Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/3kX2Yu7Xf3Rpn2_iUqRM07JOdGc.roa
File: 3kX2Yu7Xf3Rpn2_iUqRM07JOdGc.roa (raw, json)
Hash identifier: iCV6SshY4kI8rs2YEnWK+ETJPpJqMfZWlANEZzhyt5k=
Subject key identifier: DE:45:F6:62:EE:D7:7F:74:69:9F:6F:E2:52:A4:4C:D3:B2:4E:74:67
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03EB2E54
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/3kX2Yu7Xf3Rpn2_iUqRM07JOdGc.roa
Signing time: Mon 30 May 2022 12:00:14 +0000
ROA not before: Mon 30 May 2022 12:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206487
IP address blocks: 194.49.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65744468 (0x3eb2e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 30 12:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de45f662eed77f74699f6fe252a44cd3b24e7467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:5a:fd:29:ab:00:11:eb:e0:94:4f:dd:01:
17:b1:d6:94:4c:ac:e8:98:63:b4:97:ed:df:91:c1:
3e:62:e0:89:5e:4d:bc:ce:39:f4:d2:83:8b:37:9a:
ab:ed:6c:8a:40:13:1e:cb:04:2d:8f:ce:f3:99:59:
23:37:80:a7:20:c7:b9:cf:d3:48:d1:5b:6e:a6:e2:
30:35:4e:c6:74:9c:36:da:a8:19:4a:6b:12:78:e8:
7a:22:c3:cd:59:0c:d4:16:b6:1c:38:22:54:be:b6:
cf:bf:ca:d2:d7:78:90:43:9c:f0:51:b9:46:66:0b:
81:c0:a8:7e:29:3e:86:b1:86:f3:55:70:72:eb:48:
c7:cd:d3:0f:c5:a7:84:d2:c4:65:aa:a7:9e:1f:3b:
12:2a:39:a2:f8:95:63:1b:2b:38:f2:ef:16:71:7f:
11:43:0a:0e:69:ed:ef:57:5f:9e:d2:53:e3:19:06:
7c:7b:e5:a9:d0:ed:68:72:5e:d5:a2:ad:80:9c:e6:
c6:71:34:4b:03:d4:81:e6:8f:e9:80:be:bb:2a:71:
4b:d7:08:6b:ec:81:3f:35:e7:76:f4:5b:61:8b:35:
74:f0:5c:ec:01:0d:34:1f:c5:ab:d2:a6:e0:51:71:
c9:ba:be:1d:19:d0:3c:5b:b2:65:dd:2d:8c:86:eb:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:F6:62:EE:D7:7F:74:69:9F:6F:E2:52:A4:4C:D3:B2:4E:74:67
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/3kX2Yu7Xf3Rpn2_iUqRM07JOdGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:07:30:c2:2e:9e:03:b7:62:d8:29:4b:7c:1f:e2:0e:87:66:
58:36:46:81:e9:99:59:39:36:96:72:2d:7e:45:6c:ec:af:cf:
6f:d0:a9:02:89:a5:08:62:03:6c:1b:d5:4a:06:a5:46:29:ca:
66:21:92:74:49:b3:6a:1b:4f:f8:7f:55:73:94:b2:fe:67:f3:
9b:d9:4d:91:7a:12:c9:a0:2b:56:98:63:99:4c:4b:57:e3:fa:
a6:12:c0:92:ff:f5:4c:ed:b4:a8:3e:ca:15:64:a7:b8:89:fb:
ef:83:1c:72:db:a5:96:e0:5a:4c:c0:60:b7:1c:e0:79:69:ec:
0f:b5:6a:05:e0:b6:56:fc:b4:06:04:e6:e9:ce:71:46:6c:f9:
af:73:ab:15:88:39:dc:fe:6c:dd:01:37:72:40:30:fd:c7:26:
5b:1f:4b:12:0f:61:ea:c1:99:a8:9d:82:3a:d1:5b:89:32:e8:
73:a6:8e:1e:f7:39:43:7d:a4:a3:ea:3c:fb:b0:cb:6a:65:05:
c4:e4:b9:38:a8:d9:43:77:e0:05:5c:ef:79:57:aa:63:82:62:
61:a4:3c:68:24:86:89:54:39:52:ea:c8:5e:c7:64:1d:6a:4d:
6d:c7:0a:d5:fd:42:20:14:04:62:05:93:c5:51:3f:b4:b4:1d:
b2:fe:76:f5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+suVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDc1ZmIwOTM0Y2Y2YTU4ZGNjZWYxMTA4NzVkYmU1ZTNlOGI2Yjc1MB4XDTIyMDUz
MDEyMDAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGU0NWY2NjJlZWQ3
N2Y3NDY5OWY2ZmUyNTJhNDRjZDNiMjRlNzQ2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMh4Wv0pqwAR6+CUT90BF7HWlEys6JhjtJft35HBPmLgiV5N
vM459NKDizeaq+1sikATHssELY/O85lZIzeApyDHuc/TSNFbbqbiMDVOxnScNtqo
GUprEnjoeiLDzVkM1Ba2HDgiVL62z7/K0td4kEOc8FG5RmYLgcCofik+hrGG81Vw
cutIx83TD8WnhNLEZaqnnh87Eio5oviVYxsrOPLvFnF/EUMKDmnt71dfntJT4xkG
fHvlqdDtaHJe1aKtgJzmxnE0SwPUgeaP6YC+uypxS9cIa+yBPzXndvRbYYs1dPBc
7AENNB/Fq9Km4FFxybq+HRnQPFuyZd0tjIbr+SECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTeRfZi7td/dGmfb+JSpEzTsk50ZzAfBgNVHSMEGDAWgBTUdfsJNM9qWNzO
8RCHXb5ePotrdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFIWDdDVFRQYWxqY3p2RVFoMTItWGo2TGEzVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8x
LzNrWDJZdTdYZjNScG4yX2lVcVJNMDdKT2RHYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8xLzFIWDdDVFRQYWxq
Y3p2RVFoMTItWGo2TGEzVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsIxADANBgkqhkiG9w0BAQsFAAOC
AQEAWgcwwi6eA7di2ClLfB/iDodmWDZGgemZWTk2lnItfkVs7K/Pb9CpAomlCGID
bBvVSgalRinKZiGSdEmzahtP+H9Vc5Sy/mfzm9lNkXoSyaArVphjmUxLV+P6phLA
kv/1TO20qD7KFWSnuIn774McctulluBaTMBgtxzgeWnsD7VqBeC2Vvy0BgTm6c5x
Rmz5r3OrFYg53P5s3QE3ckAw/ccmWx9LEg9h6sGZqJ2COtFbiTLoc6aOHvc5Q32k
o+o8+7DLamUFxOS5OKjZQ3fgBVzveVeqY4JiYaQ8aCSGiVQ5UurIXsdkHWpNbccK
1f1CIBQEYgWTxVE/tLQdsv529Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org