Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/29ZZjxmBXxJj7-ZsQNSun4J-RU8.roa
File: 29ZZjxmBXxJj7-ZsQNSun4J-RU8.roa (raw, json)
Hash identifier: T1pd4NlJiMJ6pqqSHTVSxxAqQC91jHTFphC0BotyUPk=
Subject key identifier: DB:D6:59:8F:19:81:5F:12:63:EF:E6:6C:40:D4:AE:9F:82:7E:45:4F
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 06CDB6B9
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/29ZZjxmBXxJj7-ZsQNSun4J-RU8.roa
Signing time: Sat 01 Jan 2022 11:04:48 +0000
ROA not before: Sat 01 Jan 2022 11:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41202
IP address blocks: 95.214.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114144953 (0x6cdb6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Jan 1 11:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbd6598f19815f1263efe66c40d4ae9f827e454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:69:22:b6:04:f1:94:e0:76:b6:3d:92:8f:
a8:3c:a4:01:13:12:c3:8e:94:e3:dc:1a:82:6e:2b:
a0:b0:22:58:9d:2b:14:4c:93:d1:a3:e9:0b:f4:4c:
ea:dd:6a:a9:be:16:5e:47:81:26:87:04:80:f8:02:
33:0d:4c:e4:d6:f3:63:51:ae:a4:c8:ea:6b:51:d0:
b8:06:a1:87:4d:0f:c4:ac:fb:76:09:a1:c1:c4:d1:
1d:b4:1e:35:bc:05:e8:65:d1:09:02:6b:98:c9:e4:
5a:9d:9b:21:f9:ea:09:73:0e:ed:1c:8e:a6:d5:1f:
83:a9:cf:1f:b3:1f:74:9a:4d:0a:54:ed:8a:fd:8d:
7a:76:01:a7:8d:ef:6e:c0:6f:f2:39:ce:78:e3:35:
2f:55:af:df:f0:fc:8d:1b:ee:bf:4e:d3:f5:d4:1c:
f6:f0:4d:34:fd:5f:8a:12:64:15:55:02:c3:bd:a8:
e5:82:d7:94:2a:55:c5:7a:5a:90:16:78:e6:0a:f6:
da:6b:30:98:3d:a2:00:8b:8c:e8:09:d1:4d:89:7e:
42:30:96:6e:23:fa:5d:49:6e:ca:12:8e:f9:d2:f1:
1d:7d:2e:51:21:51:a0:46:2e:50:16:bf:26:c6:a8:
a6:8d:ca:25:ff:36:6f:d7:c3:e9:43:b8:fd:a1:1d:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D6:59:8F:19:81:5F:12:63:EF:E6:6C:40:D4:AE:9F:82:7E:45:4F
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/29ZZjxmBXxJj7-ZsQNSun4J-RU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.208.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a8:c1:ab:f7:a0:1a:81:3b:8e:ed:2d:5a:d9:8e:86:2c:cc:
c3:1f:09:2e:2b:25:59:df:41:46:95:c2:d5:d1:19:b9:b4:26:
4e:a6:52:fc:09:34:61:46:0f:d8:f9:16:65:b2:de:e5:a4:5c:
ce:a3:7c:59:52:6d:7c:71:ce:88:25:b7:12:4b:7d:14:74:8c:
8a:23:90:b4:81:f2:19:dc:7a:cf:b3:c1:fe:d7:9f:3f:86:ae:
de:06:63:a5:df:a9:55:4c:22:42:fb:51:f8:f4:31:ef:e2:ba:
45:07:d9:3f:c1:d0:7f:23:da:3d:c2:dd:4a:f4:4b:e1:9c:03:
66:f0:a9:cc:ee:52:23:1c:09:58:19:8e:18:0c:e4:fb:ed:5c:
51:e3:58:ec:5f:c1:65:3e:b2:9c:05:50:20:86:af:93:6c:e4:
fe:ba:18:92:97:fa:cb:43:5d:6b:ab:9a:90:de:e9:9d:2d:49:
5b:8d:7d:3b:eb:6b:ed:a7:33:ab:d6:0b:58:ee:8b:78:10:11:
57:68:c3:3a:cb:3b:a3:c9:47:4b:0b:43:dc:82:05:63:cc:d5:
93:6b:f8:34:62:6e:07:74:62:ad:7c:7f:76:78:f4:31:80:da:
22:e4:26:15:f0:c8:66:f6:17:b8:73:1d:ca:b1:44:17:8f:c0:
68:c6:17:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBs22uTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDA3N2YyMmM2NDI4YmM4ODliMzY1YjAwNmNiNTI0OGQ0YmY2MWNmMB4XDTIyMDEw
MTExMDQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGJkNjU5OGYxOTgx
NWYxMjYzZWZlNjZjNDBkNGFlOWY4MjdlNDU0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAoaSK2BPGU4Ha2PZKPqDykARMSw46U49wagm4roLAiWJ0r
FEyT0aPpC/RM6t1qqb4WXkeBJocEgPgCMw1M5NbzY1GupMjqa1HQuAahh00PxKz7
dgmhwcTRHbQeNbwF6GXRCQJrmMnkWp2bIfnqCXMO7RyOptUfg6nPH7MfdJpNClTt
iv2NenYBp43vbsBv8jnOeOM1L1Wv3/D8jRvuv07T9dQc9vBNNP1fihJkFVUCw72o
5YLXlCpVxXpakBZ45gr22mswmD2iAIuM6AnRTYl+QjCWbiP6XUluyhKO+dLxHX0u
USFRoEYuUBa/Jsaopo3KJf82b9fD6UO4/aEdSjcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTb1lmPGYFfEmPv5mxA1K6fgn5FTzAfBgNVHSMEGDAWgBRgB38ixkKLyImz
ZbAGy1JI1L9hzzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lBZF9Jc1pDaThpSnMyV3dCc3RTU05TX1ljOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvODQ3ZWUwLWJhMmEtNGZkMi04OWQ3LTg3ZmUyZTU0YmE3OS8x
LzI5WlpqeG1CWHhKajctWnNRTlN1bjRKLVJVOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
ODQ3ZWUwLWJhMmEtNGZkMi04OWQ3LTg3ZmUyZTU0YmE3OS8xL1lBZF9Jc1pDaThp
SnMyV3dCc3RTU05TX1ljOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl/W0DANBgkqhkiG9w0BAQsFAAOC
AQEAZ6jBq/egGoE7ju0tWtmOhizMwx8JLislWd9BRpXC1dEZubQmTqZS/Ak0YUYP
2PkWZbLe5aRczqN8WVJtfHHOiCW3Ekt9FHSMiiOQtIHyGdx6z7PB/tefP4au3gZj
pd+pVUwiQvtR+PQx7+K6RQfZP8HQfyPaPcLdSvRL4ZwDZvCpzO5SIxwJWBmOGAzk
++1cUeNY7F/BZT6ynAVQIIavk2zk/roYkpf6y0Nda6uakN7pnS1JW419O+tr7acz
q9YLWO6LeBARV2jDOss7o8lHSwtD3IIFY8zVk2v4NGJuB3RirXx/dnj0MYDaIuQm
FfDIZvYXuHMdyrFEF4/AaMYXXw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-fra.rpki-client.org