Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/acSesLuyyLJe1ePRiJwQKQ7FrII.roa
File: acSesLuyyLJe1ePRiJwQKQ7FrII.roa (raw, json)
Hash identifier: 3s66qJHRWvK+jcrWXzHZQ/AM/toO6pdgBT2tAzKK/80=
Subject key identifier: 69:C4:9E:B0:BB:B2:C8:B2:5E:D5:E3:D1:88:9C:10:29:0E:C5:AC:82
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0185738FC0C96DE49CCAB18C98F4E7EE5EFF
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/acSesLuyyLJe1ePRiJwQKQ7FrII.roa
Signing time: Mon 02 Jan 2023 17:37:58 +0000
ROA not before: Mon 02 Jan 2023 17:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.105.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:c0:c9:6d:e4:9c:ca:b1:8c:98:f4:e7:ee:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jan 2 17:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69c49eb0bbb2c8b25ed5e3d1889c10290ec5ac82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:a8:1f:ca:f0:31:85:e8:17:69:3e:57:c6:
3a:e6:85:2a:c9:47:b0:3d:9b:38:6b:8a:42:fe:42:
b0:51:9b:33:49:d6:27:10:66:4d:8e:54:db:f3:03:
2a:5c:4d:fd:31:85:03:d3:52:e7:66:ac:57:0e:92:
e6:2c:0c:23:e7:ca:3e:82:97:91:e3:b3:8a:76:a5:
8f:f8:f4:31:9b:bc:f2:11:d8:4b:11:f0:a3:15:4d:
15:5f:e3:48:89:bc:80:52:76:61:38:80:c5:a5:9c:
df:6d:ed:72:c7:2f:6f:e1:7c:6b:0d:46:5f:a7:7e:
1b:a2:c9:e4:5e:f2:5d:38:c1:de:19:19:04:66:72:
b2:8e:b4:6e:99:3c:b2:03:c3:0d:1f:aa:ed:cf:e0:
0e:16:4f:b4:84:f6:11:21:22:fb:64:84:73:06:62:
59:86:c1:80:8d:c5:88:ff:82:09:4e:de:0c:fe:4c:
d1:f6:61:93:5c:73:06:f2:4d:91:c6:56:6e:15:ec:
67:b7:5d:2d:02:ff:02:aa:a5:6d:36:6b:64:bf:ea:
22:d4:f0:cd:e6:22:44:60:3c:70:4f:57:b7:ae:81:
c0:fe:6d:87:ae:ee:d7:7d:8d:0b:b5:8f:22:3f:05:
26:43:74:15:4e:24:b7:cd:55:9f:25:30:15:6e:fe:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:9E:B0:BB:B2:C8:B2:5E:D5:E3:D1:88:9C:10:29:0E:C5:AC:82
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/acSesLuyyLJe1ePRiJwQKQ7FrII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7e:69:1c:d0:04:97:2a:e2:e3:61:64:27:5a:c6:4d:4b:4d:
24:6d:73:0e:f8:39:dc:6c:25:2a:c0:bc:a0:6a:37:65:63:e3:
f7:76:25:d0:76:f8:57:63:5b:f1:16:6d:b4:a8:de:ea:0c:14:
bb:53:70:11:66:f7:6c:74:d0:72:04:06:94:c3:3b:39:3a:91:
6f:49:63:0c:ea:4b:9e:4f:ce:b8:88:b2:4e:b1:3e:1c:77:4f:
cf:55:e6:1f:e3:85:69:2f:81:aa:5e:a1:4b:09:a8:89:5c:f5:
1a:e8:c6:3f:bc:53:58:4e:6f:5c:19:0e:b3:93:da:f3:39:57:
ba:71:08:83:8e:f8:5f:7f:0d:e9:cd:b9:61:ed:78:4e:06:7c:
0a:09:88:fa:38:bd:15:5d:bf:90:e7:1b:16:53:f1:8d:cd:a3:
0e:cc:43:29:97:1d:12:3a:fa:04:42:fc:b7:de:95:fa:70:5e:
9f:73:44:4a:d5:6a:87:4b:d9:28:8d:f6:54:18:b5:45:90:26:
46:b2:9c:a1:71:38:46:79:77:79:7b:e3:e5:e2:bf:81:64:94:
d7:18:8a:29:3b:e4:51:ef:84:c3:a9:34:7b:36:35:65:21:d0:
77:37:b7:d4:5e:26:e7:b5:65:a9:3c:5a:ae:99:3f:2e:ee:fc:
df:ff:c8:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzj8DJbeScyrGMmPTn7l7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjMwMTAyMTczNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWM0OWViMGJiYjJjOGIyNWVkNWUzZDE4ODljMTAyOTBlYzVhYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOOoH8rwMYXoF2k+V8Y65oUqyUew
PZs4a4pC/kKwUZszSdYnEGZNjlTb8wMqXE39MYUD01LnZqxXDpLmLAwj58o+gpeR
47OKdqWP+PQxm7zyEdhLEfCjFU0VX+NIibyAUnZhOIDFpZzfbe1yxy9v4XxrDUZf
p34bosnkXvJdOMHeGRkEZnKyjrRumTyyA8MNH6rtz+AOFk+0hPYRISL7ZIRzBmJZ
hsGAjcWI/4IJTt4M/kzR9mGTXHMG8k2RxlZuFexnt10tAv8CqqVtNmtkv+oi1PDN
5iJEYDxwT1e3roHA/m2Hru7XfY0LtY8iPwUmQ3QVTiS3zVWfJTAVbv6eswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnEnrC7ssiyXtXj0YicECkOxayCMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEvYWNTZXNMdXl5TEplMWVQUmlKd1FLUTdGcklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnUMA0G
CSqGSIb3DQEBCwUAA4IBAQAifmkc0ASXKuLjYWQnWsZNS00kbXMO+DncbCUqwLyg
ajdlY+P3diXQdvhXY1vxFm20qN7qDBS7U3ARZvdsdNByBAaUwzs5OpFvSWMM6kue
T864iLJOsT4cd0/PVeYf44VpL4GqXqFLCaiJXPUa6MY/vFNYTm9cGQ6zk9rzOVe6
cQiDjvhffw3pzblh7XhOBnwKCYj6OL0VXb+Q5xsWU/GNzaMOzEMplx0SOvoEQvy3
3pX6cF6fc0RK1WqHS9kojfZUGLVFkCZGspyhcThGeXd5e+Pl4r+BZJTXGIopO+RR
74TDqTR7NjVlIdB3N7fUXibntWWpPFqumT8u7vzf/8hu
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:51 2025 by rpki-client