Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/aDZuguKyU0vxG6Y-KU1FyQqi1tE.roa
File: aDZuguKyU0vxG6Y-KU1FyQqi1tE.roa (raw, json)
Hash identifier: sGIDJo47ckJcu/KjI0++BN7t5LecYxuHWWKeJmg0BNM=
Subject key identifier: 68:36:6E:82:E2:B2:53:4B:F1:1B:A6:3E:29:4D:45:C9:0A:A2:D6:D1
Certificate issuer: /CN=864abd435f899d570a8e5fb83bdad1153455dee0
Certificate serial: 34022843
Authority key identifier: 86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/aDZuguKyU0vxG6Y-KU1FyQqi1tE.roa
Signing time: Sat 01 Jan 2022 14:57:17 +0000
ROA not before: Sat 01 Jan 2022 14:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62372
IP address blocks: 95.87.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872556611 (0x34022843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864abd435f899d570a8e5fb83bdad1153455dee0
Validity
Not Before: Jan 1 14:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68366e82e2b2534bf11ba63e294d45c90aa2d6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:7c:9d:18:05:2c:e1:a0:ee:06:42:4d:59:
ae:da:44:85:85:1c:4f:41:75:be:b5:8b:c1:a4:1e:
65:db:a5:2b:6b:97:82:f7:39:2b:1d:17:45:75:74:
98:cc:d5:a6:f6:87:95:93:22:12:d2:4a:fe:2f:6a:
d3:b8:e0:fb:fe:cf:00:2c:74:a6:a7:3a:14:6e:56:
e8:f8:0d:a1:ba:fd:f3:5a:42:28:bc:f4:71:3e:1f:
6d:45:60:4d:c6:2b:8c:de:2c:8b:c4:b9:98:db:8c:
c7:ed:a4:b0:03:30:5f:5b:71:95:fb:19:23:94:02:
df:3f:fb:a2:93:66:5d:20:1a:81:43:11:6c:11:ea:
88:86:16:ac:19:66:a7:8b:bc:75:81:de:0a:8d:36:
98:4f:20:d6:c7:c3:8d:8a:ae:bf:1a:8e:ad:6a:6a:
90:66:e2:36:87:8b:40:d2:ea:96:ab:c6:9d:a3:9f:
9f:50:6d:11:12:95:aa:4d:9e:56:89:4f:8a:69:20:
4b:cb:ab:90:91:a7:98:5c:65:2b:8e:48:d3:1b:f1:
03:ec:6e:2f:e8:72:bb:df:37:de:74:7a:fa:d7:e4:
4c:d4:dd:1d:4d:9b:5c:23:f4:64:e3:e6:d1:42:1f:
d8:01:b6:12:86:93:19:da:7a:52:82:12:76:e2:c4:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:6E:82:E2:B2:53:4B:F1:1B:A6:3E:29:4D:45:C9:0A:A2:D6:D1
X509v3 Authority Key Identifier:
keyid:86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/aDZuguKyU0vxG6Y-KU1FyQqi1tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.1.0/24
Signature Algorithm: sha256WithRSAEncryption
16:07:b5:00:2c:a1:10:f4:47:bf:c8:96:12:0d:89:33:02:05:
46:8c:b5:00:f8:f9:00:67:28:20:0e:87:83:1e:c0:2a:8b:c8:
bb:1e:ed:2c:d1:cf:01:ce:72:5a:4b:19:1a:25:ed:43:b9:e0:
16:53:94:56:8c:47:34:0c:76:ce:2c:bd:56:66:df:cb:64:1a:
a4:37:e4:ec:58:b8:c5:ca:41:16:39:67:fd:6c:18:1b:03:34:
d8:fb:7d:91:ee:cf:d6:0d:ce:81:46:d8:11:a8:4b:e3:41:db:
79:f0:4c:6c:60:80:f4:46:c4:00:08:73:15:67:ad:13:fe:1d:
d9:00:c9:85:25:3c:a1:e9:02:fa:98:f1:e5:e9:8d:95:cf:fb:
05:19:43:b1:1f:1d:16:61:d3:5e:6f:62:ee:ae:e0:7e:7c:66:
e6:e4:ef:5f:75:0d:5c:01:01:5b:7e:32:14:b5:16:2c:bd:ad:
95:0a:3b:9e:9e:3c:e3:a5:50:d4:22:93:ca:4b:60:68:19:da:
fe:7f:e8:bc:91:88:2a:ec:a7:93:b3:b6:db:22:fe:c6:66:30:
08:b5:d7:49:9b:f0:8d:ff:d0:db:2c:a7:81:1f:cc:5f:81:d2:
c9:d0:9c:bd:11:25:77:b3:72:d6:c1:1f:66:40:f4:84:51:28:
91:7c:d1:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENAIoQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NjRhYmQ0MzVmODk5ZDU3MGE4ZTVmYjgzYmRhZDExNTM0NTVkZWUwMB4XDTIyMDEw
MTE0NTcxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjgzNjZlODJlMmIy
NTM0YmYxMWJhNjNlMjk0ZDQ1YzkwYWEyZDZkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJnfJ0YBSzhoO4GQk1ZrtpEhYUcT0F1vrWLwaQeZdulK2uX
gvc5Kx0XRXV0mMzVpvaHlZMiEtJK/i9q07jg+/7PACx0pqc6FG5W6PgNobr981pC
KLz0cT4fbUVgTcYrjN4si8S5mNuMx+2ksAMwX1txlfsZI5QC3z/7opNmXSAagUMR
bBHqiIYWrBlmp4u8dYHeCo02mE8g1sfDjYquvxqOrWpqkGbiNoeLQNLqlqvGnaOf
n1BtERKVqk2eVolPimkgS8urkJGnmFxlK45I0xvxA+xuL+hyu9833nR6+tfkTNTd
HU2bXCP0ZOPm0UIf2AG2EoaTGdp6UoISduLElo0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRoNm6C4rJTS/Ebpj4pTUXJCqLW0TAfBgNVHSMEGDAWgBSGSr1DX4mdVwqO
X7g72tEVNFXe4DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hrcTlRMS1KblZjS2psLTRPOXJSRlRSVjN1QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmEvM2YxMzNmLTFjODEtNGE0Yi1hMjU1LTNlMzY0NjU5MWFhMC8x
L2FEWnVndUt5VTB2eEc2WS1LVTFGeVFxaTF0RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEv
M2YxMzNmLTFjODEtNGE0Yi1hMjU1LTNlMzY0NjU5MWFhMC8xL2hrcTlRMS1KblZj
S2psLTRPOXJSRlRSVjN1QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF9XATANBgkqhkiG9w0BAQsFAAOC
AQEAFge1ACyhEPRHv8iWEg2JMwIFRoy1APj5AGcoIA6Hgx7AKovIux7tLNHPAc5y
WksZGiXtQ7ngFlOUVoxHNAx2ziy9Vmbfy2QapDfk7Fi4xcpBFjln/WwYGwM02Pt9
ke7P1g3OgUbYEahL40HbefBMbGCA9EbEAAhzFWetE/4d2QDJhSU8oekC+pjx5emN
lc/7BRlDsR8dFmHTXm9i7q7gfnxm5uTvX3UNXAEBW34yFLUWLL2tlQo7np4846VQ
1CKTyktgaBna/n/ovJGIKuynk7O22yL+xmYwCLXXSZvwjf/Q2yyngR/MX4HSydCc
vREld7Ny1sEfZkD0hFEokXzRtA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:00 2025 by rpki-client