Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sJ3GhWXlm8BwU5T9wuTL_CIZzMs.roa
File: sJ3GhWXlm8BwU5T9wuTL_CIZzMs.roa (raw, json)
Hash identifier: gVDpiYfNGvTtDgZq1/sLIrkBmvTJgE4yEHyceaXWlOk=
Subject key identifier: B0:9D:C6:85:65:E5:9B:C0:70:53:94:FD:C2:E4:CB:FC:22:19:CC:CB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184BE10C7D7016AD5AB83505FFA74CE150E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sJ3GhWXlm8BwU5T9wuTL_CIZzMs.roa
Signing time: Mon 28 Nov 2022 11:48:01 +0000
ROA not before: Mon 28 Nov 2022 11:48:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 194.15.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:10:c7:d7:01:6a:d5:ab:83:50:5f:fa:74:ce:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 28 11:48:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b09dc68565e59bc0705394fdc2e4cbfc2219cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:77:90:5c:42:67:28:cb:2b:30:2d:fa:62:d3:
e5:a1:d7:88:d9:fe:b5:df:74:37:53:af:c4:da:33:
2b:d0:98:b9:bd:09:62:2f:64:13:ce:29:0b:84:05:
df:72:9e:12:b5:b0:8a:a8:1d:0b:11:23:7b:60:51:
ac:1a:32:cb:4c:c2:74:0f:fd:96:fa:b0:75:10:9d:
e6:3c:86:68:69:2f:d8:2a:f3:02:dd:ec:3d:66:e0:
db:06:95:b6:c1:4a:b0:f3:29:25:17:81:c8:26:62:
bc:14:16:d9:cb:68:a9:bf:a8:20:93:2f:0b:5b:91:
9a:00:1a:11:ef:da:70:0f:9f:36:ad:e0:72:39:15:
2d:59:44:42:ae:5d:da:d4:19:34:c3:1e:ab:b8:8a:
1e:b9:a3:51:0a:6c:f3:cd:5c:f8:23:5e:37:15:79:
cc:e5:de:b6:6f:0f:1d:0e:95:67:d0:72:45:40:e5:
97:81:42:76:da:1e:1e:be:ac:38:59:5e:48:e0:1a:
d2:9d:f7:83:95:f9:35:3f:85:f5:fe:af:c0:90:93:
7d:dd:d1:e1:1c:b1:5e:3d:12:c3:6e:e9:75:31:82:
36:22:95:19:ba:a2:2b:74:9f:58:4a:f4:65:47:52:
35:6d:ef:dc:92:b7:fd:d6:c6:a8:5a:8a:70:bd:2f:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:C6:85:65:E5:9B:C0:70:53:94:FD:C2:E4:CB:FC:22:19:CC:CB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sJ3GhWXlm8BwU5T9wuTL_CIZzMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.53.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cc:69:3b:9d:56:17:85:2a:6c:c7:85:76:d5:6d:a9:2d:81:
50:58:e5:b2:d8:45:3a:33:0d:ae:fc:69:24:ed:c6:48:66:14:
b6:c9:78:12:c8:53:81:93:9e:25:a4:ec:8c:35:1a:2a:92:35:
03:f6:03:44:ac:9c:11:cb:e8:3d:a8:30:0a:3f:9c:67:20:0a:
04:b2:32:4e:17:a5:26:dc:c1:d8:47:46:74:bf:09:af:1d:d4:
7e:b8:cf:03:d6:b4:95:68:06:15:19:d8:7e:0b:d0:6b:12:4e:
44:b1:8e:08:46:df:b8:18:f0:5f:9c:ab:24:62:c5:8c:94:77:
20:97:58:b4:15:37:4a:f2:d5:a4:84:5d:8b:3e:9e:07:e8:76:
ff:66:c4:89:f0:69:56:30:1c:ee:f9:41:67:f9:b1:7c:9f:df:
69:a7:04:9a:86:79:dc:f8:aa:b0:28:ea:8f:7e:e7:3a:1d:75:
86:0b:d7:2b:64:c3:df:15:ec:6f:09:dd:09:af:f1:a4:58:8f:
b3:12:f4:4c:d3:a5:9d:d2:69:5e:e3:e0:37:b5:0c:3d:f1:8b:
4c:b0:29:d6:04:48:ec:db:bd:e9:c4:83:9b:37:b2:d3:4a:c0:
67:4b:36:d9:cc:d4:44:61:94:1d:52:9c:e1:7d:cb:ce:07:35:
14:cf:3b:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS+EMfXAWrVq4NQX/p0zhUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMTI4MTE0ODAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDlkYzY4NTY1ZTU5YmMwNzA1Mzk0ZmRjMmU0Y2JmYzIyMTljY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgneQXEJnKMsrMC36YtPlodeI2f61
33Q3U6/E2jMr0Ji5vQliL2QTzikLhAXfcp4StbCKqB0LESN7YFGsGjLLTMJ0D/2W
+rB1EJ3mPIZoaS/YKvMC3ew9ZuDbBpW2wUqw8yklF4HIJmK8FBbZy2ipv6ggky8L
W5GaABoR79pwD582reByORUtWURCrl3a1Bk0wx6ruIoeuaNRCmzzzVz4I143FXnM
5d62bw8dDpVn0HJFQOWXgUJ22h4evqw4WV5I4BrSnfeDlfk1P4X1/q/AkJN93dHh
HLFePRLDbul1MYI2IpUZuqIrdJ9YSvRlR1I1be/ckrf91saoWopwvS/sPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCdxoVl5ZvAcFOU/cLky/wiGczLMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvc0ozR2hXWGxtOEJ3VTVUOXd1VExfQ0laek1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg81MA0G
CSqGSIb3DQEBCwUAA4IBAQBUzGk7nVYXhSpsx4V21W2pLYFQWOWy2EU6Mw2u/Gkk
7cZIZhS2yXgSyFOBk54lpOyMNRoqkjUD9gNErJwRy+g9qDAKP5xnIAoEsjJOF6Um
3MHYR0Z0vwmvHdR+uM8D1rSVaAYVGdh+C9BrEk5EsY4IRt+4GPBfnKskYsWMlHcg
l1i0FTdK8tWkhF2LPp4H6Hb/ZsSJ8GlWMBzu+UFn+bF8n99ppwSahnnc+KqwKOqP
fuc6HXWGC9crZMPfFexvCd0Jr/GkWI+zEvRM06Wd0mle4+A3tQw98YtMsCnWBEjs
273pxIObN7LTSsBnSzbZzNREYZQdUpzhfcvOBzUUzzuL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org