Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/fIjoxLQOFIB73ORAT55GsswBP1Y.roa
File: fIjoxLQOFIB73ORAT55GsswBP1Y.roa (raw, json)
Hash identifier: 347+HsronRax6xsCZLYU3h5Haol+fwM2W8VdzgTSKes=
Subject key identifier: 7C:88:E8:C4:B4:0E:14:80:7B:DC:E4:40:4F:9E:46:B2:CC:01:3F:56
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 38121615
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/fIjoxLQOFIB73ORAT55GsswBP1Y.roa
Signing time: Sat 01 Jan 2022 02:57:34 +0000
ROA not before: Sat 01 Jan 2022 02:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200167
IP address blocks: 195.141.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940709397 (0x38121615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 02:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c88e8c4b40e14807bdce4404f9e46b2cc013f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f5:b9:9d:13:3a:e5:c5:1c:d2:0c:61:a1:d1:
30:02:f9:93:28:c1:fd:ed:2e:35:44:1f:49:07:7d:
5c:68:78:d8:14:18:3a:1c:ef:f4:ba:bb:9a:d6:45:
c9:a9:f1:a8:b5:99:c5:51:a9:26:0d:ff:fa:fd:32:
a3:dc:61:fc:09:cc:78:0b:f2:ae:88:69:8e:e3:65:
63:68:4d:69:3a:0a:c9:82:38:03:a1:7c:82:19:2e:
b5:c8:7a:de:8a:b9:31:c0:b6:db:87:6d:d5:f1:ce:
cb:ef:f0:77:08:3f:c8:aa:f1:17:a1:94:68:12:c7:
3a:71:91:7a:28:5e:21:50:ed:82:ef:25:af:2a:6f:
f1:e3:58:83:62:bd:58:d2:9c:86:b7:f2:b1:05:01:
21:bb:0d:b5:00:ef:48:5e:e2:9c:91:9d:53:21:b7:
c7:be:09:00:0a:2e:2d:6d:18:a2:3b:d2:00:fa:d7:
fb:cf:21:4e:88:8c:1c:a0:ad:d7:93:a4:c3:d1:ec:
61:45:1a:58:66:4c:cb:3e:fd:37:c9:5c:5b:d5:a1:
0a:3b:b7:8f:2f:bc:60:02:3a:ce:2a:af:95:3f:17:
a6:cc:f8:84:e3:9e:71:57:46:c2:f1:f4:d5:dc:10:
5b:2a:f4:6a:97:7f:c2:90:9f:86:fc:37:68:15:1d:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:88:E8:C4:B4:0E:14:80:7B:DC:E4:40:4F:9E:46:B2:CC:01:3F:56
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/fIjoxLQOFIB73ORAT55GsswBP1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.141.124.0/24
Signature Algorithm: sha256WithRSAEncryption
51:66:5b:c1:05:77:62:f3:94:35:cb:a5:9b:4c:bc:00:84:d2:
af:32:b1:80:a6:5e:8a:90:d0:08:2e:f6:33:c1:39:e9:4d:52:
a0:27:d9:79:86:3c:c2:f2:c6:68:f4:85:4b:f3:ef:58:42:63:
39:cf:f3:41:98:a4:56:1b:dc:f6:0b:2b:2f:ac:9d:72:c8:68:
e5:cc:2b:b1:f3:43:31:58:f2:e0:d7:ae:bd:52:df:99:7d:2a:
a4:d0:be:13:a0:7d:22:3f:69:b2:a0:f9:27:aa:f7:33:ac:4d:
b4:12:4e:2f:fe:5a:e6:ff:b0:a1:a6:70:a0:75:93:10:17:e6:
b7:94:b2:32:7a:69:41:0d:c1:0d:79:85:27:f4:c1:c5:be:d8:
6f:b3:b6:5e:f4:83:f9:d1:c5:a2:d6:08:e0:bf:e4:ed:8d:da:
cc:7e:ce:7c:0d:9d:d4:38:f9:90:8d:0d:5f:24:3b:0a:37:4f:
6a:d5:ab:ca:8e:80:0e:f6:08:da:48:48:20:28:8b:87:8b:a7:
3b:7a:08:5e:27:6f:34:d5:f4:6f:80:b4:48:31:e9:1c:85:37:
01:73:62:d8:e8:ac:3a:bc:a9:30:c9:af:fc:80:b7:6d:d2:f3:
3e:c9:8f:04:4e:a8:c1:21:bb:c2:78:0b:6e:86:fb:9b:3f:d4:
93:39:4d:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOBIWFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MTVkYmMwMDQzM2UyOWYyYWRlYjAzOGZlYTJmYmQ3MDQ4ZmI2MzJmMB4XDTIyMDEw
MTAyNTczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2M4OGU4YzRiNDBl
MTQ4MDdiZGNlNDQwNGY5ZTQ2YjJjYzAxM2Y1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPD1uZ0TOuXFHNIMYaHRMAL5kyjB/e0uNUQfSQd9XGh42BQY
Ohzv9Lq7mtZFyanxqLWZxVGpJg3/+v0yo9xh/AnMeAvyrohpjuNlY2hNaToKyYI4
A6F8ghkutch63oq5McC224dt1fHOy+/wdwg/yKrxF6GUaBLHOnGReiheIVDtgu8l
rypv8eNYg2K9WNKchrfysQUBIbsNtQDvSF7inJGdUyG3x74JAAouLW0YojvSAPrX
+88hToiMHKCt15Okw9HsYUUaWGZMyz79N8lcW9WhCju3jy+8YAI6ziqvlT8Xpsz4
hOOecVdGwvH01dwQWyr0apd/wpCfhvw3aBUdLacCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR8iOjEtA4UgHvc5EBPnkayzAE/VjAfBgNVHSMEGDAWgBQRXbwAQz4p8q3r
A4/qL71wSPtjLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VWMjhBRU0tS2ZLdDZ3T1A2aS05Y0VqN1l5OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvNjVhNzFkLTAyMzYtNDRkNS04Y2U5LTIyOWI0YWU3NDJkZS8x
L2ZJam94TFFPRklCNzNPUkFUNTVHc3N3QlAxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
NjVhNzFkLTAyMzYtNDRkNS04Y2U5LTIyOWI0YWU3NDJkZS8xL0VWMjhBRU0tS2ZL
dDZ3T1A2aS05Y0VqN1l5OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMONfDANBgkqhkiG9w0BAQsFAAOC
AQEAUWZbwQV3YvOUNculm0y8AITSrzKxgKZeipDQCC72M8E56U1SoCfZeYY8wvLG
aPSFS/PvWEJjOc/zQZikVhvc9gsrL6ydcsho5cwrsfNDMVjy4NeuvVLfmX0qpNC+
E6B9Ij9psqD5J6r3M6xNtBJOL/5a5v+woaZwoHWTEBfmt5SyMnppQQ3BDXmFJ/TB
xb7Yb7O2XvSD+dHFotYI4L/k7Y3azH7OfA2d1Dj5kI0NXyQ7CjdPatWryo6ADvYI
2khIICiLh4unO3oIXidvNNX0b4C0SDHpHIU3AXNi2OisOrypMMmv/IC3bdLzPsmP
BE6owSG7wngLbob7mz/UkzlN8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org