Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/E5QRew06a--RQtDQ1HFnq1xzV04.roa
File: E5QRew06a--RQtDQ1HFnq1xzV04.roa (raw, json)
Hash identifier: 8a2ojHD5341JWkROYHfBHGsf0ytD1fZIrU0goTbE9fE=
Subject key identifier: 13:94:11:7B:0D:3A:6B:EF:91:42:D0:D0:D4:71:67:AB:5C:73:57:4E
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 0830492C
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/E5QRew06a--RQtDQ1HFnq1xzV04.roa
Signing time: Sat 01 Jan 2022 09:54:54 +0000
ROA not before: Sat 01 Jan 2022 09:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29221
IP address blocks: 195.85.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137382188 (0x830492c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Jan 1 09:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1394117b0d3a6bef9142d0d0d47167ab5c73574e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:3a:00:88:d2:82:2d:c5:09:2e:bb:1a:91:
21:f3:a9:5e:83:7e:5a:46:0c:7e:d3:08:d2:af:31:
b6:a6:07:ee:e2:25:76:54:72:7c:20:07:c1:cc:ec:
d2:a5:2d:99:5a:44:10:ce:05:e9:d0:ca:02:01:1f:
c7:7a:9e:48:38:6b:9a:27:64:da:07:1a:30:4a:9a:
94:6b:4e:21:0b:19:0f:b6:e3:5e:d4:99:e5:93:0c:
f2:d2:d2:bc:fb:1d:57:dc:8b:47:f9:28:ce:36:d2:
22:8f:56:73:06:c4:de:8e:e0:ed:85:e1:68:f9:c1:
a1:47:e2:04:11:27:0b:c1:e3:bd:76:59:2f:26:d7:
39:5b:23:72:8c:bb:29:73:74:33:00:36:e1:69:d7:
76:2b:0f:4f:6d:bb:83:60:91:1b:d0:32:77:31:21:
12:4a:95:2b:6f:96:ef:79:4a:7b:a5:51:90:98:83:
be:1e:bd:b9:da:34:f8:c0:ed:02:3e:14:5e:39:b9:
bf:19:28:e8:60:45:2c:a3:4a:f9:95:e9:86:da:64:
36:67:c8:d2:e2:2a:e7:a6:fd:5d:f2:a7:bb:f0:3a:
40:10:0a:f8:f8:33:32:9b:4d:7c:fd:ca:db:60:b7:
8d:ee:97:b6:b3:fc:87:68:80:77:ac:57:21:c2:fa:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:11:7B:0D:3A:6B:EF:91:42:D0:D0:D4:71:67:AB:5C:73:57:4E
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/E5QRew06a--RQtDQ1HFnq1xzV04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.242.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f5:2e:4b:37:65:dc:49:48:1e:d7:72:1a:8e:54:f3:ff:98:
4d:02:e9:4e:ca:42:f9:50:64:7d:32:3d:c6:b3:39:8c:64:ca:
64:23:bb:54:0f:7b:bb:04:4d:97:93:77:62:87:4c:bf:eb:8e:
33:a0:17:76:55:84:c1:9b:9e:4c:ef:4a:f4:6f:0b:68:cf:ff:
d9:17:5a:89:04:c5:e4:5e:4f:1e:89:a7:08:60:a8:ab:05:8f:
3a:ba:53:03:29:f8:ab:da:26:a2:35:82:81:af:d2:79:11:6c:
56:c1:ee:38:72:ab:33:bd:5f:00:4f:4c:75:ce:14:66:9b:06:
c0:3e:57:af:aa:f5:5e:dc:11:f9:bb:03:9f:47:9d:82:de:be:
36:87:50:31:e1:cf:1c:25:5d:e8:ad:9c:ae:f1:89:af:c2:68:
f0:43:7e:a0:c3:7d:5b:45:a0:0d:2a:84:20:d6:dd:39:31:ea:
85:9c:87:8f:ab:2f:91:b5:06:9a:25:8c:f8:0c:ae:c9:2c:9e:
3c:6e:b4:37:30:64:89:11:ee:55:65:e7:98:37:ed:b0:c9:e3:
87:1b:86:f7:2e:54:66:93:57:c0:d4:4a:c9:39:83:16:cd:2b:
f6:0c:33:47:c8:70:9d:16:be:08:fb:28:eb:a4:17:6d:2f:6a:
d8:a2:47:74
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDBJLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YmY2YWMwZmIwMzkyNjczNDU0YzM5NDdmNDM1N2U0NTk0ZWQyNjZkMB4XDTIyMDEw
MTA5NTQ1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTM5NDExN2IwZDNh
NmJlZjkxNDJkMGQwZDQ3MTY3YWI1YzczNTc0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIzOgCI0oItxQkuuxqRIfOpXoN+WkYMftMI0q8xtqYH7uIl
dlRyfCAHwczs0qUtmVpEEM4F6dDKAgEfx3qeSDhrmidk2gcaMEqalGtOIQsZD7bj
XtSZ5ZMM8tLSvPsdV9yLR/kozjbSIo9WcwbE3o7g7YXhaPnBoUfiBBEnC8HjvXZZ
LybXOVsjcoy7KXN0MwA24WnXdisPT227g2CRG9AydzEhEkqVK2+W73lKe6VRkJiD
vh69udo0+MDtAj4UXjm5vxko6GBFLKNK+ZXphtpkNmfI0uIq56b9XfKnu/A6QBAK
+PgzMptNfP3K22C3je6XtrP8h2iAd6xXIcL64FcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQTlBF7DTpr75FC0NDUcWerXHNXTjAfBgNVHSMEGDAWgBRL9qwPsDkmc0VM
OUf0NX5FlO0mbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NfYXNEN0E1Sm5ORlREbEg5RFYtUlpUdEptMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMmQ2MjBlLTVhYTQtNDc1OS1iMDg4LWJhYzIwMDI5MzJkOS8x
L0U1UVJldzA2YS0tUlF0RFExSEZucTF4elYwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MmQ2MjBlLTVhYTQtNDc1OS1iMDg4LWJhYzIwMDI5MzJkOS8xL1NfYXNEN0E1Sm5O
RlREbEg5RFYtUlpUdEptMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNV8jANBgkqhkiG9w0BAQsFAAOC
AQEAVPUuSzdl3ElIHtdyGo5U8/+YTQLpTspC+VBkfTI9xrM5jGTKZCO7VA97uwRN
l5N3YodMv+uOM6AXdlWEwZueTO9K9G8LaM//2RdaiQTF5F5PHomnCGCoqwWPOrpT
Ayn4q9omojWCga/SeRFsVsHuOHKrM71fAE9Mdc4UZpsGwD5Xr6r1XtwR+bsDn0ed
gt6+NodQMeHPHCVd6K2crvGJr8Jo8EN+oMN9W0WgDSqEINbdOTHqhZyHj6svkbUG
miWM+AyuySyePG60NzBkiRHuVWXnmDftsMnjhxuG9y5UZpNXwNRKyTmDFs0r9gwz
R8hwnRa+CPso66QXbS9q2KJHdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org