Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DazM1ymP-9wHNUixFm8n5LikC1E.roa
File: DazM1ymP-9wHNUixFm8n5LikC1E.roa (raw, json)
Hash identifier: kBMStwe83+L+N7D46osR+0cvd1qAtYl7UJOupnglIqU=
Subject key identifier: 0D:AC:CC:D7:29:8F:FB:DC:07:35:48:B1:16:6F:27:E4:B8:A4:0B:51
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0182A674A1CB46A8D0E9C83D12AFB93C3261
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DazM1ymP-9wHNUixFm8n5LikC1E.roa
Signing time: Tue 16 Aug 2022 11:40:37 +0000
ROA not before: Tue 16 Aug 2022 11:40:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205406
IP address blocks: 194.156.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:74:a1:cb:46:a8:d0:e9:c8:3d:12:af:b9:3c:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 16 11:40:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dacccd7298ffbdc073548b1166f27e4b8a40b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:55:ff:be:90:23:37:70:a6:fc:1a:0f:03:
04:b9:9b:1c:f7:af:c3:49:dc:81:85:04:65:3a:d6:
06:6d:d5:85:b0:0d:1f:74:ba:59:71:c3:6a:0a:76:
19:bf:77:44:12:c1:e7:9b:d7:a0:bd:66:43:f9:42:
94:e3:69:e9:41:6d:1f:a4:87:d3:3c:aa:65:7e:17:
b8:3f:1d:03:88:f5:e0:19:65:d6:32:80:19:d6:c5:
32:95:93:54:d6:ad:a2:9f:26:1b:41:67:65:da:c2:
c9:1f:6d:e3:b6:67:10:9f:24:c1:82:ae:2c:8b:ec:
a2:79:be:92:98:f1:63:31:4a:78:f9:a0:39:b1:17:
29:25:f6:f4:f2:03:45:75:ba:00:03:56:53:00:f3:
ae:4d:84:4d:06:39:1f:ee:02:56:d4:67:c5:8b:dd:
bb:d3:e9:bc:17:a7:40:61:a2:70:7b:4e:9a:2c:e8:
97:62:ba:7a:81:59:aa:c3:36:b6:09:19:21:e5:9c:
0a:a5:19:69:33:d6:eb:3a:9c:8c:43:9f:3b:e5:c6:
c5:cf:d6:f8:48:70:ec:0f:60:f1:03:01:f7:55:af:
76:ce:0d:37:e2:08:f2:5d:ab:bc:c8:24:9d:60:33:
d6:2a:0b:fa:04:7b:bf:70:51:c1:9e:d0:4c:ea:32:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:CC:D7:29:8F:FB:DC:07:35:48:B1:16:6F:27:E4:B8:A4:0B:51
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DazM1ymP-9wHNUixFm8n5LikC1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:4f:45:23:fe:8a:10:8c:ff:47:a4:5e:f7:9f:0a:ee:8d:be:
39:18:47:2a:b4:f8:c2:43:44:ae:de:a6:04:5c:11:43:97:44:
06:e0:30:5a:72:1a:2e:10:a3:e0:57:55:a4:c7:fb:07:2e:6e:
5d:fb:03:f1:04:9d:6d:4a:3e:ee:4d:f1:7d:07:fe:1c:98:b2:
08:7b:6b:9f:75:21:6d:6e:16:c9:80:31:0b:cb:d2:c3:53:3c:
9d:da:8a:dc:42:70:c4:0a:1f:ac:75:79:47:51:a0:a2:a7:1c:
68:00:f6:5a:bb:04:e1:53:99:88:3b:6d:ac:9f:cd:8d:46:12:
1f:a3:b1:fe:a5:66:c7:92:90:34:f8:bc:58:ba:b2:34:79:7d:
36:79:22:83:4a:9f:0f:2f:7e:5c:47:b6:a6:de:c6:86:1b:34:
7c:bc:76:c0:d8:51:c9:fa:22:ca:87:bd:5e:7e:0c:ba:f1:c8:
43:9c:16:32:54:df:81:76:4a:84:ea:28:50:33:e4:50:8a:fa:
22:b2:e3:c6:7f:b9:03:35:dd:c2:9d:b2:93:a9:3a:a3:74:2b:
e3:8f:a4:84:7d:d5:46:98:1f:0f:43:ad:bf:29:87:0c:28:8b:
65:01:8b:70:88:c5:5e:3e:85:ea:12:94:8f:8b:71:ad:fb:ed:
12:34:ed:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKmdKHLRqjQ6cg9Eq+5PDJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjIwODE2MTE0MDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGFjY2NkNzI5OGZmYmRjMDczNTQ4YjExNjZmMjdlNGI4YTQwYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueNV/76QIzdwpvwaDwMEuZsc96/D
SdyBhQRlOtYGbdWFsA0fdLpZccNqCnYZv3dEEsHnm9egvWZD+UKU42npQW0fpIfT
PKplfhe4Px0DiPXgGWXWMoAZ1sUylZNU1q2inyYbQWdl2sLJH23jtmcQnyTBgq4s
i+yieb6SmPFjMUp4+aA5sRcpJfb08gNFdboAA1ZTAPOuTYRNBjkf7gJW1GfFi927
0+m8F6dAYaJwe06aLOiXYrp6gVmqwza2CRkh5ZwKpRlpM9brOpyMQ5875cbFz9b4
SHDsD2DxAwH3Va92zg034gjyXau8yCSdYDPWKgv6BHu/cFHBntBM6jINDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2szNcpj/vcBzVIsRZvJ+S4pAtRMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvRGF6TTF5bVAtOXdITlVpeEZtOG41TGlrQzFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpywMA0G
CSqGSIb3DQEBCwUAA4IBAQB8T0Uj/ooQjP9HpF73nwrujb45GEcqtPjCQ0Su3qYE
XBFDl0QG4DBachouEKPgV1Wkx/sHLm5d+wPxBJ1tSj7uTfF9B/4cmLIIe2ufdSFt
bhbJgDELy9LDUzyd2orcQnDECh+sdXlHUaCipxxoAPZauwThU5mIO22sn82NRhIf
o7H+pWbHkpA0+LxYurI0eX02eSKDSp8PL35cR7am3saGGzR8vHbA2FHJ+iLKh71e
fgy68chDnBYyVN+BdkqE6ihQM+RQivoisuPGf7kDNd3CnbKTqTqjdCvjj6SEfdVG
mB8PQ62/KYcMKItlAYtwiMVePoXqEpSPi3Gt++0SNO2F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org