Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/lF4WwY4N6pVD9DQV-pU7iEOpSzY.roa
File: lF4WwY4N6pVD9DQV-pU7iEOpSzY.roa (raw, json)
Hash identifier: qOepq/uhxCOapmn3NPF46vBL3EeFo6dlZtsUiXFqdgM=
Subject key identifier: 94:5E:16:C1:8E:0D:EA:95:43:F4:34:15:FA:95:3B:88:43:A9:4B:36
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018C5A3F4AEFC86BE83F7D5564D4A0675B4D
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/lF4WwY4N6pVD9DQV-pU7iEOpSzY.roa
Signing time: Mon 11 Dec 2023 18:59:06 +0000
ROA not before: Mon 11 Dec 2023 18:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.44.0/22 maxlen: 22
195.179.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:3f:4a:ef:c8:6b:e8:3f:7d:55:64:d4:a0:67:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Dec 11 18:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=945e16c18e0dea9543f43415fa953b8843a94b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:c9:a9:01:f9:bb:ee:58:45:dd:cb:ab:71:
49:50:39:13:2c:d6:f1:27:c5:8a:92:9e:f8:89:4c:
58:0d:7a:10:21:e2:45:f4:26:95:3d:e0:cb:71:2d:
54:77:2d:53:b4:85:70:ee:7f:75:5d:63:cc:f2:7c:
ac:0c:6f:e2:03:a8:3e:84:d6:73:5a:96:fa:7b:56:
b6:2f:41:9d:b0:0c:01:99:74:5f:9d:77:99:bf:31:
fa:0b:f2:fb:df:cd:2a:58:02:0e:c3:cc:2e:fc:08:
aa:41:8d:a2:8d:0d:ff:8a:f4:73:4a:f7:0d:7d:f4:
88:17:7e:78:6c:aa:d9:5c:61:67:b8:65:3c:31:30:
19:f9:5a:f8:b7:fa:94:27:5a:bd:9c:73:35:31:6d:
4e:f5:be:1a:e3:d3:b7:77:b1:71:6d:7a:0f:9b:e9:
6c:93:da:b1:86:d9:48:8a:18:ea:1b:f0:3a:c3:1a:
14:1f:56:13:83:62:05:68:2f:57:a6:e4:4e:4e:c0:
65:9c:94:49:56:c9:27:aa:71:8c:96:f8:41:f1:b7:
94:de:45:ca:92:df:ec:f4:90:15:e3:dc:46:77:66:
43:f3:2c:40:05:01:e5:81:0f:b2:27:ac:c2:54:66:
05:fd:15:1e:0a:03:c7:9c:f1:09:3b:e3:b4:4f:ce:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:16:C1:8E:0D:EA:95:43:F4:34:15:FA:95:3B:88:43:A9:4B:36
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/lF4WwY4N6pVD9DQV-pU7iEOpSzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.44.0/22
195.179.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:80:77:e8:ce:b5:85:19:d2:2e:4c:e5:4e:9c:10:9a:44:f6:
43:ad:4d:e2:be:c1:26:84:6b:9c:6b:39:40:cf:4c:5d:37:90:
3f:d3:a3:28:3f:f8:25:ef:26:1a:8d:85:8e:f9:de:4a:33:69:
52:da:ff:86:25:2c:c7:c9:5e:1d:1b:7c:f0:0a:28:a4:50:18:
84:d0:d4:bd:19:61:8e:82:26:a1:42:18:8b:99:8e:b5:e3:4c:
ed:6d:02:51:15:53:4c:89:d8:b6:01:64:9e:46:53:b6:00:02:
5d:b7:c2:00:7d:c2:1c:59:9c:72:c6:b7:25:aa:f9:50:a8:10:
be:69:cc:a5:33:b0:e5:57:1f:67:2a:88:a5:98:55:bd:9d:6c:
e1:d9:83:57:f9:b1:40:1d:07:2b:3a:94:8d:75:5b:a6:aa:ce:
02:53:a1:49:16:ab:9f:a2:04:db:b8:f0:bb:bf:6b:e9:7b:9b:
68:cb:0b:f9:bf:a7:83:a3:d9:98:ee:7b:3e:c3:a5:ef:59:43:
a4:fe:25:3b:5d:39:5e:f4:3f:af:0e:3f:7c:65:4f:09:94:c4:
be:b2:5c:cd:60:c6:b9:92:dd:c9:2f:cd:29:7a:6f:f8:63:df:
04:a1:9b:4a:88:fd:32:e4:3d:a5:b4:7d:23:89:13:62:e7:4f:
3e:80:ac:3e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxaP0rvyGvoP31VZNSgZ1tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMxMjExMTg1OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDVlMTZjMThlMGRlYTk1NDNmNDM0MTVmYTk1M2I4ODQzYTk0YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsHJqQH5u+5YRd3Lq3FJUDkTLNbx
J8WKkp74iUxYDXoQIeJF9CaVPeDLcS1Udy1TtIVw7n91XWPM8nysDG/iA6g+hNZz
Wpb6e1a2L0GdsAwBmXRfnXeZvzH6C/L7380qWAIOw8wu/AiqQY2ijQ3/ivRzSvcN
ffSIF354bKrZXGFnuGU8MTAZ+Vr4t/qUJ1q9nHM1MW1O9b4a49O3d7FxbXoPm+ls
k9qxhtlIihjqG/A6wxoUH1YTg2IFaC9XpuROTsBlnJRJVsknqnGMlvhB8beU3kXK
kt/s9JAV49xGd2ZD8yxABQHlgQ+yJ6zCVGYF/RUeCgPHnPEJO+O0T85JsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJReFsGODeqVQ/Q0FfqVO4hDqUs2MB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvbEY0V3dZNE42cFZEOURRVi1wVTdpRU9wU3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw7MsAwQC
w7NQMA0GCSqGSIb3DQEBCwUAA4IBAQCzgHfozrWFGdIuTOVOnBCaRPZDrU3ivsEm
hGucazlAz0xdN5A/06MoP/gl7yYajYWO+d5KM2lS2v+GJSzHyV4dG3zwCiikUBiE
0NS9GWGOgiahQhiLmY6140ztbQJRFVNMidi2AWSeRlO2AAJdt8IAfcIcWZxyxrcl
qvlQqBC+acylM7DlVx9nKoilmFW9nWzh2YNX+bFAHQcrOpSNdVumqs4CU6FJFquf
ogTbuPC7v2vpe5toywv5v6eDo9mY7ns+w6XvWUOk/iU7XTle9D+vDj98ZU8JlMS+
slzNYMa5kt3JL80pem/4Y98EoZtKiP0y5D2ltH0jiRNi508+gKw+
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:33 2025 by rpki-client