Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/WfebQCusuJ5yxnBwGM_G42vzl8A.roa
File: WfebQCusuJ5yxnBwGM_G42vzl8A.roa (raw, json)
Hash identifier: zC9q4T8/sGcctv1L7BwnqzNvXmkUBUyE65NTlxXeFws=
Subject key identifier: 59:F7:9B:40:2B:AC:B8:9E:72:C6:70:70:18:CF:C6:E3:6B:F3:97:C0
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 015AD848
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/WfebQCusuJ5yxnBwGM_G42vzl8A.roa
Signing time: Sat 01 Jan 2022 12:54:07 +0000
ROA not before: Sat 01 Jan 2022 12:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5488
IP address blocks: 195.66.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22730824 (0x15ad848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Jan 1 12:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59f79b402bacb89e72c6707018cfc6e36bf397c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:98:b5:f2:1a:ab:08:8e:dd:8c:67:ed:04:
23:34:cf:3e:f7:75:19:67:34:b2:23:2a:01:36:9b:
f1:12:b5:88:5d:08:31:a5:a1:03:b7:07:14:95:e6:
4a:95:73:0d:7f:bf:d6:ac:4a:ed:e2:78:ae:75:8e:
28:14:d2:9a:44:87:c8:2b:2e:86:23:ae:2c:50:c8:
f7:1e:ea:81:2f:68:d1:fa:3d:9a:e7:af:71:55:98:
72:71:ae:fa:6d:a5:30:38:54:e7:96:32:f5:46:e4:
1c:8e:73:5a:4e:09:77:05:66:d0:d8:0c:9a:fa:06:
c5:d3:20:f1:88:e9:15:db:27:24:26:e4:58:b7:f7:
be:90:4b:66:67:cc:6c:a6:61:0e:da:81:72:54:79:
5d:84:ed:34:f7:ce:85:df:53:c5:80:3c:76:49:57:
e7:e9:d3:7b:85:d4:bd:e4:9e:1c:5f:3c:a7:f5:d3:
9f:1b:f2:aa:b2:63:28:d8:3d:50:ff:2c:1d:aa:1d:
a5:0d:da:d5:6c:1e:09:9a:eb:fe:a3:3b:a1:60:c4:
a3:a8:01:29:dd:db:d7:3a:9d:86:a3:92:4b:68:61:
2b:6f:38:b4:50:5a:84:1e:fa:68:c4:49:aa:03:6d:
a6:7f:d4:db:d6:64:e2:9d:3a:00:02:48:7c:b8:ef:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:9B:40:2B:AC:B8:9E:72:C6:70:70:18:CF:C6:E3:6B:F3:97:C0
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/WfebQCusuJ5yxnBwGM_G42vzl8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4a:4d:64:c9:e0:cc:0e:9e:20:40:da:96:ce:91:24:31:7b:
59:03:39:52:1a:61:57:3d:d7:f2:36:2b:d8:5a:51:40:37:b6:
b1:3e:52:de:6a:1e:68:b2:f8:0a:77:71:a2:58:ad:ce:2d:b5:
6a:51:d9:53:db:61:93:18:0c:d4:be:7b:41:14:fc:13:3a:43:
29:6c:4e:1a:a4:26:97:85:b0:2d:75:de:49:12:40:9a:b8:d6:
fc:aa:51:7b:7c:58:10:d4:96:b7:f9:ca:b4:af:ed:ee:cf:db:
08:49:54:d5:52:3a:fd:d8:b6:5d:1d:47:41:fa:2b:a1:51:50:
5b:7b:41:8f:fe:22:96:2f:46:a5:1f:25:1a:f9:e1:3e:a8:04:
f5:a6:5c:7b:41:40:3a:45:d9:26:d5:c7:d4:85:58:86:4c:85:
16:46:3b:23:4f:a1:55:6b:bc:38:d4:06:bd:5e:57:1f:88:21:
9e:f7:57:b1:22:0b:11:28:b8:73:51:b7:50:bf:3c:b7:3f:a8:
e2:2a:56:08:d5:89:05:85:e2:66:de:1d:6e:5a:94:31:2c:f1:
87:10:e2:89:2c:b2:ed:48:11:73:ec:5f:a6:aa:08:ba:5a:25:
cd:31:31:8a:f4:99:de:d9:34:36:6b:75:06:8d:39:f7:21:e8:
ae:9d:67:b2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAVrYSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MTk5MThlZDIxOWU3ZDNkOTIyNzM3ZWNkYzczMWYwY2E2MGE2OGI4MB4XDTIyMDEw
MTEyNTQwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTlmNzliNDAyYmFj
Yjg5ZTcyYzY3MDcwMThjZmM2ZTM2YmYzOTdjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAsmLXyGqsIjt2MZ+0EIzTPPvd1GWc0siMqATab8RK1iF0I
MaWhA7cHFJXmSpVzDX+/1qxK7eJ4rnWOKBTSmkSHyCsuhiOuLFDI9x7qgS9o0fo9
muevcVWYcnGu+m2lMDhU55Yy9UbkHI5zWk4JdwVm0NgMmvoGxdMg8YjpFdsnJCbk
WLf3vpBLZmfMbKZhDtqBclR5XYTtNPfOhd9TxYA8dklX5+nTe4XUveSeHF88p/XT
nxvyqrJjKNg9UP8sHaodpQ3a1WweCZrr/qM7oWDEo6gBKd3b1zqdhqOSS2hhK284
tFBahB76aMRJqgNtpn/U29Zk4p06AAJIfLjvRLUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRZ95tAK6y4nnLGcHAYz8bja/OXwDAfBgNVHSMEGDAWgBTxmRjtIZ59PZIn
N+zccx8MpgpouDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzhaa1k3U0dlZlQyU0p6ZnMzSE1mREtZS2FMZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvNjJiMDk4LTU2OGQtNDg3Mi1hMDMyLTMxM2VmZWIwYjE5ZC8x
L1dmZWJRQ3VzdUo1eXhuQndHTV9HNDJ2emw4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
NjJiMDk4LTU2OGQtNDg3Mi1hMDMyLTMxM2VmZWIwYjE5ZC8xLzhaa1k3U0dlZlQy
U0p6ZnMzSE1mREtZS2FMZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNCazANBgkqhkiG9w0BAQsFAAOC
AQEAWkpNZMngzA6eIEDals6RJDF7WQM5UhphVz3X8jYr2FpRQDe2sT5S3moeaLL4
Cndxolitzi21alHZU9thkxgM1L57QRT8EzpDKWxOGqQml4WwLXXeSRJAmrjW/KpR
e3xYENSWt/nKtK/t7s/bCElU1VI6/di2XR1HQforoVFQW3tBj/4ili9GpR8lGvnh
PqgE9aZce0FAOkXZJtXH1IVYhkyFFkY7I0+hVWu8ONQGvV5XH4ghnvdXsSILESi4
c1G3UL88tz+o4ipWCNWJBYXiZt4dblqUMSzxhxDiiSyy7UgRc+xfpqoIulolzTEx
ivSZ3tk0Nmt1Bo059yHorp1nsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:57 2024 by rpki-client on console-ams.rpki-client.org