Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/7gImHT77Wt0Khe9QpMEXoDkduyc.roa
File: 7gImHT77Wt0Khe9QpMEXoDkduyc.roa (raw, json)
Hash identifier: zJCceQefLdjO3vFgPpykZViEB+7CjJaMuHw566YltcE=
Subject key identifier: EE:02:26:1D:3E:FB:5A:DD:0A:85:EF:50:A4:C1:17:A0:39:1D:BB:27
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 09A61C7B
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/7gImHT77Wt0Khe9QpMEXoDkduyc.roa
Signing time: Sat 01 Jan 2022 13:01:08 +0000
ROA not before: Sat 01 Jan 2022 13:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29551
IP address blocks: 193.25.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161881211 (0x9a61c7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Jan 1 13:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee02261d3efb5add0a85ef50a4c117a0391dbb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:27:da:f1:f1:71:3c:aa:4f:be:88:4b:d4:
20:73:7f:bb:a1:8e:df:f2:d1:7c:b2:53:7d:29:f0:
7e:d3:a8:99:c6:f6:6a:7d:b6:42:9f:b2:54:91:eb:
99:cd:b8:ce:d5:0d:64:77:c3:21:d7:b7:ee:b9:5a:
f6:aa:3a:9d:60:b7:b3:45:54:a6:b9:87:df:b1:cf:
8d:83:2b:dd:08:68:9c:62:a9:91:63:7c:43:e2:bb:
35:4c:cc:b6:84:42:00:16:3a:43:66:b3:f5:ef:48:
ec:a7:28:d1:95:76:cf:d9:e0:2b:76:48:d0:04:32:
df:41:40:63:af:03:06:6d:cc:c1:3b:0a:c6:16:51:
83:5a:8a:4d:ea:e5:c4:6e:f1:89:ec:dc:9e:ca:71:
20:58:06:0b:46:07:c0:1c:d2:da:91:bd:25:31:05:
0a:d4:09:f8:9e:b6:54:95:ab:2a:37:f4:b0:b4:a9:
bf:ae:41:fc:df:35:91:35:0a:0c:00:a2:99:ae:e7:
d8:55:40:2a:42:fe:89:67:ac:7c:b4:6c:6c:1c:ea:
44:75:11:84:ac:ec:6f:0f:6d:40:88:a4:77:fa:45:
97:ad:c7:9b:c0:f9:d2:26:6b:a5:cc:16:c1:11:e3:
2b:f9:2d:6d:d5:8c:d3:69:29:4a:54:88:22:50:73:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:26:1D:3E:FB:5A:DD:0A:85:EF:50:A4:C1:17:A0:39:1D:BB:27
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/7gImHT77Wt0Khe9QpMEXoDkduyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fa:a8:13:26:05:5b:41:97:be:77:5a:16:0f:8f:a4:b9:84:
f6:32:92:73:ef:7d:58:0e:81:24:41:b2:03:9d:8a:cc:c7:88:
8f:cd:16:0c:c4:c6:8c:e8:7c:ae:1e:8a:e1:91:42:68:85:80:
15:93:d1:c3:5a:a5:d3:b3:3f:51:86:08:73:01:a7:45:40:12:
4d:b0:f3:2e:78:81:b0:94:06:ed:99:bd:e8:11:e7:be:ff:d9:
74:b8:e5:67:b5:cd:af:d7:0c:43:00:6b:9a:f1:03:a1:87:59:
74:d1:97:04:03:a2:a4:0a:1b:64:1b:80:d8:3d:63:60:ed:43:
d3:15:63:30:2c:02:90:5b:40:42:85:3a:0c:6f:c8:37:92:1b:
4e:10:b7:37:7f:6f:a0:f0:73:3e:85:4d:91:f7:c9:17:95:0d:
9d:c0:a8:08:b3:bf:6b:06:df:5d:81:b9:ea:80:10:fb:64:df:
55:e4:eb:8a:28:e7:34:e7:82:e9:34:29:41:e8:c9:87:4b:17:
20:d8:de:e6:3e:93:ef:fb:e5:84:58:d0:b7:b7:b8:00:3a:89:
e1:11:22:fd:a3:ab:6e:44:80:06:d0:9b:5c:f2:f4:b6:43:08:
0c:c5:dc:a7:2e:31:ad:91:5b:be:da:c0:bc:05:8a:39:e3:ce:
0b:e2:8a:c9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECaYcezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YTU4M2Q2MWYyZTU3YTZiMTZlYTRiMWE5Y2EyN2JiMjUwZDc0OGVmMB4XDTIyMDEw
MTEzMDEwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWUwMjI2MWQzZWZi
NWFkZDBhODVlZjUwYTRjMTE3YTAzOTFkYmIyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDjJ9rx8XE8qk++iEvUIHN/u6GO3/LRfLJTfSnwftOomcb2
an22Qp+yVJHrmc24ztUNZHfDIde37rla9qo6nWC3s0VUprmH37HPjYMr3QhonGKp
kWN8Q+K7NUzMtoRCABY6Q2az9e9I7Kco0ZV2z9ngK3ZI0AQy30FAY68DBm3MwTsK
xhZRg1qKTerlxG7xiezcnspxIFgGC0YHwBzS2pG9JTEFCtQJ+J62VJWrKjf0sLSp
v65B/N81kTUKDACima7n2FVAKkL+iWesfLRsbBzqRHURhKzsbw9tQIikd/pFl63H
m8D50iZrpcwWwRHjK/ktbdWM02kpSlSIIlBzBacCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTuAiYdPvta3QqF71CkwRegOR27JzAfBgNVHSMEGDAWgBTqWD1h8uV6axbq
SxqconuyUNdI7zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZsZzlZZkxsZW1zVzZrc2FuS0o3c2xEWFNPOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvNmY1MTI4LTdjYmEtNDljNS05YjI1LTk5YzFiMGNmYzNhOC8x
LzdnSW1IVDc3V3QwS2hlOVFwTUVYb0RrZHV5Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
NmY1MTI4LTdjYmEtNDljNS05YjI1LTk5YzFiMGNmYzNhOC8xLzZsZzlZZkxsZW1z
VzZrc2FuS0o3c2xEWFNPOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEZrTANBgkqhkiG9w0BAQsFAAOC
AQEAGfqoEyYFW0GXvndaFg+PpLmE9jKSc+99WA6BJEGyA52KzMeIj80WDMTGjOh8
rh6K4ZFCaIWAFZPRw1ql07M/UYYIcwGnRUASTbDzLniBsJQG7Zm96BHnvv/ZdLjl
Z7XNr9cMQwBrmvEDoYdZdNGXBAOipAobZBuA2D1jYO1D0xVjMCwCkFtAQoU6DG/I
N5IbThC3N39voPBzPoVNkffJF5UNncCoCLO/awbfXYG56oAQ+2TfVeTriijnNOeC
6TQpQejJh0sXINje5j6T7/vlhFjQt7e4ADqJ4REi/aOrbkSABtCbXPL0tkMIDMXc
py4xrZFbvtrAvAWKOePOC+KKyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:48 2024 by rpki-client on console-ams.rpki-client.org