Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/HZnM9cUGO-Gr0pNeu_9xKu0Z2h4.roa
File: HZnM9cUGO-Gr0pNeu_9xKu0Z2h4.roa (raw, json)
Hash identifier: 44BuMnpsoMf5BQVXds1jm2C/3kU+sWymPHaJQy8BB44=
Subject key identifier: 1D:99:CC:F5:C5:06:3B:E1:AB:D2:93:5E:BB:FF:71:2A:ED:19:DA:1E
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0DA5DA38
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/HZnM9cUGO-Gr0pNeu_9xKu0Z2h4.roa
Signing time: Wed 15 Jun 2022 14:30:44 +0000
ROA not before: Wed 15 Jun 2022 14:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5394
IP address blocks: 195.180.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228973112 (0xda5da38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 15 14:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d99ccf5c5063be1abd2935ebbff712aed19da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:cb:b7:df:02:61:01:5f:36:f3:7a:5a:f2:
c5:ed:1c:71:47:17:fb:5b:f9:1a:82:b0:c9:3f:6c:
a3:24:ba:9e:78:94:32:b5:db:11:8c:08:ad:5f:fd:
65:04:9f:2e:42:36:8b:b2:6e:d4:f7:47:82:49:40:
5e:f2:0f:82:be:33:1c:72:ea:65:a6:18:dc:f1:59:
bf:f9:3b:0b:98:a4:49:f7:20:69:90:22:62:a9:da:
3f:cb:02:05:2e:09:da:5b:77:35:53:88:c6:82:34:
2c:76:1a:e0:9c:b0:2d:4f:73:1e:4c:73:93:69:46:
ee:5b:21:05:c9:ce:e0:38:c2:23:96:cd:6f:70:d2:
2a:86:93:63:15:44:f2:00:c3:0a:4f:f0:c8:4b:72:
a5:25:ba:90:33:78:12:33:d6:1d:b9:49:10:5b:11:
35:1e:c3:b3:09:95:6c:8b:cd:43:b8:cf:a3:a8:51:
64:0e:aa:f0:17:4d:a5:38:10:c0:fc:e9:0e:61:70:
c6:ca:37:64:bb:2c:78:12:4b:08:20:9a:47:2c:67:
74:06:7f:bc:f6:f9:08:44:33:e4:92:3f:23:37:78:
ec:a6:53:29:9f:0e:52:a6:65:c5:e8:4e:87:4b:f0:
be:a4:5b:ff:b4:5d:6c:bb:11:52:84:fa:92:dc:b3:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:CC:F5:C5:06:3B:E1:AB:D2:93:5E:BB:FF:71:2A:ED:19:DA:1E
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/HZnM9cUGO-Gr0pNeu_9xKu0Z2h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.139.0/24
Signature Algorithm: sha256WithRSAEncryption
87:37:12:e4:ee:98:64:d4:09:9d:0f:3e:64:56:e1:73:e9:75:
93:bb:84:dc:9f:10:d7:2e:93:32:12:13:f0:17:34:e4:7e:30:
ee:da:e2:6d:84:9a:0f:09:97:e4:27:cc:e8:83:fc:35:cb:be:
b0:25:6e:30:7e:7b:a2:56:54:55:93:7f:1d:8d:80:91:4f:39:
d9:2b:9c:b6:a4:83:61:b1:ab:ee:95:e8:06:d3:e4:54:5a:96:
0c:01:bc:07:8a:fd:4a:d5:9e:3c:6b:2f:c7:21:77:e1:13:ca:
ec:6e:9b:ed:06:f5:43:d6:bb:09:d8:08:d8:d2:79:da:48:55:
28:bc:c0:d9:8d:80:12:81:c7:fb:1d:ef:0a:38:92:7f:2f:c4:
aa:6c:35:50:6c:69:7f:54:3b:0c:34:9c:ed:1c:4c:3f:76:b1:
84:50:48:c3:25:57:10:35:e7:ca:6c:5e:c4:02:3a:e1:0b:c5:
96:14:5d:ef:f9:67:32:d8:7b:6f:b5:42:75:dc:36:80:81:83:
5e:45:53:04:91:d2:61:91:fb:eb:0c:ef:8f:4f:fd:00:37:b0:
07:65:69:ee:e7:f9:f1:e8:ca:74:97:19:04:f1:79:fc:57:eb:
48:56:e9:5e:32:57:e2:04:81:f0:a3:6a:ae:07:2e:ba:b2:67:
a3:01:ca:28
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDaXaODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDYx
NTE0MzA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQ5OWNjZjVjNTA2
M2JlMWFiZDI5MzVlYmJmZjcxMmFlZDE5ZGExZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkSy7ffAmEBXzbzelryxe0ccUcX+1v5GoKwyT9soyS6nniU
MrXbEYwIrV/9ZQSfLkI2i7Ju1PdHgklAXvIPgr4zHHLqZaYY3PFZv/k7C5ikSfcg
aZAiYqnaP8sCBS4J2lt3NVOIxoI0LHYa4JywLU9zHkxzk2lG7lshBcnO4DjCI5bN
b3DSKoaTYxVE8gDDCk/wyEtypSW6kDN4EjPWHblJEFsRNR7DswmVbIvNQ7jPo6hR
ZA6q8BdNpTgQwPzpDmFwxso3ZLsseBJLCCCaRyxndAZ/vPb5CEQz5JI/Izd47KZT
KZ8OUqZlxehOh0vwvqRb/7RdbLsRUoT6ktyz9a8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdmcz1xQY74avSk167/3Eq7RnaHjAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L0habk05Y1VHTy1HcjBwTmV1Xzl4S3UwWjJoNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMO0izANBgkqhkiG9w0BAQsFAAOC
AQEAhzcS5O6YZNQJnQ8+ZFbhc+l1k7uE3J8Q1y6TMhIT8Bc05H4w7tribYSaDwmX
5CfM6IP8Ncu+sCVuMH57olZUVZN/HY2AkU852SuctqSDYbGr7pXoBtPkVFqWDAG8
B4r9StWePGsvxyF34RPK7G6b7Qb1Q9a7CdgI2NJ52khVKLzA2Y2AEoHH+x3vCjiS
fy/Eqmw1UGxpf1Q7DDSc7RxMP3axhFBIwyVXEDXnymxexAI64QvFlhRd7/lnMth7
b7VCddw2gIGDXkVTBJHSYZH76wzvj0/9ADewB2Vp7uf58ejKdJcZBPF5/FfrSFbp
XjJX4gSB8KNqrgcuurJnowHKKA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org