Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/QPzF7zpXmqXQkTBIMRvcP0wgfuY.roa
File: QPzF7zpXmqXQkTBIMRvcP0wgfuY.roa (raw, json)
Hash identifier: 9OthgxyG/XekgVc//+2u/nVXneZmJDls3MRWi1P1n0Y=
Subject key identifier: 40:FC:C5:EF:3A:57:9A:A5:D0:91:30:48:31:1B:DC:3F:4C:20:7E:E6
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 021A25D7
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/QPzF7zpXmqXQkTBIMRvcP0wgfuY.roa
Signing time: Sat 01 Jan 2022 06:00:54 +0000
ROA not before: Sat 01 Jan 2022 06:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211339
IP address blocks: 193.228.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35268055 (0x21a25d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Jan 1 06:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40fcc5ef3a579aa5d0913048311bdc3f4c207ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:cf:42:9b:00:67:ff:a6:06:59:bd:45:41:
c2:54:76:84:5e:74:06:cf:93:8c:47:b1:8e:39:63:
6e:cf:25:bb:d4:07:b3:99:27:c8:26:44:f9:31:7f:
c8:e8:83:8d:58:7e:c8:0a:39:a9:de:5f:f7:39:2a:
7b:4e:aa:d7:d6:0f:ec:66:fe:b5:d3:04:02:cb:af:
42:7c:d6:b4:a1:3d:00:0d:e3:8f:f1:f8:48:31:70:
99:f6:c3:fa:99:bd:17:3f:b3:e8:cd:19:28:65:36:
75:2b:ca:94:c6:99:d3:1e:6b:1c:67:65:25:39:76:
19:74:41:e2:96:bf:f2:40:e5:b4:01:b8:03:a3:31:
65:6f:f6:5d:ec:26:25:dd:0d:40:d6:f8:ae:28:47:
87:1b:80:9a:63:b3:d8:f6:d6:1b:07:eb:34:29:39:
9c:c4:e6:9b:ed:d3:0d:62:5e:ce:03:ca:8f:26:c5:
0b:a0:c8:81:30:ee:72:6f:af:c6:fb:97:23:17:52:
e0:ab:16:5b:50:13:84:ae:af:90:03:9e:63:bb:58:
a8:0f:64:08:eb:31:b0:57:6b:09:18:94:41:29:6f:
3a:3a:80:26:19:b6:f3:d8:b4:00:79:b3:3d:d4:31:
ea:78:77:5e:4f:e2:5e:80:58:77:f1:72:9d:4f:4a:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FC:C5:EF:3A:57:9A:A5:D0:91:30:48:31:1B:DC:3F:4C:20:7E:E6
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/QPzF7zpXmqXQkTBIMRvcP0wgfuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:53:cb:54:47:90:14:6a:b8:3a:a3:3f:9e:c2:6c:a4:71:54:
00:fa:88:ab:cc:05:63:e2:18:9c:08:62:f8:1a:62:63:6c:46:
bb:7c:3e:3d:7d:67:34:58:d5:60:8f:13:b5:01:be:13:e5:0e:
2f:75:f1:fb:ca:6d:86:79:6d:62:67:71:f6:46:92:76:ee:43:
e3:b4:31:11:3c:37:d0:b2:bb:d7:89:53:6b:52:4b:4d:2a:04:
26:75:99:6e:9a:3e:7e:d0:4c:54:86:25:8c:61:0a:78:68:6a:
bd:42:1b:6d:43:7d:69:58:5a:69:63:65:d0:11:3a:5c:d3:07:
e0:d5:d6:f6:87:bf:f9:b8:7d:6d:18:19:8d:c8:67:ec:40:e7:
8e:55:b8:ce:c2:f6:c3:38:bf:5e:f9:ab:a6:40:c1:7b:c0:6e:
93:73:7f:a0:42:77:55:71:a5:e1:05:aa:07:98:85:82:5c:4c:
d8:c6:43:18:2c:d0:05:74:9e:29:31:c1:a9:f7:d7:dd:42:af:
4e:20:96:a6:ec:8c:77:bd:d5:85:7e:b7:4c:2c:f2:e8:b3:ff:
1c:ad:84:a1:ba:f9:c4:61:95:d8:25:93:e6:e5:3c:3d:ff:71:
a0:9a:80:e8:ff:88:d9:a0:3e:84:20:3f:cd:53:66:c8:2b:21:
29:58:27:9d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAhol1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MWRkNzc3Y2U3ZDcwOTI2OGMwYzU1YTU5YzAwYzZhZWE1YjIxOWJkMB4XDTIyMDEw
MTA2MDA1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDBmY2M1ZWYzYTU3
OWFhNWQwOTEzMDQ4MzExYmRjM2Y0YzIwN2VlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMpJz0KbAGf/pgZZvUVBwlR2hF50Bs+TjEexjjljbs8lu9QH
s5knyCZE+TF/yOiDjVh+yAo5qd5f9zkqe06q19YP7Gb+tdMEAsuvQnzWtKE9AA3j
j/H4SDFwmfbD+pm9Fz+z6M0ZKGU2dSvKlMaZ0x5rHGdlJTl2GXRB4pa/8kDltAG4
A6MxZW/2XewmJd0NQNb4rihHhxuAmmOz2PbWGwfrNCk5nMTmm+3TDWJezgPKjybF
C6DIgTDucm+vxvuXIxdS4KsWW1AThK6vkAOeY7tYqA9kCOsxsFdrCRiUQSlvOjqA
Jhm289i0AHmzPdQx6nh3Xk/iXoBYd/FynU9KEIsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRA/MXvOleapdCRMEgxG9w/TCB+5jAfBgNVHSMEGDAWgBTB3Xd859cJJowM
VaWcAMaupbIZvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dkMTNmT2ZYQ1NhTURGV2xuQURHcnFXeUdiMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTEvNTllMTA3LTcwNGYtNDQ4MC1iNjllLWYwNmE3NjFjOWEyMC8x
L1FQekY3enBYbXFYUWtUQklNUnZjUDB3Z2Z1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEv
NTllMTA3LTcwNGYtNDQ4MC1iNjllLWYwNmE3NjFjOWEyMC8xL3dkMTNmT2ZYQ1Nh
TURGV2xuQURHcnFXeUdiMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHkfDANBgkqhkiG9w0BAQsFAAOC
AQEAoFPLVEeQFGq4OqM/nsJspHFUAPqIq8wFY+IYnAhi+BpiY2xGu3w+PX1nNFjV
YI8TtQG+E+UOL3Xx+8pthnltYmdx9kaSdu5D47QxETw30LK714lTa1JLTSoEJnWZ
bpo+ftBMVIYljGEKeGhqvUIbbUN9aVhaaWNl0BE6XNMH4NXW9oe/+bh9bRgZjchn
7EDnjlW4zsL2wzi/XvmrpkDBe8Buk3N/oEJ3VXGl4QWqB5iFglxM2MZDGCzQBXSe
KTHBqffX3UKvTiCWpuyMd73VhX63TCzy6LP/HK2Eobr5xGGV2CWT5uU8Pf9xoJqA
6P+I2aA+hCA/zVNmyCshKVgnnQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net