Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/FfAIDPG9JV7Ja4DtUKxZImRbyOs.roa
File: FfAIDPG9JV7Ja4DtUKxZImRbyOs.roa (raw, json)
Hash identifier: qFLWhY6oaloEPLpRp14MouDS8w6EC/j7TLjA9cnMeZo=
Subject key identifier: 15:F0:08:0C:F1:BD:25:5E:C9:6B:80:ED:50:AC:59:22:64:5B:C8:EB
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 018C38EA6651EDB22490A3BBE4DBC37CA441
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/FfAIDPG9JV7Ja4DtUKxZImRbyOs.roa
Signing time: Tue 05 Dec 2023 07:38:54 +0000
ROA not before: Tue 05 Dec 2023 07:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 193.29.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:ea:66:51:ed:b2:24:90:a3:bb:e4:db:c3:7c:a4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Dec 5 07:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f0080cf1bd255ec96b80ed50ac5922645bc8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:25:1d:dc:40:e6:26:5d:e9:36:35:17:1d:
b4:ea:75:40:1f:cf:97:85:a0:78:f4:6d:16:40:93:
0f:e5:fa:8e:6a:b0:99:8e:33:18:33:26:e8:f1:a3:
e5:df:18:01:13:04:1f:e8:8a:a6:92:e6:8c:1d:2d:
eb:b7:b3:17:cb:11:0b:bf:60:25:7e:d1:33:07:c8:
dc:a0:b9:a6:3a:a6:52:63:3e:ff:eb:69:24:1d:89:
3a:0a:16:fb:9e:61:cf:f9:bd:34:3d:c9:68:2e:d2:
16:15:f9:c8:54:29:44:66:97:82:b7:54:b7:be:40:
83:da:72:c0:30:4c:e6:1e:a1:98:e8:8b:61:5a:ce:
8d:cc:f3:19:ee:3c:13:ed:44:da:fa:4d:06:bd:e5:
98:e0:61:7b:cf:02:4d:c8:b7:23:17:28:1f:9f:88:
36:30:57:5f:a8:7c:5f:de:d6:91:df:2e:62:62:9b:
f7:1a:8b:5f:2a:e6:b2:91:a0:56:85:92:3d:63:91:
19:45:f7:74:8f:51:e4:57:cd:c9:f7:06:fa:78:f0:
23:16:45:82:72:c3:36:c4:e2:a9:36:58:0b:54:ad:
fa:5c:36:f4:46:82:12:2d:16:69:7f:2b:a5:94:b0:
21:1a:1c:02:5d:d8:db:1e:16:57:c6:2c:d2:4a:25:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F0:08:0C:F1:BD:25:5E:C9:6B:80:ED:50:AC:59:22:64:5B:C8:EB
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/FfAIDPG9JV7Ja4DtUKxZImRbyOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7c:5c:f2:f0:a4:23:eb:34:2d:2a:37:83:dc:b5:fb:1d:04:
2e:c9:9d:c4:c1:2a:9f:0c:3f:58:3b:53:1f:75:4d:70:33:36:
25:fc:c4:22:0e:4c:13:1d:95:6c:99:24:7a:ff:81:0e:4c:ed:
55:f1:75:05:a6:6b:dd:48:d8:43:89:8f:6d:c4:24:72:37:97:
ea:2d:1b:dd:01:d8:33:49:51:7d:4d:4f:b0:56:cd:84:57:48:
99:fc:6c:df:30:66:bf:f0:af:21:f6:dd:67:1e:9f:8f:fa:63:
e8:02:06:f5:26:69:10:dd:c6:7c:27:8c:b6:cf:e5:38:ee:1d:
53:1c:5d:fa:ba:e5:a6:c2:a5:10:14:2e:d0:ff:57:ad:1b:f5:
99:5d:61:0c:0d:71:36:ba:c2:d6:19:0d:dc:ed:c8:7f:5c:d7:
e4:51:01:38:76:83:2d:56:1d:68:32:95:41:eb:c7:5b:78:c0:
0f:cf:77:d1:14:ce:66:7c:b2:e0:21:8a:4c:06:e1:6d:4d:ad:
af:6f:e5:cc:82:46:30:be:67:86:1c:bd:f6:14:b7:49:f4:e3:
7e:a2:c1:3c:ad:b8:c6:16:98:ad:b1:6d:a6:5f:89:fc:e9:be:
db:fd:91:3a:42:42:97:4e:97:0e:79:66:8b:16:c3:05:9e:2c:
e0:c2:5d:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw46mZR7bIkkKO75NvDfKRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk
NTAzYzYwHhcNMjMxMjA1MDczODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWYwMDgwY2YxYmQyNTVlYzk2YjgwZWQ1MGFjNTkyMjY0NWJjOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwwlHdxA5iZd6TY1Fx206nVAH8+X
haB49G0WQJMP5fqOarCZjjMYMybo8aPl3xgBEwQf6IqmkuaMHS3rt7MXyxELv2Al
ftEzB8jcoLmmOqZSYz7/62kkHYk6Chb7nmHP+b00PcloLtIWFfnIVClEZpeCt1S3
vkCD2nLAMEzmHqGY6IthWs6NzPMZ7jwT7UTa+k0GveWY4GF7zwJNyLcjFygfn4g2
MFdfqHxf3taR3y5iYpv3GotfKuaykaBWhZI9Y5EZRfd0j1HkV83J9wb6ePAjFkWC
csM2xOKpNlgLVK36XDb0RoISLRZpfyullLAhGhwCXdjbHhZXxizSSiUkxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXwCAzxvSVeyWuA7VCsWSJkW8jrMB8GA1UdIwQY
MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt
N2RmYmJhZTAzNjhlLzEvRmZBSURQRzlKVjdKYTREdFVLeFpJbVJieU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl
LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR0VMA0G
CSqGSIb3DQEBCwUAA4IBAQAMfFzy8KQj6zQtKjeD3LX7HQQuyZ3EwSqfDD9YO1Mf
dU1wMzYl/MQiDkwTHZVsmSR6/4EOTO1V8XUFpmvdSNhDiY9txCRyN5fqLRvdAdgz
SVF9TU+wVs2EV0iZ/GzfMGa/8K8h9t1nHp+P+mPoAgb1JmkQ3cZ8J4y2z+U47h1T
HF36uuWmwqUQFC7Q/1etG/WZXWEMDXE2usLWGQ3c7ch/XNfkUQE4doMtVh1oMpVB
68dbeMAPz3fRFM5mfLLgIYpMBuFtTa2vb+XMgkYwvmeGHL32FLdJ9ON+osE8rbjG
FpitsW2mX4n86b7b/ZE6QkKXTpcOeWaLFsMFnizgwl2N
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:03 2025 by rpki-client