Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HLsKeEmxH6YWI4lm1NQlm6gNfew.roa
File: HLsKeEmxH6YWI4lm1NQlm6gNfew.roa (raw, json)
Hash identifier: zsf3rguhMOzveB8TA/L8KG1qFZs8IAcVEWmXeSBZkGk=
Subject key identifier: 1C:BB:0A:78:49:B1:1F:A6:16:23:89:66:D4:D4:25:9B:A8:0D:7D:EC
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F815466
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HLsKeEmxH6YWI4lm1NQlm6gNfew.roa
Signing time: Sat 01 Jan 2022 08:05:03 +0000
ROA not before: Sat 01 Jan 2022 08:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57503
IP address blocks: 195.209.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260133990 (0xf815466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cbb0a7849b11fa616238966d4d4259ba80d7dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:0c:ff:c2:2f:6b:ba:bc:ae:d4:10:a9:a8:
fd:f7:70:6d:41:e0:78:c0:4b:d5:10:9c:9c:f9:ec:
46:14:94:ff:72:8f:59:5b:7c:e2:aa:42:65:26:ae:
80:5f:ed:1f:e5:d0:91:75:e1:05:c0:6c:cb:77:2a:
58:f9:05:ea:9a:80:88:8a:ff:f1:2a:73:cf:24:ea:
7a:85:f0:07:72:2a:7b:bc:8b:5d:66:85:51:7b:5e:
39:90:e7:06:00:67:25:ad:7c:4f:48:e2:e4:f8:3b:
0a:ba:ec:84:c2:ae:fe:48:cd:fe:56:8c:f4:87:bc:
f4:25:d6:df:1d:c0:cb:ea:82:75:97:87:71:4c:ff:
0c:bf:97:9d:23:b4:4e:97:ed:a9:cc:9b:1e:d1:be:
7a:dd:73:61:3c:07:bb:55:58:0a:37:17:72:01:b1:
61:c7:e2:20:82:65:4b:fd:d4:5c:e9:9d:a9:64:03:
36:17:32:d7:70:0d:c3:e7:4d:4d:65:d0:52:15:13:
ad:c8:38:d7:76:12:7c:32:ee:c2:89:21:d2:0e:fc:
27:df:f9:8d:8d:19:10:ae:d1:11:c7:d5:85:0e:ee:
10:79:23:ad:1b:16:24:12:c4:1a:21:57:58:28:ef:
9c:8e:dc:42:a0:a9:fd:6b:8c:84:d2:05:f5:03:25:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:0A:78:49:B1:1F:A6:16:23:89:66:D4:D4:25:9B:A8:0D:7D:EC
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HLsKeEmxH6YWI4lm1NQlm6gNfew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.209.116.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:0d:ce:8d:35:07:13:56:1a:79:46:e4:4b:5d:01:59:dc:db:
63:ad:f1:78:e3:46:cf:7b:13:83:49:a8:18:ab:ed:28:c5:be:
53:49:b9:de:e7:7b:22:48:1f:28:e7:65:65:d3:65:24:7c:3b:
56:fe:fe:b7:d4:7b:cc:57:52:d9:2d:b9:77:2d:0c:07:15:3a:
a7:5c:54:da:98:b4:c3:5d:5c:32:7a:41:da:1e:8e:2b:53:0e:
a0:a8:2e:15:4b:32:8f:fb:d5:3c:c5:a2:54:f4:5c:86:84:20:
dd:23:57:97:d2:0c:37:f6:cb:d1:cb:4a:34:2c:2e:df:41:2a:
96:f9:37:48:f2:03:f0:44:67:6b:06:d4:a3:8b:3e:fc:8e:72:
9f:06:10:d4:7d:10:6c:23:81:e3:78:fd:d6:28:af:e5:36:46:
09:c0:62:70:cd:38:96:cc:d6:69:62:f2:02:ae:23:ea:b3:6b:
d0:e7:aa:63:ac:05:fc:03:f8:41:71:38:5f:c7:26:02:c0:52:
29:33:70:d7:6e:6a:1f:28:ce:0e:8d:8a:0c:0c:24:4a:56:fc:
9e:a5:df:45:64:a3:e0:9a:9e:49:64:32:f9:38:6f:b9:67:c0:
46:9b:59:08:eb:ed:a0:bc:56:56:7f:94:ae:1b:61:ab:b9:f6:
cd:1a:79:b2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED4FUZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTNhM2I1ZjUxODA4MTY4YzIxMmMwOTRhMmJhYWZmMzhlMTY0NjRhMB4XDTIyMDEw
MTA4MDUwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWNiYjBhNzg0OWIx
MWZhNjE2MjM4OTY2ZDRkNDI1OWJhODBkN2RlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKuuDP/CL2u6vK7UEKmo/fdwbUHgeMBL1RCcnPnsRhSU/3KP
WVt84qpCZSaugF/tH+XQkXXhBcBsy3cqWPkF6pqAiIr/8SpzzyTqeoXwB3Iqe7yL
XWaFUXteOZDnBgBnJa18T0ji5Pg7CrrshMKu/kjN/laM9Ie89CXW3x3Ay+qCdZeH
cUz/DL+XnSO0TpftqcybHtG+et1zYTwHu1VYCjcXcgGxYcfiIIJlS/3UXOmdqWQD
Nhcy13ANw+dNTWXQUhUTrcg413YSfDLuwokh0g78J9/5jY0ZEK7REcfVhQ7uEHkj
rRsWJBLEGiFXWCjvnI7cQqCp/WuMhNIF9QMlJE8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQcuwp4SbEfphYjiWbU1CWbqA197DAfBgNVHSMEGDAWgBQlOjtfUYCBaMIS
wJSiuq/zjhZGSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8x
L0hMc0tlRW14SDZZV0k0bG0xTlFsbTZnTmZldy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8xL0pUbzdYMUdBZ1dq
Q0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcPRdDANBgkqhkiG9w0BAQsFAAOC
AQEAPQ3OjTUHE1YaeUbkS10BWdzbY63xeONGz3sTg0moGKvtKMW+U0m53ud7Ikgf
KOdlZdNlJHw7Vv7+t9R7zFdS2S25dy0MBxU6p1xU2pi0w11cMnpB2h6OK1MOoKgu
FUsyj/vVPMWiVPRchoQg3SNXl9IMN/bL0ctKNCwu30Eqlvk3SPID8ERnawbUo4s+
/I5ynwYQ1H0QbCOB43j91iiv5TZGCcBicM04lszWaWLyAq4j6rNr0OeqY6wF/AP4
QXE4X8cmAsBSKTNw125qHyjODo2KDAwkSlb8nqXfRWSj4JqeSWQy+ThvuWfARptZ
COvtoLxWVn+Urhthq7n2zRp5sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org