Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/bEXgQHhVIrthSWrnOXjx-eWSDww.roa
File: bEXgQHhVIrthSWrnOXjx-eWSDww.roa (raw, json)
Hash identifier: bOk0Tq/Ahmvczysz5ZnfrWdv0CAZ3KiuaDtNnIrF8r8=
Subject key identifier: 6C:45:E0:40:78:55:22:BB:61:49:6A:E7:39:78:F1:F9:E5:92:0F:0C
Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial: 0617B43F
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/bEXgQHhVIrthSWrnOXjx-eWSDww.roa
Signing time: Sat 01 Jan 2022 14:58:42 +0000
ROA not before: Sat 01 Jan 2022 14:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34476
IP address blocks: 195.49.239.0/24 maxlen: 24
195.49.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102216767 (0x617b43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Validity
Not Before: Jan 1 14:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c45e040785522bb61496ae73978f1f9e5920f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:83:70:0c:6e:50:fc:d1:70:6d:0d:b5:2d:
21:47:c8:58:37:10:05:92:c6:cf:01:97:48:80:e2:
c6:ce:97:15:0a:69:47:c6:97:90:b5:96:98:94:7e:
be:2e:1a:7a:13:97:de:05:f1:bc:d3:d9:da:1a:a2:
be:47:fe:b5:07:a5:72:61:88:6c:c2:84:50:dd:4b:
3c:fc:f8:5c:18:5d:40:af:cb:f0:f4:7b:0d:1f:49:
9d:32:1d:08:87:a6:1b:91:a1:0c:5c:9b:88:0c:1a:
08:bb:97:ad:70:cd:f8:fd:90:60:d6:b3:87:ba:e1:
68:3b:f2:0a:a3:19:7b:f1:8a:ad:2f:c2:4c:43:48:
d5:a6:5f:b7:e8:2d:3d:06:14:6b:3b:95:31:43:1c:
f4:60:f5:b7:cb:e4:c0:90:4c:4b:56:00:66:bf:3c:
99:63:55:42:3f:b2:ba:aa:03:74:89:aa:f3:5a:6c:
a6:16:a6:95:2b:12:a1:ce:f9:10:d6:a7:20:66:8e:
97:83:dd:e4:7f:09:ec:5e:bb:3a:cf:84:70:f4:d3:
7e:fd:db:97:2c:2f:19:0c:2c:27:88:c1:7f:2e:d4:
8d:56:a1:ac:ce:a3:d0:c5:76:c9:c0:8b:8b:a7:da:
f3:c4:28:f9:74:c4:66:a5:23:0b:64:1f:dd:dd:a3:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:E0:40:78:55:22:BB:61:49:6A:E7:39:78:F1:F9:E5:92:0F:0C
X509v3 Authority Key Identifier:
keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/bEXgQHhVIrthSWrnOXjx-eWSDww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.238.0/23
Signature Algorithm: sha256WithRSAEncryption
71:ff:80:84:2f:d8:53:9a:f9:07:36:6c:02:98:13:a0:85:ff:
56:54:58:7d:9f:38:be:7e:17:65:0e:2f:0f:1e:3b:1b:25:c1:
fd:f4:d8:96:15:73:8d:0d:50:22:b7:67:28:97:a4:ed:3f:b3:
24:e8:05:8f:a6:56:24:e1:88:25:14:9a:98:35:ae:6d:96:ac:
d7:6e:e2:c5:04:86:8a:28:b7:1e:a5:eb:cf:2a:a9:04:cc:4b:
78:f5:c6:25:84:7e:c5:84:30:3f:4e:7b:aa:fe:68:26:9e:d6:
f4:d5:21:05:3b:8e:2b:4c:17:e3:11:bc:a8:56:87:96:9c:89:
25:15:59:78:ed:63:66:64:a8:05:d9:58:12:3f:70:5d:a8:d1:
c6:1a:e9:64:b5:35:80:e1:58:c8:3a:9f:f7:ad:6b:05:84:7c:
9e:63:00:af:09:eb:15:f4:94:1d:c3:d4:b4:8d:96:e7:d1:a2:
c3:00:ac:64:1a:b7:fd:8a:de:a2:a3:09:a8:be:42:82:90:01:
5f:d1:c1:f4:86:ac:93:e5:fb:cb:e5:70:92:85:ce:c4:eb:a7:
6a:40:d7:90:60:fc:cb:c4:84:a9:09:28:2a:b4:88:38:5d:16:
8d:38:db:61:38:af:5a:28:ff:90:6d:e3:83:5f:a6:e6:da:ee:
03:2d:9d:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhe0PzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTRmODAwMWMzMGNhYzU0NmUzZjkyMTAzYjRiMTI3MzJkZmNiZjUyMB4XDTIyMDEw
MTE0NTg0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmM0NWUwNDA3ODU1
MjJiYjYxNDk2YWU3Mzk3OGYxZjllNTkyMGYwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMhdg3AMblD80XBtDbUtIUfIWDcQBZLGzwGXSIDixs6XFQpp
R8aXkLWWmJR+vi4aehOX3gXxvNPZ2hqivkf+tQelcmGIbMKEUN1LPPz4XBhdQK/L
8PR7DR9JnTIdCIemG5GhDFybiAwaCLuXrXDN+P2QYNazh7rhaDvyCqMZe/GKrS/C
TENI1aZft+gtPQYUazuVMUMc9GD1t8vkwJBMS1YAZr88mWNVQj+yuqoDdImq81ps
phamlSsSoc75ENanIGaOl4Pd5H8J7F67Os+EcPTTfv3blywvGQwsJ4jBfy7UjVah
rM6j0MV2ycCLi6fa88Qo+XTEZqUjC2Qf3d2jsHkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRsReBAeFUiu2FJauc5ePH55ZIPDDAfBgNVHSMEGDAWgBQaT4ABwwysVG4/
khA7SxJzLfy/UjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0drLUFBY01NckZSdVA1SVFPMHNTY3kzOHYxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvZDZjODZkLTZjNjUtNGEyNS1hOGZhLTM4ZDRmMzIxMTg5Ni8x
L2JFWGdRSGhWSXJ0aFNXcm5PWGp4LWVXU0R3dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
ZDZjODZkLTZjNjUtNGEyNS1hOGZhLTM4ZDRmMzIxMTg5Ni8xL0drLUFBY01NckZS
dVA1SVFPMHNTY3kzOHYxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcMx7jANBgkqhkiG9w0BAQsFAAOC
AQEAcf+AhC/YU5r5BzZsApgToIX/VlRYfZ84vn4XZQ4vDx47GyXB/fTYlhVzjQ1Q
IrdnKJek7T+zJOgFj6ZWJOGIJRSamDWubZas127ixQSGiii3HqXrzyqpBMxLePXG
JYR+xYQwP057qv5oJp7W9NUhBTuOK0wX4xG8qFaHlpyJJRVZeO1jZmSoBdlYEj9w
XajRxhrpZLU1gOFYyDqf961rBYR8nmMArwnrFfSUHcPUtI2W59GiwwCsZBq3/Yre
oqMJqL5CgpABX9HB9Iask+X7y+VwkoXOxOunakDXkGD8y8SEqQkoKrSIOF0WjTjb
YTivWij/kG3jg1+m5truAy2dJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:46 2023 by rpki-client on console-fra.rpki-client.org