Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/2LFlnnbHb7fmj8JGYUsznsw0ixw.roa
File: 2LFlnnbHb7fmj8JGYUsznsw0ixw.roa (raw, json)
Hash identifier: Z15UzKpCv2ePl3Nxusrxbr+YEJYkwjLeVqtZ06WyOxA=
Subject key identifier: D8:B1:65:9E:76:C7:6F:B7:E6:8F:C2:46:61:4B:33:9E:CC:34:8B:1C
Certificate issuer: /CN=8700f9b5eb465d46396e60ca0afd4b0226f561c7
Certificate serial: 034F63A2
Authority key identifier: 87:00:F9:B5:EB:46:5D:46:39:6E:60:CA:0A:FD:4B:02:26:F5:61:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwD5tetGXUY5bmDKCv1LAib1Ycc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/2LFlnnbHb7fmj8JGYUsznsw0ixw.roa
Signing time: Sat 01 Jan 2022 10:05:41 +0000
ROA not before: Sat 01 Jan 2022 10:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 195.234.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55534498 (0x34f63a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8700f9b5eb465d46396e60ca0afd4b0226f561c7
Validity
Not Before: Jan 1 10:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8b1659e76c76fb7e68fc246614b339ecc348b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:4a:37:b7:32:43:83:bd:ff:37:8b:b5:ff:
ca:7d:cc:85:c9:37:5b:2f:70:2b:b8:26:64:13:e0:
2a:d6:1d:56:40:b2:af:16:65:cd:48:e6:25:48:61:
55:b8:c4:5b:ce:8c:c9:d0:cb:71:2f:13:0f:7b:2a:
0f:b2:23:45:1e:fe:87:e5:b0:16:3b:31:55:cd:45:
5a:42:1f:31:e7:f3:8b:91:72:b3:1a:b3:46:1c:87:
f8:a8:80:62:37:e2:d1:14:b6:05:dd:b9:ca:9e:e3:
b7:36:2f:eb:17:78:30:07:b6:af:4d:fc:8a:37:a9:
4d:6d:68:37:87:d5:cd:6b:f1:91:76:a2:91:ce:68:
7e:6d:e7:89:48:27:70:9d:1c:33:78:49:12:74:e4:
3d:05:ff:9e:a6:18:8e:30:49:12:4f:5f:a8:4d:92:
1b:e1:4d:04:88:75:38:9c:3a:fa:21:75:79:b1:f8:
c0:28:83:09:96:9f:d8:2d:29:6a:a7:a7:25:1c:bd:
d2:48:ae:e6:b9:80:cf:a1:63:3f:22:04:54:91:e5:
87:64:41:10:90:ee:75:45:d1:be:3f:a9:80:f8:7a:
c7:d9:0e:61:d5:b0:a5:0e:17:58:85:3e:e9:da:ac:
c8:fe:5c:4c:c3:d7:a6:ac:09:3d:ae:5a:f2:40:ae:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B1:65:9E:76:C7:6F:B7:E6:8F:C2:46:61:4B:33:9E:CC:34:8B:1C
X509v3 Authority Key Identifier:
keyid:87:00:F9:B5:EB:46:5D:46:39:6E:60:CA:0A:FD:4B:02:26:F5:61:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwD5tetGXUY5bmDKCv1LAib1Ycc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/2LFlnnbHb7fmj8JGYUsznsw0ixw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/hwD5tetGXUY5bmDKCv1LAib1Ycc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.192.0/22
Signature Algorithm: sha256WithRSAEncryption
24:60:ec:34:db:c9:0c:69:87:6e:a7:2d:7c:a5:72:4a:f2:d1:
