Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tooDW5e9lRAZ4071WbhB1bIIbLU.roa
File: tooDW5e9lRAZ4071WbhB1bIIbLU.roa (raw, json)
Hash identifier: qaYioMCsWM6eqEx901aBZ/VDXpXxXmQMHra3JUddJyI=
Subject key identifier: B6:8A:03:5B:97:BD:95:10:19:E3:4E:F5:59:B8:41:D5:B2:08:6C:B5
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 05E7CE10
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tooDW5e9lRAZ4071WbhB1bIIbLU.roa
Signing time: Sat 01 Jan 2022 11:05:15 +0000
ROA not before: Sat 01 Jan 2022 11:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.228.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99077648 (0x5e7ce10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 1 11:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b68a035b97bd951019e34ef559b841d5b2086cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d8:86:65:1e:c6:be:b1:e8:e9:a5:5a:07:a4:
2e:ab:26:05:1d:71:14:98:b0:46:5b:bd:74:3d:b8:
1b:c5:2b:95:36:c3:67:37:bb:34:7f:70:19:ee:0e:
57:57:81:99:74:67:43:c7:f6:35:10:09:77:69:a3:
11:66:ac:2d:fc:d2:1b:25:a4:78:2d:ac:e9:37:bd:
a4:55:5f:90:c6:5e:5a:80:41:d6:10:fc:6a:d4:fc:
2e:bc:3a:11:79:11:37:cf:5d:43:17:91:1a:7e:d1:
e1:15:61:46:8d:6a:15:47:96:c0:ae:37:39:6a:7e:
9a:e0:f1:37:16:03:2d:4c:7a:2b:a3:f6:63:c3:68:
41:71:46:e2:46:8f:97:78:6d:3f:02:5c:4e:70:22:
33:56:43:90:fb:e9:f7:48:a0:be:c7:bb:d2:bc:b3:
75:85:27:11:94:2f:19:9e:45:c0:d0:48:ca:f2:b7:
0c:09:16:11:9e:5f:1b:bd:a8:39:ae:09:3e:e2:9c:
0d:1a:09:4b:f6:20:53:aa:ed:b9:a7:11:a1:bf:98:
41:06:e0:af:41:c1:96:e3:d7:91:1e:c0:a1:03:82:
44:60:c5:74:0c:17:09:b6:35:55:ed:de:3f:d9:7a:
d5:4c:65:3f:4d:c4:c5:b4:73:6d:e2:1f:fe:40:04:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:03:5B:97:BD:95:10:19:E3:4E:F5:59:B8:41:D5:B2:08:6C:B5
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tooDW5e9lRAZ4071WbhB1bIIbLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b4:65:39:78:72:53:12:34:c8:2a:ac:c9:40:4e:70:3f:6c:
d9:5d:99:8c:0b:99:94:3d:97:2d:c3:c0:a9:53:3c:b1:ec:69:
ad:c6:e4:0b:0c:32:12:ff:35:ac:7e:d7:cc:c7:20:2a:2c:b2:
68:3a:98:cc:ca:72:92:5e:7b:e1:42:2f:32:6d:1c:1d:63:35:
24:e9:a7:33:ff:10:6c:b6:07:6c:e9:c6:93:80:a1:c8:4e:3d:
2d:dd:68:72:40:4c:8a:26:a7:06:78:b9:c4:78:44:41:f6:8f:
d3:fb:80:77:55:d5:b5:31:73:26:82:98:26:66:03:f2:22:e6:
03:b4:92:14:71:a3:29:a8:38:16:12:67:25:40:28:0a:a5:4c:
b2:10:21:48:bc:3f:2b:78:95:f0:99:ae:1a:03:45:b7:41:2a:
93:1e:4c:91:fc:1a:0a:0b:75:e1:6b:01:4c:33:23:56:1a:43:
25:54:8d:c4:d2:56:c8:4b:cb:95:f2:50:d2:d1:96:d5:af:d2:
94:15:de:a9:34:85:50:38:fb:ca:ce:78:01:01:86:4d:8d:63:
a7:c3:9e:46:99:d9:d5:24:56:df:7b:8b:f3:1c:e4:52:95:27:
7a:d5:19:45:8b:f1:ff:b9:64:90:18:09:e3:50:19:18:41:da:
8d:64:41:8b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBefOEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZWUwNTNjYjljYjRmNDFjMWU0NzczZTdmMTZlODRiYjU3NTIyMDMzMB4XDTIyMDEw
MTExMDUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjY4YTAzNWI5N2Jk
OTUxMDE5ZTM0ZWY1NTliODQxZDViMjA4NmNiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAODYhmUexr6x6OmlWgekLqsmBR1xFJiwRlu9dD24G8UrlTbD
Zze7NH9wGe4OV1eBmXRnQ8f2NRAJd2mjEWasLfzSGyWkeC2s6Te9pFVfkMZeWoBB
1hD8atT8Lrw6EXkRN89dQxeRGn7R4RVhRo1qFUeWwK43OWp+muDxNxYDLUx6K6P2
Y8NoQXFG4kaPl3htPwJcTnAiM1ZDkPvp90igvse70ryzdYUnEZQvGZ5FwNBIyvK3
DAkWEZ5fG72oOa4JPuKcDRoJS/YgU6rtuacRob+YQQbgr0HBluPXkR7AoQOCRGDF
dAwXCbY1Ve3eP9l61UxlP03ExbRzbeIf/kAEzrcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2igNbl72VEBnjTvVZuEHVsghstTAfBgNVHSMEGDAWgBR+4FPLnLT0HB5H
c+fxboS7V1IgMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Z1QlR5NXkwOUJ3ZVIzUG44VzZFdTFkU0lETS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMDYwMGE0LTE0NjQtNGE3Yy1hZjU2LTE4ZTg2ZjBiMWQ4MS8x
L3Rvb0RXNWU5bFJBWjQwNzFXYmhCMWJJSWJMVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MDYwMGE0LTE0NjQtNGE3Yy1hZjU2LTE4ZTg2ZjBiMWQ4MS8xL2Z1QlR5NXkwOUJ3
ZVIzUG44VzZFdTFkU0lETS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHkqDANBgkqhkiG9w0BAQsFAAOC
AQEANrRlOXhyUxI0yCqsyUBOcD9s2V2ZjAuZlD2XLcPAqVM8sexprcbkCwwyEv81
rH7XzMcgKiyyaDqYzMpykl574UIvMm0cHWM1JOmnM/8QbLYHbOnGk4ChyE49Ld1o
ckBMiianBni5xHhEQfaP0/uAd1XVtTFzJoKYJmYD8iLmA7SSFHGjKag4FhJnJUAo
CqVMshAhSLw/K3iV8JmuGgNFt0Eqkx5MkfwaCgt14WsBTDMjVhpDJVSNxNJWyEvL
lfJQ0tGW1a/SlBXeqTSFUDj7ys54AQGGTY1jp8OeRpnZ1SRW33uL8xzkUpUnetUZ
RYvx/7lkkBgJ41AZGEHajWRBiw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org