Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qg9aPT_sih2fU5Nxo0Iu6mw4jnw.roa
File: qg9aPT_sih2fU5Nxo0Iu6mw4jnw.roa (raw, json)
Hash identifier: 421j+XIdGQTFRcHizkH0h6bK3YElMi8RKHUb3q8pXu8=
Subject key identifier: AA:0F:5A:3D:3F:EC:8A:1D:9F:53:93:71:A3:42:2E:EA:6C:38:8E:7C
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01836932EDBE53BA6E65BC57DFC98619EE98
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qg9aPT_sih2fU5Nxo0Iu6mw4jnw.roa
Signing time: Fri 23 Sep 2022 07:14:48 +0000
ROA not before: Fri 23 Sep 2022 07:14:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 195.180.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:32:ed:be:53:ba:6e:65:bc:57:df:c9:86:19:ee:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 23 07:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa0f5a3d3fec8a1d9f539371a3422eea6c388e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:c7:81:24:51:f3:76:6e:bb:60:d8:ce:5d:
1a:c2:33:c3:4c:bb:d4:3f:b4:a8:bc:61:d1:3f:04:
85:1d:c3:0b:b8:13:1d:a2:2c:d5:a9:c7:50:cd:e5:
da:61:ef:72:af:43:e9:8b:bf:19:56:8d:94:d4:b1:
ba:3d:18:d3:eb:dd:c7:56:88:27:a0:a1:07:00:dc:
eb:00:71:33:c1:85:f2:f7:f8:3e:f2:f6:db:df:bb:
03:8d:30:04:1f:3d:aa:bc:0f:7a:a3:59:1f:2b:ef:
b4:1b:b1:58:d8:78:96:fa:ec:e4:40:2d:b9:ee:39:
a4:98:04:41:c3:cf:c9:23:03:a2:2b:e5:43:da:d3:
a4:ce:ce:5a:ee:ca:b6:55:8e:bf:22:c4:e9:53:0e:
5b:33:4f:af:b8:0e:44:4b:15:aa:62:d6:dc:6d:97:
d5:9c:5f:39:48:fa:14:a7:fc:9f:da:5d:f8:5d:a9:
1d:6d:08:db:05:ef:4a:ab:a7:97:c2:50:3b:8b:d3:
4d:d5:f1:19:c0:5b:b9:9d:dd:94:13:1c:df:97:aa:
2b:98:59:9e:73:0a:32:7d:82:bc:a2:95:40:f0:a2:
0e:ce:5f:24:c9:9b:ae:dd:2b:de:b3:99:e1:32:1e:
3b:c5:94:32:c4:31:8f:46:08:0a:e8:75:3c:a3:8d:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:5A:3D:3F:EC:8A:1D:9F:53:93:71:A3:42:2E:EA:6C:38:8E:7C
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qg9aPT_sih2fU5Nxo0Iu6mw4jnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.136.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6e:6a:ad:99:ef:1c:7b:12:88:40:ae:89:ed:15:4a:d7:08:
17:b0:fd:54:af:14:70:25:ea:14:60:25:15:b1:d3:24:e9:0a:
43:80:88:fc:55:19:cb:a6:65:b4:90:d8:17:88:c2:74:ba:fc:
2b:80:9d:62:02:da:09:59:91:c6:34:25:d7:45:ca:e1:77:41:
6f:24:9d:59:ee:cb:c1:6d:70:67:64:21:3b:ff:d8:f8:ce:02:
ed:43:14:bc:e6:1a:ce:29:36:48:1e:9d:0f:42:11:12:c2:53:
04:4e:09:d8:45:bb:24:fe:5e:0c:81:fb:99:9e:08:aa:03:76:
48:cc:7f:65:bc:41:59:bb:d7:fd:14:ae:1b:9e:51:32:81:6f:
d4:10:34:8d:14:c9:e7:49:ed:fb:c6:f6:9e:d1:ec:8c:c9:ee:
b5:fc:bf:ba:11:48:a9:fa:50:44:30:16:70:71:ef:2a:b6:d9:
58:08:4d:db:fd:ca:cc:c6:0a:63:28:a6:2a:e9:90:01:f3:7f:
f2:28:89:55:78:a5:5e:d9:86:95:87:ce:4b:3f:2c:f0:be:5b:
72:64:ac:42:08:5f:38:3f:16:e3:c9:e1:9b:dc:9d:98:f2:12:
1e:6e:3d:26:50:4c:3f:f2:fa:e6:e0:ec:a1:c5:7c:99:b1:36:
57:77:bd:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNpMu2+U7puZbxX38mGGe6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjIwOTIzMDcxNDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTBmNWEzZDNmZWM4YTFkOWY1MzkzNzFhMzQyMmVlYTZjMzg4ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjfHgSRR83Zuu2DYzl0awjPDTLvU
P7SovGHRPwSFHcMLuBMdoizVqcdQzeXaYe9yr0Ppi78ZVo2U1LG6PRjT693HVogn
oKEHANzrAHEzwYXy9/g+8vbb37sDjTAEHz2qvA96o1kfK++0G7FY2HiW+uzkQC25
7jmkmARBw8/JIwOiK+VD2tOkzs5a7sq2VY6/IsTpUw5bM0+vuA5ESxWqYtbcbZfV
nF85SPoUp/yf2l34XakdbQjbBe9Kq6eXwlA7i9NN1fEZwFu5nd2UExzfl6ormFme
cwoyfYK8opVA8KIOzl8kyZuu3Sves5nhMh47xZQyxDGPRggK6HU8o40vIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoPWj0/7Iodn1OTcaNCLupsOI58MB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvcWc5YVBUX3NpaDJmVTVOeG8wSXU2bXc0am53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7SIMA0G
CSqGSIb3DQEBCwUAA4IBAQBHbmqtme8cexKIQK6J7RVK1wgXsP1UrxRwJeoUYCUV
sdMk6QpDgIj8VRnLpmW0kNgXiMJ0uvwrgJ1iAtoJWZHGNCXXRcrhd0FvJJ1Z7svB
bXBnZCE7/9j4zgLtQxS85hrOKTZIHp0PQhESwlMETgnYRbsk/l4MgfuZngiqA3ZI
zH9lvEFZu9f9FK4bnlEygW/UEDSNFMnnSe37xvae0eyMye61/L+6EUip+lBEMBZw
ce8qttlYCE3b/crMxgpjKKYq6ZAB83/yKIlVeKVe2YaVh85LPyzwvltyZKxCCF84
PxbjyeGb3J2Y8hIebj0mUEw/8vrm4OyhxXyZsTZXd71F
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:30 2023 by rpki-client on console-ams.rpki-client.org