Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0mKr4IkV-i956fG762JWNUqo0ds.roa
File: 0mKr4IkV-i956fG762JWNUqo0ds.roa (raw, json)
Hash identifier: zrnrAXfvKLT5RV3Lts4QhHnQS7pjl5TaSHOvOyXSJSU=
Subject key identifier: D2:62:AB:E0:89:15:FA:2F:79:E9:F1:BB:EB:62:56:35:4A:A8:D1:DB
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09AEA905
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0mKr4IkV-i956fG762JWNUqo0ds.roa
Signing time: Tue 15 Feb 2022 10:53:08 +0000
ROA not before: Tue 15 Feb 2022 10:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9312
IP address blocks: 194.50.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162441477 (0x9aea905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Feb 15 10:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d262abe08915fa2f79e9f1bbeb6256354aa8d1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:11:ec:ed:22:d2:0c:a4:cc:13:ac:dc:05:
f8:8d:85:04:96:19:81:ea:22:e6:39:e2:b1:ca:ce:
a1:0d:20:93:91:13:6a:aa:15:69:91:c8:5d:f5:62:
eb:a2:b3:ca:d4:1e:91:76:e3:e6:a0:ce:a1:f6:85:
5a:d9:87:09:52:00:47:35:ff:3c:f3:20:da:a5:eb:
14:07:ce:d3:1f:2d:7c:45:c2:c3:d3:29:5c:c9:b8:
60:fc:3a:c5:2b:32:27:6b:ee:31:d3:56:42:d9:a8:
69:88:57:9d:75:c8:d3:1b:23:41:f8:66:f1:6e:53:
55:6c:4d:02:d4:c6:47:7b:2a:9e:49:13:38:c3:7b:
16:22:34:1b:9d:b7:4b:1e:fe:a8:76:6f:62:7f:1b:
5f:08:5f:56:e2:c1:45:66:47:da:93:3b:f0:44:e9:
bd:9d:f1:24:b9:df:6c:3b:4d:d0:8e:3d:1d:58:e6:
47:71:7a:03:51:3e:54:10:e9:e0:73:fe:06:1c:0f:
1c:71:8d:fe:5a:0c:a6:b7:29:ff:ad:f8:8b:37:20:
f9:c6:8f:7c:4f:c8:ba:e2:25:49:3e:55:79:a5:bd:
4e:25:79:99:1d:24:b0:cc:02:fb:48:75:0a:3a:ca:
90:ee:c4:78:35:ec:d3:40:9a:e2:f6:dd:8f:6d:5b:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:AB:E0:89:15:FA:2F:79:E9:F1:BB:EB:62:56:35:4A:A8:D1:DB
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0mKr4IkV-i956fG762JWNUqo0ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.18.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2c:b1:42:37:be:d9:c1:4c:0a:0d:b3:f3:fb:77:c4:05:cd:
de:7a:2c:64:8d:77:87:ac:ed:63:e9:9a:0f:6c:59:f9:8c:bb:
a9:4e:a5:a3:12:1a:d6:72:fe:a8:08:f3:e1:1e:cc:99:62:bd:
fe:15:1e:07:a2:94:6c:93:4c:b7:b4:74:3f:74:6d:3c:c6:18:
34:7a:13:8c:b2:88:cb:50:ac:7b:18:d3:ff:87:51:a2:71:4e:
a2:9b:e4:a8:98:ee:e2:58:7b:d1:1f:6a:a0:e0:c5:d3:c7:6c:
f8:e7:98:fa:43:4c:1a:3c:97:f5:76:e9:b8:c7:a2:03:ca:e9:
c1:3c:ce:2e:29:1a:20:70:bf:47:01:d2:ee:48:15:91:07:d6:
0d:95:16:69:ce:24:43:75:b4:e8:65:e3:da:02:e4:b9:56:8a:
4e:4d:b3:77:c6:7f:73:48:4d:3d:59:d9:4d:c5:d5:fd:c7:f0:
1f:ea:bf:e8:db:3b:fb:d2:18:0b:aa:93:1a:e5:cf:cb:f0:d1:
bc:bc:75:82:5e:ac:b6:f7:14:25:bc:d6:cd:d2:c4:3d:f0:e6:
8b:7c:df:74:0d:f8:5f:b3:35:8d:1e:57:1c:30:17:83:53:1c:
28:c2:0d:77:0f:da:85:1e:f2:65:d2:fc:63:9c:c2:6c:02:72:
50:3f:7e:53
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECa6pBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDIx
NTEwNTMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI2MmFiZTA4OTE1
ZmEyZjc5ZTlmMWJiZWI2MjU2MzU0YWE4ZDFkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAObdEeztItIMpMwTrNwF+I2FBJYZgeoi5jniscrOoQ0gk5ET
aqoVaZHIXfVi66KzytQekXbj5qDOofaFWtmHCVIARzX/PPMg2qXrFAfO0x8tfEXC
w9MpXMm4YPw6xSsyJ2vuMdNWQtmoaYhXnXXI0xsjQfhm8W5TVWxNAtTGR3sqnkkT
OMN7FiI0G523Sx7+qHZvYn8bXwhfVuLBRWZH2pM78ETpvZ3xJLnfbDtN0I49HVjm
R3F6A1E+VBDp4HP+BhwPHHGN/loMprcp/634izcg+caPfE/IuuIlST5VeaW9TiV5
mR0ksMwC+0h1CjrKkO7EeDXs00Ca4vbdj21b/nUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSYqvgiRX6L3np8bvrYlY1SqjR2zAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
LzBtS3I0SWtWLWk5NTZmRzc2MkpXTlVxbzBkcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIyEjANBgkqhkiG9w0BAQsFAAOC
AQEAMSyxQje+2cFMCg2z8/t3xAXN3nosZI13h6ztY+maD2xZ+Yy7qU6loxIa1nL+
qAjz4R7MmWK9/hUeB6KUbJNMt7R0P3RtPMYYNHoTjLKIy1CsexjT/4dRonFOopvk
qJju4lh70R9qoODF08ds+OeY+kNMGjyX9XbpuMeiA8rpwTzOLikaIHC/RwHS7kgV
kQfWDZUWac4kQ3W06GXj2gLkuVaKTk2zd8Z/c0hNPVnZTcXV/cfwH+q/6Ns7+9IY
C6qTGuXPy/DRvLx1gl6stvcUJbzWzdLEPfDmi3zfdA34X7M1jR5XHDAXg1McKMIN
dw/ahR7yZdL8Y5zCbAJyUD9+Uw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org