Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/IOqyErKI5qloN-LWkecHUo-SnmY.roa
File: IOqyErKI5qloN-LWkecHUo-SnmY.roa (raw, json)
Hash identifier: nzRZzJCIkGPYV7UyX7A8HBcfmg+UDbHPhk5tF9B4ZFI=
Subject key identifier: 20:EA:B2:12:B2:88:E6:A9:68:37:E2:D6:91:E7:07:52:8F:92:9E:66
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 04E67466
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/IOqyErKI5qloN-LWkecHUo-SnmY.roa
Signing time: Sat 01 Jan 2022 07:52:45 +0000
ROA not before: Sat 01 Jan 2022 07:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198228
IP address blocks: 195.250.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82211942 (0x4e67466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Jan 1 07:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20eab212b288e6a96837e2d691e707528f929e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:47:a3:2d:09:40:39:f4:10:09:ce:ae:94:
8d:b3:09:20:f7:20:49:02:80:19:3d:4e:3d:7e:73:
ab:d8:92:ab:04:69:d9:19:b2:ec:20:62:47:76:bd:
5e:75:bc:e0:5c:83:4c:f3:34:ac:a4:55:c9:8b:56:
5f:76:3e:a8:38:b5:6a:9a:05:c2:b5:ad:98:72:b6:
85:59:8d:7d:9b:11:6f:d3:1c:89:19:1d:4b:e7:e5:
e7:f8:96:6e:9a:04:8b:96:bd:25:c2:19:15:f5:97:
ad:23:c2:72:69:80:d7:fc:dd:3d:5c:c3:55:65:58:
6c:50:6e:9b:5f:61:cc:6b:d9:bc:8c:cc:d2:4b:2b:
de:82:45:90:2e:81:81:47:25:01:7f:1b:98:37:08:
34:92:92:4a:a1:35:1c:8e:1c:3f:cc:c2:e8:01:27:
85:0a:ef:5c:39:7b:49:7a:86:7e:10:28:86:66:74:
3b:a8:7a:a7:54:1d:d7:6a:0d:d9:ff:e7:1d:ae:c1:
a9:8c:9c:ed:59:38:e2:3a:a1:e0:16:3e:7b:fa:db:
3f:79:65:d3:66:2c:c9:57:9c:c6:3e:97:d0:9c:3f:
b4:d3:08:77:d2:ce:4c:fb:b1:c1:76:fa:21:63:c8:
0d:bf:b8:0b:4e:3b:9c:f5:3b:c0:cb:f6:38:e2:3d:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:B2:12:B2:88:E6:A9:68:37:E2:D6:91:E7:07:52:8F:92:9E:66
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/IOqyErKI5qloN-LWkecHUo-SnmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1e:d6:69:a2:3a:1d:8e:8a:9e:11:46:20:93:8e:22:18:8f:
34:a1:ea:7c:92:2b:26:7d:19:cf:bc:63:4b:a4:83:09:7f:28:
0b:45:83:d4:a1:bf:6a:85:af:ba:22:ca:42:0a:c9:4b:b1:15:
c1:59:9f:a9:e0:5a:80:78:37:7e:0a:e5:47:9a:12:9f:45:b0:
42:81:7f:39:53:97:f7:f5:ac:c9:8c:2c:ef:62:62:0b:b4:bc:
bb:c3:ea:fc:a7:5a:38:fb:0b:9a:9b:e8:db:29:8c:41:19:c8:
95:75:51:6e:20:3f:b0:45:f3:61:80:34:0d:76:2a:8b:ee:be:
d6:57:28:27:f7:fd:8c:7f:bb:46:37:19:09:72:a8:f6:f4:ab:
4a:b9:c1:bf:b1:be:28:a1:bd:3a:f6:3e:43:99:a6:64:df:2a:
d6:7b:2b:40:95:eb:16:96:ec:27:fd:b3:0c:d5:04:81:6c:6c:
d2:20:2a:d1:ed:5c:cc:a5:cf:20:1f:68:16:e0:b5:a7:43:a8:
94:08:95:7d:7b:c1:ad:b7:bf:39:88:e6:b2:fa:5e:bf:22:f4:
48:e0:5e:bd:4d:2f:9e:be:b3:15:04:3a:9e:61:12:36:e6:80:
01:57:19:45:02:b3:b6:d8:5c:27:4b:75:3c:b4:0e:4c:a2:84:
a9:c3:13:d4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOZ0ZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NDdkMWJlYmU0YzIzYzQyMTdiODRmN2ZkODE5MmFiMjU1NTQxNWE4MB4XDTIyMDEw
MTA3NTI0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjBlYWIyMTJiMjg4
ZTZhOTY4MzdlMmQ2OTFlNzA3NTI4ZjkyOWU2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALmJR6MtCUA59BAJzq6UjbMJIPcgSQKAGT1OPX5zq9iSqwRp
2Rmy7CBiR3a9XnW84FyDTPM0rKRVyYtWX3Y+qDi1apoFwrWtmHK2hVmNfZsRb9Mc
iRkdS+fl5/iWbpoEi5a9JcIZFfWXrSPCcmmA1/zdPVzDVWVYbFBum19hzGvZvIzM
0ksr3oJFkC6BgUclAX8bmDcINJKSSqE1HI4cP8zC6AEnhQrvXDl7SXqGfhAohmZ0
O6h6p1Qd12oN2f/nHa7BqYyc7Vk44jqh4BY+e/rbP3ll02YsyVecxj6X0Jw/tNMI
d9LOTPuxwXb6IWPIDb+4C047nPU7wMv2OOI9YZECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQg6rISsojmqWg34taR5wdSj5KeZjAfBgNVHSMEGDAWgBSEfRvr5MI8Qhe4
T3/YGSqyVVQVqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hIMGI2LVRDUEVJWHVFOV8yQmtxc2xWVUZhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvZjgxZWFiLWJjMzYtNDJhNi04MjJhLWNkYjFkMzg1NTZiYi8x
L0lPcXlFcktJNXFsb04tTFdrZWNIVW8tU25tWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ZjgxZWFiLWJjMzYtNDJhNi04MjJhLWNkYjFkMzg1NTZiYi8xL2hIMGI2LVRDUEVJ
WHVFOV8yQmtxc2xWVUZhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMP6PDANBgkqhkiG9w0BAQsFAAOC
AQEAih7WaaI6HY6KnhFGIJOOIhiPNKHqfJIrJn0Zz7xjS6SDCX8oC0WD1KG/aoWv
uiLKQgrJS7EVwVmfqeBagHg3fgrlR5oSn0WwQoF/OVOX9/WsyYws72JiC7S8u8Pq
/KdaOPsLmpvo2ymMQRnIlXVRbiA/sEXzYYA0DXYqi+6+1lcoJ/f9jH+7RjcZCXKo
9vSrSrnBv7G+KKG9OvY+Q5mmZN8q1nsrQJXrFpbsJ/2zDNUEgWxs0iAq0e1czKXP
IB9oFuC1p0OolAiVfXvBrbe/OYjmsvpevyL0SOBevU0vnr6zFQQ6nmESNuaAAVcZ
RQKztthcJ0t1PLQOTKKEqcMT1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:31 2024 by rpki-client on console-ams.rpki-client.org