Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/pKDCutzqPCuBJfTxQKhemgo6XT0.roa
File: pKDCutzqPCuBJfTxQKhemgo6XT0.roa (raw, json)
Hash identifier: n7XmeSKaFe88GNzhgzaPya65pHRf89raCt7wc1VCA8o=
Subject key identifier: A4:A0:C2:BA:DC:EA:3C:2B:81:25:F4:F1:40:A8:5E:9A:0A:3A:5D:3D
Certificate issuer: /CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
Certificate serial: 01464CEB
Authority key identifier: C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/pKDCutzqPCuBJfTxQKhemgo6XT0.roa
Signing time: Sat 01 Jan 2022 10:59:55 +0000
ROA not before: Sat 01 Jan 2022 10:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21384427 (0x1464ceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
Validity
Not Before: Jan 1 10:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4a0c2badcea3c2b8125f4f140a85e9a0a3a5d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:f9:7e:e3:5b:4d:a5:2e:17:2c:cc:fe:5b:
9f:d4:9c:7c:2a:80:d6:e6:32:05:40:bc:ec:5d:32:
b8:17:80:76:7a:ba:c4:5a:7d:58:4a:ca:ec:82:2d:
3a:27:8e:41:ea:8c:a1:bd:5c:68:0a:c9:85:9e:90:
6c:ad:c2:3c:5e:30:af:d7:c4:0e:0b:11:24:f5:5f:
07:19:63:d3:21:98:6c:c5:23:51:82:f0:f2:3b:1b:
42:64:ad:78:1b:ac:14:49:58:0d:d6:32:59:1e:87:
31:8c:41:78:df:cf:57:15:d5:78:72:84:df:a6:11:
b0:05:21:ab:a3:61:08:07:e1:6f:3f:e5:d1:3b:0a:
28:fd:77:1d:40:75:32:22:c8:56:c4:17:3b:ea:52:
ba:d9:72:36:8b:a1:79:e3:6b:60:10:dd:43:4d:fd:
ca:1a:f0:76:8a:a6:15:f4:36:50:83:8b:47:8e:37:
96:f5:9d:cf:29:98:ef:37:78:77:4d:f2:35:35:fc:
fa:79:b4:61:79:d4:41:38:53:94:4e:17:63:9c:3b:
b7:6a:5f:c5:14:27:e7:59:85:47:37:22:3a:34:70:
23:c4:c9:c4:63:28:1d:7a:3f:fb:59:b4:50:7e:31:
5f:5d:c3:ca:a7:7b:e5:45:a8:76:7c:66:fc:e6:1c:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:C2:BA:DC:EA:3C:2B:81:25:F4:F1:40:A8:5E:9A:0A:3A:5D:3D
X509v3 Authority Key Identifier:
keyid:C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/pKDCutzqPCuBJfTxQKhemgo6XT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/wP-vjMrjY52XSN3cuDPNCIk4qQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:57:98:57:fc:b9:f7:27:aa:40:b1:2b:0e:d7:f3:f4:80:40:
cb:8b:af:7e:3e:b9:7b:ac:42:c2:55:ee:6e:77:86:9e:c0:a1:
f0:61:b7:23:5d:a4:95:7b:e0:bb:6a:68:47:66:24:f8:08:74:
ca:79:d7:d7:3c:fa:9e:bf:20:8c:c5:95:c6:9b:d6:b1:18:de:
b5:64:43:de:a1:b6:bd:85:08:1e:59:7c:31:13:a4:1e:b3:cb:
a1:d8:13:80:3d:65:c7:df:c4:f0:00:40:cd:33:94:99:c9:b1:
13:41:eb:b8:c7:92:af:ab:2d:cc:e6:0e:17:68:23:73:74:c7:
b3:d2:17:45:66:15:a4:48:d0:c0:0f:85:06:fb:33:d1:1b:c5:
65:4b:62:68:61:f9:5b:52:f2:5b:c8:63:94:d2:99:e3:3e:e5:
e4:9b:2c:46:f4:f1:bc:05:1d:ba:c5:f5:6d:d4:13:23:10:10:
fa:82:1e:5c:b1:d1:7a:35:9d:f2:b8:42:38:ee:0b:ff:cf:61:
f9:ba:dc:c4:f6:e8:ce:05:2a:eb:91:d9:11:c9:e0:14:10:63:
ab:ca:00:e7:4a:ab:51:62:db:a5:e0:5e:a7:54:5b:61:9f:fe:
df:95:74:90:a6:76:7f:79:38:f6:45:80:5f:65:ab:a4:ce:38:
09:0a:48:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUZM6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MGZmYWY4Y2NhZTM2MzlkOTc0OGRkZGNiODMzY2QwODg5MzhhOTAxMB4XDTIyMDEw
MTEwNTk1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTRhMGMyYmFkY2Vh
M2MyYjgxMjVmNGYxNDBhODVlOWEwYTNhNWQzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvK+X7jW02lLhcszP5bn9ScfCqA1uYyBUC87F0yuBeAdnq6
xFp9WErK7IItOieOQeqMob1caArJhZ6QbK3CPF4wr9fEDgsRJPVfBxlj0yGYbMUj
UYLw8jsbQmSteBusFElYDdYyWR6HMYxBeN/PVxXVeHKE36YRsAUhq6NhCAfhbz/l
0TsKKP13HUB1MiLIVsQXO+pSutlyNouheeNrYBDdQ039yhrwdoqmFfQ2UIOLR443
lvWdzymY7zd4d03yNTX8+nm0YXnUQThTlE4XY5w7t2pfxRQn51mFRzciOjRwI8TJ
xGMoHXo/+1m0UH4xX13Dyqd75UWodnxm/OYcC7cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSkoMK63Oo8K4El9PFAqF6aCjpdPTAfBgNVHSMEGDAWgBTA/6+MyuNjnZdI
3dy4M80IiTipATAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dQLXZqTXJqWTUyWFNOM2N1RFBOQ0lrNHFRRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvZjIwZDMwLTAzMTMtNDE5Yy04MjQ1LTZlZmJjNjhjNzlmNi8x
L3BLREN1dHpxUEN1QkpmVHhRS2hlbWdvNlhUMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
ZjIwZDMwLTAzMTMtNDE5Yy04MjQ1LTZlZmJjNjhjNzlmNi8xL3dQLXZqTXJqWTUy
WFNOM2N1RFBOQ0lrNHFRRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGjBjANBgkqhkiG9w0BAQsFAAOC
AQEAPVeYV/y59yeqQLErDtfz9IBAy4uvfj65e6xCwlXubneGnsCh8GG3I12klXvg
u2poR2Yk+Ah0ynnX1zz6nr8gjMWVxpvWsRjetWRD3qG2vYUIHll8MROkHrPLodgT
gD1lx9/E8ABAzTOUmcmxE0HruMeSr6stzOYOF2gjc3THs9IXRWYVpEjQwA+FBvsz
0RvFZUtiaGH5W1LyW8hjlNKZ4z7l5JssRvTxvAUdusX1bdQTIxAQ+oIeXLHRejWd
8rhCOO4L/89h+brcxPbozgUq65HZEcngFBBjq8oA50qrUWLbpeBep1RbYZ/+35V0
kKZ2f3k49kWAX2WrpM44CQpI7g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:33 2023 by rpki-client on console-ams.rpki-client.org