Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hVjz--_CTcssKub8wTngx30sW8k.roa
File: hVjz--_CTcssKub8wTngx30sW8k.roa (raw, json)
Hash identifier: r18k8n6iiDWCX07wbKR7YaYSr7wbWZfBYx0d3JcAcFY=
Subject key identifier: 85:58:F3:FB:EF:C2:4D:CB:2C:2A:E6:FC:C1:39:E0:C7:7D:2C:5B:C9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0707880D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hVjz--_CTcssKub8wTngx30sW8k.roa
Signing time: Sat 01 Jan 2022 03:54:13 +0000
ROA not before: Sat 01 Jan 2022 03:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207506
IP address blocks: 194.15.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117934093 (0x707880d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 03:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8558f3fbefc24dcb2c2ae6fcc139e0c77d2c5bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:90:c6:a8:5d:0a:49:30:7c:32:40:0f:81:
47:9b:5e:90:a0:6f:f1:8f:15:0b:5d:da:7c:70:1e:
79:0f:0f:4a:e5:82:39:8d:e1:71:fa:3e:aa:0c:57:
b0:6c:ce:f7:85:1f:d8:ca:ef:ce:92:a9:8f:b8:5e:
72:11:f0:ac:32:7d:b9:1d:2a:b4:cf:1b:da:5a:72:
82:09:12:c0:c9:2b:66:3d:c2:33:a1:e5:c8:e8:95:
41:f9:b0:f0:77:06:7f:44:15:c6:24:38:61:ff:53:
f4:ed:15:dc:66:5e:18:3c:64:02:aa:be:ed:2e:ec:
34:b4:c5:58:b3:47:fb:e1:54:97:db:58:b0:f3:2b:
69:27:99:95:ae:c8:d1:27:b2:da:3c:3c:d0:ca:7c:
1f:a8:4b:90:6f:7e:ca:7e:d6:5c:69:2c:bd:04:2b:
55:53:6a:cf:39:40:63:d6:41:44:a3:65:26:65:8d:
8b:06:bb:a8:f2:7e:a2:40:f0:b3:b2:8e:65:42:de:
e0:90:ca:1c:57:95:17:5d:eb:a1:82:37:ae:37:6e:
21:f9:8e:06:4d:f1:0b:11:1b:3f:43:b7:e2:06:7f:
ac:72:90:2d:90:31:ec:a7:21:5b:8e:5f:31:19:93:
dd:0d:38:cf:6a:95:f2:cf:09:75:6a:fc:04:14:4e:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:F3:FB:EF:C2:4D:CB:2C:2A:E6:FC:C1:39:E0:C7:7D:2C:5B:C9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hVjz--_CTcssKub8wTngx30sW8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d3:0f:17:d3:a5:d5:78:e5:a3:0a:b9:82:a1:be:06:78:4e:
5c:63:e4:21:43:53:5b:75:5a:37:0d:f8:89:f3:8f:e4:20:5b:
78:b8:9f:29:e5:c1:71:cd:f1:e5:ce:fc:11:9f:74:23:01:7a:
6b:7e:d0:fb:d8:e9:ff:77:ee:f7:25:85:cf:da:40:e3:80:49:
fa:99:8d:be:cf:ea:98:12:54:24:ef:78:21:3e:b7:42:86:95:
bb:9e:9e:f9:41:c9:3a:dc:63:14:f2:e8:82:b9:0a:05:63:11:
2d:ca:e2:3b:b5:e3:83:b9:7a:25:7c:cc:31:6d:f5:93:c0:e0:
db:df:f6:3b:cb:65:cf:9c:e7:97:cc:5e:3c:cd:80:c1:dc:06:
62:04:45:b0:3d:5b:57:f0:86:d1:57:fa:f6:eb:54:20:90:36:
88:4a:b0:99:f8:db:bc:d3:05:d8:23:ae:cd:d6:c3:f8:a0:80:
c2:42:d9:e1:e3:9e:60:eb:a0:cb:69:16:4f:9d:79:3b:de:59:
38:7c:11:d6:be:cf:f0:4a:bb:10:4c:d0:f0:cb:70:e3:2e:ec:
4d:56:08:0b:d9:bf:36:95:7f:7b:31:83:7b:a2:de:4d:6c:ef:
d5:77:7c:a3:ca:84:13:0b:bf:ba:1d:ad:bb:2c:e6:14:28:1c:
60:37:b7:42
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBweIDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMB4XDTIyMDEw
MTAzNTQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU1OGYzZmJlZmMy
NGRjYjJjMmFlNmZjYzEzOWUwYzc3ZDJjNWJjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJqAkMaoXQpJMHwyQA+BR5tekKBv8Y8VC13afHAeeQ8PSuWC
OY3hcfo+qgxXsGzO94Uf2MrvzpKpj7hechHwrDJ9uR0qtM8b2lpyggkSwMkrZj3C
M6HlyOiVQfmw8HcGf0QVxiQ4Yf9T9O0V3GZeGDxkAqq+7S7sNLTFWLNH++FUl9tY
sPMraSeZla7I0Sey2jw80Mp8H6hLkG9+yn7WXGksvQQrVVNqzzlAY9ZBRKNlJmWN
iwa7qPJ+okDws7KOZULe4JDKHFeVF13roYI3rjduIfmOBk3xCxEbP0O34gZ/rHKQ
LZAx7KchW45fMRmT3Q04z2qV8s8JdWr8BBROMsECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSFWPP778JNyywq5vzBOeDHfSxbyTAfBgNVHSMEGDAWgBSdKkeLsLCOZhsL
L5++iTW8nCoooTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8x
L2hWanotLV9DVGNzc0t1Yjh3VG5neDMwc1c4ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1Z
YkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIPNjANBgkqhkiG9w0BAQsFAAOC
AQEAb9MPF9Ol1Xjlowq5gqG+BnhOXGPkIUNTW3VaNw34ifOP5CBbeLifKeXBcc3x
5c78EZ90IwF6a37Q+9jp/3fu9yWFz9pA44BJ+pmNvs/qmBJUJO94IT63QoaVu56e
+UHJOtxjFPLogrkKBWMRLcriO7Xjg7l6JXzMMW31k8Dg29/2O8tlz5znl8xePM2A
wdwGYgRFsD1bV/CG0Vf69utUIJA2iEqwmfjbvNMF2COuzdbD+KCAwkLZ4eOeYOug
y2kWT515O95ZOHwR1r7P8Eq7EEzQ8Mtw4y7sTVYIC9m/NpV/ezGDe6LeTWzv1Xd8
o8qEEwu/uh2tuyzmFCgcYDe3Qg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org