qnhYNi71I47RhFb4M4IF09leqj0jSAE7b0Lk
mC/nBduq1TV9GQ8aPPHzEggVODVQRYmOUMRWatNqL4mshJy48yehv67ng3+A6J5q
oCG+nxolM1f+yWJaxyaqGd0p2xHQgWZ5vNroX9oOVL+Ii2dgS49R6mKjNN+uUO9p
9czzcys69sh7dfooZa4y/iMNAw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org