Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/1-XKMWSweBnCd-WLqZB6qiZh-I2A.roa
File: 1-XKMWSweBnCd-WLqZB6qiZh-I2A.roa (raw, json)
Hash identifier: PUQQB4P4b3CoL76SwxxYMLMQWHhKnvdQBEZHf82ycmA=
Subject key identifier: F9:72:8C:59:2C:1E:06:70:9D:F9:62:EA:64:1E:AA:89:98:7E:23:60
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 0184EC848DBF978F74161419BABA2B642442
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/1-XKMWSweBnCd-WLqZB6qiZh-I2A.roa
Signing time: Wed 07 Dec 2022 12:17:00 +0000
ROA not before: Wed 07 Dec 2022 12:17:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 195.54.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:84:8d:bf:97:8f:74:16:14:19:ba:ba:2b:64:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Dec 7 12:17:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9728c592c1e06709df962ea641eaa89987e2360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e5:87:e9:d3:b3:3f:65:08:53:12:d7:9b:40:
ad:5f:1c:1f:fa:2d:93:24:0c:4d:b7:eb:30:f0:cb:
bc:1c:ba:5d:ab:9a:da:9a:84:88:70:e0:a2:b6:2e:
75:96:2a:a9:cd:02:94:96:b2:40:81:cc:03:4c:bd:
5d:4c:6b:dc:fe:a6:f0:d1:0a:76:43:02:80:3c:b2:
4d:f6:70:75:90:7b:4c:de:1f:0a:91:13:b2:33:4c:
4b:be:9d:6c:3d:58:8f:a7:12:e3:f5:0b:1a:32:0f:
b5:8e:44:26:68:e0:fa:2f:e9:ab:53:ae:a7:a1:95:
43:f4:d1:8c:9d:1f:a6:3d:53:05:ca:eb:c9:05:bb:
88:8d:c9:6b:5d:d0:a4:05:80:f8:c3:07:5b:47:29:
5f:81:eb:a9:6f:52:8d:23:3b:df:95:db:55:a1:a0:
6e:1d:00:a4:b9:76:3e:57:b1:50:96:73:03:8c:f7:
c4:ba:ef:b2:cb:d3:0c:10:a9:3b:b2:2b:cb:04:18:
dd:4f:09:70:6d:35:61:a9:aa:f0:c1:2b:08:00:23:
c5:e9:48:71:7c:93:f5:07:9e:c7:69:2d:c2:36:e2:
0f:02:0a:c4:72:fd:03:64:7e:c6:e5:d0:d5:a4:3b:
5f:ac:55:88:a8:a2:e8:28:35:4a:a3:50:fa:53:df:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:8C:59:2C:1E:06:70:9D:F9:62:EA:64:1E:AA:89:98:7E:23:60
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/1-XKMWSweBnCd-WLqZB6qiZh-I2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:4f:96:81:db:0a:fd:b5:e3:83:35:2d:84:35:e3:e3:53:cf:
8b:87:aa:d2:5d:c8:64:d7:7a:c1:53:03:b1:a9:c7:78:d9:47:
8a:16:17:a9:ae:f3:75:e8:00:bf:23:23:43:c4:d4:53:fa:27:
42:ca:66:63:f0:c1:8f:de:d5:65:1f:1c:09:16:1e:a0:7c:3a:
ab:31:3f:9e:80:e2:0f:92:ea:bb:b2:22:b5:2f:3f:d1:8d:08:
61:67:4a:ef:16:e3:37:46:ee:74:c8:93:2e:1b:8f:23:d2:cc:
1a:71:ae:99:28:71:98:13:fb:52:b5:2c:7f:11:c8:cf:97:af:
a0:13:5f:c0:aa:c0:4c:54:b1:89:33:61:d0:55:6f:d4:c6:8f:
c4:69:a8:bd:19:0e:d9:c7:79:73:f4:84:f6:af:07:f5:03:b0:
9a:e4:f4:bd:ef:b0:5d:d7:45:2c:35:fb:42:bf:f3:f6:cc:29:
44:2d:5b:92:1b:39:c9:f6:41:84:a5:00:57:a8:3a:db:d2:7a:
ae:77:24:c6:34:a6:93:16:d8:b2:9e:22:15:c3:58:d3:74:c1:
30:9b:13:2d:53:de:e9:d5:a8:46:1d:60:5c:d0:71:0b:58:9f:
6d:da:b5:5e:8e:65:51:f6:54:86:25:32:e1:33:24:7d:07:0a:
78:03:f1:6d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYTshI2/l490FhQZurorZCRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWJmMTRhOGU1NGYxMmRkOGIyNDUzNTNkZjY4M2UxODJh
MDk2YzUwHhcNMjIxMjA3MTIxNzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTcyOGM1OTJjMWUwNjcwOWRmOTYyZWE2NDFlYWE4OTk4N2UyMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuWH6dOzP2UIUxLXm0CtXxwf+i2T
JAxNt+sw8Mu8HLpdq5ramoSIcOCiti51liqpzQKUlrJAgcwDTL1dTGvc/qbw0Qp2
QwKAPLJN9nB1kHtM3h8KkROyM0xLvp1sPViPpxLj9QsaMg+1jkQmaOD6L+mrU66n
oZVD9NGMnR+mPVMFyuvJBbuIjclrXdCkBYD4wwdbRylfgeupb1KNIzvfldtVoaBu
HQCkuXY+V7FQlnMDjPfEuu+yy9MMEKk7sivLBBjdTwlwbTVhqarwwSsIACPF6Uhx
fJP1B57HaS3CNuIPAgrEcv0DZH7G5dDVpDtfrFWIqKLoKDVKo1D6U9/BqQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlyjFksHgZwnfli6mQeqomYfiNgMB8GA1UdIwQY
MBaAFJfr8UqOVPEt2LJFNT32g+GCoJbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC12eFNvNVU4UzNZc2tVMVBmYUQ0WUtnbHNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wOTJiMTEtMTYyMi00NTU2LThlNjUt
MjQwOWFhZDA4MWQyLzEvMS1YS01XU3dlQm5DZC1XTHFaQjZxaVpoLUkyQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDEvMDkyYjExLTE2MjItNDU1Ni04ZTY1LTI0MDlhYWQwODFk
Mi8xL2wtdnhTbzVVOFMzWXNrVTFQZmFENFlLZ2xzVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMM2pjAN
BgkqhkiG9w0BAQsFAAOCAQEATU+WgdsK/bXjgzUthDXj41PPi4eq0l3IZNd6wVMD
sanHeNlHihYXqa7zdegAvyMjQ8TUU/onQspmY/DBj97VZR8cCRYeoHw6qzE/noDi
D5Lqu7IitS8/0Y0IYWdK7xbjN0budMiTLhuPI9LMGnGumShxmBP7UrUsfxHIz5ev
oBNfwKrATFSxiTNh0FVv1MaPxGmovRkO2cd5c/SE9q8H9QOwmuT0ve+wXddFLDX7
Qr/z9swpRC1bkhs5yfZBhKUAV6g629J6rnckxjSmkxbYsp4iFcNY03TBMJsTLVPe
6dWoRh1gXNBxC1ifbdq1Xo5lUfZUhiUy4TMkfQcKeAPxbQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-fra.rpki-client.org