Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hTSCabT-IzlEwVYsNL3OUGd_AQ0.roa
File: hTSCabT-IzlEwVYsNL3OUGd_AQ0.roa (raw, json)
Hash identifier: iq83q47tMGzYKJ5tVd4FqThR4oiEe2nhQdeqqfVav/c=
Subject key identifier: 85:34:82:69:B4:FE:23:39:44:C1:56:2C:34:BD:CE:50:67:7F:01:0D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C39E05E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hTSCabT-IzlEwVYsNL3OUGd_AQ0.roa
Signing time: Sat 01 Jan 2022 07:55:35 +0000
ROA not before: Sat 01 Jan 2022 07:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21219
IP address blocks: 195.178.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473555038 (0x1c39e05e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85348269b4fe233944c1562c34bdce50677f010d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:19:f2:63:73:f2:bc:be:ee:b3:61:21:71:
17:1b:53:c5:d8:e0:f7:fa:4d:44:a9:6a:63:65:ee:
e3:9d:a2:32:5d:1a:ac:90:8a:85:bf:e6:84:a9:56:
89:6a:5b:7b:1d:28:d2:e5:5e:f9:f9:16:c5:ec:6c:
36:80:58:bd:b9:6e:ed:df:21:c5:db:be:10:2e:2d:
6b:86:da:74:eb:cb:92:1a:51:72:76:37:7f:68:6d:
68:31:87:ca:d6:c7:6f:8e:47:0d:ce:b4:69:5f:45:
ec:46:64:4b:08:54:79:8d:00:62:5e:75:8c:36:17:
95:a0:04:a7:50:80:30:fc:9f:fe:b4:2f:96:0e:85:
5c:15:dd:22:a1:20:61:c4:9e:ce:8b:4e:11:6b:50:
19:92:e5:d8:f8:63:c8:0e:79:ed:ae:a5:b4:c7:35:
54:d0:63:fe:be:fa:50:b7:41:e6:d9:3b:a5:9c:60:
74:2d:ae:43:d1:84:60:aa:2c:c2:14:59:4d:61:07:
93:6f:b8:e1:13:59:28:b1:30:7f:0f:e3:a3:07:18:
2a:f3:54:3c:eb:ee:d3:62:71:53:68:f8:9c:70:0b:
c5:1a:0b:e3:8f:fc:54:eb:2d:af:11:b2:a3:81:7f:
8c:97:98:b5:af:92:a4:15:97:7b:c7:62:72:9d:03:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:82:69:B4:FE:23:39:44:C1:56:2C:34:BD:CE:50:67:7F:01:0D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hTSCabT-IzlEwVYsNL3OUGd_AQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:31:ae:c1:a9:60:eb:53:c4:95:1e:a0:e2:60:dd:b9:4e:70:
f5:34:cb:39:39:fa:0d:67:43:42:9d:df:d7:13:76:47:37:ca:
29:bb:8c:01:cf:ba:b6:f5:c7:6f:9e:91:a2:88:30:2e:30:a7:
4f:9e:2f:f7:74:ff:43:5a:57:d6:f6:1c:4a:e8:f0:7d:96:07:
fa:a1:36:b3:f1:c2:8c:2c:3c:4c:3c:44:29:88:2b:f0:23:94:
3b:c1:7e:43:7f:9a:5b:f1:4b:a9:26:e6:76:44:f5:a1:22:18:
52:19:96:8e:b7:e9:62:0b:32:ac:e9:33:29:9b:4c:f5:93:28:
42:91:c4:d4:5c:a3:2e:ab:90:be:58:87:cc:e7:f8:21:a6:40:
23:9f:82:3e:f7:85:ed:3a:7a:76:51:de:85:d3:c4:df:e9:bd:
61:e9:81:ec:b1:75:86:a6:0b:cc:b5:96:c0:e3:0d:d0:2e:69:
2d:d8:7f:2d:50:29:3a:17:2e:99:80:2c:7e:75:67:e4:6e:6c:
3c:ad:23:b1:60:12:a0:31:64:8c:ce:92:7e:38:1c:95:46:01:
fe:ed:ac:dd:77:bc:28:60:ac:c6:71:ef:ec:1b:85:14:fa:03:
1d:df:4c:1b:68:e2:41:d2:a3:53:8a:3e:90:b9:9c:3d:3e:61:
9e:41:a6:b0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHDngXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDEw
MTA3NTUzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODUzNDgyNjliNGZl
MjMzOTQ0YzE1NjJjMzRiZGNlNTA2NzdmMDEwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzvGfJjc/K8vu6zYSFxFxtTxdjg9/pNRKlqY2Xu452iMl0a
rJCKhb/mhKlWiWpbex0o0uVe+fkWxexsNoBYvblu7d8hxdu+EC4ta4badOvLkhpR
cnY3f2htaDGHytbHb45HDc60aV9F7EZkSwhUeY0AYl51jDYXlaAEp1CAMPyf/rQv
lg6FXBXdIqEgYcSezotOEWtQGZLl2PhjyA557a6ltMc1VNBj/r76ULdB5tk7pZxg
dC2uQ9GEYKoswhRZTWEHk2+44RNZKLEwfw/jowcYKvNUPOvu02JxU2j4nHALxRoL
44/8VOstrxGyo4F/jJeYta+SpBWXe8dicp0Du6UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSFNIJptP4jOUTBViw0vc5QZ38BDTAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L2hUU0NhYlQtSXpsRXdWWXNOTDNPVUdkX0FRMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOyljANBgkqhkiG9w0BAQsFAAOC
AQEAyDGuwalg61PElR6g4mDduU5w9TTLOTn6DWdDQp3f1xN2RzfKKbuMAc+6tvXH
b56RoogwLjCnT54v93T/Q1pX1vYcSujwfZYH+qE2s/HCjCw8TDxEKYgr8COUO8F+
Q3+aW/FLqSbmdkT1oSIYUhmWjrfpYgsyrOkzKZtM9ZMoQpHE1FyjLquQvliHzOf4
IaZAI5+CPveF7Tp6dlHehdPE3+m9YemB7LF1hqYLzLWWwOMN0C5pLdh/LVApOhcu
mYAsfnVn5G5sPK0jsWASoDFkjM6SfjgclUYB/u2s3Xe8KGCsxnHv7BuFFPoDHd9M
G2jiQdKjU4o+kLmcPT5hnkGmsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org