Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/8aEamukFvWU57ivJ-md5QUNWEBU.roa
File: 8aEamukFvWU57ivJ-md5QUNWEBU.roa (raw, json)
Hash identifier: c2+FTT7FXtSl66eqnz6BH0yhCPKqCtgZjvUEwMlUQWA=
Subject key identifier: F1:A1:1A:9A:E9:05:BD:65:39:EE:2B:C9:FA:67:79:41:43:56:10:15
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 0182929B84F83E9B4080B8D35045392D85B7
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/8aEamukFvWU57ivJ-md5QUNWEBU.roa
Signing time: Fri 12 Aug 2022 15:10:41 +0000
ROA not before: Fri 12 Aug 2022 15:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210987
IP address blocks: 195.230.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:9b:84:f8:3e:9b:40:80:b8:d3:50:45:39:2d:85:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Aug 12 15:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1a11a9ae905bd6539ee2bc9fa67794143561015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:dc:54:15:0b:45:09:8d:11:f6:96:6c:75:
0a:c7:9f:6c:74:91:98:88:f2:e9:85:d2:12:0b:26:
84:ec:dc:52:5d:e5:47:be:c9:4a:89:6e:b5:e2:85:
1d:bb:7a:e1:b4:e0:5b:50:41:db:89:d4:e1:4e:db:
9e:52:8c:1a:47:29:4b:d2:27:52:67:e4:4e:11:2e:
17:b4:cd:88:77:c0:27:04:8f:ad:56:05:24:75:47:
b7:11:53:44:8a:84:ff:30:d3:25:9a:29:79:9c:d6:
08:e2:dc:39:f6:8c:dc:c4:d9:01:5d:53:c6:ce:31:
8b:b9:b6:b0:cc:c1:9d:b3:cb:6b:dc:02:72:07:fd:
2a:4c:ad:34:76:64:ed:06:b6:f5:3d:6c:f4:5d:9b:
a1:eb:68:e3:70:5e:be:ba:35:68:1f:e4:1e:b6:77:
9c:f0:c0:d8:19:87:7e:4d:e9:43:81:ea:d2:c3:fa:
aa:62:89:58:2c:c1:99:f9:5a:29:b7:0a:3d:d3:1c:
64:6c:3e:4a:bf:d9:b7:99:fd:15:ae:69:d6:c3:89:
98:bc:40:6a:b5:40:75:de:99:19:1b:64:92:21:91:
33:78:ba:b6:60:ba:49:76:5d:18:b9:67:4b:da:e7:
df:01:ed:f8:f3:58:4a:2c:ab:4e:2b:be:4f:24:c6:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:1A:9A:E9:05:BD:65:39:EE:2B:C9:FA:67:79:41:43:56:10:15
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/8aEamukFvWU57ivJ-md5QUNWEBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.136.0/24
Signature Algorithm: sha256WithRSAEncryption
60:05:aa:c4:68:1e:c9:08:5f:d8:3a:46:22:5d:34:ea:49:7a:
f9:81:cd:11:0d:d0:b0:37:64:dc:8c:49:8b:22:75:13:6e:f7:
21:56:02:73:0a:06:0b:fd:95:b4:a8:9f:d3:b8:ab:7d:69:c3:
f3:84:cd:21:cd:95:17:4f:4a:9f:8f:24:c7:00:cd:5d:f8:fb:
d7:98:d8:ef:50:1b:45:26:34:cf:dd:7e:59:a1:94:c8:ef:cb:
7f:bc:e6:8e:7b:cd:ea:f2:ef:81:d0:47:26:19:81:ce:04:2a:
07:3e:bb:e3:06:21:9d:0e:fd:d8:59:b4:87:9e:46:53:9f:e6:
65:63:9b:2a:3c:86:03:fd:20:89:c1:6c:cc:7b:29:17:47:2d:
69:e5:4a:8a:fb:0d:be:73:39:73:ae:32:be:9e:97:ec:64:15:
11:0e:b4:57:1c:7f:12:a2:b9:36:84:dd:3e:ac:91:f6:a4:fa:
15:c5:bd:d3:57:59:34:80:df:d9:6a:99:b2:26:78:02:bf:ac:
59:45:7e:50:fb:ca:ac:dc:53:f5:97:6f:05:63:2e:26:70:ed:
0f:5e:aa:a5:fc:96:7c:88:2b:01:c6:ee:c4:b8:70:e3:8d:ea:
cd:ee:b7:e4:04:bf:d0:5a:0c:f4:1c:0d:d4:71:79:55:70:ec:
83:79:5e:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKSm4T4PptAgLjTUEU5LYW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjIwODEyMTUxMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWExMWE5YWU5MDViZDY1MzllZTJiYzlmYTY3Nzk0MTQzNTYxMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktTcVBULRQmNEfaWbHUKx59sdJGY
iPLphdISCyaE7NxSXeVHvslKiW614oUdu3rhtOBbUEHbidThTtueUowaRylL0idS
Z+ROES4XtM2Id8AnBI+tVgUkdUe3EVNEioT/MNMlmil5nNYI4tw59ozcxNkBXVPG
zjGLubawzMGds8tr3AJyB/0qTK00dmTtBrb1PWz0XZuh62jjcF6+ujVoH+Qetnec
8MDYGYd+TelDgerSw/qqYolYLMGZ+Voptwo90xxkbD5Kv9m3mf0VrmnWw4mYvEBq
tUB13pkZG2SSIZEzeLq2YLpJdl0YuWdL2uffAe3481hKLKtOK75PJMbEkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGhGprpBb1lOe4ryfpneUFDVhAVMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvOGFFYW11a0Z2V1U1N2l2Si1tZDVRVU5XRUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+aIMA0G
CSqGSIb3DQEBCwUAA4IBAQBgBarEaB7JCF/YOkYiXTTqSXr5gc0RDdCwN2TcjEmL
InUTbvchVgJzCgYL/ZW0qJ/TuKt9acPzhM0hzZUXT0qfjyTHAM1d+PvXmNjvUBtF
JjTP3X5ZoZTI78t/vOaOe83q8u+B0EcmGYHOBCoHPrvjBiGdDv3YWbSHnkZTn+Zl
Y5sqPIYD/SCJwWzMeykXRy1p5UqK+w2+czlzrjK+npfsZBURDrRXHH8Sork2hN0+
rJH2pPoVxb3TV1k0gN/ZapmyJngCv6xZRX5Q+8qs3FP1l28FYy4mcO0PXqql/JZ8
iCsBxu7EuHDjjerN7rfkBL/QWgz0HA3UcXlVcOyDeV4F
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:12 2024 by rpki-client on console-ams.rpki-client.org