Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/9QO38ShWo-iFd4FI2AKNQt4105c.roa
File: 9QO38ShWo-iFd4FI2AKNQt4105c.roa (raw, json)
Hash identifier: bKEzG+h/Bq2yf9wq/pKGmgqklQCoV1yeEIXpwSJUehA=
Subject key identifier: F5:03:B7:F1:28:56:A3:E8:85:77:81:48:D8:02:8D:42:DE:35:D3:97
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 272FC363
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/9QO38ShWo-iFd4FI2AKNQt4105c.roa
Signing time: Sat 01 Jan 2022 07:54:10 +0000
ROA not before: Sat 01 Jan 2022 07:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209111
IP address blocks: 193.92.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657441635 (0x272fc363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 1 07:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f503b7f12856a3e885778148d8028d42de35d397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:2c:5e:2e:99:5d:22:8d:45:fa:19:2c:e9:
6d:18:20:a9:3b:f6:0e:2f:8c:a6:fd:bb:74:f3:cb:
72:7b:82:8f:76:82:f7:80:ee:70:d5:69:3c:64:4e:
c0:5d:56:0d:8d:29:e6:20:bc:21:b2:cc:9a:c2:2e:
bd:76:4a:35:82:5c:55:08:5c:dc:85:81:f6:cf:4c:
3a:50:bc:9e:55:95:c2:bf:49:2b:93:af:b0:b3:f6:
f4:f9:ae:f7:9a:cf:0d:4c:11:68:b7:f2:48:5c:7a:
88:53:67:3b:9d:98:f9:87:bd:c6:c6:41:48:c9:91:
72:72:23:fb:bd:ba:60:d7:c0:28:ee:3b:3a:8f:a7:
24:81:de:b0:82:2f:eb:ba:20:8b:9d:0b:77:c1:7b:
b3:8e:9f:77:4e:4d:ee:83:e4:ae:63:f8:c4:d5:fa:
bc:3f:db:82:2a:2e:2a:34:79:4f:01:52:c7:c0:e9:
04:2d:96:0e:2c:f7:f4:0e:a5:e0:3c:5a:76:b4:de:
7a:f7:31:70:08:ea:30:a5:52:a6:7b:01:14:e0:58:
3d:79:5c:76:19:07:b0:ab:f9:66:9f:cc:11:3b:a1:
77:94:2d:e0:ac:3e:bc:5f:94:5f:2d:91:da:18:bc:
9e:71:81:a9:cd:bb:7a:60:4c:78:ce:bd:1f:3b:17:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:B7:F1:28:56:A3:E8:85:77:81:48:D8:02:8D:42:DE:35:D3:97
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/9QO38ShWo-iFd4FI2AKNQt4105c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.92.5.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:fb:ed:cd:bd:3c:c9:47:d5:a0:31:c2:63:b6:78:24:20:57:
00:42:04:9d:46:31:40:32:79:c5:86:be:fb:c4:54:88:fc:58:
53:46:31:dd:3c:e3:c0:68:4e:50:33:eb:a3:bb:79:fc:f6:91:
5d:d1:f1:82:fd:f9:15:1c:6a:e9:ce:2d:d9:c8:1f:55:b4:39:
f8:82:47:a4:4c:65:31:5d:be:22:1e:1d:b9:5c:24:5d:7f:15:
80:f4:ba:36:58:8b:90:ce:56:04:9b:24:82:6a:5e:0c:e9:ff:
89:e8:75:50:f0:4d:4a:47:d6:6f:0f:61:90:ac:e2:de:d2:56:
28:6b:10:e5:42:f9:87:5d:4a:39:e6:cb:61:f5:ed:ae:58:1f:
01:92:25:a0:c5:81:55:98:0e:40:90:46:a9:df:8e:72:f8:a4:
4c:2a:4a:74:f0:cf:38:69:e0:dc:3f:ad:6e:3d:58:d0:5e:2e:
ea:9d:c7:6c:cb:0d:82:01:a6:48:46:26:10:cf:5f:06:05:64:
77:d9:1b:43:5c:70:11:e6:c9:ef:f5:08:fc:fb:5c:6e:23:7e:
01:60:88:3b:6a:30:31:a7:89:e5:bd:81:39:ef:ad:d2:67:db:
fe:fc:1c:a4:03:65:a8:41:2a:96:a3:fd:12:51:0c:64:ae:6b:
7f:44:78:97
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJy/DYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGZmMmM2MjI5YWY3NjNhOTlmNTM0OWEzMjUxMGRmNGE0NTI2MTQzMB4XDTIyMDEw
MTA3NTQxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjUwM2I3ZjEyODU2
YTNlODg1Nzc4MTQ4ZDgwMjhkNDJkZTM1ZDM5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9fLF4umV0ijUX6GSzpbRggqTv2Di+Mpv27dPPLcnuCj3aC
94DucNVpPGROwF1WDY0p5iC8IbLMmsIuvXZKNYJcVQhc3IWB9s9MOlC8nlWVwr9J
K5OvsLP29Pmu95rPDUwRaLfySFx6iFNnO52Y+Ye9xsZBSMmRcnIj+726YNfAKO47
Oo+nJIHesIIv67ogi50Ld8F7s46fd05N7oPkrmP4xNX6vD/bgiouKjR5TwFSx8Dp
BC2WDiz39A6l4DxadrTeevcxcAjqMKVSpnsBFOBYPXlcdhkHsKv5Zp/METuhd5Qt
4Kw+vF+UXy2R2hi8nnGBqc27emBMeM69HzsX2oUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT1A7fxKFaj6IV3gUjYAo1C3jXTlzAfBgNVHSMEGDAWgBTw/yxiKa92Opn1
NJoyUQ30pFJhQzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhQOHNZaW12ZGpxWjlUU2FNbEVOOUtSU1lVTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvMDUxZmEyLWM1ODAtNGEwMi1hMTg2LWU2OWY3YTVkMmQ5MC8x
LzlRTzM4U2hXby1pRmQ0RkkyQUtOUXQ0MTA1Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
MDUxZmEyLWM1ODAtNGEwMi1hMTg2LWU2OWY3YTVkMmQ5MC8xLzhQOHNZaW12ZGpx
WjlUU2FNbEVOOUtSU1lVTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFcBTANBgkqhkiG9w0BAQsFAAOC
AQEAxfvtzb08yUfVoDHCY7Z4JCBXAEIEnUYxQDJ5xYa++8RUiPxYU0Yx3TzjwGhO
UDPro7t5/PaRXdHxgv35FRxq6c4t2cgfVbQ5+IJHpExlMV2+Ih4duVwkXX8VgPS6
NliLkM5WBJskgmpeDOn/ieh1UPBNSkfWbw9hkKzi3tJWKGsQ5UL5h11KOebLYfXt
rlgfAZIloMWBVZgOQJBGqd+OcvikTCpKdPDPOGng3D+tbj1Y0F4u6p3HbMsNggGm
SEYmEM9fBgVkd9kbQ1xwEebJ7/UI/PtcbiN+AWCIO2owMaeJ5b2BOe+t0mfb/vwc
pANlqEEqlqP9ElEMZK5rf0R4lw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org