Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/nRKsj9An9Jkdhw-gLCMHQvsiW2Y.roa
File: nRKsj9An9Jkdhw-gLCMHQvsiW2Y.roa (raw, json)
Hash identifier: pCHiGPD69jLHCIOedFCJsDgJa4Ht538QLOMGloACDGg=
Subject key identifier: 9D:12:AC:8F:D0:27:F4:99:1D:87:0F:A0:2C:23:07:42:FB:22:5B:66
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 05088B82
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/nRKsj9An9Jkdhw-gLCMHQvsiW2Y.roa
Signing time: Sat 01 Jan 2022 02:55:01 +0000
ROA not before: Sat 01 Jan 2022 02:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59268
IP address blocks: 195.10.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84446082 (0x5088b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Jan 1 02:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d12ac8fd027f4991d870fa02c230742fb225b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:c8:3b:f9:66:56:00:5b:b7:f9:a2:40:49:
30:fb:24:d9:42:78:c3:5b:4c:d1:9b:c4:de:6c:6c:
ef:c2:9a:a6:c8:c4:fc:6a:e9:b8:02:6c:79:24:9e:
a1:c5:6a:ff:80:56:17:26:c9:92:24:4d:35:f9:45:
dc:56:8f:cc:e2:9c:d0:8f:7f:98:e8:e2:46:35:9e:
87:69:58:20:3b:4f:a5:b4:2e:14:98:14:91:98:57:
89:2d:75:1e:fe:2c:e5:ed:d9:9f:dd:fe:0d:c2:d3:
10:a2:e0:d9:95:8c:fa:d2:fb:e6:41:a0:ff:a1:2d:
fb:c2:6a:86:61:61:14:81:54:67:37:3e:d4:62:d3:
e5:f2:a0:d9:65:dd:d8:34:db:b4:37:78:5a:ec:c6:
50:e4:c1:d7:e0:ec:ca:9a:4c:42:9d:e9:ab:a5:44:
da:ce:53:1d:13:ae:b3:85:22:52:e6:05:16:43:1f:
93:18:43:80:c2:0e:f2:cc:12:70:ab:ed:86:e6:6a:
28:1a:82:3a:8c:65:6d:a4:69:02:fe:5d:0c:dd:07:
3b:b0:9f:87:9b:e5:70:0b:17:78:60:af:af:d7:e1:
7e:19:09:4b:ac:b0:c5:47:e7:d6:16:8d:c0:24:7b:
ed:b7:fd:07:0e:d4:3a:c6:a6:03:1b:89:e2:15:ad:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:AC:8F:D0:27:F4:99:1D:87:0F:A0:2C:23:07:42:FB:22:5B:66
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/nRKsj9An9Jkdhw-gLCMHQvsiW2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.217.0/24
Signature Algorithm: sha256WithRSAEncryption
62:06:34:4b:8f:51:c3:d0:ff:37:7d:ba:6b:47:35:cb:81:2a:
6a:55:98:d9:83:f7:27:06:6e:30:36:87:d5:d7:7a:cb:82:7d:
99:a3:99:3c:fa:bf:ac:73:b8:d7:90:d0:79:e5:90:8a:ec:22:
8c:34:70:77:bb:3f:25:d3:3e:bf:2c:31:01:c9:8d:54:84:f2:
80:07:8a:79:d6:20:5f:10:bf:fa:7a:18:6c:2e:45:67:70:fb:
2a:5f:56:6e:fd:d3:5e:38:43:28:c4:4b:52:9c:c5:39:3a:c7:
78:72:8d:ec:b1:e9:71:fd:7e:d4:db:4a:f4:f7:74:63:a0:8d:
0e:61:08:0c:29:ed:d4:b2:a9:a0:45:8a:79:d0:c6:b7:54:ec:
bd:12:2d:f4:89:b0:f4:9d:8c:73:50:56:be:f5:c2:8a:84:33:
59:ff:9e:78:b9:62:03:50:48:00:bc:4b:e5:79:00:47:45:28:
cc:a6:f0:0e:59:a2:9f:51:55:dc:16:7f:e6:21:c1:1d:51:81:
49:2c:9b:c1:fc:93:ae:06:24:69:7b:0f:0f:47:c2:35:1e:42:
0d:2f:b4:18:26:e5:ca:2f:11:21:43:7d:51:25:90:1f:76:b2:
00:30:e9:48:db:a5:43:82:27:50:90:6b:9e:50:bd:47:d9:7f:
a7:3d:56:bc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBQiLgjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDMyNWMyMWQyZmFmZTc0MzM5OGRjMWU1NTc0NDMzMjgwMTEwNDY5MB4XDTIyMDEw
MTAyNTUwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWQxMmFjOGZkMDI3
ZjQ5OTFkODcwZmEwMmMyMzA3NDJmYjIyNWI2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALewyDv5ZlYAW7f5okBJMPsk2UJ4w1tM0ZvE3mxs78KapsjE
/GrpuAJseSSeocVq/4BWFybJkiRNNflF3FaPzOKc0I9/mOjiRjWeh2lYIDtPpbQu
FJgUkZhXiS11Hv4s5e3Zn93+DcLTEKLg2ZWM+tL75kGg/6Et+8JqhmFhFIFUZzc+
1GLT5fKg2WXd2DTbtDd4WuzGUOTB1+DsyppMQp3pq6VE2s5THROus4UiUuYFFkMf
kxhDgMIO8swScKvthuZqKBqCOoxlbaRpAv5dDN0HO7Cfh5vlcAsXeGCvr9fhfhkJ
S6ywxUfn1haNwCR77bf9Bw7UOsamAxuJ4hWt5OsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSdEqyP0Cf0mR2HD6AsIwdC+yJbZjAfBgNVHSMEGDAWgBRgMlwh0vr+dDOY
3B5VdEMygBEEaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lESmNJZEw2X25Rem1Od2VWWFJETW9BUkJHay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvZjI3NzBiLWRhMTktNDc5MC1hNDk0LWM1OGU5NWNkNDI3Ny8x
L25SS3NqOUFuOUprZGh3LWdMQ01IUXZzaVcyWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
ZjI3NzBiLWRhMTktNDc5MC1hNDk0LWM1OGU5NWNkNDI3Ny8xL1lESmNJZEw2X25R
em1Od2VWWFJETW9BUkJHay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMK2TANBgkqhkiG9w0BAQsFAAOC
AQEAYgY0S49Rw9D/N326a0c1y4EqalWY2YP3JwZuMDaH1dd6y4J9maOZPPq/rHO4
15DQeeWQiuwijDRwd7s/JdM+vywxAcmNVITygAeKedYgXxC/+noYbC5FZ3D7Kl9W
bv3TXjhDKMRLUpzFOTrHeHKN7LHpcf1+1NtK9Pd0Y6CNDmEIDCnt1LKpoEWKedDG
t1TsvRIt9Imw9J2Mc1BWvvXCioQzWf+eeLliA1BIALxL5XkAR0UozKbwDlmin1FV
3BZ/5iHBHVGBSSybwfyTrgYkaXsPD0fCNR5CDS+0GCblyi8RIUN9USWQH3ayADDp
SNulQ4InUJBrnlC9R9l/pz1WvA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:53 2024 by rpki-client on console-fra.rpki-client.org