Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Lt2yWFx0TZMsuBnhRRVK11K7dLU.roa
File: Lt2yWFx0TZMsuBnhRRVK11K7dLU.roa (raw, json)
Hash identifier: PpdOilidu71z0/jl3chTDVzRI8Niq3jrmviQeSuwBqI=
Subject key identifier: 2E:DD:B2:58:5C:74:4D:93:2C:B8:19:E1:45:15:4A:D7:52:BB:74:B5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0B9EAE92
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Lt2yWFx0TZMsuBnhRRVK11K7dLU.roa
Signing time: Sat 01 Jan 2022 05:51:47 +0000
ROA not before: Sat 01 Jan 2022 05:51:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44225
IP address blocks: 195.244.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194948754 (0xb9eae92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 1 05:51:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2eddb2585c744d932cb819e145154ad752bb74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:4f:d4:13:7d:2f:c4:44:b3:26:99:10:51:
d7:e2:c7:22:de:83:9e:e7:2a:10:99:48:23:77:46:
ee:7a:92:19:94:5c:c3:26:49:d6:ec:ba:0c:e6:a2:
79:2e:40:f1:66:76:0c:d4:06:8f:60:15:dc:0d:73:
5c:27:12:bd:e7:6d:c4:ab:30:28:b8:2b:61:57:6d:
81:bf:60:c9:a3:0b:d2:80:df:67:f5:85:c2:1d:62:
72:db:42:dc:01:f6:a4:3c:21:1a:6e:0a:81:9d:b2:
84:04:85:21:3f:71:79:05:23:de:f7:3f:56:c9:14:
3e:20:62:64:e6:b9:53:8d:11:ed:d5:16:42:50:e6:
06:37:71:1b:b9:6e:bc:79:0e:fb:e0:ae:5d:21:ec:
59:38:63:d0:a8:15:65:35:7e:fb:82:e7:e3:ef:c0:
94:bf:bc:86:22:2a:51:d9:a5:70:af:10:25:e3:0c:
16:c9:15:0d:a1:e0:e7:ee:49:0d:e7:b1:d6:6e:ab:
9c:8b:32:6a:60:a3:b0:f2:a3:57:8b:26:f1:70:9b:
16:14:bf:5d:43:27:88:62:fe:09:02:2e:df:40:37:
60:0a:90:f7:0c:ec:d5:8f:3e:2a:f1:07:d7:28:74:
f9:3a:a0:5f:73:51:78:3f:0c:c7:d9:28:b0:e4:c9:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:B2:58:5C:74:4D:93:2C:B8:19:E1:45:15:4A:D7:52:BB:74:B5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Lt2yWFx0TZMsuBnhRRVK11K7dLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.121.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5b:da:89:9c:ab:3c:78:56:f9:2a:6e:30:e8:58:12:45:70:
2b:58:20:c1:11:76:2c:46:40:0b:67:0b:89:91:07:25:93:67:
15:f0:99:38:4d:5c:74:8e:51:92:ae:7f:9e:b0:58:e2:7b:b7:
8e:28:87:64:38:49:0c:2a:85:e5:4a:61:ad:28:c2:d8:d0:0b:
af:58:90:4e:e0:2a:a0:a8:d9:00:a5:be:69:05:6d:e2:ce:3f:
0f:3a:85:2b:11:2a:6b:f9:89:ce:5b:43:35:3e:b1:10:c5:d9:
a5:92:2e:29:43:ed:30:c7:6d:4d:8e:89:3d:65:11:6b:ab:d4:
6b:54:3a:fd:a5:df:63:37:15:6b:93:dc:d3:f8:af:ac:50:96:
14:24:22:99:f8:6a:75:74:b7:bd:f0:3e:0c:24:ca:c2:93:bf:
a1:db:df:f0:b2:f5:3d:f6:a0:2b:3c:41:c1:b4:d3:d6:f0:f0:
a4:09:55:eb:89:d3:8c:63:46:b1:a5:cc:1c:05:00:23:83:f0:
3a:0f:57:13:75:42:ff:a9:54:d5:eb:26:b6:8c:62:0f:a8:65:
43:0b:3b:25:f0:14:fa:a4:b2:e5:92:9d:f4:99:77:b3:01:bb:
9b:7e:7b:2d:55:30:c0:be:6c:e2:3c:b3:17:4b:f4:a0:b7:8a:
0d:82:cc:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC56ukjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDEw
MTA1NTE0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmVkZGIyNTg1Yzc0
NGQ5MzJjYjgxOWUxNDUxNTRhZDc1MmJiNzRiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANuZT9QTfS/ERLMmmRBR1+LHIt6DnucqEJlII3dG7nqSGZRc
wyZJ1uy6DOaieS5A8WZ2DNQGj2AV3A1zXCcSvedtxKswKLgrYVdtgb9gyaML0oDf
Z/WFwh1icttC3AH2pDwhGm4KgZ2yhASFIT9xeQUj3vc/VskUPiBiZOa5U40R7dUW
QlDmBjdxG7luvHkO++CuXSHsWThj0KgVZTV++4Ln4+/AlL+8hiIqUdmlcK8QJeMM
FskVDaHg5+5JDeex1m6rnIsyamCjsPKjV4sm8XCbFhS/XUMniGL+CQIu30A3YAqQ
9wzs1Y8+KvEH1yh0+TqgX3NReD8Mx9kosOTJHu8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQu3bJYXHRNkyy4GeFFFUrXUrt0tTAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L0x0MnlXRngwVFpNc3VCbmhSUlZLMTFLN2RMVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMP0eTANBgkqhkiG9w0BAQsFAAOC
AQEAmFvaiZyrPHhW+SpuMOhYEkVwK1ggwRF2LEZAC2cLiZEHJZNnFfCZOE1cdI5R
kq5/nrBY4nu3jiiHZDhJDCqF5UphrSjC2NALr1iQTuAqoKjZAKW+aQVt4s4/DzqF
KxEqa/mJzltDNT6xEMXZpZIuKUPtMMdtTY6JPWURa6vUa1Q6/aXfYzcVa5Pc0/iv
rFCWFCQimfhqdXS3vfA+DCTKwpO/odvf8LL1PfagKzxBwbTT1vDwpAlV64nTjGNG
saXMHAUAI4PwOg9XE3VC/6lU1esmtoxiD6hlQws7JfAU+qSy5ZKd9Jl3swG7m357
LVUwwL5s4jyzF0v0oLeKDYLM5A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org