Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/CnerdjBn2HQ58VR1n-p_uhONpdo.roa
File: CnerdjBn2HQ58VR1n-p_uhONpdo.roa (raw, json)
Hash identifier: dHUePA7JBYXR3JyYQKV0d8sagSC3aqfSfwWqVGLHyXY=
Subject key identifier: 0A:77:AB:76:30:67:D8:74:39:F1:54:75:9F:EA:7F:BA:13:8D:A5:DA
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 9D25
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/CnerdjBn2HQ58VR1n-p_uhONpdo.roa
Signing time: Fri 29 Apr 2022 08:45:38 +0000
ROA not before: Fri 29 Apr 2022 08:45:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41432
IP address blocks: 193.164.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40229 (0x9d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Apr 29 08:45:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a77ab763067d87439f154759fea7fba138da5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:c4:b7:32:82:84:17:b7:cd:9c:4e:cb:68:
a0:78:f0:8a:3c:72:2d:98:39:c8:e1:ab:d4:73:e6:
57:69:c0:be:a5:c7:78:2f:8f:e1:d8:6d:9d:c8:fc:
e3:91:f3:2a:aa:bd:7c:b1:5d:dd:bd:37:28:39:ef:
68:0d:6d:61:43:1a:96:24:b9:9c:49:83:b4:fa:76:
88:e1:af:7e:c3:25:0b:8d:ca:e2:48:86:c7:78:cb:
fa:74:00:89:78:bb:15:69:4c:71:64:cc:16:4f:ef:
81:2f:fc:cb:24:3f:48:00:96:23:da:f7:e3:ed:4b:
3c:6e:d8:d4:77:91:58:94:90:8e:ac:09:90:7d:0d:
bc:8f:cd:e1:55:03:30:77:52:df:9d:e7:57:a9:e4:
4a:6e:33:d7:cb:60:14:1b:10:a9:3b:1a:d5:c4:5f:
c4:ad:2b:5b:c6:61:9a:a1:0f:35:df:09:c6:27:a3:
60:eb:d5:7f:d2:90:7f:bc:eb:f9:10:b3:1d:49:1c:
82:8c:e1:b6:de:fc:55:cc:61:4c:6a:60:9b:40:5e:
07:4c:dd:c1:d1:a3:8e:49:59:8b:70:68:e4:8a:30:
aa:69:06:bf:f2:c4:5c:32:bc:34:4e:85:b8:35:1f:
f5:f2:d6:f5:d9:e0:12:91:6d:8e:19:52:3b:2c:ec:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:77:AB:76:30:67:D8:74:39:F1:54:75:9F:EA:7F:BA:13:8D:A5:DA
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/CnerdjBn2HQ58VR1n-p_uhONpdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.136.0/24
Signature Algorithm: sha256WithRSAEncryption
75:dc:5b:57:7d:12:2c:3c:5b:29:33:e1:47:6e:db:88:5f:ae:
35:07:87:11:f9:29:6d:60:6f:f2:51:66:b9:5c:6f:62:83:40:
d0:ea:c6:e6:fc:53:4c:91:2a:85:48:c8:92:0d:0a:bd:32:91:
8f:6d:7d:90:4f:41:4e:21:e1:97:2a:64:25:12:ff:a5:ad:ed:
dd:c4:f7:bd:a4:2a:b6:05:bd:6e:4f:d7:c5:d8:e5:0d:b5:93:
06:00:02:6b:1a:57:ae:b8:f9:58:d5:17:df:61:93:de:97:06:
7d:07:6e:66:04:0c:5f:ce:5c:cf:e3:dd:ea:4d:df:2e:39:1d:
96:ab:17:01:62:7c:37:fe:61:84:fa:bc:80:f9:b6:f8:dc:d1:
10:62:7d:b5:b9:87:ba:72:8e:1b:9f:84:26:dc:14:9b:5d:f7:
5a:52:e3:61:01:38:00:e6:39:9d:ba:1f:d6:73:e9:c5:5e:39:
99:a3:4b:b3:84:5b:bc:4c:c9:77:d9:54:07:c1:46:db:89:50:
ca:e2:b7:e3:2b:cb:50:05:30:1c:4b:09:25:09:e3:0b:45:3f:
4f:49:91:6f:f9:2a:95:3e:91:bc:b6:7d:19:1c:03:b5:9e:65:
27:7b:c2:72:e1:44:d2:1e:8b:25:9d:3a:a2:18:54:86:7b:45:
3c:98:b9:6d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAJ0lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
MGRkN2NkY2U1ODhiZGFhMmI3YThjYjA1NmQ0ZGIwMTY3MDE1MzIwHhcNMjIwNDI5
MDg0NTM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwYTc3YWI3NjMwNjdk
ODc0MzlmMTU0NzU5ZmVhN2ZiYTEzOGRhNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjhTEtzKChBe3zZxOy2igePCKPHItmDnI4avUc+ZXacC+pcd4
L4/h2G2dyPzjkfMqqr18sV3dvTcoOe9oDW1hQxqWJLmcSYO0+naI4a9+wyULjcri
SIbHeMv6dACJeLsVaUxxZMwWT++BL/zLJD9IAJYj2vfj7Us8btjUd5FYlJCOrAmQ
fQ28j83hVQMwd1LfnedXqeRKbjPXy2AUGxCpOxrVxF/ErStbxmGaoQ813wnGJ6Ng
69V/0pB/vOv5ELMdSRyCjOG23vxVzGFMamCbQF4HTN3B0aOOSVmLcGjkijCqaQa/
8sRcMrw0ToW4NR/18tb12eASkW2OGVI7LOzd7wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFAp3q3YwZ9h0OfFUdZ/qf7oTjaXaMB8GA1UdIwQYMBaAFJYN183OWIvaoreo
ywVtTbAWcBUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzItOTAyZmYxN2JjNDk0LzEv
Q25lcmRqQm4ySFE1OFZSMW4tcF91aE9OcGRvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9k
MzEyMzAtY2JkYy00MmMxLTg3MzItOTAyZmYxN2JjNDk0LzEvbGczWHpjNVlpOXFp
dDZqTEJXMU5zQlp3RlRJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaSIMA0GCSqGSIb3DQEBCwUAA4IB
AQB13FtXfRIsPFspM+FHbtuIX641B4cR+SltYG/yUWa5XG9ig0DQ6sbm/FNMkSqF
SMiSDQq9MpGPbX2QT0FOIeGXKmQlEv+lre3dxPe9pCq2Bb1uT9fF2OUNtZMGAAJr
GleuuPlY1RffYZPelwZ9B25mBAxfzlzP493qTd8uOR2WqxcBYnw3/mGE+ryA+bb4
3NEQYn21uYe6co4bn4Qm3BSbXfdaUuNhATgA5jmduh/Wc+nFXjmZo0uzhFu8TMl3
2VQHwUbbiVDK4rfjK8tQBTAcSwklCeMLRT9PSZFv+SqVPpG8tn0ZHAO1nmUne8Jy
4UTSHoslnTqiGFSGe0U8mLlt
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:53 2025 by rpki-client