Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/48LraOZ2KjzcOS6E_fcKrH2rypc.roa
File: 48LraOZ2KjzcOS6E_fcKrH2rypc.roa (raw, json)
Hash identifier: diRHNg7NKcwBy37e0sCLjWCBxQ9IjP5pnTuCkEFEs/I=
Subject key identifier: E3:C2:EB:68:E6:76:2A:3C:DC:39:2E:84:FD:F7:0A:AC:7D:AB:CA:97
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 01252E2D
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/48LraOZ2KjzcOS6E_fcKrH2rypc.roa
Signing time: Sat 01 Jan 2022 12:03:30 +0000
ROA not before: Sat 01 Jan 2022 12:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 195.210.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19213869 (0x1252e2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 1 12:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3c2eb68e6762a3cdc392e84fdf70aac7dabca97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:56:8b:4e:4c:0e:e9:0a:49:bc:3b:a3:4a:
6b:2f:db:c8:89:60:69:50:be:61:fe:ab:df:4a:90:
34:6a:1e:ca:98:ee:61:6b:c4:96:43:83:5b:c7:42:
2d:0e:5d:71:6b:c1:78:3d:67:5d:dd:b1:40:14:df:
49:79:92:8b:ca:ea:74:5c:8b:ed:f4:e5:aa:db:69:
c3:ca:ca:b2:34:c0:6e:dd:da:4a:47:ff:0e:95:14:
ef:cb:3b:a4:49:34:f1:33:a4:d2:e1:6d:ab:77:11:
2d:3d:af:74:ee:1a:dc:84:93:49:1e:d2:cc:d0:ab:
af:17:0c:41:da:68:38:7c:b6:2e:d0:fb:c2:db:1b:
55:3b:d3:50:50:3b:2b:1b:99:a4:0a:53:4c:1a:59:
e8:bb:77:c0:94:fa:a3:a2:1d:0e:d7:01:ce:dc:0a:
a7:63:a6:8e:6f:9d:0b:42:6e:42:8e:61:69:2e:99:
fd:b8:78:70:85:73:1b:37:91:bc:f4:9f:76:15:7e:
24:a6:e4:ef:97:d5:64:0e:7d:14:15:6b:8f:46:a1:
a5:88:e3:02:d2:f6:a2:64:c5:5d:98:2b:de:37:88:
eb:3a:56:4e:d0:ef:20:cf:13:83:d0:c9:97:65:a0:
16:25:48:6b:70:04:06:88:71:2f:60:e6:bb:42:6b:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:EB:68:E6:76:2A:3C:DC:39:2E:84:FD:F7:0A:AC:7D:AB:CA:97
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/48LraOZ2KjzcOS6E_fcKrH2rypc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:37:6d:68:c2:93:de:a7:ad:e2:d7:e9:5e:78:55:32:52:ee:
f8:f9:32:c6:e6:b7:7a:0e:ad:a7:23:6a:e0:29:b9:5a:49:90:
c4:9b:d9:fa:89:90:87:54:e6:9b:f7:c4:a7:aa:d5:2f:52:2a:
27:57:5c:1b:e0:38:d1:7f:d6:6f:26:05:44:d6:05:69:87:27:
47:35:2b:64:c7:d3:86:ef:6c:e3:51:2a:72:b2:0d:b9:e5:dc:
0a:17:7b:08:4b:c2:f5:92:98:ed:17:56:c2:6f:38:32:59:c2:
cb:7e:85:ee:1e:7e:34:eb:1f:99:44:78:ea:ca:fd:de:cc:33:
29:db:67:ae:b6:67:c2:bb:bf:05:4d:1b:02:d3:d4:07:4e:91:
89:57:f0:d6:cc:af:e1:3e:07:30:77:dd:85:34:93:51:d1:98:
c9:d2:e3:31:19:91:0e:6c:c4:65:ef:c8:fe:77:fe:58:e2:b7:
80:c8:f9:b5:cf:5a:e7:b0:ed:38:d2:61:1f:9e:c6:48:f4:0a:
0d:2d:cb:2e:cc:30:5b:e1:51:a1:30:3b:6f:96:11:fc:20:36:
4c:85:4a:2e:17:a7:7f:ab:0d:31:04:80:4c:bb:ba:20:43:16:
5a:4e:50:bb:b0:9c:0b:b6:3a:fb:35:9a:45:45:93:31:84:8c:
63:2b:05:88
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASUuLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWI4NGQ5ZjhmOWUzMzE1NjU4OWE1ZWJmNzIyMjAzYTg5OWUwYTUxMB4XDTIyMDEw
MTEyMDMzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTNjMmViNjhlNjc2
MmEzY2RjMzkyZTg0ZmRmNzBhYWM3ZGFiY2E5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANBxVotOTA7pCkm8O6NKay/byIlgaVC+Yf6r30qQNGoeypju
YWvElkODW8dCLQ5dcWvBeD1nXd2xQBTfSXmSi8rqdFyL7fTlqttpw8rKsjTAbt3a
Skf/DpUU78s7pEk08TOk0uFtq3cRLT2vdO4a3ISTSR7SzNCrrxcMQdpoOHy2LtD7
wtsbVTvTUFA7KxuZpApTTBpZ6Lt3wJT6o6IdDtcBztwKp2Omjm+dC0JuQo5haS6Z
/bh4cIVzGzeRvPSfdhV+JKbk75fVZA59FBVrj0ahpYjjAtL2omTFXZgr3jeI6zpW
TtDvIM8Tg9DJl2WgFiVIa3AEBohxL2Dmu0JrqNECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjwuto5nYqPNw5LoT99wqsfavKlzAfBgNVHSMEGDAWgBT+uE2fj54zFWWJ
pev3IiA6iZ4KUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19yaE5uNC1lTXhWbGlhWHI5eUlnT29tZUNsRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvNjE0ZTVjLTI5OWItNGZkNC1hMGJjLWFmMWNjMjMxN2UzOS8x
LzQ4THJhT1oyS2p6Y09TNkVfZmNLckgycnlwYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
NjE0ZTVjLTI5OWItNGZkNC1hMGJjLWFmMWNjMjMxN2UzOS8xL19yaE5uNC1lTXhW
bGlhWHI5eUlnT29tZUNsRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMPSbDANBgkqhkiG9w0BAQsFAAOC
AQEAazdtaMKT3qet4tfpXnhVMlLu+Pkyxua3eg6tpyNq4Cm5WkmQxJvZ+omQh1Tm
m/fEp6rVL1IqJ1dcG+A40X/WbyYFRNYFaYcnRzUrZMfThu9s41EqcrINueXcChd7
CEvC9ZKY7RdWwm84MlnCy36F7h5+NOsfmUR46sr93swzKdtnrrZnwru/BU0bAtPU
B06RiVfw1syv4T4HMHfdhTSTUdGYydLjMRmRDmzEZe/I/nf+WOK3gMj5tc9a57Dt
ONJhH57GSPQKDS3LLswwW+FRoTA7b5YR/CA2TIVKLhenf6sNMQSATLu6IEMWWk5Q
u7CcC7Y6+zWaRUWTMYSMYysFiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org