Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/Ec9fQ9L_JuAYsfZ1zTYx-jEFgz8.roa
File: Ec9fQ9L_JuAYsfZ1zTYx-jEFgz8.roa (raw, json)
Hash identifier: Oxw5VPpZ39aJUudrrbaZT2K/TAaJcEvTEPwl6OwnAlg=
Subject key identifier: 11:CF:5F:43:D2:FF:26:E0:18:B1:F6:75:CD:36:31:FA:31:05:83:3F
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0D897C80
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/Ec9fQ9L_JuAYsfZ1zTYx-jEFgz8.roa
Signing time: Sat 01 Jan 2022 02:57:10 +0000
ROA not before: Sat 01 Jan 2022 02:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 195.13.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227114112 (0xd897c80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 02:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11cf5f43d2ff26e018b1f675cd3631fa3105833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:6c:1f:b3:a6:5f:07:a0:d4:6a:a5:01:3d:
3b:66:e9:d2:f0:9e:2d:c7:20:30:b7:46:5a:c5:4f:
85:7f:66:dd:6a:7a:f6:f6:72:78:c2:18:45:cd:ea:
09:55:b2:29:9b:9b:6a:3c:bf:c1:4a:92:c3:7f:33:
a0:57:3a:06:09:bf:4d:62:c8:be:30:78:93:af:d8:
85:d6:d4:9c:e5:c8:8d:e5:a3:1b:74:5f:8f:ab:8f:
16:17:27:4a:91:c7:ac:4e:e7:94:a4:a3:7a:91:7f:
08:bf:15:84:2e:24:c7:4d:32:e0:c7:31:4e:d3:4a:
54:ac:f8:a6:8f:ca:fd:0c:49:39:b3:95:34:b7:e6:
21:1e:bd:82:48:fa:42:0c:dc:39:25:ee:7e:cb:73:
d4:6e:53:c6:18:0b:80:ff:25:80:52:1d:72:c8:e5:
ac:9f:4a:b4:42:89:77:b0:ea:02:3c:5c:a8:61:82:
6a:fe:64:00:06:9e:08:fe:71:91:5c:61:42:4b:a8:
94:97:56:80:45:ca:02:f8:e2:77:f6:d8:fa:bd:88:
43:de:1a:1d:d7:bd:78:bd:8d:a3:de:9c:6c:1e:85:
d1:c4:4d:90:9d:aa:6b:74:8a:83:f1:d4:21:cd:b2:
3f:a6:90:83:4d:47:30:99:1f:7a:bc:56:3e:c5:71:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:5F:43:D2:FF:26:E0:18:B1:F6:75:CD:36:31:FA:31:05:83:3F
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/Ec9fQ9L_JuAYsfZ1zTYx-jEFgz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:68:72:f2:c5:ef:4d:c3:66:0b:16:53:7f:48:b6:9b:7e:87:
70:0f:70:29:7d:a0:84:ab:98:a9:cd:6f:d0:13:28:c1:35:06:
7e:a2:70:af:50:3a:39:81:0e:ea:8c:9e:85:cd:50:8c:44:1e:
44:84:ec:20:fa:02:0e:99:1a:8d:7c:e7:4e:3c:3f:dc:fc:34:
10:4d:ed:fb:4f:b5:53:af:9b:20:1c:f0:9d:26:95:ed:da:f1:
d4:de:37:03:94:e0:b9:9a:02:b7:cd:f9:35:94:37:4c:91:d0:
e1:94:44:46:2d:b6:aa:f5:e1:62:98:25:d2:f8:7b:a3:ca:05:
35:c4:e9:f9:45:ba:f2:10:4c:e5:50:6b:25:48:b8:f2:64:6c:
00:77:66:c7:6a:8a:01:51:97:ab:0a:72:6a:4a:e9:d5:46:9a:
1c:64:a2:d0:74:bb:2c:23:db:b5:36:db:6e:ff:29:d6:38:bc:
de:52:6a:76:06:25:bc:55:b5:18:02:18:9d:bd:1b:1e:df:01:
1f:ea:67:1b:b3:eb:71:f1:83:6d:2e:e7:bc:81:d7:62:4d:ea:
81:15:1f:96:34:97:29:bd:6f:4f:2d:34:89:fb:e6:90:9d:30:
c0:b7:fb:10:b5:28:05:93:51:45:1b:35:a4:1d:3f:07:f4:05:
93:ce:82:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDYl8gDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTM1MzNkNjYyYzNmMGQ2YmIxZTY5MmYzZmFiNmQ3YmEzODI0YzI4MB4XDTIyMDEw
MTAyNTcxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFjZjVmNDNkMmZm
MjZlMDE4YjFmNjc1Y2QzNjMxZmEzMTA1ODMzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJD4bB+zpl8HoNRqpQE9O2bp0vCeLccgMLdGWsVPhX9m3Wp6
9vZyeMIYRc3qCVWyKZubajy/wUqSw38zoFc6Bgm/TWLIvjB4k6/YhdbUnOXIjeWj
G3Rfj6uPFhcnSpHHrE7nlKSjepF/CL8VhC4kx00y4McxTtNKVKz4po/K/QxJObOV
NLfmIR69gkj6QgzcOSXufstz1G5TxhgLgP8lgFIdcsjlrJ9KtEKJd7DqAjxcqGGC
av5kAAaeCP5xkVxhQkuolJdWgEXKAvjid/bY+r2IQ94aHde9eL2No96cbB6F0cRN
kJ2qa3SKg/HUIc2yP6aQg01HMJkferxWPsVx1IMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQRz19D0v8m4Bix9nXNNjH6MQWDPzAfBgNVHSMEGDAWgBSeNTPWYsPw1rse
aS8/q217o4JMKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25qVXoxbUxEOE5hN0hta3ZQNnR0ZTZPQ1RDZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvYmViZTZkLTE2YjMtNGIwMi1iMjA1LWE3ODM0MTMwOTlkMy8x
L0VjOWZROUxfSnVBWXNmWjF6VFl4LWpFRmd6OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
YmViZTZkLTE2YjMtNGIwMi1iMjA1LWE3ODM0MTMwOTlkMy8xL25qVXoxbUxEOE5h
N0hta3ZQNnR0ZTZPQ1RDZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMNPjANBgkqhkiG9w0BAQsFAAOC
AQEApmhy8sXvTcNmCxZTf0i2m36HcA9wKX2ghKuYqc1v0BMowTUGfqJwr1A6OYEO
6oyehc1QjEQeRITsIPoCDpkajXznTjw/3Pw0EE3t+0+1U6+bIBzwnSaV7drx1N43
A5TguZoCt835NZQ3TJHQ4ZRERi22qvXhYpgl0vh7o8oFNcTp+UW68hBM5VBrJUi4
8mRsAHdmx2qKAVGXqwpyakrp1UaaHGSi0HS7LCPbtTbbbv8p1ji83lJqdgYlvFW1
GAIYnb0bHt8BH+pnG7PrcfGDbS7nvIHXYk3qgRUfljSXKb1vTy00ifvmkJ0wwLf7
ELUoBZNRRRs1pB0/B/QFk86C0g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org