Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa
File: sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa (raw, json)
Hash identifier: DDoPnH9HwCTfIymqwi7GleAMNbl3NV65K2PaXRJ4nqY=
Subject key identifier: B1:4C:95:19:2F:9C:67:38:1B:FA:B2:C6:A0:64:46:E8:BC:F3:70:F2
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 346D6AEF
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa
Signing time: Sat 01 Jan 2022 08:06:08 +0000
ROA not before: Sat 01 Jan 2022 08:06:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200884
IP address blocks: 94.126.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879586031 (0x346d6aef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 1 08:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b14c95192f9c67381bfab2c6a06446e8bcf370f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:44:ec:57:31:76:f0:75:f1:46:a3:3d:8d:
6b:33:cf:36:61:fe:26:63:28:10:4f:dd:7f:85:1d:
35:7f:4e:47:45:1a:3c:ca:29:12:5e:8f:20:d4:11:
54:2c:49:fa:7d:17:a2:97:13:98:88:5c:fd:8b:36:
87:e8:20:c9:54:40:4c:df:a7:85:14:86:38:d7:10:
3a:ab:b4:ee:9b:34:1a:36:4c:ef:2a:23:8b:5f:ae:
c7:5a:f6:82:22:41:3c:37:86:8c:93:e1:32:ab:eb:
3b:ff:a7:fe:25:30:28:15:0d:0c:80:38:16:a7:0e:
5b:f7:e2:18:28:f6:91:02:ec:c4:aa:c4:dd:b0:36:
a5:e1:95:e4:48:ac:9a:f8:a2:47:ee:17:ce:6e:4e:
45:a6:8d:cc:74:68:3d:d6:66:90:46:13:b5:33:3c:
e9:d2:cc:e0:21:4b:43:8a:4c:c9:b6:b0:3f:3c:c5:
24:73:08:a6:7f:26:8f:ae:ea:b2:ef:92:3e:a0:5a:
33:56:b4:75:76:71:81:51:11:1b:09:8b:5c:12:c9:
d8:90:a4:07:35:1f:56:ad:bc:55:01:1d:b2:c3:87:
48:d1:33:98:a6:4a:ab:85:05:19:dd:b7:ef:0f:23:
3a:92:e4:02:e4:e9:61:fe:a5:79:76:ac:88:36:78:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4C:95:19:2F:9C:67:38:1B:FA:B2:C6:A0:64:46:E8:BC:F3:70:F2
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.50.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:0c:6d:f8:97:ae:38:71:e5:fb:40:ff:59:15:c2:81:46:3d:
7b:a9:e5:f7:b9:aa:27:0b:cb:bf:24:a9:ad:d7:ac:6e:f0:37:
6d:6a:e8:82:51:df:b7:5e:88:ce:af:ea:10:1e:ab:13:35:0e:
3b:44:53:7b:d8:d9:4f:38:e0:09:fc:18:e6:43:39:ff:4d:fb:
90:9f:e5:84:3f:ce:bf:0a:99:e1:5e:35:93:a9:11:be:b0:9f:
d3:42:27:af:d0:3a:a6:9c:82:67:3f:02:e9:ed:1f:bf:2d:df:
c0:10:26:66:52:a6:c4:36:42:ad:cb:49:65:c7:1c:21:27:c8:
10:c7:99:9a:09:a1:8d:bd:63:80:ac:c6:b6:65:13:a1:56:fe:
14:9e:09:a5:58:48:bf:e5:a0:51:88:dd:60:b5:1d:ba:1d:60:
a8:1a:f3:d2:0d:af:a2:88:c4:d9:56:a0:48:0b:70:a4:5c:65:
15:69:e5:f0:21:1b:be:69:4b:68:0f:06:ed:4c:b4:ef:40:69:
0e:f9:e1:ad:14:0a:14:ce:83:a7:cc:83:34:cb:9d:0a:20:e8:
16:a5:a4:56:08:54:cc:07:7e:97:1a:b8:90:f5:ac:bc:6c:c2:
56:51:98:5c:df:4c:d6:fd:b4:7f:10:fc:ca:5e:c0:d9:f4:71:
57:8b:cf:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENG1q7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YzU3Y2IzYTFlNTNlNzYyOWVlM2I5ZjI2NzJkNDU3MWVmODVkMmM4MB4XDTIyMDEw
MTA4MDYwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjE0Yzk1MTkyZjlj
NjczODFiZmFiMmM2YTA2NDQ2ZThiY2YzNzBmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+zROxXMXbwdfFGoz2NazPPNmH+JmMoEE/df4UdNX9OR0Ua
PMopEl6PINQRVCxJ+n0XopcTmIhc/Ys2h+ggyVRATN+nhRSGONcQOqu07ps0GjZM
7yoji1+ux1r2giJBPDeGjJPhMqvrO/+n/iUwKBUNDIA4FqcOW/fiGCj2kQLsxKrE
3bA2peGV5EismviiR+4Xzm5ORaaNzHRoPdZmkEYTtTM86dLM4CFLQ4pMybawPzzF
JHMIpn8mj67qsu+SPqBaM1a0dXZxgVERGwmLXBLJ2JCkBzUfVq28VQEdssOHSNEz
mKZKq4UFGd237w8jOpLkAuTpYf6leXasiDZ4wxUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSxTJUZL5xnOBv6ssagZEbovPNw8jAfBgNVHSMEGDAWgBQMV8s6HlPnYp7j
ufJnLUVx74XSyDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RGZkxPaDVUNTJLZTQ3bnlaeTFGY2UtRjBzZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvNmMxZTAxLTE1OTUtNDdiMC05ZTAzLWNmNzIzMmRkZWJlYy8x
L3NVeVZHUy1jWnpnYi1yTEdvR1JHNkx6emNQSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
NmMxZTAxLTE1OTUtNDdiMC05ZTAzLWNmNzIzMmRkZWJlYy8xL0RGZkxPaDVUNTJL
ZTQ3bnlaeTFGY2UtRjBzZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV5+MjANBgkqhkiG9w0BAQsFAAOC
AQEAywxt+JeuOHHl+0D/WRXCgUY9e6nl97mqJwvLvySprdesbvA3bWroglHft16I
zq/qEB6rEzUOO0RTe9jZTzjgCfwY5kM5/037kJ/lhD/OvwqZ4V41k6kRvrCf00In
r9A6ppyCZz8C6e0fvy3fwBAmZlKmxDZCrctJZcccISfIEMeZmgmhjb1jgKzGtmUT
oVb+FJ4JpVhIv+WgUYjdYLUduh1gqBrz0g2voojE2VagSAtwpFxlFWnl8CEbvmlL
aA8G7Uy070BpDvnhrRQKFM6Dp8yDNMudCiDoFqWkVghUzAd+lxq4kPWsvGzCVlGY
XN9M1v20fxD8yl7A2fRxV4vPZg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:51 2025 by rpki-client