Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/1-sEMdUEYuskQujHNZmhUw36AmXs.roa
File: 1-sEMdUEYuskQujHNZmhUw36AmXs.roa (raw, json)
Hash identifier: rIM2wfjd34J7IXeBusMT1nzF2aFA9ikXF0BD/pMI9q0=
Subject key identifier: FA:C1:0C:75:41:18:BA:C9:10:BA:31:CD:66:68:54:C3:7E:80:99:7B
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 1B596555
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/1-sEMdUEYuskQujHNZmhUw36AmXs.roa
Signing time: Sat 01 Jan 2022 10:55:59 +0000
ROA not before: Sat 01 Jan 2022 10:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34173
IP address blocks: 78.153.245.0/24 maxlen: 24
85.31.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458843477 (0x1b596555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 10:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fac10c754118bac910ba31cd666854c37e80997b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:b3:44:d6:0f:f7:05:7f:02:e6:9c:d4:00:
4a:b6:bc:5e:45:c9:db:d7:2e:bf:22:4c:57:5a:2a:
c4:02:ab:48:5b:98:3f:43:ca:48:6d:8b:2c:aa:f2:
7e:ff:93:02:a5:9c:8d:71:c5:ae:83:24:89:8a:ef:
e6:e6:4e:9c:ff:be:8a:bd:72:38:fe:4b:a0:1d:ae:
b0:b8:33:8d:1b:3b:69:80:22:ad:49:4b:95:99:00:
8e:f6:b8:6e:05:1b:83:58:71:5e:1a:4f:db:9b:2b:
31:b1:7b:b1:f8:0b:b5:2f:3b:77:f1:f4:6e:f9:b8:
76:20:35:a9:b6:60:39:15:b2:72:0c:18:a1:6d:7a:
88:e0:7b:59:61:89:59:a5:70:a9:f8:59:c8:1e:a1:
b1:38:4b:2a:af:2c:89:70:18:d9:d2:6c:ed:d2:0b:
fb:bb:4d:26:f3:4f:cd:a5:90:26:13:e7:e6:7d:fe:
82:d8:57:78:69:e1:b6:27:a9:5e:a7:79:b8:05:d4:
b3:25:ca:e6:9d:60:49:07:8f:1a:af:54:02:6e:92:
2e:0b:e9:36:2d:c6:ef:0a:8f:3f:ba:7a:b2:50:ae:
d2:eb:3a:ad:ba:2d:47:f1:74:ea:1d:df:f7:c2:7c:
79:4e:1e:88:af:f8:26:0e:97:db:96:c0:0f:44:e9:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:0C:75:41:18:BA:C9:10:BA:31:CD:66:68:54:C3:7E:80:99:7B
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/1-sEMdUEYuskQujHNZmhUw36AmXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.245.0/24
85.31.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f9:73:35:0e:b6:1a:03:ad:43:ea:10:dd:6e:08:31:50:a4:
57:09:fe:c6:8f:ed:6a:5b:6e:3e:32:55:60:21:4d:94:b0:e5:
d6:f5:92:26:77:7e:a7:39:7f:34:ee:49:92:4f:62:04:1c:1e:
4e:4c:7e:29:1a:e2:f0:9e:02:8b:6b:c3:7a:45:0f:64:8c:f1:
35:55:93:d3:c0:cc:8a:76:bc:10:60:a1:34:10:d5:fa:f9:c0:
b9:a6:de:0e:8b:ba:4a:51:e6:f5:7d:96:f6:d3:4c:be:6f:7e:
a6:d6:e6:d6:ab:db:f3:56:62:c0:5c:74:dd:36:0b:ca:4d:ee:
89:80:e3:38:9c:69:dd:8f:f9:3a:57:34:22:de:99:a5:61:34:
10:df:e5:7d:6f:c8:5d:2e:e5:fa:cf:79:8e:01:a8:7f:32:16:
bb:c1:40:91:97:f9:34:0e:a0:db:4c:82:06:7b:c7:5b:6d:8b:
a5:17:ab:52:39:5d:fb:05:96:48:b4:45:77:74:a9:66:fc:cd:
ad:9d:54:32:0b:21:5d:b0:8f:00:0c:31:0d:64:d8:dd:1d:ff:
13:53:fb:f4:ec:a5:6f:98:dd:1b:50:42:9b:de:2f:c6:c2:c9:
67:0d:e1:48:23:03:06:b2:82:bc:4b:07:58:06:93:f9:df:f8:
4b:9e:29:5a
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIEG1llVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTA5ZWUzZDYxODk3NGRhMGNiZDgwNWEyZGE4MDQxMGE0OTg5ODgxMB4XDTIyMDEw
MTEwNTU1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFjMTBjNzU0MTE4
YmFjOTEwYmEzMWNkNjY2ODU0YzM3ZTgwOTk3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMSzs0TWD/cFfwLmnNQASra8XkXJ29cuvyJMV1oqxAKrSFuY
P0PKSG2LLKryfv+TAqWcjXHFroMkiYrv5uZOnP++ir1yOP5LoB2usLgzjRs7aYAi
rUlLlZkAjva4bgUbg1hxXhpP25srMbF7sfgLtS87d/H0bvm4diA1qbZgORWycgwY
oW16iOB7WWGJWaVwqfhZyB6hsThLKq8siXAY2dJs7dIL+7tNJvNPzaWQJhPn5n3+
gthXeGnhtiepXqd5uAXUsyXK5p1gSQePGq9UAm6SLgvpNi3G7wqPP7p6slCu0us6
rbotR/F06h3f98J8eU4eiK/4Jg6X25bAD0Tp1gMCAwEAAaOCAhAwggIMMB0GA1Ud
DgQWBBT6wQx1QRi6yRC6Mc1maFTDfoCZezAfBgNVHSMEGDAWgBTpCe49YYl02gy9
gFotqAQQpJiYgTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZRbnVQV0dKZE5vTXZZQmFMYWdFRUtTWW1JRS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvMmI1ZjVmLWJiOTYtNGIzMS04YTZhLWRkMTE1ZjllMzMwMS8x
LzEtc0VNZFVFWXVza1F1akhOWm1oVXczNkFtWHMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFl
LzJiNWY1Zi1iYjk2LTRiMzEtOGE2YS1kZDExNWY5ZTMzMDEvMS82UW51UFdHSmRO
b012WUJhTGFnRUVLU1ltSUUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABOmfUDBABVH9cwDQYJKoZIhvcN
AQELBQADggEBAKX5czUOthoDrUPqEN1uCDFQpFcJ/saP7Wpbbj4yVWAhTZSw5db1
kiZ3fqc5fzTuSZJPYgQcHk5Mfika4vCeAotrw3pFD2SM8TVVk9PAzIp2vBBgoTQQ
1fr5wLmm3g6LukpR5vV9lvbTTL5vfqbW5tar2/NWYsBcdN02C8pN7omA4zicad2P
+TpXNCLemaVhNBDf5X1vyF0u5frPeY4BqH8yFrvBQJGX+TQOoNtMggZ7x1tti6UX
q1I5XfsFlki0RXd0qWb8za2dVDILIV2wjwAMMQ1k2N0d/xNT+/TspW+Y3RtQQpve
L8bCyWcN4UgjAwaygrxLB1gGk/nf+EueKVo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org