Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O30DY9PpySyVW4Z5JiUifWSeO1s.roa
File: O30DY9PpySyVW4Z5JiUifWSeO1s.roa (raw, json)
Hash identifier: L2SeM+kWcn54r0QGQuQUcrrdhZiMc/qSfk9aMEyil1A=
Subject key identifier: 3B:7D:03:63:D3:E9:C9:2C:95:5B:86:79:26:25:22:7D:64:9E:3B:5B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D6A66FF
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O30DY9PpySyVW4Z5JiUifWSeO1s.roa
Signing time: Thu 26 May 2022 19:59:15 +0000
ROA not before: Thu 26 May 2022 19:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136796
IP address blocks: 195.180.150.0/23 maxlen: 24
194.163.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225076991 (0xd6a66ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 26 19:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b7d0363d3e9c92c955b86792625227d649e3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:b6:32:7d:12:34:0c:86:ce:8a:cb:c7:db:
33:18:7d:80:0d:ad:b5:b0:a0:cd:2f:c8:b6:5b:d5:
45:c6:8f:7b:1a:c0:ad:21:25:c9:46:7b:28:60:0c:
73:1f:34:b3:7c:cf:15:e8:65:6a:2b:35:ea:26:1b:
ce:19:00:cd:97:a4:42:7a:fb:ce:bd:5d:88:2c:a4:
81:c0:70:87:70:e4:7e:2e:34:a2:bf:54:9b:e0:6c:
75:ef:a4:2a:d5:fd:5a:cb:26:eb:ed:83:53:06:a1:
33:f9:20:71:6a:f8:b2:4a:78:95:21:69:d4:9c:c0:
6f:51:f4:38:cd:7d:66:71:af:cd:9b:a7:fd:3d:d7:
19:fd:13:7a:87:00:93:71:6d:f9:d3:db:ab:7c:3c:
d2:e6:f9:99:5e:21:14:21:09:40:4a:3f:da:2e:ff:
1b:cf:2a:9f:6a:2b:46:09:af:17:e7:be:30:74:ee:
30:da:d8:bf:a1:62:f5:b6:a5:cc:b4:b9:8b:45:6e:
48:e3:a3:76:43:79:47:bc:73:ff:49:2f:47:2d:56:
d2:94:05:05:f5:9d:6f:66:97:c4:5c:5a:3b:64:d9:
86:b0:bc:e9:c8:46:0b:7b:19:85:c0:92:a4:83:8f:
00:5a:16:d7:ba:71:7d:49:a4:16:ce:3d:b5:01:fc:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:03:63:D3:E9:C9:2C:95:5B:86:79:26:25:22:7D:64:9E:3B:5B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O30DY9PpySyVW4Z5JiUifWSeO1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.80.0/22
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
46:5f:62:50:d9:82:57:f8:51:bb:4f:a5:a8:ef:f5:aa:0a:c3:
82:ce:c0:85:92:aa:be:5a:c2:5b:de:75:6a:b1:03:f5:fc:3b:
6c:10:a5:6b:ed:03:8d:02:d1:c9:8b:fd:8d:7e:97:a7:dd:71:
a0:90:36:7c:fc:51:c1:22:54:45:53:98:96:e3:1d:75:35:94:
ac:6f:19:94:5c:55:82:09:ff:b5:04:53:8a:3f:17:96:9b:19:
11:f9:3f:62:98:51:e8:9f:a5:2e:fa:1a:a0:a0:52:c1:bb:5c:
67:7e:06:66:31:33:72:38:9f:2d:bf:12:a5:4c:10:81:26:3b:
c5:62:56:9f:d5:3d:fb:86:7a:1b:c2:6c:23:6e:c2:67:12:35:
67:30:7e:8b:40:de:b7:4c:3b:3a:f8:4f:7f:f7:44:46:c9:78:
84:07:e6:8c:4f:f2:15:63:30:5f:87:d2:b2:3a:a9:3c:bb:68:
34:72:44:91:99:0c:5f:11:e8:30:2d:fe:b2:1e:f7:3c:d8:12:
12:b1:6e:1a:cd:4c:9d:77:1b:6a:76:55:9b:6f:10:51:03:45:
0d:c4:4a:25:f3:3e:3d:2e:3b:e7:4e:7b:34:a5:7b:47:df:77:
37:0c:6e:84:25:9b:01:16:03:69:ce:b8:1f:b5:ba:6c:90:94:
77:05:3e:0f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDWpm/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDUy
NjE5NTkxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2I3ZDAzNjNkM2U5
YzkyYzk1NWI4Njc5MjYyNTIyN2Q2NDllM2I1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzXtjJ9EjQMhs6Ky8fbMxh9gA2ttbCgzS/ItlvVRcaPexrA
rSElyUZ7KGAMcx80s3zPFehlais16iYbzhkAzZekQnr7zr1diCykgcBwh3Dkfi40
or9Um+Bsde+kKtX9Wssm6+2DUwahM/kgcWr4skp4lSFp1JzAb1H0OM19ZnGvzZun
/T3XGf0TeocAk3Ft+dPbq3w80ub5mV4hFCEJQEo/2i7/G88qn2orRgmvF+e+MHTu
MNrYv6Fi9balzLS5i0VuSOOjdkN5R7xz/0kvRy1W0pQFBfWdb2aXxFxaO2TZhrC8
6chGC3sZhcCSpIOPAFoW17pxfUmkFs49tQH8GhMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ7fQNj0+nJLJVbhnkmJSJ9ZJ47WzAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L08zMERZOVBweVN5Vlc0WjVKaVVpZldTZU8xcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAsKjUAMEAcO0ljANBgkqhkiG9w0B
AQsFAAOCAQEARl9iUNmCV/hRu0+lqO/1qgrDgs7AhZKqvlrCW951arED9fw7bBCl
a+0DjQLRyYv9jX6Xp91xoJA2fPxRwSJURVOYluMddTWUrG8ZlFxVggn/tQRTij8X
lpsZEfk/YphR6J+lLvoaoKBSwbtcZ34GZjEzcjifLb8SpUwQgSY7xWJWn9U9+4Z6
G8JsI27CZxI1ZzB+i0Det0w7OvhPf/dERsl4hAfmjE/yFWMwX4fSsjqpPLtoNHJE
kZkMXxHoMC3+sh73PNgSErFuGs1MnXcbanZVm28QUQNFDcRKJfM+PS475057NKV7
R993NwxuhCWbARYDac64H7W6bJCUdwU+Dw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org