Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/1-_WPiSvYPofv8CQdhniJyvGCWBs.roa
File: 1-_WPiSvYPofv8CQdhniJyvGCWBs.roa (raw, json)
Hash identifier: tdwP3CkKNLX+RSlVUrI/nB3n6j4uuoIMOex5xI30TmQ=
Subject key identifier: FB:F5:8F:89:2B:D8:3E:87:EF:F0:24:1D:86:78:89:CA:F1:82:58:1B
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: F68950
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/1-_WPiSvYPofv8CQdhniJyvGCWBs.roa
Signing time: Tue 04 Jan 2022 19:07:27 +0000
ROA not before: Tue 04 Jan 2022 19:07:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.230.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16157008 (0xf68950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 4 19:07:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbf58f892bd83e87eff0241d867889caf182581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:6b:2e:14:47:1c:7a:ac:c5:fc:bc:81:ff:
f8:d1:cb:32:36:e2:b3:dd:c7:61:bd:a1:6d:41:44:
64:05:d6:3a:a3:24:a1:44:96:3a:f0:76:a9:28:a6:
74:06:24:0e:f3:e7:6d:15:9c:18:15:09:06:49:0d:
b2:3a:75:a8:3d:33:32:2e:6e:4b:83:0c:55:b1:15:
2d:ae:82:c1:64:4f:62:4a:0d:dd:fa:bc:33:d1:24:
c5:09:94:4f:81:68:e8:f2:b3:aa:68:d4:a9:c3:dc:
4e:c5:21:b3:1d:a1:ff:c6:b2:ad:be:46:5e:ff:0f:
c3:a6:0d:0f:03:b7:6b:df:76:e7:29:1c:3b:aa:e2:
18:44:bd:d4:8d:82:bb:15:28:e2:3b:7e:34:bb:f5:
e0:28:f2:88:fb:e7:82:1d:4e:ea:e0:e2:c7:c2:cd:
14:95:de:40:8b:6f:b2:7d:77:88:79:0c:64:f2:b7:
b8:61:d6:51:7a:95:43:48:de:f9:00:24:30:de:7a:
e9:a5:f3:fe:cb:5a:01:59:cd:18:e6:df:94:fd:a9:
45:d4:ec:5e:82:5f:67:5b:f6:eb:7a:14:ba:5a:1c:
34:d3:49:24:6b:b5:dd:bb:2c:79:07:ea:2d:17:f6:
10:1f:89:f9:63:b5:72:95:e2:53:0e:2c:11:91:5a:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:8F:89:2B:D8:3E:87:EF:F0:24:1D:86:78:89:CA:F1:82:58:1B
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/1-_WPiSvYPofv8CQdhniJyvGCWBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.229.0-194.39.230.255
Signature Algorithm: sha256WithRSAEncryption
76:4c:53:2c:b2:56:af:ad:38:c1:e8:ac:6c:c8:ef:84:c4:97:
f5:e7:d2:64:f8:7f:80:a2:de:05:6d:2e:0d:87:49:7c:b6:bb:
77:7a:40:0c:e5:77:f4:b1:b9:79:0a:19:18:69:0b:f4:03:8b:
cd:ae:68:bd:72:bd:c6:3d:a1:b8:9b:e4:c0:61:8e:c0:ba:d6:
64:9f:2e:81:f1:b6:7e:6c:2d:a1:4a:09:eb:81:ec:f2:f4:07:
cf:dc:48:63:7b:52:4d:c3:24:3f:17:4a:bd:a1:9e:b3:b7:51:
24:73:47:e2:be:3c:59:7d:4e:6c:23:75:c1:1e:66:a5:7a:8c:
68:1f:6f:f8:b7:d9:06:c5:73:0a:35:f5:9e:4b:93:4c:8a:02:
28:22:54:9b:cc:2c:d9:03:72:dd:b4:70:02:dd:7d:e8:25:4d:
25:8d:b3:d1:43:dd:26:ff:83:82:50:d8:a5:8f:14:22:8e:aa:
1f:27:aa:ba:c6:c1:92:d3:7e:77:1b:dd:55:f1:a5:34:41:fc:
1e:9f:8d:d1:b7:67:40:ab:8d:28:59:06:3e:82:a6:25:29:ff:
26:f3:23:42:fb:42:a0:2d:53:5e:06:11:74:5f:81:10:54:d1:
43:05:18:16:cb:90:fe:ac:fd:4b:c8:a2:12:3c:f2:08:a9:c0:
69:ce:35:9f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIEAPaJUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZDNmODdiYjdmNzg3NGFhN2UxNWNmZWM5YmJmNmFhZTNjOWNlMzNhMB4XDTIyMDEw
NDE5MDcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJmNThmODkyYmQ4
M2U4N2VmZjAyNDFkODY3ODg5Y2FmMTgyNTgxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALoFay4URxx6rMX8vIH/+NHLMjbis93HYb2hbUFEZAXWOqMk
oUSWOvB2qSimdAYkDvPnbRWcGBUJBkkNsjp1qD0zMi5uS4MMVbEVLa6CwWRPYkoN
3fq8M9EkxQmUT4Fo6PKzqmjUqcPcTsUhsx2h/8ayrb5GXv8Pw6YNDwO3a9925ykc
O6riGES91I2CuxUo4jt+NLv14CjyiPvngh1O6uDix8LNFJXeQItvsn13iHkMZPK3
uGHWUXqVQ0je+QAkMN566aXz/staAVnNGObflP2pRdTsXoJfZ1v263oUulocNNNJ
JGu13bsseQfqLRf2EB+J+WO1cpXiUw4sEZFa4KMCAwEAAaOCAhIwggIOMB0GA1Ud
DgQWBBT79Y+JK9g+h+/wJB2GeInK8YJYGzAfBgNVHSMEGDAWgBQ9P4e7f3h0qn4V
z+ybv2quPJzjOjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BULUh1Mzk0ZEtwLUZjX3NtNzlxcmp5YzR6by5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWQvNzEwMTVhLTExYmUtNDcxZS05NTkyLTYyYmU1MzQyNTY3Ni8x
LzEtX1dQaVN2WVBvZnY4Q1FkaG5pSnl2R0NXQnMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFk
LzcxMDE1YS0xMWJlLTQ3MWUtOTU5Mi02MmJlNTM0MjU2NzYvMS9QVC1IdTM5NGRL
cC1GY19zbTc5cXJqeWM0em8uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAMIn5QMEAMIn5jANBgkqhkiG
9w0BAQsFAAOCAQEAdkxTLLJWr604weisbMjvhMSX9efSZPh/gKLeBW0uDYdJfLa7
d3pADOV39LG5eQoZGGkL9AOLza5ovXK9xj2huJvkwGGOwLrWZJ8ugfG2fmwtoUoJ
64Hs8vQHz9xIY3tSTcMkPxdKvaGes7dRJHNH4r48WX1ObCN1wR5mpXqMaB9v+LfZ
BsVzCjX1nkuTTIoCKCJUm8ws2QNy3bRwAt196CVNJY2z0UPdJv+DglDYpY8UIo6q
HyequsbBktN+dxvdVfGlNEH8Hp+N0bdnQKuNKFkGPoKmJSn/JvMjQvtCoC1TXgYR
dF+BEFTRQwUYFsuQ/qz9S8iiEjzyCKnAac41nw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org