Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/hQ7E49Is3wrh51vGmPmoaQU2nhw.roa
File: hQ7E49Is3wrh51vGmPmoaQU2nhw.roa (raw, json)
Hash identifier: 5qnx07KCx+zavu7nSjSWA/IPjNfY0rbcoJBbTyazBdM=
Subject key identifier: 85:0E:C4:E3:D2:2C:DF:0A:E1:E7:5B:C6:98:F9:A8:69:05:36:9E:1C
Certificate issuer: /CN=7b0978c412dab61efb2db5411b06960c09e17a77
Certificate serial: 01825F371B091390D8EEB689044F856CF093
Authority key identifier: 7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewl4xBLath77LbVBGwaWDAnhenc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/hQ7E49Is3wrh51vGmPmoaQU2nhw.roa
Signing time: Tue 02 Aug 2022 15:40:23 +0000
ROA not before: Tue 02 Aug 2022 15:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48710
IP address blocks: 94.125.136.0/24 maxlen: 24
94.125.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:37:1b:09:13:90:d8:ee:b6:89:04:4f:85:6c:f0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0978c412dab61efb2db5411b06960c09e17a77
Validity
Not Before: Aug 2 15:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=850ec4e3d22cdf0ae1e75bc698f9a86905369e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:f6:7d:64:c7:89:0d:04:d7:81:74:f8:cd:
5d:a1:fd:21:29:ed:2e:f3:83:99:2d:df:2b:86:b9:
e4:b0:a2:0e:49:f4:44:e6:56:fc:9f:7d:25:c2:76:
fa:c3:34:cd:f3:71:f1:59:34:a4:a4:0d:e5:18:c7:
eb:ab:26:5e:97:c8:34:c2:28:2b:1d:55:66:60:b1:
cf:54:64:26:e3:1d:0a:dd:dc:63:10:a5:32:da:38:
87:f1:e4:45:ce:0f:38:5d:5d:bf:84:f7:84:89:bb:
a5:65:d5:ad:74:c5:b9:48:05:50:7f:38:e5:b9:a5:
e0:e8:45:9f:e1:d4:9c:6f:fe:49:eb:c8:78:cf:01:
a6:f1:06:b9:db:21:42:80:35:8c:8c:b0:25:27:b5:
81:80:e0:2b:ea:97:11:d8:ce:3a:c6:0c:45:0e:af:
1c:c3:3f:d6:80:90:82:81:c6:e6:b8:82:85:72:af:
50:67:19:f8:47:c2:75:19:33:ec:31:95:d6:e8:0e:
08:cb:91:93:5d:5b:8f:2b:30:d2:23:33:2b:3c:3d:
0b:e4:69:4e:df:39:b9:ee:03:2d:43:6a:65:30:0f:
e7:d3:21:b5:65:4d:a9:08:9b:14:55:3f:2b:d1:b6:
37:70:16:e7:0a:12:22:f8:13:76:dc:fd:01:41:09:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0E:C4:E3:D2:2C:DF:0A:E1:E7:5B:C6:98:F9:A8:69:05:36:9E:1C
X509v3 Authority Key Identifier:
keyid:7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewl4xBLath77LbVBGwaWDAnhenc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/hQ7E49Is3wrh51vGmPmoaQU2nhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/ewl4xBLath77LbVBGwaWDAnhenc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.136.0/24
94.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7b:c4:c9:43:67:da:31:69:c4:f4:97:7d:cf:0b:cd:ff:3e:
