Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/UY3oXfesytiwGwj4WnOGRH_nkmU.roa
File: UY3oXfesytiwGwj4WnOGRH_nkmU.roa (raw, json)
Hash identifier: sPQVE5T1qvF4/YSHNFmFyFRWi9orfA8t1T9zte/y+sY=
Subject key identifier: 51:8D:E8:5D:F7:AC:CA:D8:B0:1B:08:F8:5A:73:86:44:7F:E7:92:65
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0DB6FAE9
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/UY3oXfesytiwGwj4WnOGRH_nkmU.roa
Signing time: Sat 01 Jan 2022 07:52:54 +0000
ROA not before: Sat 01 Jan 2022 07:52:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203017
IP address blocks: 193.53.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230095593 (0xdb6fae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 1 07:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=518de85df7accad8b01b08f85a7386447fe79265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:37:79:f7:c0:98:d8:39:07:e8:01:02:24:
eb:5a:9c:58:81:c0:7e:d2:a2:f0:0c:7b:55:6e:08:
f3:14:ca:15:48:bb:3f:59:ef:d9:37:b3:5d:e2:19:
ae:b5:38:ff:04:7e:1b:0a:76:56:b4:b7:07:44:d9:
b9:a7:87:57:e8:63:f8:89:f6:4f:57:f3:74:31:bf:
68:ee:85:85:8d:13:df:5c:bc:87:cf:48:68:4a:9c:
7b:e2:05:42:d5:0e:53:cc:ec:78:ac:09:b5:5c:3f:
fd:49:7b:2f:c2:d1:2e:c7:02:d6:fb:b9:b3:9e:ec:
15:e9:c7:74:80:66:49:df:a2:58:5f:5b:03:03:03:
e3:67:b8:ec:31:fa:76:ae:b2:00:15:dd:83:0b:c9:
a2:18:ec:8e:a5:52:11:43:50:d8:19:30:64:84:fd:
a9:d1:53:24:14:bc:5d:c0:2e:a2:11:e5:6a:f7:4a:
9e:fa:26:d1:ef:87:12:f4:28:55:50:60:74:91:58:
7f:d4:86:ad:91:19:f1:11:84:b4:02:24:ec:36:aa:
2c:17:cc:69:6e:05:35:6d:1c:8a:72:a8:e8:68:69:
9f:26:a5:54:ef:f7:47:43:c0:0a:41:65:ec:07:a3:
a1:6a:18:3a:e8:bb:67:fe:1b:7b:14:48:a2:1f:68:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8D:E8:5D:F7:AC:CA:D8:B0:1B:08:F8:5A:73:86:44:7F:E7:92:65
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/UY3oXfesytiwGwj4WnOGRH_nkmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4c:38:df:c9:82:df:79:44:00:e7:ac:95:c4:37:3f:79:39:
97:6d:52:30:7a:d0:c4:63:af:ed:52:19:7a:35:c1:b6:fa:0f:
42:47:d4:85:c4:85:ac:ce:56:ee:61:53:80:84:1c:0f:dd:c7:
ad:da:96:c8:ef:de:c2:56:b0:fe:d2:26:18:7d:bd:a6:fb:b8:
a2:e1:11:bd:c9:86:c7:92:2b:c2:d9:47:19:07:8f:18:80:63:
e9:f4:e4:e1:75:b8:48:88:d2:8e:25:eb:3d:95:4e:eb:47:24:
8a:3c:a9:ce:91:9f:3c:00:9b:9b:c3:ab:ed:b8:66:6d:32:ab:
aa:39:f2:68:20:24:dd:f4:bf:cc:f0:ee:a2:91:28:9e:76:0e:
b0:c8:bf:51:b0:9d:89:89:69:5a:6d:54:38:c2:9e:9f:f1:50:
24:3d:7a:7a:85:e6:e8:0d:fe:0f:5f:63:4b:10:03:e3:41:4b:
ae:0f:7f:ac:12:5b:c3:79:62:f9:af:5a:c5:ec:b8:83:5c:3d:
c6:3a:ce:af:d4:66:49:14:de:38:e3:61:cf:6f:00:df:59:5d:
b9:d1:16:d1:cd:07:12:e3:67:e8:14:7d:b7:de:44:e9:31:1d:
ba:0e:46:06:87:39:71:bf:40:e2:5c:27:91:7c:99:94:8b:c9:
13:4e:71:87
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDbb66TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MWI4YzJmMzdiZDhkN2UwNGU3Njk4NWE0Y2VkNDU1OWQ3NjUxYzQzMB4XDTIyMDEw
MTA3NTI1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTE4ZGU4NWRmN2Fj
Y2FkOGIwMWIwOGY4NWE3Mzg2NDQ3ZmU3OTI2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKdN3n3wJjYOQfoAQIk61qcWIHAftKi8Ax7VW4I8xTKFUi7
P1nv2TezXeIZrrU4/wR+Gwp2VrS3B0TZuaeHV+hj+In2T1fzdDG/aO6FhY0T31y8
h89IaEqce+IFQtUOU8zseKwJtVw//Ul7L8LRLscC1vu5s57sFenHdIBmSd+iWF9b
AwMD42e47DH6dq6yABXdgwvJohjsjqVSEUNQ2BkwZIT9qdFTJBS8XcAuohHlavdK
nvom0e+HEvQoVVBgdJFYf9SGrZEZ8RGEtAIk7DaqLBfMaW4FNW0cinKo6Ghpnyal
VO/3R0PACkFl7AejoWoYOui7Z/4bexRIoh9oYx8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRRjehd96zK2LAbCPhac4ZEf+eSZTAfBgNVHSMEGDAWgBRBuMLze9jX4E52
mFpM7UVZ12UcQzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FiakM4M3ZZMS1CT2RwaGFUTzFGV2RkbEhFTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTEvM2UzYjRiLWY4MjctNDM0Ny05MDIyLTI4MThmNjU3OGQxYi8x
L1VZM29YZmVzeXRpd0d3ajRXbk9HUkhfbmttVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEv
M2UzYjRiLWY4MjctNDM0Ny05MDIyLTI4MThmNjU3OGQxYi8xL1FiakM4M3ZZMS1C
T2RwaGFUTzFGV2RkbEhFTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAME1FzANBgkqhkiG9w0BAQsFAAOC
AQEAT0w438mC33lEAOeslcQ3P3k5l21SMHrQxGOv7VIZejXBtvoPQkfUhcSFrM5W
7mFTgIQcD93HrdqWyO/ewlaw/tImGH29pvu4ouERvcmGx5IrwtlHGQePGIBj6fTk
4XW4SIjSjiXrPZVO60ckijypzpGfPACbm8Or7bhmbTKrqjnyaCAk3fS/zPDuopEo
nnYOsMi/UbCdiYlpWm1UOMKen/FQJD16eoXm6A3+D19jSxAD40FLrg9/rBJbw3li
+a9axey4g1w9xjrOr9RmSRTeOONhz28A31ldudEW0c0HEuNn6BR9t95E6TEdug5G
Boc5cb9A4lwnkXyZlIvJE05xhw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:59 2025 by rpki-client