Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/0lJc3XBLag-x8eZtuzWa4pCcvdc.roa
File: 0lJc3XBLag-x8eZtuzWa4pCcvdc.roa (raw, json)
Hash identifier: 7z6+23L2k3hFXrILt/RQyYjqn5i+qqBnzlIcJo8Q8I4=
Subject key identifier: D2:52:5C:DD:70:4B:6A:0F:B1:F1:E6:6D:BB:35:9A:E2:90:9C:BD:D7
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 01856FCB8A3F693420A19A0ABB17FBC85537
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/0lJc3XBLag-x8eZtuzWa4pCcvdc.roa
Signing time: Mon 02 Jan 2023 00:04:48 +0000
ROA not before: Mon 02 Jan 2023 00:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39835
IP address blocks: 194.13.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8a:3f:69:34:20:a1:9a:0a:bb:17:fb:c8:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jan 2 00:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2525cdd704b6a0fb1f1e66dbb359ae2909cbdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e4:8d:74:65:47:84:80:4f:4e:13:9f:3f:a7:
56:60:b4:51:72:07:ee:9b:22:2d:6a:ca:00:d8:f1:
3e:04:e4:27:3a:66:5f:09:d7:fe:83:e7:b9:94:32:
07:be:cd:db:eb:22:03:d9:6e:ac:35:a0:e7:9b:c3:
ee:2d:ec:b6:40:ea:01:c6:e5:77:15:7f:49:61:3e:
ed:c3:0b:c3:45:11:16:03:b5:3a:a0:13:3c:6c:f5:
56:d6:45:ed:05:84:07:ed:dc:4a:5c:cd:d8:19:71:
3d:3c:cd:15:3e:43:d7:27:e7:c7:08:3c:bb:c8:c7:
72:44:af:fd:02:a3:34:c4:c1:c9:1c:ec:6a:46:fb:
d6:4f:e1:06:45:23:2d:cd:21:58:ac:a9:46:68:b7:
f2:43:46:44:68:56:da:40:32:6b:1f:a9:4a:2c:ee:
09:6f:a3:b3:a7:c3:b0:8b:41:8f:a3:fb:a9:82:66:
76:66:de:dd:8c:ae:4a:77:ef:a4:37:e9:1d:01:c4:
4a:d1:15:65:c4:bf:1f:27:6c:c2:e1:76:39:94:11:
db:9c:e3:67:ff:e8:d1:28:4f:02:10:d5:7b:87:76:
b1:f0:2f:8c:9b:b2:bf:0a:a1:31:9e:67:99:b9:ab:
2f:93:1d:50:02:cb:8b:53:40:ad:01:a9:f3:63:5d:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:5C:DD:70:4B:6A:0F:B1:F1:E6:6D:BB:35:9A:E2:90:9C:BD:D7
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/0lJc3XBLag-x8eZtuzWa4pCcvdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.135.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3b:9c:d0:83:d7:ea:47:a2:8c:40:3c:0f:9c:4c:d2:be:65:
23:61:fc:88:cb:94:2f:74:19:b6:87:04:2a:11:42:cf:17:5c:
38:1c:32:12:2a:4e:fc:36:96:79:9a:da:df:80:8d:f7:57:fa:
c7:b4:f8:c6:89:55:06:27:47:e4:9a:0f:50:a5:e6:62:d4:9e:
0e:c7:80:f3:92:1d:4f:84:f8:db:62:20:ef:34:08:68:bc:96:
76:90:30:76:0e:30:2b:18:37:68:26:86:f5:bc:e5:1e:fd:4e:
2b:1d:42:aa:c6:90:14:08:be:8e:b9:c6:10:74:2e:7d:8d:c3:
30:9d:00:d5:b8:f1:b7:d6:b8:d8:ea:68:74:06:ae:41:82:6e:
bd:2e:e7:ee:a1:84:57:7f:41:cf:f8:d5:56:27:8e:fa:6c:2d:
15:96:9b:31:89:95:81:00:36:47:d2:17:17:02:8f:92:62:1d:
5a:bf:58:18:28:74:2b:bb:6e:e7:f9:4d:e3:5d:79:ff:15:62:
5d:81:5e:f1:e4:2d:ed:c4:94:bf:46:8d:c1:9a:1e:ec:11:78:
02:71:62:00:23:e2:84:f4:37:7d:3b:77:34:2d:10:e6:1d:4d:
d5:88:1a:41:8f:48:03:4e:70:c9:19:c7:52:3c:8c:9c:85:e8:
b7:34:5e:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy4o/aTQgoZoKuxf7yFU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjMwMTAyMDAwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjUyNWNkZDcwNGI2YTBmYjFmMWU2NmRiYjM1OWFlMjkwOWNiZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++SNdGVHhIBPThOfP6dWYLRRcgfu
myItasoA2PE+BOQnOmZfCdf+g+e5lDIHvs3b6yID2W6sNaDnm8PuLey2QOoBxuV3
FX9JYT7twwvDRREWA7U6oBM8bPVW1kXtBYQH7dxKXM3YGXE9PM0VPkPXJ+fHCDy7
yMdyRK/9AqM0xMHJHOxqRvvWT+EGRSMtzSFYrKlGaLfyQ0ZEaFbaQDJrH6lKLO4J
b6Ozp8Owi0GPo/upgmZ2Zt7djK5Kd++kN+kdAcRK0RVlxL8fJ2zC4XY5lBHbnONn
/+jRKE8CENV7h3ax8C+Mm7K/CqExnmeZuasvkx1QAsuLU0CtAanzY12hQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJSXN1wS2oPsfHmbbs1muKQnL3XMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvMGxKYzNYQkxhZy14OGVadHV6V2E0cENjdmRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg2HMA0G
CSqGSIb3DQEBCwUAA4IBAQBSO5zQg9fqR6KMQDwPnEzSvmUjYfyIy5QvdBm2hwQq
EULPF1w4HDISKk78NpZ5mtrfgI33V/rHtPjGiVUGJ0fkmg9QpeZi1J4Ox4Dzkh1P
hPjbYiDvNAhovJZ2kDB2DjArGDdoJob1vOUe/U4rHUKqxpAUCL6OucYQdC59jcMw
nQDVuPG31rjY6mh0Bq5Bgm69LufuoYRXf0HP+NVWJ476bC0VlpsxiZWBADZH0hcX
Ao+SYh1av1gYKHQru27n+U3jXXn/FWJdgV7x5C3txJS/Ro3Bmh7sEXgCcWIAI+KE
9Dd9O3c0LRDmHU3ViBpBj0gDTnDJGcdSPIychei3NF7/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:23 2025 by rpki-client