Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9OxwmL86XopG_MMdr7gnpALEMIE.roa
File: 9OxwmL86XopG_MMdr7gnpALEMIE.roa (raw, json)
Hash identifier: 00x1vsopHH3YbVjKygihPVfPAFtWK+gfrFgsoWR694M=
Subject key identifier: F4:EC:70:98:BF:3A:5E:8A:46:FC:C3:1D:AF:B8:27:A4:02:C4:30:81
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07598B15
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9OxwmL86XopG_MMdr7gnpALEMIE.roa
Signing time: Sat 29 Jan 2022 20:48:09 +0000
ROA not before: Sat 29 Jan 2022 20:48:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62205
IP address blocks: 195.177.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123308821 (0x7598b15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 29 20:48:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4ec7098bf3a5e8a46fcc31dafb827a402c43081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:07:42:9e:fe:b3:89:a9:06:3b:56:08:1a:
c7:15:2f:75:58:3f:a3:42:12:4a:be:33:20:94:90:
fe:9e:43:0b:13:f6:a5:66:a8:d2:6e:ac:53:28:16:
d9:f2:50:96:67:73:ec:79:0a:1b:c9:a0:48:c9:17:
55:73:59:ff:03:48:a8:18:ef:f2:00:64:3d:a7:15:
0a:11:28:bf:a6:dd:92:aa:2b:07:41:70:8a:92:e9:
b0:c6:59:78:03:62:5a:9f:6d:1b:45:57:d3:85:75:
21:04:38:c0:e7:1c:b3:01:2b:26:72:a8:3a:b1:de:
6d:ad:a2:69:4e:37:05:5e:3b:85:76:f6:21:97:16:
da:a3:28:0f:7b:9a:7c:67:02:25:1a:8d:ff:cd:36:
b1:c1:ee:fa:28:e4:23:9f:92:7f:e7:65:4a:3e:ca:
cf:17:06:41:2c:75:83:e6:48:7e:e1:de:f5:9a:b4:
fa:30:25:8a:47:67:b9:f9:d9:f6:67:b7:7e:e4:34:
92:9b:98:47:c1:5a:0f:11:fc:37:de:67:df:37:b9:
0f:62:fd:43:cc:1f:04:99:af:9d:c0:a0:97:79:27:
2b:98:75:f0:98:3d:12:2d:d8:a8:9b:d7:12:70:67:
c4:07:68:f9:da:71:ca:e0:17:13:92:b8:99:05:82:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:70:98:BF:3A:5E:8A:46:FC:C3:1D:AF:B8:27:A4:02:C4:30:81
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9OxwmL86XopG_MMdr7gnpALEMIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:13:14:a1:df:3e:61:d3:6b:a1:9f:10:e4:8c:37:36:e6:72:
29:ab:52:3a:06:ba:d8:f7:0b:4e:be:d1:72:e5:cf:67:bc:08:
2a:06:51:0c:7f:25:cd:4e:e9:9d:98:1b:52:06:47:10:e2:09:
44:1a:f8:78:52:da:13:61:65:04:4f:84:82:11:8a:b1:51:34:
bc:26:f5:e8:26:39:f4:34:89:bf:6c:90:04:e8:64:45:36:70:
62:5b:3a:e5:07:af:f0:e1:b3:5a:6a:52:d6:3c:69:fc:ed:9e:
0a:26:9f:35:ad:6a:0d:28:d9:2f:fd:0f:74:ac:ce:59:6e:25:
50:9c:7a:e8:50:32:dd:6c:e2:ed:87:80:c4:4b:04:0a:eb:2f:
39:d6:e6:b6:34:9a:98:bc:77:df:be:12:13:89:d8:00:8f:4d:
20:cd:1c:77:55:22:92:bc:3b:f6:9f:1a:7a:92:dd:78:de:8c:
86:4b:1f:fe:8f:5c:a4:8c:33:50:d4:5d:4b:a1:e8:c2:49:fa:
29:7b:2d:55:f8:18:54:8f:eb:05:a2:a5:b7:a6:f8:84:78:98:
bf:9a:77:16:ae:a4:47:d8:c2:0a:ca:27:39:e2:81:08:d0:d3:
3c:96:61:35:9c:cd:ee:aa:cb:e7:15:17:b6:31:04:5b:c6:59:
41:da:bf:20
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB1mLFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMB4XDTIyMDEy
OTIwNDgwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjRlYzcwOThiZjNh
NWU4YTQ2ZmNjMzFkYWZiODI3YTQwMmM0MzA4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALedB0Ke/rOJqQY7VggaxxUvdVg/o0ISSr4zIJSQ/p5DCxP2
pWao0m6sUygW2fJQlmdz7HkKG8mgSMkXVXNZ/wNIqBjv8gBkPacVChEov6bdkqor
B0FwipLpsMZZeANiWp9tG0VX04V1IQQ4wOccswErJnKoOrHeba2iaU43BV47hXb2
IZcW2qMoD3uafGcCJRqN/802scHu+ijkI5+Sf+dlSj7KzxcGQSx1g+ZIfuHe9Zq0
+jAlikdnufnZ9me3fuQ0kpuYR8FaDxH8N95n3ze5D2L9Q8wfBJmvncCgl3knK5h1
8Jg9Ei3YqJvXEnBnxAdo+dpxyuAXE5K4mQWC9kkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT07HCYvzpeikb8wx2vuCekAsQwgTAfBgNVHSMEGDAWgBSdKkeLsLCOZhsL
L5++iTW8nCoooTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8x
LzlPeHdtTDg2WG9wR19NTWRyN2ducEFMRU1JRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1Z
YkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOxXDANBgkqhkiG9w0BAQsFAAOC
AQEAaxMUod8+YdNroZ8Q5Iw3NuZyKatSOga62PcLTr7RcuXPZ7wIKgZRDH8lzU7p
nZgbUgZHEOIJRBr4eFLaE2FlBE+EghGKsVE0vCb16CY59DSJv2yQBOhkRTZwYls6
5Qev8OGzWmpS1jxp/O2eCiafNa1qDSjZL/0PdKzOWW4lUJx66FAy3Wzi7YeAxEsE
CusvOdbmtjSamLx3374SE4nYAI9NIM0cd1Uikrw79p8aepLdeN6Mhksf/o9cpIwz
UNRdS6Howkn6KXstVfgYVI/rBaKlt6b4hHiYv5p3Fq6kR9jCCsonOeKBCNDTPJZh
NZzN7qrL5xUXtjEEW8ZZQdq/IA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org