Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/zkwUE9EoQfDUaMq109JLKyy3mZQ.roa
File: zkwUE9EoQfDUaMq109JLKyy3mZQ.roa (raw, json)
Hash identifier: soh5YkmyV1EtFJcFNMsYvAYkV7bwSFN9r6TwfnGv8Ro=
Subject key identifier: CE:4C:14:13:D1:28:41:F0:D4:68:CA:B5:D3:D2:4B:2B:2C:B7:99:94
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 01C238BB
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/zkwUE9EoQfDUaMq109JLKyy3mZQ.roa
Signing time: Sat 01 Jan 2022 04:01:43 +0000
ROA not before: Sat 01 Jan 2022 04:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204818
IP address blocks: 193.218.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29505723 (0x1c238bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jan 1 04:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce4c1413d12841f0d468cab5d3d24b2b2cb79994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:93:7a:7a:f2:8a:ef:cd:6b:67:3c:5c:ec:
fa:fe:f7:4f:68:56:80:28:29:e4:34:d6:f9:82:c2:
00:28:bf:8d:80:69:74:3c:24:8f:08:32:c2:ab:fc:
b7:9a:67:1b:2c:84:99:8f:6f:bc:91:0d:a4:e3:d0:
a3:7a:e8:bf:41:2b:ac:11:c0:3f:77:61:ed:e3:ff:
38:c3:06:65:4e:d0:c0:34:da:2a:64:97:1c:5c:d9:
11:22:fa:87:ef:80:14:e5:8b:80:01:cb:63:9c:09:
0c:91:9c:43:b8:cb:10:80:9e:ed:18:d8:cb:c9:96:
42:21:c1:da:e2:c9:a5:35:51:bf:3f:f0:33:ea:3b:
09:51:cb:eb:f4:83:02:5c:b0:fc:8b:2f:21:0f:d5:
f4:3c:8b:4e:f3:d7:34:6c:63:17:12:56:e0:02:46:
77:02:e0:4e:0a:2a:85:07:4c:69:2a:63:80:83:a1:
66:c5:c6:01:1c:96:8a:7c:13:55:6a:57:e3:fc:75:
88:ce:cb:a7:04:a8:cf:ad:23:23:6e:9c:fb:a6:9b:
d5:73:79:65:be:3b:1e:26:aa:26:88:3f:1c:0c:93:
9b:41:49:e7:cf:98:03:21:fd:ae:54:02:98:07:13:
b7:12:d2:41:da:04:86:82:34:27:4e:c1:40:f4:be:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:14:13:D1:28:41:F0:D4:68:CA:B5:D3:D2:4B:2B:2C:B7:99:94
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/zkwUE9EoQfDUaMq109JLKyy3mZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:bc:9d:bd:4b:5a:dd:b6:e8:d4:5d:2a:06:e1:d3:ec:8c:25:
48:94:79:ff:4c:fc:46:69:30:f5:a9:45:81:78:7b:0c:dc:f7:
81:6f:d5:33:4a:54:de:6f:d3:d1:c5:4c:b7:a0:4c:96:9e:c0:
e5:17:58:a6:8f:1e:24:c7:40:b0:20:e4:96:c5:25:2e:ce:12:
e7:1b:2d:da:8f:e3:e0:d6:0a:54:4d:94:fa:6b:1d:40:32:01:
96:5b:1a:a0:aa:2b:82:b9:54:9f:b5:5f:78:02:14:31:6b:c5:
f0:1f:8c:8b:18:9e:4a:97:35:57:78:6a:af:79:68:ac:2e:b2:
52:3a:8c:9a:ea:ba:3b:09:5a:c6:51:61:48:9a:b5:fe:db:9f:
50:5a:9d:f2:3e:0c:65:9c:e2:56:02:03:7d:09:15:c4:15:14:
aa:ee:d9:88:59:46:2f:0a:1c:6e:82:7e:c9:e4:1d:f5:9e:6d:
a1:0d:21:25:2b:63:5c:4f:20:e3:07:a7:bc:28:24:59:a4:70:
59:69:7c:da:85:2c:6c:dc:5a:d5:d6:20:05:90:c1:b9:cf:8e:
e9:05:b6:cf:ae:e5:0b:a4:8a:d7:dc:16:82:cf:6f:b2:77:b4:
64:2b:3e:61:33:a7:e5:19:be:66:f8:d5:a8:4a:42:ce:a5:12:
97:fa:8e:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAcI4uzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmVlYjI0MmZiMGFmYWEwMzdkOWNhZjU2MDRjNjU4N2U0MGRlM2I1MB4XDTIyMDEw
MTA0MDE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2U0YzE0MTNkMTI4
NDFmMGQ0NjhjYWI1ZDNkMjRiMmIyY2I3OTk5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqUk3p68orvzWtnPFzs+v73T2hWgCgp5DTW+YLCACi/jYBp
dDwkjwgywqv8t5pnGyyEmY9vvJENpOPQo3rov0ErrBHAP3dh7eP/OMMGZU7QwDTa
KmSXHFzZESL6h++AFOWLgAHLY5wJDJGcQ7jLEICe7RjYy8mWQiHB2uLJpTVRvz/w
M+o7CVHL6/SDAlyw/IsvIQ/V9DyLTvPXNGxjFxJW4AJGdwLgTgoqhQdMaSpjgIOh
ZsXGARyWinwTVWpX4/x1iM7LpwSoz60jI26c+6ab1XN5Zb47HiaqJog/HAyTm0FJ
58+YAyH9rlQCmAcTtxLSQdoEhoI0J07BQPS+ic0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOTBQT0ShB8NRoyrXT0ksrLLeZlDAfBgNVHSMEGDAWgBQi7rJC+wr6oDfZ
yvVgTGWH5A3jtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l1NnlRdnNLLXFBMzJjcjFZRXhsaC1RTjQ3VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvZmQ2MmMwLWU1ZGItNGQ5NC1iYTBmLTI1MTU2MmYwMGZjNS8x
L3prd1VFOUVvUWZEVWFNcTEwOUpMS3l5M21aUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
ZmQ2MmMwLWU1ZGItNGQ5NC1iYTBmLTI1MTU2MmYwMGZjNS8xL0l1NnlRdnNLLXFB
MzJjcjFZRXhsaC1RTjQ3VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHaeDANBgkqhkiG9w0BAQsFAAOC
AQEATbydvUta3bbo1F0qBuHT7IwlSJR5/0z8Rmkw9alFgXh7DNz3gW/VM0pU3m/T
0cVMt6BMlp7A5RdYpo8eJMdAsCDklsUlLs4S5xst2o/j4NYKVE2U+msdQDIBllsa
oKorgrlUn7VfeAIUMWvF8B+MixieSpc1V3hqr3lorC6yUjqMmuq6OwlaxlFhSJq1
/tufUFqd8j4MZZziVgIDfQkVxBUUqu7ZiFlGLwocboJ+yeQd9Z5toQ0hJStjXE8g
4wenvCgkWaRwWWl82oUsbNxa1dYgBZDBuc+O6QW2z67lC6SK19wWgs9vsne0ZCs+
YTOn5Rm+ZvjVqEpCzqUSl/qOQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:17 2024 by rpki-client on console-ams.rpki-client.org