Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/1JUcx11HFgLsNN2sMe0aVbMM8og.roa
File: 1JUcx11HFgLsNN2sMe0aVbMM8og.roa (raw, json)
Hash identifier: wi7Es1PWNa/1XhT7NmtC75Rb/NDjTCaqqeJqBMr7uUI=
Subject key identifier: D4:95:1C:C7:5D:47:16:02:EC:34:DD:AC:31:ED:1A:55:B3:0C:F2:88
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: F5D610
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/1JUcx11HFgLsNN2sMe0aVbMM8og.roa
Signing time: Sat 01 Jan 2022 04:52:29 +0000
ROA not before: Sat 01 Jan 2022 04:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16111120 (0xf5d610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Jan 1 04:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4951cc75d471602ec34ddac31ed1a55b30cf288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:88:38:5c:87:4d:27:93:15:e3:47:f1:b9:
66:42:d2:7d:3a:a4:23:e9:f0:85:37:cf:6b:df:f3:
e7:d1:28:b6:16:af:e0:a4:cf:61:70:c3:38:ed:bd:
56:a7:8d:29:78:4a:18:b8:f7:4a:2c:d1:98:a6:2b:
be:97:a8:84:d5:d1:f4:28:11:ab:52:c7:17:65:10:
5d:5a:41:6e:4a:69:8e:e1:6a:82:81:75:86:92:0b:
55:af:eb:1c:12:b0:62:1b:d9:6a:aa:fd:0b:3b:d8:
8f:b4:27:2f:35:66:5d:4f:32:e2:a9:43:2e:d3:92:
dd:a0:31:fc:a3:f4:12:27:ee:32:6a:ef:81:b4:dd:
19:f6:ff:c0:b8:e0:1b:c4:5f:9e:eb:dc:2e:3b:f6:
4d:e6:16:9e:4a:e0:2f:7c:c9:ea:f5:71:ea:74:a0:
47:b3:c9:95:ee:83:22:e1:59:6b:ed:17:ed:76:4b:
ad:b9:fe:37:29:3c:05:11:62:91:fb:69:a0:db:68:
54:18:88:14:47:32:29:85:2e:c1:bd:19:de:54:16:
56:95:6c:e8:3b:88:14:b2:59:d8:ec:8c:82:f1:6c:
ce:b3:44:e1:f1:d2:3b:fd:9f:cb:17:59:0b:d0:f8:
07:97:f1:fd:98:cc:c8:10:79:72:e3:9e:cd:86:8c:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:95:1C:C7:5D:47:16:02:EC:34:DD:AC:31:ED:1A:55:B3:0C:F2:88
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/1JUcx11HFgLsNN2sMe0aVbMM8og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4c:02:df:03:90:31:62:1c:bb:e1:c6:db:1b:13:14:0c:ca:
3c:e6:ad:09:91:46:0a:97:fc:10:21:c6:0d:71:ed:37:85:c9:
85:b9:b0:49:ce:a5:23:28:56:09:af:83:5e:e8:34:f7:3f:ef:
83:26:8e:fb:22:5f:f9:2c:16:36:97:87:0e:f1:9d:8f:be:df:
c1:d6:fc:bf:30:8a:fb:2a:87:e6:c2:c6:f7:f7:b6:9a:b1:c4:
94:c0:07:87:14:1b:a6:9f:d5:ab:00:45:aa:1e:80:eb:7c:47:
0d:f6:2d:c4:3f:f7:ce:a4:e6:76:a8:f0:75:38:8c:07:68:d9:
43:4c:3a:60:06:77:89:a0:9f:c9:94:48:f2:2f:13:f7:2a:a3:
00:36:bf:f5:22:88:08:fc:f0:58:03:2e:76:76:91:b1:27:7e:
a4:0a:a6:06:57:9a:2a:ae:9e:35:b2:5d:90:02:b7:56:c0:79:
d7:e1:4c:bd:cb:7a:41:d0:30:a4:77:52:44:df:93:4e:64:0f:
39:41:19:49:a2:af:e5:cb:be:9f:e2:29:4d:8b:e9:fe:ad:fd:
fa:72:96:60:64:13:79:e4:54:5f:5e:74:c0:06:7e:bf:c1:ce:
cd:90:d3:2b:fb:1b:08:4b:4e:20:21:c0:b0:67:1d:71:4a:f5:
00:c4:bc:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPXWEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjFkNWYzNzUwNmRlNDkwNWUxNzNjMGY1ODExNTA4MTcyNTBlZmUxMB4XDTIyMDEw
MTA0NTIyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDQ5NTFjYzc1ZDQ3
MTYwMmVjMzRkZGFjMzFlZDFhNTViMzBjZjI4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPFiDhch00nkxXjR/G5ZkLSfTqkI+nwhTfPa9/z59Eothav
4KTPYXDDOO29VqeNKXhKGLj3SizRmKYrvpeohNXR9CgRq1LHF2UQXVpBbkppjuFq
goF1hpILVa/rHBKwYhvZaqr9CzvYj7QnLzVmXU8y4qlDLtOS3aAx/KP0EifuMmrv
gbTdGfb/wLjgG8RfnuvcLjv2TeYWnkrgL3zJ6vVx6nSgR7PJle6DIuFZa+0X7XZL
rbn+Nyk8BRFikftpoNtoVBiIFEcyKYUuwb0Z3lQWVpVs6DuIFLJZ2OyMgvFszrNE
4fHSO/2fyxdZC9D4B5fx/ZjMyBB5cuOezYaMvRMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTUlRzHXUcWAuw03awx7RpVswzyiDAfBgNVHSMEGDAWgBTyHV83UG3kkF4X
PA9YEVCBclDv4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhoMWZOMUJ0NUpCZUZ6d1BXQkZRZ1hKUTctRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNmM0ZDIyLThlZDctNDg0NC1hMjk4LTIxMjU5ZGZiNmFjMC8x
LzFKVWN4MTFIRmdMc05OMnNNZTBhVmJNTThvZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NmM0ZDIyLThlZDctNDg0NC1hMjk4LTIxMjU5ZGZiNmFjMC8xLzhoMWZOMUJ0NUpC
ZUZ6d1BXQkZRZ1hKUTctRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJFoDANBgkqhkiG9w0BAQsFAAOC
AQEAb0wC3wOQMWIcu+HG2xsTFAzKPOatCZFGCpf8ECHGDXHtN4XJhbmwSc6lIyhW
Ca+DXug09z/vgyaO+yJf+SwWNpeHDvGdj77fwdb8vzCK+yqH5sLG9/e2mrHElMAH
hxQbpp/VqwBFqh6A63xHDfYtxD/3zqTmdqjwdTiMB2jZQ0w6YAZ3iaCfyZRI8i8T
9yqjADa/9SKICPzwWAMudnaRsSd+pAqmBleaKq6eNbJdkAK3VsB51+FMvct6QdAw
pHdSRN+TTmQPOUEZSaKv5cu+n+IpTYvp/q39+nKWYGQTeeRUX150wAZ+v8HOzZDT
K/sbCEtOICHAsGcdcUr1AMS8Zg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org