Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/ox0EWZ2hqcJpFJJxU1rQ5jigWb8.roa
File: ox0EWZ2hqcJpFJJxU1rQ5jigWb8.roa (raw, json)
Hash identifier: dzZCH0bLaDAO20kkI5jQzcrKAsGIF9s4fe1xSTaUTnY=
Subject key identifier: A3:1D:04:59:9D:A1:A9:C2:69:14:92:71:53:5A:D0:E6:38:A0:59:BF
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 18653EC2
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/ox0EWZ2hqcJpFJJxU1rQ5jigWb8.roa
Signing time: Sat 01 Jan 2022 04:02:23 +0000
ROA not before: Sat 01 Jan 2022 04:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62216
IP address blocks: 95.174.80.0/21 maxlen: 21
185.144.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409288386 (0x18653ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Jan 1 04:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a31d04599da1a9c269149271535ad0e638a059bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:b8:d7:01:4e:19:0b:0e:b2:8f:a7:8e:01:
3d:02:31:a9:ba:dd:6d:ab:48:f5:8e:fd:ce:66:b3:
9e:01:0f:f1:9a:f6:0f:af:53:6d:bb:64:ec:91:0f:
fd:1c:df:78:67:7e:50:32:44:da:03:47:01:38:eb:
62:a6:9e:a7:8a:ec:04:40:9b:1b:90:8d:0e:cd:03:
6d:bd:54:71:eb:48:d1:a1:98:6c:3f:95:bc:ed:44:
d6:84:8a:02:a7:4e:26:56:0e:97:ac:a5:7c:d2:2c:
61:11:86:e2:62:53:dc:3a:e1:0e:9b:a0:b0:fb:20:
a5:6a:ab:fa:dd:61:ef:4d:0c:09:61:5f:aa:6c:bb:
9c:bc:2c:5f:1d:c5:f6:b3:55:0f:cd:c6:61:83:9d:
89:e9:75:38:24:5b:bd:9e:6f:89:82:51:9e:5b:a2:
eb:3c:b8:81:e8:4c:5d:bd:21:0e:e6:2d:0d:ee:e0:
79:af:20:f3:a3:f7:86:f9:6d:31:e6:c0:4f:0f:24:
c7:43:45:4f:46:df:37:ae:78:ab:6f:c1:8f:44:ff:
da:20:82:19:74:11:8a:ae:b6:e6:1f:13:6c:57:51:
49:a7:6e:b7:e3:ac:d4:13:74:77:36:7d:03:4d:a9:
cc:43:fb:47:b8:57:a5:a1:dc:46:d8:c2:f5:3a:69:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1D:04:59:9D:A1:A9:C2:69:14:92:71:53:5A:D0:E6:38:A0:59:BF
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/ox0EWZ2hqcJpFJJxU1rQ5jigWb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.80.0/21
185.144.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:34:35:c4:70:db:34:64:9c:ac:ef:42:b2:b4:d5:0e:f2:d5:
52:6b:a1:30:72:0d:28:93:da:80:5f:15:1f:b5:fa:6d:93:06:
59:14:d3:d8:ec:27:e6:85:bc:80:5b:c8:dc:33:e6:31:52:f3:
e4:d7:53:82:4b:89:78:e9:df:8b:dd:db:93:77:a0:6c:38:d0:
e8:6b:0d:b2:1d:9b:33:cf:88:40:92:09:47:09:6d:6b:5e:8a:
19:64:98:63:d6:3e:1a:aa:fa:cd:0e:b4:68:e9:65:12:9c:b3:
73:b7:7b:47:34:05:1b:0f:34:77:4b:8a:46:63:3a:1c:dc:d9:
31:15:f2:fd:50:69:1e:d6:75:41:55:c4:a3:76:a6:a0:8e:31:
be:1e:94:0d:54:49:1e:18:26:d5:25:cf:b4:5e:1c:9c:29:71:
ed:93:29:11:bc:85:98:0c:f7:a9:6f:f6:f5:80:9b:0c:77:c9:
ba:a2:71:df:b2:6b:af:4a:2f:53:ef:ca:8c:c8:5e:24:da:b9:
0c:77:6a:f7:86:7b:fb:38:c1:91:49:ec:dd:b9:f3:eb:63:54:
18:e5:8e:47:f9:ec:ff:ad:87:de:48:5c:5e:7b:b3:60:2f:67:
87:3b:cd:e8:79:91:e4:0d:e9:bf:0c:7a:98:82:f2:65:04:1b:
7b:a9:3a:ea
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGGU+wjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWZmZWU3ZGJmN2Y0NTY2ZWE5ZTMwNTQ2YjJjMmEyZTczMzZmMmY0MB4XDTIyMDEw
MTA0MDIyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTMxZDA0NTk5ZGEx
YTljMjY5MTQ5MjcxNTM1YWQwZTYzOGEwNTliZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFsuNcBThkLDrKPp44BPQIxqbrdbatI9Y79zmazngEP8Zr2
D69Tbbtk7JEP/RzfeGd+UDJE2gNHATjrYqaep4rsBECbG5CNDs0Dbb1UcetI0aGY
bD+VvO1E1oSKAqdOJlYOl6ylfNIsYRGG4mJT3DrhDpugsPsgpWqr+t1h700MCWFf
qmy7nLwsXx3F9rNVD83GYYOdiel1OCRbvZ5viYJRnlui6zy4gehMXb0hDuYtDe7g
ea8g86P3hvltMebATw8kx0NFT0bfN654q2/Bj0T/2iCCGXQRiq625h8TbFdRSadu
t+Os1BN0dzZ9A02pzEP7R7hXpaHcRtjC9TppQUMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSjHQRZnaGpwmkUknFTWtDmOKBZvzAfBgNVHSMEGDAWgBSx/+59v39FZuqe
MFRrLCouczby9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NmX3VmYjlfUldicW5qQlVheXdxTG5NMjh2US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvMmZjYmIyLWMzYzAtNGIxZS04YWQ1LTdmNWY3ODM0NmQ2Zi8x
L294MEVXWjJocWNKcEZKSnhVMXJRNWppZ1diOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQv
MmZjYmIyLWMzYzAtNGIxZS04YWQ1LTdmNWY3ODM0NmQ2Zi8xL3NmX3VmYjlfUldi
cW5qQlVheXdxTG5NMjh2US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA1+uUAMEArmQEDANBgkqhkiG9w0B
AQsFAAOCAQEADzQ1xHDbNGScrO9CsrTVDvLVUmuhMHINKJPagF8VH7X6bZMGWRTT
2Own5oW8gFvI3DPmMVLz5NdTgkuJeOnfi93bk3egbDjQ6GsNsh2bM8+IQJIJRwlt
a16KGWSYY9Y+Gqr6zQ60aOllEpyzc7d7RzQFGw80d0uKRmM6HNzZMRXy/VBpHtZ1
QVXEo3amoI4xvh6UDVRJHhgm1SXPtF4cnClx7ZMpEbyFmAz3qW/29YCbDHfJuqJx
37Jrr0ovU+/KjMheJNq5DHdq94Z7+zjBkUns3bnz62NUGOWOR/ns/62H3khcXnuz
YC9nhzvN6HmR5A3pvwx6mILyZQQbe6k66g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:53 2023 by rpki-client on console-fra.rpki-client.org