Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/POnf7rYX2zbjptjj0_g3xqFQh48.roa
File: POnf7rYX2zbjptjj0_g3xqFQh48.roa (raw, json)
Hash identifier: L6alp/v3jpv1v+mB8maPZHwif3POlIk6VKt82uKNVGU=
Subject key identifier: 3C:E9:DF:EE:B6:17:DB:36:E3:A6:D8:E3:D3:F8:37:C6:A1:50:87:8F
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01825AB68088914B81006807BE6B6B26AEBA
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/POnf7rYX2zbjptjj0_g3xqFQh48.roa
Signing time: Mon 01 Aug 2022 18:41:26 +0000
ROA not before: Mon 01 Aug 2022 18:41:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 195.34.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:b6:80:88:91:4b:81:00:68:07:be:6b:6b:26:ae:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 1 18:41:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ce9dfeeb617db36e3a6d8e3d3f837c6a150878f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:4b:0b:c8:8e:ce:68:8e:a8:cf:ee:a0:c7:
00:90:e0:fd:ad:07:a4:d9:b0:0c:e6:6c:b8:eb:d7:
5d:ac:99:87:73:fe:f1:45:d4:e3:a0:f0:f8:6e:b3:
fb:08:96:48:e3:3c:9f:60:4d:f6:5b:9c:57:e1:f4:
eb:39:d0:43:e2:24:9d:ca:e5:fb:5a:f6:bc:38:d4:
a5:17:bf:01:85:18:24:2c:c4:56:ae:8b:a6:a4:86:
cb:b7:ff:55:15:c7:7c:06:6e:95:ab:68:05:b5:ae:
c8:ec:fa:29:d4:2a:5a:3a:7f:33:2f:39:12:4d:33:
c9:4f:07:c7:b7:2a:31:e1:59:08:5b:d0:2a:55:dd:
21:f7:82:72:66:7a:bc:a4:32:cc:06:ef:69:3d:a4:
67:06:24:f7:5f:6d:b2:c2:75:9e:2b:32:0a:ba:38:
6d:9b:99:3f:42:db:b3:c2:cc:70:ea:c8:fd:bb:32:
39:fe:50:f3:8b:01:8c:1e:e1:2f:c5:00:e5:8d:b7:
b7:16:11:f4:8b:e5:1a:b1:22:2d:c2:7d:8b:a3:73:
da:b0:fa:da:8c:41:91:86:37:90:70:59:03:ca:2d:
c4:00:04:82:f6:72:13:d7:b3:82:7e:a5:52:b2:da:
ac:73:1e:be:04:8f:04:e3:5a:b3:83:7b:95:32:74:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:DF:EE:B6:17:DB:36:E3:A6:D8:E3:D3:F8:37:C6:A1:50:87:8F
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/POnf7rYX2zbjptjj0_g3xqFQh48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:db:1a:7c:8c:d9:23:f7:f0:d7:8c:0a:16:aa:d6:2c:99:5f:
30:37:33:78:7a:46:e9:55:8b:63:ab:a3:d7:3a:82:ab:09:0d:
8c:b8:80:67:f4:71:da:54:10:e9:f7:27:3a:cc:2c:60:d5:4c:
2a:b6:f8:4a:ee:88:27:da:5d:e8:2a:08:3a:5a:e3:dd:f0:54:
52:6d:02:65:e7:6d:f9:7c:02:bb:dd:9e:56:21:e5:c8:a5:a0:
13:87:5a:12:94:86:10:ef:f0:8f:ad:9e:5b:53:08:a6:f5:46:
d8:91:11:c1:21:c3:1f:9c:c2:93:4d:74:99:b0:9d:2e:c1:54:
1c:a1:de:ec:d3:51:6d:44:d9:a3:4e:59:e8:c6:b6:b0:78:53:
ea:66:38:d0:cc:76:87:11:f2:ea:2c:4c:3e:c3:30:0d:f4:ee:
a8:b5:d1:ce:71:89:3a:e1:32:0e:6e:61:3c:c6:a3:52:4a:a8:
fa:f8:dc:43:ac:9d:6a:42:98:55:b9:39:0d:ab:af:83:79:67:
df:43:c2:86:af:65:16:34:4d:b7:f4:62:a2:a4:a0:9d:cc:37:
5a:69:ce:40:f9:f3:58:b9:37:6d:11:8c:be:1d:5c:2f:5c:bc:
91:82:3d:9a:e3:49:87:e9:51:b5:b6:a3:2b:03:8d:ae:fa:29:
8b:a5:a6:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJatoCIkUuBAGgHvmtrJq66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjIwODAxMTg0MTI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2U5ZGZlZWI2MTdkYjM2ZTNhNmQ4ZTNkM2Y4MzdjNmExNTA4NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTtLC8iOzmiOqM/uoMcAkOD9rQek
2bAM5my469ddrJmHc/7xRdTjoPD4brP7CJZI4zyfYE32W5xX4fTrOdBD4iSdyuX7
Wva8ONSlF78BhRgkLMRWroumpIbLt/9VFcd8Bm6Vq2gFta7I7Pop1CpaOn8zLzkS
TTPJTwfHtyox4VkIW9AqVd0h94JyZnq8pDLMBu9pPaRnBiT3X22ywnWeKzIKujht
m5k/Qtuzwsxw6sj9uzI5/lDziwGMHuEvxQDljbe3FhH0i+UasSItwn2Lo3PasPra
jEGRhjeQcFkDyi3EAASC9nIT17OCfqVSstqscx6+BI8E41qzg3uVMnQwqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDzp3+62F9s246bY49P4N8ahUIePMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvUE9uZjdyWVgyemJqcHRqajBfZzN4cUZRaDQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyJOMA0G
CSqGSIb3DQEBCwUAA4IBAQCz2xp8jNkj9/DXjAoWqtYsmV8wNzN4ekbpVYtjq6PX
OoKrCQ2MuIBn9HHaVBDp9yc6zCxg1UwqtvhK7ogn2l3oKgg6WuPd8FRSbQJl5235
fAK73Z5WIeXIpaATh1oSlIYQ7/CPrZ5bUwim9UbYkRHBIcMfnMKTTXSZsJ0uwVQc
od7s01FtRNmjTlnoxraweFPqZjjQzHaHEfLqLEw+wzAN9O6otdHOcYk64TIObmE8
xqNSSqj6+NxDrJ1qQphVuTkNq6+DeWffQ8KGr2UWNE239GKipKCdzDdaac5A+fNY
uTdtEYy+HVwvXLyRgj2a40mH6VG1tqMrA42u+imLpaay
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org