Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/onfLryS8OxOpAMM3vboAWhV5uOU.roa
File: onfLryS8OxOpAMM3vboAWhV5uOU.roa (raw, json)
Hash identifier: KWi+To1KQsZCMBbPbCHz1lq6/IQqvktbknphvuB21WY=
Subject key identifier: A2:77:CB:AF:24:BC:3B:13:A9:00:C3:37:BD:BA:00:5A:15:79:B8:E5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018533E96F23A28ED3FB9B1E954CEABAAC5A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/onfLryS8OxOpAMM3vboAWhV5uOU.roa
Signing time: Wed 21 Dec 2022 09:00:14 +0000
ROA not before: Wed 21 Dec 2022 09:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57138
IP address blocks: 193.19.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:e9:6f:23:a2:8e:d3:fb:9b:1e:95:4c:ea:ba:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 21 09:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a277cbaf24bc3b13a900c337bdba005a1579b8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:3f:ee:c9:79:1c:03:e7:18:96:c7:07:e7:
ce:6f:bf:1f:14:5b:9b:bf:40:5c:62:63:68:dc:cb:
2e:d4:c5:fb:44:c6:96:ab:74:80:24:42:98:9c:89:
99:b8:dc:4a:5b:36:ab:55:73:cf:5a:85:26:75:29:
b6:a8:84:41:17:43:b0:24:18:8f:af:06:0e:77:19:
a5:54:b6:cf:e8:25:45:e2:f1:39:8e:94:9b:20:82:
84:03:8a:68:33:b0:0a:63:f3:e9:e6:64:15:d6:45:
c0:11:6e:df:66:1b:62:3e:51:81:6f:5b:58:c9:16:
a9:26:a5:0a:c0:f3:db:b8:03:57:68:a5:53:19:60:
46:a6:a5:bc:b7:c6:d1:a3:d6:c8:c2:0a:4e:6e:74:
43:e5:db:7c:36:15:8a:29:18:32:40:48:78:ae:c1:
f0:2c:17:2b:4d:9e:d7:76:ba:af:e4:5a:38:16:0c:
23:8c:23:f1:d3:d3:8c:fc:4c:f2:17:02:48:d5:42:
82:e6:c9:62:4b:96:03:7f:b4:74:97:7e:84:8b:f7:
cb:3c:4d:c1:bc:cb:9e:45:d8:62:33:f1:8b:49:c0:
96:5a:8a:cc:5c:14:17:99:43:29:9e:90:ca:e2:c6:
35:c7:31:72:cf:9c:4d:17:eb:0c:c0:c1:9c:14:96:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:CB:AF:24:BC:3B:13:A9:00:C3:37:BD:BA:00:5A:15:79:B8:E5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/onfLryS8OxOpAMM3vboAWhV5uOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:79:05:93:86:04:05:55:e4:ae:3f:dd:33:ed:6e:69:3d:2f:
46:a5:24:05:e0:6e:b0:a4:31:33:93:47:d9:b6:b8:b1:d6:73:
c1:d5:b1:89:48:c1:e8:af:c0:52:cd:f1:87:d9:03:7a:bc:52:
94:22:82:d1:28:d7:16:32:2f:68:8b:a0:a2:ea:24:31:d8:09:
d4:f1:01:98:d4:09:63:94:74:be:e0:29:96:4b:8e:9d:49:f3:
6a:2d:59:54:a4:68:e9:37:ad:b0:80:db:62:13:c6:5e:9c:42:
cd:76:27:20:86:03:38:97:f7:dd:75:c3:e9:ec:86:f3:c1:31:
51:3b:0c:be:d2:ff:ef:27:0c:f9:46:6c:11:1c:02:de:50:e9:
97:9b:3e:9f:ae:b7:25:f2:7e:57:c7:d8:f2:66:53:e0:13:b5:
da:d6:22:1b:14:23:19:07:2c:70:d6:b5:4b:cc:c4:11:63:7d:
7d:89:89:a7:cd:f1:ef:ee:8b:f9:f2:54:a2:91:1a:a7:1a:83:
03:4d:c4:5a:99:65:72:1a:d7:a0:32:3e:28:91:e0:66:12:31:
0f:a8:b4:ed:16:ee:54:4e:00:d4:01:30:2c:3d:82:ae:3c:6d:
a1:0f:ef:c1:39:79:86:fb:50:18:b0:a2:99:15:62:0d:d2:4a:
9b:e4:d5:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUz6W8joo7T+5selUzquqxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjIxMjIxMDkwMDE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjc3Y2JhZjI0YmMzYjEzYTkwMGMzMzdiZGJhMDA1YTE1NzliOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruo/7sl5HAPnGJbHB+fOb78fFFub
v0BcYmNo3Msu1MX7RMaWq3SAJEKYnImZuNxKWzarVXPPWoUmdSm2qIRBF0OwJBiP
rwYOdxmlVLbP6CVF4vE5jpSbIIKEA4poM7AKY/Pp5mQV1kXAEW7fZhtiPlGBb1tY
yRapJqUKwPPbuANXaKVTGWBGpqW8t8bRo9bIwgpObnRD5dt8NhWKKRgyQEh4rsHw
LBcrTZ7Xdrqv5Fo4FgwjjCPx09OM/EzyFwJI1UKC5sliS5YDf7R0l36Ei/fLPE3B
vMueRdhiM/GLScCWWorMXBQXmUMpnpDK4sY1xzFyz5xNF+sMwMGcFJZAuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJ3y68kvDsTqQDDN726AFoVebjlMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvb25mTHJ5UzhPeE9wQU1NM3Zib0FXaFY1dU9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRNsMA0G
CSqGSIb3DQEBCwUAA4IBAQBueQWThgQFVeSuP90z7W5pPS9GpSQF4G6wpDEzk0fZ
trix1nPB1bGJSMHor8BSzfGH2QN6vFKUIoLRKNcWMi9oi6Ci6iQx2AnU8QGY1Alj
lHS+4CmWS46dSfNqLVlUpGjpN62wgNtiE8ZenELNdicghgM4l/fddcPp7IbzwTFR
Owy+0v/vJwz5RmwRHALeUOmXmz6frrcl8n5Xx9jyZlPgE7Xa1iIbFCMZByxw1rVL
zMQRY319iYmnzfHv7ov58lSikRqnGoMDTcRamWVyGtegMj4okeBmEjEPqLTtFu5U
TgDUATAsPYKuPG2hD+/BOXmG+1AYsKKZFWIN0kqb5NUy
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org