Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa
File: XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa (raw, json)
Hash identifier: tLl9Bdjb3I18g63MTogKKHZD3IFN6VfHVlcWSpnexqU=
Subject key identifier: 5D:34:36:90:A0:D5:AC:C6:46:74:5A:44:F3:69:17:38:54:18:24:90
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01835F5997C46EDE39CCE0F3ACE224FCFD4E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa
Signing time: Wed 21 Sep 2022 09:20:50 +0000
ROA not before: Wed 21 Sep 2022 09:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44378
IP address blocks: 93.92.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:59:97:c4:6e:de:39:cc:e0:f3:ac:e2:24:fc:fd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 21 09:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d343690a0d5acc646745a44f369173854182490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:b0:c3:73:cd:b4:af:89:44:0a:d9:73:ef:
b1:0e:1a:c2:e2:90:e5:04:be:fa:89:9d:5b:83:cf:
da:4a:14:23:f6:33:4c:32:cc:40:c2:73:ea:78:d2:
e6:4f:62:33:9e:bd:d3:4d:a6:0c:4b:2f:04:17:01:
1e:2f:7b:c6:ca:14:5b:43:ba:c5:6a:8e:e5:b5:b7:
63:0a:5d:8e:f9:15:99:fb:50:69:7a:ac:b2:3a:a7:
0f:21:a2:9b:df:5c:04:98:0f:e0:dd:8b:8c:d8:99:
98:df:dd:4b:37:58:ac:22:4a:ba:9f:e0:7d:67:4c:
22:ef:91:c2:bb:02:5a:de:a1:e4:3c:4f:54:58:c8:
a7:b9:c8:1f:70:b0:52:dd:b0:dc:be:0e:b4:36:f3:
2a:bc:ac:84:24:32:65:84:93:89:54:11:c5:1a:86:
59:e5:ab:9e:65:c1:07:76:df:07:f6:07:c8:f4:3a:
ef:18:91:93:77:8a:d6:a7:4b:12:fb:78:90:49:ba:
7d:7b:9b:42:55:c4:f1:bc:5a:66:72:f4:d8:22:80:
49:b9:24:9d:a8:85:b2:a1:6b:75:0b:aa:4c:09:68:
9a:91:61:cc:83:79:5f:01:94:e3:23:56:da:53:15:
67:a9:f8:fe:69:38:d3:75:3d:24:d6:ec:7e:0a:6d:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:34:36:90:A0:D5:AC:C6:46:74:5A:44:F3:69:17:38:54:18:24:90
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.113.0/24
Signature Algorithm: sha256WithRSAEncryption
11:28:99:72:3d:f4:4b:27:78:ba:9e:ee:21:59:64:23:00:5f:
7a:65:89:d0:1a:78:0d:20:9f:5f:28:6f:1d:73:28:9b:c4:f3:
bf:aa:0c:c5:64:15:e7:01:05:46:d6:9f:6a:a0:ed:70:ec:96:
4a:ba:6f:9d:a5:1c:c5:fb:2a:57:c8:7d:ea:90:25:9a:46:ee:
1f:3a:ac:fd:7e:23:c5:bd:e8:95:b4:83:a9:f0:48:10:90:12:
40:a8:85:fc:bb:78:0f:a5:53:8e:e9:ed:66:93:17:93:10:5f:
5f:bc:15:36:86:a8:6c:4d:b5:ab:a8:8f:d5:e5:76:4b:8c:23:
a7:c5:7c:1b:cb:46:dc:7c:f7:1d:50:36:61:48:a2:b5:25:e0:
c1:a5:c6:a3:89:b2:2b:5a:c2:e5:a1:d6:d8:43:f6:01:12:1b:
73:c4:69:1a:e7:29:64:e1:a6:64:b4:68:eb:5e:c6:37:c8:65:
a0:53:f1:58:0e:f8:46:c4:c3:9f:b8:aa:16:3b:bc:12:63:d3:
fd:67:9a:83:f9:40:33:e9:11:f1:83:18:70:e4:bb:45:8a:06:
96:3e:1e:2c:3d:9f:bc:00:4b:7f:16:22:e8:49:91:10:0d:77:
73:3c:f9:33:eb:18:9b:ee:b0:6b:ec:95:60:47:e5:07:c2:da:
3e:e0:67:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNfWZfEbt45zODzrOIk/P1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjIwOTIxMDkyMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDM0MzY5MGEwZDVhY2M2NDY3NDVhNDRmMzY5MTczODU0MTgyNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4aww3PNtK+JRArZc++xDhrC4pDl
BL76iZ1bg8/aShQj9jNMMsxAwnPqeNLmT2Iznr3TTaYMSy8EFwEeL3vGyhRbQ7rF
ao7ltbdjCl2O+RWZ+1BpeqyyOqcPIaKb31wEmA/g3YuM2JmY391LN1isIkq6n+B9
Z0wi75HCuwJa3qHkPE9UWMinucgfcLBS3bDcvg60NvMqvKyEJDJlhJOJVBHFGoZZ
5aueZcEHdt8H9gfI9DrvGJGTd4rWp0sS+3iQSbp9e5tCVcTxvFpmcvTYIoBJuSSd
qIWyoWt1C6pMCWiakWHMg3lfAZTjI1baUxVnqfj+aTjTdT0k1ux+Cm0vnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF00NpCg1azGRnRaRPNpFzhUGCSQMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvWFRRMmtLRFZyTVpHZEZwRTgya1hPRlFZSkpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVxxMA0G
CSqGSIb3DQEBCwUAA4IBAQARKJlyPfRLJ3i6nu4hWWQjAF96ZYnQGngNIJ9fKG8d
cyibxPO/qgzFZBXnAQVG1p9qoO1w7JZKum+dpRzF+ypXyH3qkCWaRu4fOqz9fiPF
veiVtIOp8EgQkBJAqIX8u3gPpVOO6e1mkxeTEF9fvBU2hqhsTbWrqI/V5XZLjCOn
xXwby0bcfPcdUDZhSKK1JeDBpcajibIrWsLlodbYQ/YBEhtzxGka5ylk4aZktGjr
XsY3yGWgU/FYDvhGxMOfuKoWO7wSY9P9Z5qD+UAz6RHxgxhw5LtFigaWPh4sPZ+8
AEt/FiLoSZEQDXdzPPkz6xib7rBr7JVgR+UHwto+4Gc7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org