Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/RZ70iM1rb_J3KJUZMfJ9i2zg73s.roa
File: RZ70iM1rb_J3KJUZMfJ9i2zg73s.roa (raw, json)
Hash identifier: MufimaRJeyY/x2AgBCBERB79iJopY3lgln8PiEJmhOs=
Subject key identifier: 45:9E:F4:88:CD:6B:6F:F2:77:28:95:19:31:F2:7D:8B:6C:E0:EF:7B
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 01840ED8121512F8F0B06ECBA8591977866A
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/RZ70iM1rb_J3KJUZMfJ9i2zg73s.roa
Signing time: Tue 25 Oct 2022 11:12:32 +0000
ROA not before: Tue 25 Oct 2022 11:12:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202049
IP address blocks: 193.162.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:d8:12:15:12:f8:f0:b0:6e:cb:a8:59:19:77:86:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Oct 25 11:12:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=459ef488cd6b6ff27728951931f27d8b6ce0ef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:74:79:35:c9:78:27:ef:c3:31:48:31:f8:
96:da:86:1a:f9:85:59:ea:36:ed:f7:de:f5:aa:d4:
c6:4f:54:5c:5a:ab:3f:b1:cc:33:79:7e:18:d0:93:
01:ce:3f:4b:a1:ee:e1:da:5a:c2:3b:5f:89:a1:e9:
07:1d:77:f4:22:a9:8d:dc:f0:5c:3c:3e:33:5d:4a:
fe:4a:ab:9f:f1:d1:26:2d:fb:01:bf:4a:04:d4:cf:
5b:0d:a1:f9:03:b6:f7:91:8a:83:9f:67:72:84:db:
81:89:e1:ad:55:1c:03:10:f7:f4:4d:c9:06:ef:03:
dc:be:f7:2f:59:49:5c:9c:db:25:c0:a6:8f:e4:4b:
6e:a0:4e:3d:2b:7a:e1:7d:97:ad:59:26:ec:43:ae:
51:be:b1:40:f6:48:17:9a:52:73:7d:16:e6:8d:f3:
d7:65:22:c5:51:f5:c2:77:54:06:ff:1e:ad:01:80:
8c:65:03:52:3d:74:3f:98:48:20:10:b2:35:e7:23:
7b:a2:94:d3:74:c1:10:9f:1f:a8:37:09:d9:8a:ee:
f8:d7:cd:30:56:9d:6e:e7:74:0b:bf:23:51:ee:7d:
81:3a:e9:5b:77:1d:bb:ba:ea:06:c9:bf:a5:af:a3:
91:4d:79:da:fc:2c:ca:4b:d9:45:94:7d:eb:01:90:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:F4:88:CD:6B:6F:F2:77:28:95:19:31:F2:7D:8B:6C:E0:EF:7B
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/RZ70iM1rb_J3KJUZMfJ9i2zg73s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.134.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f2:8b:a6:1a:56:a4:86:6e:d4:68:35:48:25:04:e3:36:86:
d7:af:54:c3:d1:41:ca:fe:5f:05:d8:bc:a9:32:b7:5f:6f:f1:
30:8f:d1:51:db:fb:35:1e:d8:8d:30:b9:fb:66:75:a7:f4:bf:
87:ab:9f:e7:56:75:54:db:75:da:eb:24:e0:03:d9:26:78:14:
28:fc:6d:98:39:10:03:7f:b3:24:1d:5a:66:0a:45:ab:d5:3f:
22:b3:85:59:b2:24:0f:c9:16:f4:dc:8c:2f:a6:3e:57:74:2c:
c1:e7:99:a5:e0:8c:11:04:25:57:d1:3d:3d:d2:a4:4b:5e:9c:
bc:fd:b9:9b:31:a4:1c:a9:82:3b:ba:e3:a2:25:38:79:d1:a4:
c0:a5:fc:85:11:46:1c:79:b5:c2:4a:08:c6:fb:38:a2:c6:e5:
dc:a9:18:4f:7e:95:9c:ad:af:39:af:b6:99:6e:95:52:98:a4:
2d:bd:e2:ba:9a:6b:ea:c8:ad:86:a5:74:01:96:6e:9d:6e:6a:
90:56:d9:11:3a:b3:68:d5:b3:9f:c4:4e:70:2b:ac:bb:0d:a0:
2d:82:8e:1e:e3:b8:0d:93:98:3b:07:e2:52:89:c8:4a:2e:0e:
f5:10:1c:c7:a8:98:58:3e:60:bc:5c:94:3d:b4:ce:75:5a:cf:
ff:67:c9:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQO2BIVEvjwsG7LqFkZd4ZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm
M2Y3ZGMwHhcNMjIxMDI1MTExMjMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTllZjQ4OGNkNmI2ZmYyNzcyODk1MTkzMWYyN2Q4YjZjZTBlZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTt0eTXJeCfvwzFIMfiW2oYa+YVZ
6jbt9971qtTGT1RcWqs/scwzeX4Y0JMBzj9Loe7h2lrCO1+JoekHHXf0IqmN3PBc
PD4zXUr+Squf8dEmLfsBv0oE1M9bDaH5A7b3kYqDn2dyhNuBieGtVRwDEPf0TckG
7wPcvvcvWUlcnNslwKaP5EtuoE49K3rhfZetWSbsQ65RvrFA9kgXmlJzfRbmjfPX
ZSLFUfXCd1QG/x6tAYCMZQNSPXQ/mEggELI15yN7opTTdMEQnx+oNwnZiu74180w
Vp1u53QLvyNR7n2BOulbdx27uuoGyb+lr6ORTXna/CzKS9lFlH3rAZCBgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWe9IjNa2/ydyiVGTHyfYts4O97MB8GA1UdIwQY
MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt
NzBlNjBlZGJjMWU3LzEvUlo3MGlNMXJiX0ozS0pVWk1mSjlpMnpnNzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3
LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaKGMA0G
CSqGSIb3DQEBCwUAA4IBAQAU8oumGlakhm7UaDVIJQTjNobXr1TD0UHK/l8F2Lyp
Mrdfb/Ewj9FR2/s1HtiNMLn7ZnWn9L+Hq5/nVnVU23Xa6yTgA9kmeBQo/G2YORAD
f7MkHVpmCkWr1T8is4VZsiQPyRb03Iwvpj5XdCzB55ml4IwRBCVX0T090qRLXpy8
/bmbMaQcqYI7uuOiJTh50aTApfyFEUYcebXCSgjG+ziixuXcqRhPfpWcra85r7aZ
bpVSmKQtveK6mmvqyK2GpXQBlm6dbmqQVtkROrNo1bOfxE5wK6y7DaAtgo4e47gN
k5g7B+JSichKLg71EBzHqJhYPmC8XJQ9tM51Ws//Z8lY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:08 2024 by rpki-client on console-ams.rpki-client.org