Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wYfJgA5ijmAtvoMWaFGYy_9lR9k.roa
File: wYfJgA5ijmAtvoMWaFGYy_9lR9k.roa (raw, json)
Hash identifier: 4up5oaNVsq/FNqHqnHHQeuk7upwFD+mygbX9rHo7c5c=
Subject key identifier: C1:87:C9:80:0E:62:8E:60:2D:BE:83:16:68:51:98:CB:FF:65:47:D9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01843E2F3219B73418EBF6494D369EA6A86D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wYfJgA5ijmAtvoMWaFGYy_9lR9k.roa
Signing time: Thu 03 Nov 2022 15:49:51 +0000
ROA not before: Thu 03 Nov 2022 15:49:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12552
IP address blocks: 193.235.44.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:2f:32:19:b7:34:18:eb:f6:49:4d:36:9e:a6:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 3 15:49:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c187c9800e628e602dbe8316685198cbff6547d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4b:18:82:e9:fc:bd:84:a6:2d:45:31:f1:36:
26:ce:ee:6b:aa:ec:4a:dd:15:33:a4:fd:41:2f:5d:
68:da:99:7f:e2:b5:92:91:4a:8a:26:68:82:88:9b:
76:ef:2a:22:f8:1d:16:45:8f:6c:41:28:46:9c:34:
6c:5c:07:aa:8b:cf:9c:f7:5f:ed:76:a2:5a:be:cb:
3c:50:ef:12:4c:b4:47:b1:b6:33:01:a2:dc:24:d4:
34:7c:49:b8:fb:69:d4:f6:d3:5a:44:ac:0a:80:0f:
54:c2:35:8f:50:28:9c:55:8e:c2:d1:71:01:7c:db:
3d:9f:d6:5d:f9:7b:ca:34:83:de:6a:53:36:6e:6b:
8a:c9:c6:20:d2:3c:43:07:7a:0c:7a:e8:a2:6f:41:
45:8b:c9:df:fc:ef:bc:c3:73:67:db:00:4b:d7:87:
6b:4d:99:e9:05:aa:41:80:b2:be:64:f6:b5:57:32:
40:de:fd:f8:3f:e2:4b:39:5c:10:7a:0a:9a:45:8d:
e6:67:75:f4:de:d8:63:02:01:d4:98:2d:6d:d1:2e:
81:e6:b4:ca:4d:3c:d8:ac:ef:5f:ee:f5:21:e4:c4:
27:1a:94:73:8f:a7:54:80:83:31:07:de:b8:e5:2a:
e8:05:60:1e:f8:2e:49:54:48:f0:94:de:ac:fb:36:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:C9:80:0E:62:8E:60:2D:BE:83:16:68:51:98:CB:FF:65:47:D9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wYfJgA5ijmAtvoMWaFGYy_9lR9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.200.0/24
193.182.6.0/24
193.235.44.0/24
Signature Algorithm: sha256WithRSAEncryption
67:30:86:6f:fc:18:d0:3e:42:7c:fd:24:e7:f4:29:a2:d3:94:
b8:9b:e3:a8:dc:92:bb:c7:c8:94:fe:a4:63:4e:a0:fe:8e:ec:
fd:c8:6c:90:84:16:a3:de:84:e2:f3:a1:fb:d0:b6:47:2c:fe:
e2:56:30:05:30:e7:f0:6f:55:72:29:e8:8c:7b:fc:2a:97:11:
af:40:35:be:f3:74:63:91:ef:34:9c:60:da:0d:e4:b5:4b:c9:
74:f4:ec:bb:50:14:9f:7d:c6:d9:3e:15:1c:e1:0f:9e:5a:f2:
24:87:12:7b:2e:d2:67:41:d1:43:7a:7f:88:cd:cd:6b:d4:b2:
6b:e5:16:a1:d1:40:6b:d5:05:14:26:47:9b:98:3b:e8:91:51:
38:0e:d8:28:2a:eb:37:f2:88:e8:da:db:2c:56:b8:ca:b2:8b:
01:dc:20:b5:70:c8:9e:5a:61:71:bd:0e:ab:79:1e:c0:9a:64:
6b:ed:d8:37:f6:3d:b4:d0:05:e9:d2:a6:d2:05:2c:7f:2d:1d:
5f:f3:e8:cc:68:d7:fe:18:80:8e:25:61:4c:f8:3c:0b:6c:01:
a6:b7:63:51:48:70:6d:53:21:f9:2b:c4:74:71:87:1c:b3:4a:
c6:97:2a:d6:50:bc:68:5a:e4:60:eb:71:96:bf:bd:23:db:9e:
ee:87:f3:92
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYQ+LzIZtzQY6/ZJTTaepqhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjIxMTAzMTU0OTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTg3Yzk4MDBlNjI4ZTYwMmRiZTgzMTY2ODUxOThjYmZmNjU0N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUsYgun8vYSmLUUx8TYmzu5rquxK
3RUzpP1BL11o2pl/4rWSkUqKJmiCiJt27yoi+B0WRY9sQShGnDRsXAeqi8+c91/t
dqJavss8UO8STLRHsbYzAaLcJNQ0fEm4+2nU9tNaRKwKgA9UwjWPUCicVY7C0XEB
fNs9n9Zd+XvKNIPealM2bmuKycYg0jxDB3oMeuiib0FFi8nf/O+8w3Nn2wBL14dr
TZnpBapBgLK+ZPa1VzJA3v34P+JLOVwQegqaRY3mZ3X03thjAgHUmC1t0S6B5rTK
TTzYrO9f7vUh5MQnGpRzj6dUgIMxB9645SroBWAe+C5JVEjwlN6s+zZOVQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMGHyYAOYo5gLb6DFmhRmMv/ZUfZMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvd1lmSmdBNWlqbUF0dm9NV2FGR1l5XzlsUjlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwEfIAwQA
wbYGAwQAwessMA0GCSqGSIb3DQEBCwUAA4IBAQBnMIZv/BjQPkJ8/STn9Cmi05S4
m+Oo3JK7x8iU/qRjTqD+juz9yGyQhBaj3oTi86H70LZHLP7iVjAFMOfwb1VyKeiM
e/wqlxGvQDW+83Rjke80nGDaDeS1S8l09Oy7UBSffcbZPhUc4Q+eWvIkhxJ7LtJn
QdFDen+Izc1r1LJr5Rah0UBr1QUUJkebmDvokVE4DtgoKus38ojo2tssVrjKsosB
3CC1cMieWmFxvQ6reR7AmmRr7dg39j200AXp0qbSBSx/LR1f8+jMaNf+GICOJWFM
+DwLbAGmt2NRSHBtUyH5K8R0cYccs0rGlyrWULxoWuRg63GWv70j257uh/OS
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:18 2025 by rpki-client