1c:d2:a0:50:93:a0:89:85:13:bd:9a:74:83:5a:34:41:0b:83:
99:12:ce:3d:b4:58:c5:7a:a3:de:17:23:31:a6:ad:c3:6c:b4:
57:57:b5:3a:e2:26:4a:95:73:19:82:e9:da:94:cd:66:97:dc:
8d:7c:73:20:c8:e1:3f:1a:e1:cb:ca:d6:34:e7:9d:4b:a3:00:
d1:0b:16:d6:34:60:23:c7:3c:1c:57:37:9e:16:7b:e3:53:af:
e2:c6:f4:b6:bf:de:74:52:1f:dc:31:d0:e6:5b:a3:51:b1:13:
dd:fc:59:23:4e:b7:c6:97:f4:4f:0c:d2:15:70:57:0b:35:b1:
d1:45:76:b5:c1:b4:00:85:46:05:63:d1:c7:91:bc:b9:37:82:
8a:62:cc:bd:cd:5b:b4:f8:60:87:28:5e:22:d2:e1:01:3c:3d:
f6:04:70:86:5c:f3:ed:62:71:71:bb:85:24:0a:8f:36:4a:bc:
bc:2a:69:e5:19:37:92:e6:b9:53:9f:89:a3:42:09:84:d9:fd:
87:da:c3:85:76:0a:32:6c:28:55:54:78:9d:0c:79:6a:17:6f:
81:09:11:4b:fc:1b:a3:fb:f8:9f:54:ce:83:01:ef:18:10:22:
bc:3c:ce:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJfNxsJE5DY7raJBE+FbPCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDk3OGM0MTJkYWI2MWVmYjJkYjU0MTFiMDY5NjBjMDll
MTdhNzcwHhcNMjIwODAyMTU0MDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTBlYzRlM2QyMmNkZjBhZTFlNzViYzY5OGY5YTg2OTA1MzY5ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD72fWTHiQ0E14F0+M1dof0hKe0u
84OZLd8rhrnksKIOSfRE5lb8n30lwnb6wzTN83HxWTSkpA3lGMfrqyZel8g0wigr
HVVmYLHPVGQm4x0K3dxjEKUy2jiH8eRFzg84XV2/hPeEibulZdWtdMW5SAVQfzjl
uaXg6EWf4dScb/5J68h4zwGm8Qa52yFCgDWMjLAlJ7WBgOAr6pcR2M46xgxFDq8c
wz/WgJCCgcbmuIKFcq9QZxn4R8J1GTPsMZXW6A4Iy5GTXVuPKzDSIzMrPD0L5GlO
3zm57gMtQ2plMA/n0yG1ZU2pCJsUVT8r0bY3cBbnChIi+BN23P0BQQlUawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIUOxOPSLN8K4edbxpj5qGkFNp4cMB8GA1UdIwQY
MBaAFHsJeMQS2rYe+y21QRsGlgwJ4Xp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdsNHhCTGF0aDc3TGJWQkd3YVdEQW5oZW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lYmJlYmEtMWI1MC00MWUyLWE4ZDMt
ZWQ0NjY3MzVhYjI3LzEvaFE3RTQ5SXMzd3JoNTF2R21QbW9hUVUybmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lYmJlYmEtMWI1MC00MWUyLWE4ZDMtZWQ0NjY3MzVhYjI3
LzEvZXdsNHhCTGF0aDc3TGJWQkd3YVdEQW5oZW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXn2IAwQA
Xn2OMA0GCSqGSIb3DQEBCwUAA4IBAQBke8TJQ2faMWnE9Jd9zwvN/z4c0qBQk6CJ
hRO9mnSDWjRBC4OZEs49tFjFeqPeFyMxpq3DbLRXV7U64iZKlXMZgunalM1ml9yN
fHMgyOE/GuHLytY0551LowDRCxbWNGAjxzwcVzeeFnvjU6/ixvS2v950Uh/cMdDm
W6NRsRPd/FkjTrfGl/RPDNIVcFcLNbHRRXa1wbQAhUYFY9HHkby5N4KKYsy9zVu0
+GCHKF4i0uEBPD32BHCGXPPtYnFxu4UkCo82Sry8KmnlGTeS5rlTn4mjQgmE2f2H
2sOFdgoybChVVHidDHlqF2+BCRFL/Buj+/ifVM6DAe8YECK8PM5N
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:46 2024 by rpki-client on console-fra.rpki-client.org