Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/KW5Lw1O45-NkXhx8ZA5nuDx9tdM.roa
File: KW5Lw1O45-NkXhx8ZA5nuDx9tdM.roa (raw, json)
Hash identifier: TvsXe/BIt/tbDKf6fkDNbXbj+gBLEAUbSgBLmEHfoPY=
Subject key identifier: 29:6E:4B:C3:53:B8:E7:E3:64:5E:1C:7C:64:0E:67:B8:3C:7D:B5:D3
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 175A620B
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/KW5Lw1O45-NkXhx8ZA5nuDx9tdM.roa
Signing time: Sat 01 Jan 2022 16:03:58 +0000
ROA not before: Sat 01 Jan 2022 16:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207958
IP address blocks: 89.39.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391799307 (0x175a620b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=296e4bc353b8e7e3645e1c7c640e67b83c7db5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:09:0a:4b:5b:ff:9f:bb:04:3e:41:64:7c:
a6:91:8c:f9:73:c9:b5:20:d8:d4:d3:7e:e9:a6:8c:
51:69:9e:de:70:17:46:63:51:a2:91:89:a3:a8:3b:
b9:07:c2:ec:2e:eb:68:b2:6a:a3:59:0c:72:f1:c5:
6b:89:9d:30:39:29:5e:03:76:3f:ab:5b:d3:12:a1:
57:ab:8d:2e:6c:ca:96:67:76:dc:5c:e0:e7:c8:05:
92:b9:41:32:05:ea:f4:2b:46:d4:34:8f:21:12:91:
8a:c3:54:0e:88:01:a4:47:7b:28:e1:c9:13:c0:3a:
cb:af:48:42:11:b7:04:e9:e0:94:c3:a0:61:bd:5b:
ec:d7:b3:0c:44:7c:97:cd:c3:ce:82:5a:52:88:d2:
0c:df:02:ba:70:fa:f1:91:2a:fb:b9:51:b3:4f:93:
61:0a:f3:09:d3:99:95:c9:5c:de:18:bf:a7:3a:c4:
4f:37:9b:49:dd:c2:26:db:de:76:a0:71:0f:65:36:
57:3c:6e:38:a8:fa:25:05:e7:5d:6e:4d:47:76:5c:
87:21:99:f4:d1:40:03:b1:94:04:63:a0:c1:55:01:
f6:d4:22:6d:87:bb:9c:d8:18:ad:f1:6c:0b:bd:e5:
c6:c7:0b:9f:13:90:07:8e:de:9d:02:c0:61:13:b0:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:4B:C3:53:B8:E7:E3:64:5E:1C:7C:64:0E:67:B8:3C:7D:B5:D3
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/KW5Lw1O45-NkXhx8ZA5nuDx9tdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.93.0/24
Signature Algorithm: sha256WithRSAEncryption
73:26:cb:11:ee:62:ec:16:60:1b:aa:c4:84:14:aa:24:e6:b3:
74:6e:9f:bb:c4:42:1b:9e:ff:f5:ae:c3:ad:b8:68:7c:46:48:
0a:5b:1e:02:06:39:96:84:5f:2d:59:a6:52:2a:c1:5e:73:99:
12:46:9a:1a:5c:e2:a0:1f:cf:ad:7e:5d:99:e0:12:16:73:25:
b5:53:68:db:58:d2:6b:8a:06:bd:3d:f7:f3:35:c9:1c:bf:6f:
75:e3:61:96:98:cd:91:00:7d:64:48:ed:fa:19:2e:0b:29:94:
3c:7b:c5:7d:16:d6:6a:f2:62:7a:c0:53:90:21:44:21:bb:fb:
f8:29:99:00:8e:7f:73:04:c9:9e:9c:61:e7:7d:cb:f1:f3:cd:
3b:88:22:8b:a0:89:29:69:25:55:6e:78:1d:9d:40:03:6e:97:
42:3d:f1:ab:1b:69:9a:39:25:b9:a4:de:f7:79:f5:9c:41:8e:
14:78:cd:17:8d:20:d5:e4:f9:1d:43:f5:e6:ca:cc:e3:99:50:
51:02:ba:0d:09:a4:54:6f:81:c7:11:e4:1f:b7:a6:82:10:d5:
a4:39:ee:97:f9:fd:0c:c8:53:b2:f8:05:4a:a5:bd:70:12:50:
0e:db:6f:54:d9:f5:fb:b2:61:bb:48:ed:05:41:5f:fb:d0:1a:
11:13:78:24
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF1piCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMB4XDTIyMDEw
MTE2MDM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjk2ZTRiYzM1M2I4
ZTdlMzY0NWUxYzdjNjQwZTY3YjgzYzdkYjVkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKFkCQpLW/+fuwQ+QWR8ppGM+XPJtSDY1NN+6aaMUWme3nAX
RmNRopGJo6g7uQfC7C7raLJqo1kMcvHFa4mdMDkpXgN2P6tb0xKhV6uNLmzKlmd2
3Fzg58gFkrlBMgXq9CtG1DSPIRKRisNUDogBpEd7KOHJE8A6y69IQhG3BOnglMOg
Yb1b7NezDER8l83DzoJaUojSDN8CunD68ZEq+7lRs0+TYQrzCdOZlclc3hi/pzrE
TzebSd3CJtvedqBxD2U2VzxuOKj6JQXnXW5NR3ZchyGZ9NFAA7GUBGOgwVUB9tQi
bYe7nNgYrfFsC73lxscLnxOQB47enQLAYROwMw8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQpbkvDU7jn42ReHHxkDme4PH210zAfBgNVHSMEGDAWgBR98TLfE+S+U9gl
DIxIQgJk7vbBTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8x
L0tXNUx3MU80NS1Oa1hoeDhaQTVudUR4OXRkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQ
WUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFknXTANBgkqhkiG9w0BAQsFAAOC
AQEAcybLEe5i7BZgG6rEhBSqJOazdG6fu8RCG57/9a7DrbhofEZIClseAgY5loRf
LVmmUirBXnOZEkaaGlzioB/PrX5dmeASFnMltVNo21jSa4oGvT338zXJHL9vdeNh
lpjNkQB9ZEjt+hkuCymUPHvFfRbWavJiesBTkCFEIbv7+CmZAI5/cwTJnpxh533L
8fPNO4gii6CJKWklVW54HZ1AA26XQj3xqxtpmjkluaTe93n1nEGOFHjNF40g1eT5
HUP15srM45lQUQK6DQmkVG+BxxHkH7emghDVpDnul/n9DMhTsvgFSqW9cBJQDttv
VNn1+7Jhu0jtBUFf+9AaERN4JA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org