c2:41:0a:e9:a0:28:09:c8:10:ec:c6:c1:48:53:60:9b:b5:a9:
e6:47:be:79:37:b8:6b:df:30:94:67:83:cf:11:70:83:b4:f8:
8a:2f:fc:e6:25:53:9c:bc:1a:29:9a:b6:e4:0f:b4:43:ce:8c:
25:52:85:5f:3b:9a:0a:df:b4:41:a3:c6:79:ad:2e:8e:0d:05:
a1:cd:e6:b8:6e:85:7e:45:32:93:40:93:76:99:0d:eb:df:c2:
77:77:91:17:b6:6c:7e:7f:92:94:c5:11:c3:ea:77:8d:90:04:
1c:73:e0:33:c2:9d:93:ef:e0:1b:f3:f9:07:05:dd:30:ca:3c:
95:5d:62:0f:a3:2d:1a:d7:18:aa:92:40:f8:b1:23:22:e0:dc:
4f:03:ea:94:8c:f5:3a:d5:be:c7:f3:b9:ed:ff:13:73:e3:63:
ec:31:9e:1e:31:cb:28:5e:35:47:05:dc:72:25:aa:b3:10:98:
41:12:65:62:56:95:95:86:c6:79:b7:cd:75:c4:59:53:bc:26:
7c:90:ac:d7:f6:4a:f2:90:e6:aa:b9:0f:ec:76:15:d9:d1:35:
88:c6:ea:3c:50:71:86:be:57:f1:72:f0:d4:68:eb:d3:ad:2f:
9e:e8:fd:1e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA09jojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NzAwZjliNWViNDY1ZDQ2Mzk2ZTYwY2EwYWZkNGIwMjI2ZjU2MWM3MB4XDTIyMDEw
MTEwMDU0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDhiMTY1OWU3NmM3
NmZiN2U2OGZjMjQ2NjE0YjMzOWVjYzM0OGIxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfZSje3MkODvf83i7X/yn3Mhck3Wy9wK7gmZBPgKtYdVkCy
rxZlzUjmJUhhVbjEW86MydDLcS8TD3sqD7IjRR7+h+WwFjsxVc1FWkIfMefzi5Fy
sxqzRhyH+KiAYjfi0RS2Bd25yp7jtzYv6xd4MAe2r038ijepTW1oN4fVzWvxkXai
kc5ofm3niUgncJ0cM3hJEnTkPQX/nqYYjjBJEk9fqE2SG+FNBIh1OJw6+iF1ebH4
wCiDCZaf2C0paqenJRy90kiu5rmAz6FjPyIEVJHlh2RBEJDudUXRvj+pgPh6x9kO
YdWwpQ4XWIU+6dqsyP5cTMPXpqwJPa5a8kCuIX8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTYsWWedsdvt+aPwkZhSzOezDSLHDAfBgNVHSMEGDAWgBSHAPm160ZdRjlu
YMoK/UsCJvVhxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2h3RDV0ZXRHWFVZNWJtREtDdjFMQWliMVljYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvYjEzZmRiLTM3MTgtNGRiNS05YzA4LTc2NzljYWM1NjQ2MC8x
LzJMRmxubmJIYjdmbWo4SkdZVXN6bnN3MGl4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
YjEzZmRiLTM3MTgtNGRiNS05YzA4LTc2NzljYWM1NjQ2MC8xL2h3RDV0ZXRHWFVZ
NWJtREtDdjFMQWliMVljYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsPqwDANBgkqhkiG9w0BAQsFAAOC
AQEAJGDsNNvJDGmHbqctfKVySvLRwkEK6aAoCcgQ7MbBSFNgm7Wp5ke+eTe4a98w
lGeDzxFwg7T4ii/85iVTnLwaKZq25A+0Q86MJVKFXzuaCt+0QaPGea0ujg0Foc3m
uG6FfkUyk0CTdpkN69/Cd3eRF7Zsfn+SlMURw+p3jZAEHHPgM8Kdk+/gG/P5BwXd
MMo8lV1iD6MtGtcYqpJA+LEjIuDcTwPqlIz1OtW+x/O57f8Tc+Nj7DGeHjHLKF41
RwXcciWqsxCYQRJlYlaVlYbGebfNdcRZU7wmfJCs1/ZK8pDmqrkP7HYV2dE1iMbq
PFBxhr5X8XLw1Gjr060vnuj9Hg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:42 2024 by rpki-client on console-fra.rpki-client.org