Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/zvRWWZJOSpvNkj5Vh4L7z1fuoDQ.roa
File: zvRWWZJOSpvNkj5Vh4L7z1fuoDQ.roa (raw, json)
Hash identifier: IPxGqbErBCddOPr/wMJEc7kkvm8DdOT5zY2kyAJEesQ=
Subject key identifier: CE:F4:56:59:92:4E:4A:9B:CD:92:3E:55:87:82:FB:CF:57:EE:A0:34
Certificate issuer: /CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
Certificate serial: 01338331
Authority key identifier: FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/zvRWWZJOSpvNkj5Vh4L7z1fuoDQ.roa
Signing time: Sat 01 Jan 2022 02:58:49 +0000
ROA not before: Sat 01 Jan 2022 02:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.38.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20153137 (0x1338331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
Validity
Not Before: Jan 1 02:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cef45659924e4a9bcd923e558782fbcf57eea034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:e9:9d:65:44:db:3c:85:3d:ad:a5:7c:98:
ed:34:47:91:b3:b3:78:d3:30:26:ed:69:d9:ce:7e:
3e:bd:bf:3b:5a:1a:89:35:3a:72:4d:f9:85:8d:06:
14:f2:90:70:b5:cf:f3:26:c9:54:cd:d7:dd:ec:76:
95:1f:41:60:6e:b5:a0:15:29:bb:aa:1b:5d:44:19:
ef:af:76:a2:2f:de:89:4c:58:e0:fb:64:0e:55:ac:
87:ed:bc:d3:6f:87:ce:95:bc:a3:7f:4a:44:52:9f:
97:06:eb:25:1c:9a:33:a4:45:1e:f3:86:9d:89:1c:
42:ec:97:a7:86:14:7d:3e:51:78:a8:8b:f7:e9:63:
9c:76:08:6e:8f:af:46:62:a1:04:09:72:c5:d5:17:
f3:2b:86:c2:07:aa:65:e4:71:07:8c:d4:aa:50:1e:
37:5b:c6:3a:0a:e8:d7:58:11:3d:aa:60:86:60:16:
38:b3:bc:9a:27:65:c4:37:36:01:fd:27:24:74:7a:
54:a0:31:5e:cb:fa:c3:9f:00:cf:5d:15:7e:0c:d3:
0b:61:ea:33:cb:ec:a3:e9:4b:1a:79:b8:a0:6d:41:
f3:22:af:b5:3b:a3:12:38:b8:6f:06:32:88:1d:56:
8d:6d:d1:98:9f:61:be:0e:48:c3:c0:ee:ef:cc:81:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:56:59:92:4E:4A:9B:CD:92:3E:55:87:82:FB:CF:57:EE:A0:34
X509v3 Authority Key Identifier:
keyid:FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/zvRWWZJOSpvNkj5Vh4L7z1fuoDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/1-43HrlXoFkpx6oxds8KP_JDt-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.154.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d9:3c:28:17:b5:4a:b9:b0:7f:38:0b:5b:3f:74:25:94:15:
0a:27:88:f4:c9:21:0d:d2:26:96:ab:af:3d:77:0d:55:e8:49:
9c:6a:d9:b9:c4:36:e3:68:31:d5:19:8b:a7:60:f2:e0:13:c4:
ad:34:ec:da:d1:52:dd:eb:89:1c:2c:5d:6b:49:da:8a:c2:df:
62:78:59:fe:62:ed:a8:f7:4a:a9:33:0a:91:5b:c5:5c:3e:64:
15:aa:52:5a:05:98:ee:ec:b1:03:32:65:19:4a:d4:0f:48:69:
7b:62:aa:16:60:36:19:a0:83:f7:02:d0:28:9c:2a:34:19:93:
28:f4:5a:46:30:22:26:36:52:31:7e:05:bf:95:b5:89:d3:df:
c5:04:11:94:ba:92:32:80:3d:7a:fe:fa:af:2f:13:2b:27:ab:
07:ac:01:44:4e:c1:ec:18:f6:00:36:da:85:7c:92:a8:a6:a7:
88:33:f2:ac:55:4e:f3:11:7a:ca:2f:94:2c:79:61:66:c4:5a:
af:a0:3d:25:26:fa:c3:f6:3b:06:90:f0:49:c7:df:6b:c8:77:
85:53:92:36:3a:43:5d:7a:cd:ab:73:5a:1f:ae:30:46:a7:17:
da:32:40:6a:6a:e7:bd:24:69:f7:f2:16:20:74:5b:c7:bf:9a:
5a:c8:85:80
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEATODMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjhkYzdhZTU1ZTgxNjRhNzFlYThjNWRiM2MyOGZmYzkwZWRmOWM5MB4XDTIyMDEw
MTAyNTg0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VmNDU2NTk5MjRl
NGE5YmNkOTIzZTU1ODc4MmZiY2Y1N2VlYTAzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHj6Z1lRNs8hT2tpXyY7TRHkbOzeNMwJu1p2c5+Pr2/O1oa
iTU6ck35hY0GFPKQcLXP8ybJVM3X3ex2lR9BYG61oBUpu6obXUQZ7692oi/eiUxY
4PtkDlWsh+2802+HzpW8o39KRFKflwbrJRyaM6RFHvOGnYkcQuyXp4YUfT5ReKiL
9+ljnHYIbo+vRmKhBAlyxdUX8yuGwgeqZeRxB4zUqlAeN1vGOgro11gRPapghmAW
OLO8midlxDc2Af0nJHR6VKAxXsv6w58Az10VfgzTC2HqM8vso+lLGnm4oG1B8yKv
tTujEji4bwYyiB1WjW3RmJ9hvg5Iw8Du78yBjfkCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTO9FZZkk5Km82SPlWHgvvPV+6gNDAfBgNVHSMEGDAWgBT7jceuVegWSnHq
jF2zwo/8kO35yTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNDNIcmxYb0ZrcHg2b3hkczhLUF9KRHQtY2suY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2Y5L2YwODE3Ny1hMzA2LTQwNWEtODY5Zi00ZjBhYmMxNmE5NjQv
MS96dlJXV1pKT1Nwdk5rajVWaDRMN3oxZnVvRFEucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5
L2YwODE3Ny1hMzA2LTQwNWEtODY5Zi00ZjBhYmMxNmE5NjQvMS8xLTQzSHJsWG9G
a3B4Nm94ZHM4S1BfSkR0LWNrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSaaMA0GCSqGSIb3DQEBCwUA
A4IBAQBU2TwoF7VKubB/OAtbP3QllBUKJ4j0ySEN0iaWq689dw1V6Emcatm5xDbj
aDHVGYunYPLgE8StNOza0VLd64kcLF1rSdqKwt9ieFn+Yu2o90qpMwqRW8VcPmQV
qlJaBZju7LEDMmUZStQPSGl7YqoWYDYZoIP3AtAonCo0GZMo9FpGMCImNlIxfgW/
lbWJ09/FBBGUupIygD16/vqvLxMrJ6sHrAFETsHsGPYANtqFfJKopqeIM/KsVU7z
EXrKL5QseWFmxFqvoD0lJvrD9jsGkPBJx99ryHeFU5I2OkNdes2rc1ofrjBGpxfa
MkBqaue9JGn38hYgdFvHv5payIWA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:36 2023 by rpki-client on console-ams.rpki-client.org