Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/ZxX8P21a0HhfI015e6xH7o8YCnI.roa
File: ZxX8P21a0HhfI015e6xH7o8YCnI.roa (raw, json)
Hash identifier: FzKz1zP798WETjfFyZqyEjPjePp6I5lqLZLMoDxvIrU=
Subject key identifier: 67:15:FC:3F:6D:5A:D0:78:5F:23:4D:79:7B:AC:47:EE:8F:18:0A:72
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 086D243A
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/ZxX8P21a0HhfI015e6xH7o8YCnI.roa
Signing time: Sat 01 Jan 2022 00:53:27 +0000
ROA not before: Sat 01 Jan 2022 00:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15995
IP address blocks: 194.176.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141370426 (0x86d243a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 1 00:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6715fc3f6d5ad0785f234d797bac47ee8f180a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:f8:32:32:0e:4e:5a:0d:63:de:d2:cd:1c:
8e:14:dd:f9:26:38:0b:f0:55:7f:a5:cc:df:78:17:
18:bc:0a:81:40:54:fd:f8:35:2d:70:6d:dd:a3:04:
a2:e5:83:b9:7e:cf:92:93:f4:b4:a3:4e:ff:11:13:
b6:be:49:99:54:26:17:50:c4:de:77:fe:0e:37:e6:
17:a2:ae:e4:51:6b:e7:de:2b:75:b1:93:ea:47:6f:
42:33:99:4d:0b:73:84:79:ab:6f:b4:02:29:48:1c:
fd:7f:a8:4c:99:9b:ad:f6:2b:17:94:54:0f:8f:9a:
42:2c:60:e9:bb:41:f8:77:82:c8:68:fc:9b:87:fe:
6d:b6:ea:11:3d:52:13:10:0d:6b:08:22:8e:25:52:
6e:44:3f:46:59:99:99:e4:4d:7b:8b:a3:d5:cf:21:
02:9f:53:c6:0d:ec:2d:2e:39:16:16:ba:da:a3:f9:
9a:de:74:cf:74:3f:0b:93:40:d6:d0:ff:95:cf:5d:
68:97:3d:33:82:10:9d:ab:47:31:28:e0:df:bd:7e:
55:f9:d0:d0:1b:41:7e:89:f2:3a:f8:f0:8f:9d:e8:
45:e2:a3:26:bf:6c:2d:6e:e6:7c:f2:f5:5d:b9:1c:
a7:73:e8:3a:5d:f9:92:ce:f7:2f:b3:88:9a:bb:96:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:FC:3F:6D:5A:D0:78:5F:23:4D:79:7B:AC:47:EE:8F:18:0A:72
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/ZxX8P21a0HhfI015e6xH7o8YCnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.58.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ef:44:5c:a0:62:cb:8d:79:97:bd:82:c2:aa:50:40:80:3d:
58:45:fe:67:b8:f3:55:50:e2:ac:e6:b1:0b:ab:5f:31:07:3f:
bd:5f:f1:c4:86:65:f1:29:bd:23:0e:bf:ab:90:fd:70:39:3a:
ec:15:a3:f4:23:33:04:58:b2:bb:06:67:b9:8f:40:92:53:01:
5e:79:27:7d:58:c7:e8:29:00:c2:98:60:72:1f:aa:08:b3:11:
4d:f1:50:2e:19:c1:2f:20:9e:4b:14:25:a4:ef:45:86:10:78:
2b:80:a1:96:2c:68:7d:1a:6a:2a:ac:63:4f:0b:05:e1:d2:3d:
3d:a5:c6:50:af:14:81:54:1a:77:78:bd:1d:31:98:21:80:04:
ef:c5:e9:df:7b:53:9c:f0:21:14:dd:2b:d7:03:a3:af:f2:fe:
f4:05:18:c1:4d:02:2c:1d:f5:50:e6:3b:29:f4:50:fd:b7:6c:
4d:a7:7a:f5:2a:54:5c:dc:1f:4e:5c:8b:02:bc:63:81:66:90:
c6:3e:d6:25:a0:be:81:c3:51:b8:3e:d8:b4:c0:e0:19:c9:c4:
52:b7:64:b2:29:b9:f4:a7:cf:80:98:ea:5a:88:bc:8a:4d:49:
4e:f5:80:51:33:b6:82:a9:6e:6a:5d:4c:b1:dd:9a:e2:f7:59:
3e:21:4f:43
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECG0kOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Yjk4NzI0NDYxMWI1MjMwNTM2NzQ0YjZhODlmMDQ0ZjMyZjQ2MmVhMB4XDTIyMDEw
MTAwNTMyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjcxNWZjM2Y2ZDVh
ZDA3ODVmMjM0ZDc5N2JhYzQ3ZWU4ZjE4MGE3MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZ8+DIyDk5aDWPe0s0cjhTd+SY4C/BVf6XM33gXGLwKgUBU
/fg1LXBt3aMEouWDuX7PkpP0tKNO/xETtr5JmVQmF1DE3nf+DjfmF6Ku5FFr594r
dbGT6kdvQjOZTQtzhHmrb7QCKUgc/X+oTJmbrfYrF5RUD4+aQixg6btB+HeCyGj8
m4f+bbbqET1SExANawgijiVSbkQ/RlmZmeRNe4uj1c8hAp9Txg3sLS45Fha62qP5
mt50z3Q/C5NA1tD/lc9daJc9M4IQnatHMSjg371+VfnQ0BtBfonyOvjwj53oReKj
Jr9sLW7mfPL1Xbkcp3PoOl35ks73L7OImruW5HsCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBRnFfw/bVrQeF8jTXl7rEfujxgKcjAfBgNVHSMEGDAWgBT7mHJEYRtSMFNn
RLaonwRPMvRi6jAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3YWEv
MS9aeFg4UDIxYTBIaGZJMDE1ZTZ4SDdvOFlDbkkucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0
LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3YWEvMS8xLTVoeVJHRWJV
akJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrA6MA0GCSqGSIb3DQEBCwUA
A4IBAQCR70RcoGLLjXmXvYLCqlBAgD1YRf5nuPNVUOKs5rELq18xBz+9X/HEhmXx
Kb0jDr+rkP1wOTrsFaP0IzMEWLK7Bme5j0CSUwFeeSd9WMfoKQDCmGByH6oIsxFN
8VAuGcEvIJ5LFCWk70WGEHgrgKGWLGh9GmoqrGNPCwXh0j09pcZQrxSBVBp3eL0d
MZghgATvxenfe1Oc8CEU3SvXA6Ov8v70BRjBTQIsHfVQ5jsp9FD9t2xNp3r1KlRc
3B9OXIsCvGOBZpDGPtYloL6Bw1G4Pti0wOAZycRSt2SyKbn0p8+AmOpaiLyKTUlO
9YBRM7aCqW5qXUyx3Zri91k+IU9D
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:14 2023 by rpki-client on console-fra.rpki-client.org