Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wiQ2EvY2shXW8m5dJ9exSQ6y4kE.roa
File: wiQ2EvY2shXW8m5dJ9exSQ6y4kE.roa (raw, json)
Hash identifier: 8zS+g55lLKsINzroeUULkns827I9hDPrv72dJ2QkrcY=
Subject key identifier: C2:24:36:12:F6:36:B2:15:D6:F2:6E:5D:27:D7:B1:49:0E:B2:E2:41
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183D0D1448A39E9BFD7496E5065C6CD5770
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wiQ2EvY2shXW8m5dJ9exSQ6y4kE.roa
Signing time: Thu 13 Oct 2022 10:08:38 +0000
ROA not before: Thu 13 Oct 2022 10:08:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 195.58.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:d1:44:8a:39:e9:bf:d7:49:6e:50:65:c6:cd:57:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 13 10:08:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2243612f636b215d6f26e5d27d7b1490eb2e241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:44:a6:a9:e6:8b:02:89:29:68:76:b2:3a:30:
b4:b7:c1:87:5d:da:c2:47:a2:58:cf:d1:b6:23:66:
05:b4:74:cb:55:c2:33:ee:79:52:2a:c3:d7:a1:05:
03:77:48:95:80:2e:4d:1b:b6:94:3f:e6:c7:9d:8f:
64:2f:4f:b7:57:d5:dc:dc:ad:bd:1f:84:a0:5c:36:
08:fb:56:7e:74:b0:96:dc:68:ed:36:fd:ac:69:cc:
50:3c:32:c2:1d:af:9f:fb:2d:5e:00:35:52:67:76:
52:f7:09:e9:8c:c9:46:b0:73:40:66:2d:5f:30:62:
72:6f:e1:da:4f:86:d9:a4:58:86:11:0c:80:c9:6f:
2f:8e:eb:4d:14:10:dd:7f:9c:4e:f3:f2:e2:29:f9:
e4:45:ca:dd:f4:10:00:8f:bc:df:ef:44:bc:e6:db:
4e:8c:03:3f:46:95:c2:7e:f7:1b:47:d5:77:15:31:
a3:39:90:79:1f:89:4f:62:b5:18:50:3c:66:04:86:
4a:a1:38:73:c5:1d:e8:86:a6:19:41:2c:e8:cd:21:
a7:04:4c:7a:26:9c:c4:5e:f4:b0:b9:60:73:3a:05:
7d:c4:ed:4b:92:96:e5:20:22:d3:c7:9c:bb:76:44:
1a:5f:7d:1c:7e:73:e5:cb:cc:a4:17:cb:4d:b9:03:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:36:12:F6:36:B2:15:D6:F2:6E:5D:27:D7:B1:49:0E:B2:E2:41
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wiQ2EvY2shXW8m5dJ9exSQ6y4kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.34.0/24
Signature Algorithm: sha256WithRSAEncryption
36:27:c8:dd:91:b2:6b:cd:d9:4c:65:f3:30:50:0a:f8:48:7d:
92:04:5e:35:de:f5:4d:e2:2e:36:d8:a1:f4:f7:55:41:46:3b:
ec:4b:4e:f9:b0:96:43:bd:4e:a1:db:6a:b6:0c:73:7b:c5:0f:
51:12:e7:85:2c:fd:8e:81:18:c0:42:bb:97:52:23:fe:05:7e:
68:67:e4:a3:03:89:33:ee:93:56:db:be:ca:37:be:cf:5c:15:
4c:47:14:62:0d:74:5a:e0:ad:5a:4b:3a:2d:a0:1f:7b:b3:22:
b2:48:aa:35:25:12:24:c0:ae:ee:5a:7e:58:b1:fe:39:28:1a:
4f:5c:d6:c1:1b:58:2d:5a:69:a1:cf:d9:c6:03:b8:9c:4f:b6:
65:66:c6:82:29:a3:84:78:0d:33:a9:ee:3f:93:91:12:60:a6:
14:42:2b:9c:c6:43:d6:21:8e:bd:c1:60:ae:a6:cf:43:47:9f:
42:7d:e1:24:d7:f2:04:9c:97:5c:8a:be:c7:ca:53:1b:e9:27:
88:fe:c5:a7:15:50:3a:97:0a:a1:58:55:6e:6a:44:27:0d:3e:
1a:02:84:61:a8:33:4b:13:09:13:f2:46:53:04:c9:b2:72:89:
ae:a3:13:1d:37:b6:c9:4a:7d:ad:24:60:b4:38:ee:53:29:34:
91:f8:00:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPQ0USKOem/10luUGXGzVdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDEzMTAwODM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjI0MzYxMmY2MzZiMjE1ZDZmMjZlNWQyN2Q3YjE0OTBlYjJlMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0SmqeaLAokpaHayOjC0t8GHXdrC
R6JYz9G2I2YFtHTLVcIz7nlSKsPXoQUDd0iVgC5NG7aUP+bHnY9kL0+3V9Xc3K29
H4SgXDYI+1Z+dLCW3GjtNv2sacxQPDLCHa+f+y1eADVSZ3ZS9wnpjMlGsHNAZi1f
MGJyb+HaT4bZpFiGEQyAyW8vjutNFBDdf5xO8/LiKfnkRcrd9BAAj7zf70S85ttO
jAM/RpXCfvcbR9V3FTGjOZB5H4lPYrUYUDxmBIZKoThzxR3ohqYZQSzozSGnBEx6
JpzEXvSwuWBzOgV9xO1LkpblICLTx5y7dkQaX30cfnPly8ykF8tNuQM9rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIkNhL2NrIV1vJuXSfXsUkOsuJBMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvd2lRMkV2WTJzaFhXOG01ZEo5ZXhTUTZ5NGtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzoiMA0G
CSqGSIb3DQEBCwUAA4IBAQA2J8jdkbJrzdlMZfMwUAr4SH2SBF413vVN4i422KH0
91VBRjvsS075sJZDvU6h22q2DHN7xQ9REueFLP2OgRjAQruXUiP+BX5oZ+SjA4kz
7pNW277KN77PXBVMRxRiDXRa4K1aSzotoB97syKySKo1JRIkwK7uWn5Ysf45KBpP
XNbBG1gtWmmhz9nGA7icT7ZlZsaCKaOEeA0zqe4/k5ESYKYUQiucxkPWIY69wWCu
ps9DR59CfeEk1/IEnJdcir7HylMb6SeI/sWnFVA6lwqhWFVuakQnDT4aAoRhqDNL
EwkT8kZTBMmycomuoxMdN7bJSn2tJGC0OO5TKTSR+ACG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:14 2023 by rpki-client on console-fra.rpki-client.org