Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UwC5k2QFnFu1wSFlCTshou1Xriw.roa
File: UwC5k2QFnFu1wSFlCTshou1Xriw.roa (raw, json)
Hash identifier: PLlc7pJWghruCNrWyAsSgTBUWVZQBMXzldebZ1uNViM=
Subject key identifier: 53:00:B9:93:64:05:9C:5B:B5:C1:21:65:09:3B:21:A2:ED:57:AE:2C
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F785CFA
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UwC5k2QFnFu1wSFlCTshou1Xriw.roa
Signing time: Sat 01 Jan 2022 08:04:57 +0000
ROA not before: Sat 01 Jan 2022 08:04:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15754
IP address blocks: 195.208.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259546362 (0xf785cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:04:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5300b99364059c5bb5c12165093b21a2ed57ae2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:00:45:1f:f9:02:98:7d:ff:23:e9:a3:35:
ef:82:cb:4f:58:2d:e0:0a:e7:d9:17:83:27:a9:7f:
27:49:e3:3c:14:ed:9e:45:63:fd:27:43:3d:dc:16:
45:d8:13:2b:f3:57:d0:b7:78:d1:30:22:4f:0c:58:
0e:b0:81:6a:33:ad:f0:97:a9:57:b1:18:fd:39:82:
9f:2e:e1:fa:cd:78:94:79:4a:cb:3d:95:be:da:ba:
6c:2e:87:7a:dd:b9:1d:f0:c3:60:b4:60:c7:a0:cc:
aa:b2:95:8a:fc:a4:1b:c3:09:18:86:f9:58:ba:f1:
60:63:dd:0a:ff:a3:25:a3:53:2a:e9:c0:7b:46:83:
e5:e8:5c:ec:5c:82:22:ab:d6:db:12:e2:91:ae:e2:
6c:44:13:79:ee:2b:f2:1f:43:75:6c:04:63:78:d4:
3e:61:9c:36:b1:17:e1:c6:a8:68:1b:08:1f:6d:0b:
2d:7b:3d:13:da:3d:14:f5:d3:0e:0d:68:b0:96:5d:
c2:eb:d6:de:11:5b:b2:bb:95:6f:a5:ed:8c:44:6e:
91:e0:2e:b8:1a:7b:a2:a9:19:39:02:6e:84:98:74:
50:a6:78:9e:eb:1d:85:4e:94:31:81:6b:ca:fb:c9:
f4:e3:af:fa:4e:6c:47:70:40:e1:c8:1a:49:9f:ab:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:00:B9:93:64:05:9C:5B:B5:C1:21:65:09:3B:21:A2:ED:57:AE:2C
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UwC5k2QFnFu1wSFlCTshou1Xriw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.98.0/24
Signature Algorithm: sha256WithRSAEncryption
83:58:61:a7:04:4e:58:3a:13:17:c8:86:eb:61:48:dc:49:38:
79:42:6a:4a:66:3e:52:8d:0b:59:58:1a:6b:45:cb:b9:b1:2a:
04:42:de:5d:9a:c2:87:d3:4a:fd:44:19:85:92:2a:9f:d1:55:
f7:dd:47:bb:5e:a1:fe:be:56:39:a8:9b:1f:33:a3:76:11:00:
f4:52:b0:ec:ba:9c:ab:9c:01:2d:8d:dc:c4:aa:b2:10:26:24:
22:22:cf:e3:0f:6f:8f:63:3b:d8:4f:06:24:1c:14:f3:ff:05:
55:3a:77:46:00:99:0f:a0:f6:5e:bd:36:34:da:f5:49:f9:da:
de:90:ba:ad:1e:71:79:56:10:00:de:50:39:31:13:91:34:de:
3e:5b:0e:35:b6:35:d2:ba:a9:ba:9a:d4:33:88:eb:70:2a:d3:
4a:bf:90:74:90:4e:2c:c9:f0:93:f4:47:76:61:84:d9:02:69:
63:30:65:b0:09:fd:a7:bd:a1:a7:7b:bb:af:05:69:c3:b4:1d:
df:22:92:6c:8d:93:4c:dd:76:fe:f1:4f:3a:3f:71:18:1f:d0:
e9:c2:5e:0a:fa:dc:cd:55:8f:5f:ff:97:cd:5b:61:6e:74:34:
a5:86:c1:d8:3e:96:1a:c5:08:50:ba:6d:25:07:5a:20:27:6b:
ef:a9:f4:16
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED3hc+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTNhM2I1ZjUxODA4MTY4YzIxMmMwOTRhMmJhYWZmMzhlMTY0NjRhMB4XDTIyMDEw
MTA4MDQ1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTMwMGI5OTM2NDA1
OWM1YmI1YzEyMTY1MDkzYjIxYTJlZDU3YWUyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbKAEUf+QKYff8j6aM174LLT1gt4Arn2ReDJ6l/J0njPBTt
nkVj/SdDPdwWRdgTK/NX0Ld40TAiTwxYDrCBajOt8JepV7EY/TmCny7h+s14lHlK
yz2Vvtq6bC6Het25HfDDYLRgx6DMqrKVivykG8MJGIb5WLrxYGPdCv+jJaNTKunA
e0aD5ehc7FyCIqvW2xLika7ibEQTee4r8h9DdWwEY3jUPmGcNrEX4caoaBsIH20L
LXs9E9o9FPXTDg1osJZdwuvW3hFbsruVb6XtjERukeAuuBp7oqkZOQJuhJh0UKZ4
nusdhU6UMYFryvvJ9OOv+k5sR3BA4cgaSZ+rldsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRTALmTZAWcW7XBIWUJOyGi7VeuLDAfBgNVHSMEGDAWgBQlOjtfUYCBaMIS
wJSiuq/zjhZGSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8x
L1V3QzVrMlFGbkZ1MXdTRmxDVHNob3UxWHJpdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8xL0pUbzdYMUdBZ1dq
Q0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMPQYjANBgkqhkiG9w0BAQsFAAOC
AQEAg1hhpwROWDoTF8iG62FI3Ek4eUJqSmY+Uo0LWVgaa0XLubEqBELeXZrCh9NK
/UQZhZIqn9FV991Hu16h/r5WOaibHzOjdhEA9FKw7Lqcq5wBLY3cxKqyECYkIiLP
4w9vj2M72E8GJBwU8/8FVTp3RgCZD6D2Xr02NNr1Sfna3pC6rR5xeVYQAN5QOTET
kTTePlsONbY10rqpuprUM4jrcCrTSr+QdJBOLMnwk/RHdmGE2QJpYzBlsAn9p72h
p3u7rwVpw7Qd3yKSbI2TTN12/vFPOj9xGB/Q6cJeCvrczVWPX/+XzVthbnQ0pYbB
2D6WGsUIULptJQdaICdr76n0Fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org