Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/a-21QDay_Ip5T0W85tmeVkLtXBk.roa
File: a-21QDay_Ip5T0W85tmeVkLtXBk.roa (raw, json)
Hash identifier: SqfNfwcz1bQivpXWV8CwiMvKRfykR/O2uRMIlw7GP0E=
Subject key identifier: 6B:ED:B5:40:36:B2:FC:8A:79:4F:45:BC:E6:D9:9E:56:42:ED:5C:19
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 08C7E9A5
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/a-21QDay_Ip5T0W85tmeVkLtXBk.roa
Signing time: Sat 01 Jan 2022 12:57:30 +0000
ROA not before: Sat 01 Jan 2022 12:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12676
IP address blocks: 193.108.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147319205 (0x8c7e9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jan 1 12:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bedb54036b2fc8a794f45bce6d99e5642ed5c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:8b:48:34:ee:fd:69:c2:9c:9f:83:a1:7e:
41:f9:b5:68:46:3d:0c:c4:89:6b:de:92:82:5c:2d:
6d:72:cc:3b:61:ba:3d:b2:d5:f0:83:32:11:6a:9e:
43:4a:ed:83:6d:54:56:c2:b5:02:e8:34:f5:d4:86:
6e:63:6e:08:5f:5c:88:30:b2:83:3f:71:c8:2d:c2:
c2:ce:07:fc:07:7a:d9:eb:f6:6d:0f:29:96:8c:67:
dd:a2:e2:af:f8:32:be:8d:f9:3e:b7:0e:44:d7:95:
4d:29:72:a1:b6:23:57:eb:48:0b:dd:be:10:29:2f:
a6:e7:42:f7:00:a6:67:cf:54:3c:9b:d9:6f:e1:b5:
29:46:67:1e:94:79:0b:b3:03:fb:7e:be:85:b2:d1:
a1:08:fc:2b:bc:db:d3:ce:32:6c:45:29:d6:d1:a8:
61:75:a7:5b:aa:37:51:ad:bf:e3:59:bd:0e:60:3c:
2b:da:cc:22:60:48:60:2c:ae:9c:c5:20:c5:cb:70:
7a:70:c6:66:36:59:50:07:4e:e6:dd:a4:2b:f0:25:
89:ae:c8:3c:5c:30:eb:7b:c8:2d:5d:4c:17:19:c6:
ae:84:57:30:af:41:3c:41:e7:32:bf:1a:6a:7d:33:
54:a7:a4:38:85:b5:0a:01:c8:05:95:f3:78:31:16:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:B5:40:36:B2:FC:8A:79:4F:45:BC:E6:D9:9E:56:42:ED:5C:19
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/a-21QDay_Ip5T0W85tmeVkLtXBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.190.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b3:bb:5a:68:61:df:fc:13:14:41:77:8b:96:67:ab:83:02:
0a:96:bc:e7:d3:08:7d:30:15:e3:b7:cd:e5:99:85:0e:33:9b:
4d:b1:a7:fd:51:34:11:85:5b:57:a3:d3:eb:ec:3c:35:48:0c:
8e:0f:64:dc:65:2b:7d:0b:d1:3d:73:0d:5b:44:13:d6:95:be:
b5:8e:d1:37:33:38:1c:11:a1:00:0c:e2:19:cf:4f:8f:af:cb:
bb:58:55:6c:c1:9d:34:90:91:07:06:f8:71:7c:83:9e:1a:4f:
e5:d5:6e:05:3c:66:26:69:a9:37:44:2e:28:9d:1c:02:a0:e7:
ed:d0:66:ef:6f:45:8a:10:86:ec:b4:de:4a:9b:ca:fc:e8:49:
21:8b:00:c3:17:bd:aa:3f:af:e0:88:bd:e3:61:46:09:b5:e3:
0b:1a:27:83:fa:6d:7a:06:cd:ee:d3:a5:8f:db:a5:76:bf:78:
6e:c0:5c:a1:fa:94:ac:fd:3c:f5:3d:8f:30:08:4f:de:95:89:
1a:16:a8:22:29:8a:d8:4e:ea:60:4d:7c:b8:fc:e5:34:b7:b1:
7d:8f:63:48:98:8a:2c:5e:8e:b8:cd:bf:2d:d0:f1:29:dc:e5:
02:93:02:3f:f0:b4:fe:e9:d3:93:82:6c:6b:98:57:b1:58:38:
bf:08:17:ab
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECMfppTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZTVjODUyOGY4MTc4N2M0ODljNTRhOTkzODM5MjY5ZjVhNmIxZjk0MB4XDTIyMDEw
MTEyNTczMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJlZGI1NDAzNmIy
ZmM4YTc5NGY0NWJjZTZkOTllNTY0MmVkNWMxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIazi0g07v1pwpyfg6F+Qfm1aEY9DMSJa96SglwtbXLMO2G6
PbLV8IMyEWqeQ0rtg21UVsK1Aug09dSGbmNuCF9ciDCygz9xyC3Cws4H/Ad62ev2
bQ8ploxn3aLir/gyvo35PrcORNeVTSlyobYjV+tIC92+ECkvpudC9wCmZ89UPJvZ
b+G1KUZnHpR5C7MD+36+hbLRoQj8K7zb084ybEUp1tGoYXWnW6o3Ua2/41m9DmA8
K9rMImBIYCyunMUgxctwenDGZjZZUAdO5t2kK/Alia7IPFww63vILV1MFxnGroRX
MK9BPEHnMr8aan0zVKekOIW1CgHIBZXzeDEWf6ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRr7bVANrL8inlPRbzm2Z5WQu1cGTAfBgNVHSMEGDAWgBR+XIUo+BeHxInF
Spk4OSafWmsflDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZseUZLUGdYaDhTSnhVcVpPRGttbjFwckg1US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvZWExMGI1LTIxZjYtNDZiOS1hYWQ2LTNmN2EzZTAyNWU4Yi8x
L2EtMjFRRGF5X0lwNVQwVzg1dG1lVmtMdFhCay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
ZWExMGI1LTIxZjYtNDZiOS1hYWQ2LTNmN2EzZTAyNWU4Yi8xL2ZseUZLUGdYaDhT
SnhVcVpPRGttbjFwckg1US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFsvjANBgkqhkiG9w0BAQsFAAOC
AQEAEbO7Wmhh3/wTFEF3i5Znq4MCCpa859MIfTAV47fN5ZmFDjObTbGn/VE0EYVb
V6PT6+w8NUgMjg9k3GUrfQvRPXMNW0QT1pW+tY7RNzM4HBGhAAziGc9Pj6/Lu1hV
bMGdNJCRBwb4cXyDnhpP5dVuBTxmJmmpN0QuKJ0cAqDn7dBm729FihCG7LTeSpvK
/OhJIYsAwxe9qj+v4Ii942FGCbXjCxong/ptegbN7tOlj9uldr94bsBcofqUrP08
9T2PMAhP3pWJGhaoIimK2E7qYE18uPzlNLexfY9jSJiKLF6OuM2/LdDxKdzlApMC
P/C0/unTk4Jsa5hXsVg4vwgXqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:41 2024 by rpki-client on console-fra.rpki-client.org