Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/wWxoR9C0joR7lJyUAsSYVjG9IHY.roa
File: wWxoR9C0joR7lJyUAsSYVjG9IHY.roa (raw, json)
Hash identifier: fMziH8yBU7O9f/6b7lfsGKFaXFwX9/iIZ3C8yQHbc3Y=
Subject key identifier: C1:6C:68:47:D0:B4:8E:84:7B:94:9C:94:02:C4:98:56:31:BD:20:76
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 018570951CF940FFF1383D91AF3573A566DF
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/wWxoR9C0joR7lJyUAsSYVjG9IHY.roa
Signing time: Mon 02 Jan 2023 03:44:58 +0000
ROA not before: Mon 02 Jan 2023 03:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47291
IP address blocks: 195.62.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:1c:f9:40:ff:f1:38:3d:91:af:35:73:a5:66:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Jan 2 03:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16c6847d0b48e847b949c9402c4985631bd2076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:16:3b:9b:de:a7:39:69:d2:67:7b:ae:4c:
a4:ab:30:b6:97:9f:03:71:69:42:d8:43:80:33:55:
49:4c:9c:18:fa:85:af:e6:5c:87:e0:6a:25:2e:85:
bd:83:85:04:99:2f:5f:0d:85:9e:3c:f4:9c:16:2f:
08:26:11:8a:80:79:ca:f0:19:88:76:e1:03:52:c1:
94:86:70:01:44:ca:b4:ba:47:c9:e1:cd:88:3c:1c:
fa:14:0f:f2:fb:0c:cb:75:08:bb:50:f8:76:0d:67:
4a:1d:33:f9:13:ba:bf:a8:8f:4e:4a:fb:ed:3d:ef:
d0:c4:2e:a0:3f:fd:86:25:42:f7:75:97:38:19:66:
86:e3:ae:62:28:2a:6c:ec:e4:d8:9a:f6:de:fc:26:
63:e1:56:4e:8c:59:83:20:03:ef:c8:47:7b:9e:f3:
bb:0b:db:14:6a:78:16:48:43:7f:6c:3d:da:68:cd:
f4:b0:32:4a:70:f8:66:82:dd:9d:77:bb:7c:a4:11:
8d:63:78:45:f1:a9:b0:98:d9:9c:87:28:9e:1b:02:
bb:ce:0f:0e:98:01:c4:3e:33:19:dc:99:b4:ce:1e:
07:b2:90:0c:10:1d:00:82:d0:27:a2:8c:1a:ab:ca:
42:a5:ec:c8:df:c5:11:44:08:8a:3f:29:53:7d:4d:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:68:47:D0:B4:8E:84:7B:94:9C:94:02:C4:98:56:31:BD:20:76
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/wWxoR9C0joR7lJyUAsSYVjG9IHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.94.0/23
Signature Algorithm: sha256WithRSAEncryption
70:b5:f8:06:9a:51:4c:8e:74:92:6b:c0:51:3d:cf:9e:63:de:
90:83:ad:30:82:33:5e:7c:4f:77:fc:ef:c0:95:52:b8:b1:42:
95:86:f2:2f:25:40:82:54:85:c8:67:18:38:f9:cc:97:3a:05:
da:23:0d:6b:47:30:ef:68:29:06:c5:86:f6:c1:bd:ae:a6:96:
9c:4a:83:c2:36:a9:01:30:38:ac:5e:05:75:4f:a4:47:38:d9:
c4:fe:76:36:b4:ab:61:bc:09:18:71:33:a3:59:71:97:3f:c6:
1f:fd:bc:a5:69:a1:3c:09:86:31:fc:a0:34:71:3e:93:5c:84:
7c:1e:e8:91:8b:4e:6b:bf:c1:82:2a:3c:1a:da:a9:77:3b:c8:
40:35:b2:14:ae:65:a6:32:d6:e5:f2:99:05:00:2b:73:9e:de:
59:c0:71:15:c5:4f:b5:43:0c:df:d5:ed:fe:be:c3:3a:02:4f:
35:cb:71:fb:4e:98:2a:d1:36:55:11:f7:65:67:f3:09:ae:78:
ce:7b:ed:a8:1c:68:15:a3:83:14:4a:80:03:86:83:1f:5a:3d:
99:00:c8:6b:95:57:05:3c:0a:ac:62:5e:b8:2d:de:66:52:6d:
b1:50:e7:b5:d2:c3:1d:28:5b:fc:e6:76:80:ea:49:a2:82:7b:
01:15:55:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlRz5QP/xOD2RrzVzpWbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWE3OGE4NTEyZjkwOWNlNmQ0NzMyNTJmMDRjZjE5ZTll
NjhhMmEwHhcNMjMwMTAyMDM0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTZjNjg0N2QwYjQ4ZTg0N2I5NDljOTQwMmM0OTg1NjMxYmQyMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9wWO5vepzlp0md7rkykqzC2l58D
cWlC2EOAM1VJTJwY+oWv5lyH4GolLoW9g4UEmS9fDYWePPScFi8IJhGKgHnK8BmI
duEDUsGUhnABRMq0ukfJ4c2IPBz6FA/y+wzLdQi7UPh2DWdKHTP5E7q/qI9OSvvt
Pe/QxC6gP/2GJUL3dZc4GWaG465iKCps7OTYmvbe/CZj4VZOjFmDIAPvyEd7nvO7
C9sUangWSEN/bD3aaM30sDJKcPhmgt2dd7t8pBGNY3hF8amwmNmchyieGwK7zg8O
mAHEPjMZ3Jm0zh4HspAMEB0AgtAnoowaq8pCpezI38URRAiKPylTfU1vsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFsaEfQtI6Ee5SclALEmFYxvSB2MB8GA1UdIwQY
MBaAFKWaeKhRL5Cc5tRzJS8Ezxnp5ooqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0Mzct
NDM4ZTg0YzcxMDdkLzEvd1d4b1I5QzBqb1I3bEp5VUFzU1lWakc5SUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0MzctNDM4ZTg0YzcxMDdk
LzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwz5eMA0G
CSqGSIb3DQEBCwUAA4IBAQBwtfgGmlFMjnSSa8BRPc+eY96Qg60wgjNefE93/O/A
lVK4sUKVhvIvJUCCVIXIZxg4+cyXOgXaIw1rRzDvaCkGxYb2wb2uppacSoPCNqkB
MDisXgV1T6RHONnE/nY2tKthvAkYcTOjWXGXP8Yf/bylaaE8CYYx/KA0cT6TXIR8
HuiRi05rv8GCKjwa2ql3O8hANbIUrmWmMtbl8pkFACtznt5ZwHEVxU+1Qwzf1e3+
vsM6Ak81y3H7Tpgq0TZVEfdlZ/MJrnjOe+2oHGgVo4MUSoADhoMfWj2ZAMhrlVcF
PAqsYl64Ld5mUm2xUOe10sMdKFv85naA6kmignsBFVVI
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:56 2025 by rpki-client