Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/xu1gHAjCpKB2jYJcg9Y3-bp3qRU.roa
File: xu1gHAjCpKB2jYJcg9Y3-bp3qRU.roa (raw, json)
Hash identifier: DyKgx4jbcRgu/5t7mFestlbTxRCVH9/QdRhl6I0Uh0o=
Subject key identifier: C6:ED:60:1C:08:C2:A4:A0:76:8D:82:5C:83:D6:37:F9:BA:77:A9:15
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 01856E7E2F777D3C963ED61675AC15262E68
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/xu1gHAjCpKB2jYJcg9Y3-bp3qRU.roa
Signing time: Sun 01 Jan 2023 18:00:41 +0000
ROA not before: Sun 01 Jan 2023 18:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210818
IP address blocks: 195.190.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:7e:2f:77:7d:3c:96:3e:d6:16:75:ac:15:26:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 1 18:00:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6ed601c08c2a4a0768d825c83d637f9ba77a915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:54:5a:79:67:f0:97:6c:92:22:43:36:8a:
d8:8a:e6:30:ac:3c:7f:58:40:8c:0a:50:a9:66:28:
54:fe:1b:5d:cd:98:a1:90:5f:7a:f4:46:90:ee:bd:
8d:7d:8e:e3:a3:9e:ef:93:c2:d2:1d:80:c1:61:78:
92:dd:c4:b7:0c:44:6e:9c:55:57:8e:aa:b6:1f:56:
cb:1c:8d:42:98:c8:65:bd:72:a4:51:55:04:97:89:
da:b4:ba:f9:72:76:74:f2:c2:5b:ae:94:cf:0d:35:
bf:c9:ad:03:5c:a4:7e:99:4a:8c:30:cf:3d:de:4d:
2e:c1:0d:c8:7e:3f:85:56:cc:f9:84:b6:f5:8e:6e:
2c:41:35:42:4a:60:49:e9:40:d3:b2:4c:cc:48:46:
e9:36:c9:8b:3b:27:48:29:1b:8e:2e:b9:f7:1d:8a:
e7:50:23:e8:57:92:61:c7:6a:8d:00:d5:26:b6:cf:
4c:26:e8:fd:b9:5c:94:19:08:d8:e1:46:c7:a6:54:
0e:ae:b2:7f:9f:04:2d:4c:de:1b:4c:27:50:61:e7:
09:b2:63:96:29:4d:29:f9:ce:bc:c0:27:9b:15:6d:
48:08:69:da:4b:b3:b7:ec:b4:f1:15:c5:a7:21:4e:
18:b5:41:b4:13:77:9e:26:ee:d5:01:9c:5d:9d:6b:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:60:1C:08:C2:A4:A0:76:8D:82:5C:83:D6:37:F9:BA:77:A9:15
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/xu1gHAjCpKB2jYJcg9Y3-bp3qRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.144.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f6:12:3c:17:bf:9b:05:18:2b:f5:66:f4:33:85:4b:c4:c4:
1c:8e:21:a6:0b:a7:2c:1b:11:bb:f8:4b:b5:d3:d2:2f:ef:f5:
8d:f4:f6:3c:0b:fc:8c:71:7c:f7:55:5e:7b:0b:a9:3d:c6:75:
6b:b1:6b:cf:cf:85:7f:cf:ac:12:fe:63:f0:36:37:29:3d:91:
54:7e:a1:01:48:82:a3:13:d2:1b:be:10:fd:15:72:6e:70:07:
32:fc:7c:09:c6:88:d4:34:0c:0a:53:b1:96:e6:2a:d0:f3:67:
4f:34:91:40:48:45:2f:82:13:a4:14:73:f8:bd:14:04:a8:83:
23:63:c7:f5:b3:46:b5:57:b2:8b:e8:37:80:23:f1:2a:59:2d:
76:f3:fe:de:47:91:a8:75:04:da:a7:c4:8c:bc:60:16:21:df:
8c:f0:c1:a0:1c:2e:2d:4a:71:83:9d:4d:f0:b5:4c:f5:4d:33:
a6:89:a7:bc:9c:74:3b:1a:b9:6f:da:3c:5a:8a:eb:0f:ac:1b:
bc:e9:d5:7d:71:39:71:00:b3:85:87:b0:68:6f:fe:3a:14:ef:
69:f0:41:b6:65:e4:bb:c7:7e:0f:bb:b2:82:c9:96:61:72:a5:
2c:be:fa:2c:29:f6:67:06:a4:de:3a:49:06:b0:b5:06:16:cd:
ba:e9:b2:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVufi93fTyWPtYWdawVJi5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ2NzQxMTM5MjYzMzg4ZDk4NGRiMWU5N2UwMzE2Njlj
NjQ4NmUwHhcNMjMwMTAxMTgwMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmVkNjAxYzA4YzJhNGEwNzY4ZDgyNWM4M2Q2MzdmOWJhNzdhOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjThUWnln8JdskiJDNorYiuYwrDx/
WECMClCpZihU/htdzZihkF969EaQ7r2NfY7jo57vk8LSHYDBYXiS3cS3DERunFVX
jqq2H1bLHI1CmMhlvXKkUVUEl4natLr5cnZ08sJbrpTPDTW/ya0DXKR+mUqMMM89
3k0uwQ3Ifj+FVsz5hLb1jm4sQTVCSmBJ6UDTskzMSEbpNsmLOydIKRuOLrn3HYrn
UCPoV5Jhx2qNANUmts9MJuj9uVyUGQjY4UbHplQOrrJ/nwQtTN4bTCdQYecJsmOW
KU0p+c68wCebFW1ICGnaS7O37LTxFcWnIU4YtUG0E3eeJu7VAZxdnWvqhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbtYBwIwqSgdo2CXIPWN/m6d6kVMB8GA1UdIwQY
MBaAFJSEZ0ETkmM4jZhNsel+AxZpxkhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTct
Y2IxMTI1MDA3ZGZiLzEveHUxZ0hBakNwS0IyallKY2c5WTMtYnAzcVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTctY2IxMTI1MDA3ZGZi
LzEvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76QMA0G
CSqGSIb3DQEBCwUAA4IBAQAz9hI8F7+bBRgr9Wb0M4VLxMQcjiGmC6csGxG7+Eu1
09Iv7/WN9PY8C/yMcXz3VV57C6k9xnVrsWvPz4V/z6wS/mPwNjcpPZFUfqEBSIKj
E9IbvhD9FXJucAcy/HwJxojUNAwKU7GW5irQ82dPNJFASEUvghOkFHP4vRQEqIMj
Y8f1s0a1V7KL6DeAI/EqWS128/7eR5GodQTap8SMvGAWId+M8MGgHC4tSnGDnU3w
tUz1TTOmiae8nHQ7Grlv2jxaiusPrBu86dV9cTlxALOFh7Bob/46FO9p8EG2ZeS7
x34Pu7KCyZZhcqUsvvosKfZnBqTeOkkGsLUGFs266bI5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-fra.rpki-client.org