Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/YhiBITxb4Iy6TKFbsZTzEpasx8g.roa
File: YhiBITxb4Iy6TKFbsZTzEpasx8g.roa (raw, json)
Hash identifier: Qyn5twgyA8dn+wuu9/txuwC2O79jU2j4G0qAGD5RYy4=
Subject key identifier: 62:18:81:21:3C:5B:E0:8C:BA:4C:A1:5B:B1:94:F3:12:96:AC:C7:C8
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 1954F006
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/YhiBITxb4Iy6TKFbsZTzEpasx8g.roa
Signing time: Sat 01 Jan 2022 07:01:54 +0000
ROA not before: Sat 01 Jan 2022 07:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212989
IP address blocks: 194.156.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424996870 (0x1954f006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Jan 1 07:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=621881213c5be08cba4ca15bb194f31296acc7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:3b:cd:17:f1:c7:9b:aa:f6:8a:16:d7:5a:
10:6d:31:fb:03:4e:6b:ab:7f:e0:6e:6e:e5:ac:69:
ed:83:7d:95:c6:c1:a9:cd:d9:56:43:3f:d2:dd:92:
d2:8b:df:4a:c5:1e:9a:84:cc:58:a4:d6:ab:f5:4a:
9d:7e:ff:c2:17:ed:84:24:5f:33:72:b7:02:76:0c:
58:60:17:44:f2:33:b3:71:d7:f3:1f:79:93:29:55:
a2:3d:47:72:99:41:ca:77:8f:0e:ac:74:6a:c7:9a:
f3:cb:9b:c0:2e:75:ac:d6:60:c6:4d:2a:42:bb:79:
f8:7e:fa:07:cb:34:d2:7e:c7:fa:81:25:2d:86:cf:
b9:55:c9:62:3e:6b:c9:65:a5:20:76:90:eb:a4:8f:
7b:af:f7:42:da:33:45:0f:45:5c:5f:59:6f:2d:d8:
a7:7a:cf:bc:71:d1:93:a5:5e:6a:ac:a1:5f:2f:aa:
19:8d:d9:42:80:99:ea:44:85:2c:19:89:d6:49:96:
8d:4d:03:64:5c:13:da:52:75:8b:54:34:11:9e:b6:
f4:1a:f0:15:3d:ee:93:33:b0:a1:d3:13:06:e3:6f:
a8:11:ea:32:94:08:e8:ec:07:ac:7f:f8:6c:e8:4c:
cc:c8:2e:ec:ae:a3:19:d6:cd:d5:eb:af:23:8d:01:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:81:21:3C:5B:E0:8C:BA:4C:A1:5B:B1:94:F3:12:96:AC:C7:C8
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/YhiBITxb4Iy6TKFbsZTzEpasx8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:da:9c:60:12:53:27:a0:5e:9f:ba:ed:ef:c2:b8:e8:45:ac:
45:f4:d7:da:cb:83:a5:6b:3b:68:e2:97:70:69:bb:cd:f3:6d:
60:22:a3:95:c4:5e:12:0b:61:d6:ba:8a:47:08:03:35:5f:af:
21:00:38:89:44:e3:d3:25:e1:35:d6:a8:f7:20:f3:1e:5f:bf:
b7:f2:58:0a:56:59:70:fe:3a:9e:81:a2:cf:f6:5c:fd:8e:a6:
ba:53:00:db:d9:a5:b2:20:86:46:fa:26:43:d1:c4:79:4b:41:
b5:58:ee:06:f6:e3:df:d0:e8:55:8b:83:67:2c:05:00:09:8a:
0f:ad:40:a8:15:65:05:2f:84:e1:5b:95:5b:63:cb:64:1c:a2:
92:b2:b1:c4:15:28:c3:ef:f5:10:a2:de:76:26:3d:06:59:9f:
bb:7d:df:84:f8:32:95:91:b2:b1:ed:1f:c3:51:69:47:4c:35:
28:56:b0:93:8d:d7:53:0e:f9:74:74:07:fa:7f:29:cd:07:b7:
f6:f6:ab:3a:f8:68:5b:b2:e0:65:d0:f7:9f:7d:15:06:f9:a0:
42:32:50:01:18:91:06:82:52:72:df:2a:70:ab:37:30:1d:f0:
03:ca:7b:73:be:82:a2:d8:6a:36:42:ff:1d:55:7f:7e:90:38:
c0:52:55:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGVTwBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MGY3NjUzN2ZmNzQ1ODkzZTMxNDJmYTA5ODRmNDQ5YjcyNWI4ZmQzMB4XDTIyMDEw
MTA3MDE1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjIxODgxMjEzYzVi
ZTA4Y2JhNGNhMTViYjE5NGYzMTI5NmFjYzdjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHMO80X8cebqvaKFtdaEG0x+wNOa6t/4G5u5axp7YN9lcbB
qc3ZVkM/0t2S0ovfSsUemoTMWKTWq/VKnX7/whfthCRfM3K3AnYMWGAXRPIzs3HX
8x95kylVoj1HcplBynePDqx0asea88ubwC51rNZgxk0qQrt5+H76B8s00n7H+oEl
LYbPuVXJYj5ryWWlIHaQ66SPe6/3QtozRQ9FXF9Zby3Yp3rPvHHRk6VeaqyhXy+q
GY3ZQoCZ6kSFLBmJ1kmWjU0DZFwT2lJ1i1Q0EZ629BrwFT3ukzOwodMTBuNvqBHq
MpQI6OwHrH/4bOhMzMgu7K6jGdbN1euvI40BX4sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRiGIEhPFvgjLpMoVuxlPMSlqzHyDAfBgNVHSMEGDAWgBSQ92U3/3RYk+MU
L6CYT0SbcluP0zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tQZGxOXzkwV0pQakZDLWdtRTlFbTNKYmo5TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvNGY3NjgwLTgxYWItNGMxZi1hMDdiLTdjNjJkNWMzMTViZi8x
L1loaUJJVHhiNEl5NlRLRmJzWlR6RXBhc3g4Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
NGY3NjgwLTgxYWItNGMxZi1hMDdiLTdjNjJkNWMzMTViZi8xL2tQZGxOXzkwV0pQ
akZDLWdtRTlFbTNKYmo5TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcKcFjANBgkqhkiG9w0BAQsFAAOC
AQEArtqcYBJTJ6Ben7rt78K46EWsRfTX2suDpWs7aOKXcGm7zfNtYCKjlcReEgth
1rqKRwgDNV+vIQA4iUTj0yXhNdao9yDzHl+/t/JYClZZcP46noGiz/Zc/Y6mulMA
29mlsiCGRvomQ9HEeUtBtVjuBvbj39DoVYuDZywFAAmKD61AqBVlBS+E4VuVW2PL
ZByikrKxxBUow+/1EKLediY9Blmfu33fhPgylZGyse0fw1FpR0w1KFawk43XUw75
dHQH+n8pzQe39varOvhoW7LgZdD3n30VBvmgQjJQARiRBoJSct8qcKs3MB3wA8p7
c76CothqNkL/HVV/fpA4wFJV7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:54 2024 by rpki-client on console-fra.rpki-client.org