Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/jfjcuWWTzHSg_O_GculsHM6Otnc.roa
File: jfjcuWWTzHSg_O_GculsHM6Otnc.roa (raw, json)
Hash identifier: FqLyTAXriCHPL9Sfo7cbpdpE/5kfDZnADigT8w5fzro=
Subject key identifier: 8D:F8:DC:B9:65:93:CC:74:A0:FC:EF:C6:72:E9:6C:1C:CE:8E:B6:77
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0D85A1E1
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/jfjcuWWTzHSg_O_GculsHM6Otnc.roa
Signing time: Sat 01 Jan 2022 02:57:09 +0000
ROA not before: Sat 01 Jan 2022 02:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 195.13.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226861537 (0xd85a1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 02:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8df8dcb96593cc74a0fcefc672e96c1cce8eb677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:c7:8d:f9:98:0d:29:ad:2b:0a:cc:80:d4:
e4:27:8f:0a:f5:d4:77:5e:a9:b1:6a:4f:76:b1:68:
5f:aa:9d:5f:6e:c3:36:f6:81:db:d8:b3:7b:71:4d:
01:b7:7c:2e:32:6d:a9:f2:39:cf:00:77:5f:79:a8:
89:f5:de:5e:79:18:2d:e2:bb:9a:9f:84:d1:7a:92:
b9:8e:ac:12:a3:0f:5b:58:15:ab:6a:c3:c3:09:df:
3c:9e:a4:b4:b5:cf:6e:28:51:8d:bb:29:b6:08:ba:
bc:09:a0:f7:be:79:e7:62:3f:56:a3:c0:b9:7c:1c:
0a:a6:23:13:28:b1:88:15:d0:df:fd:38:5a:12:0f:
62:77:6a:6d:5b:e7:9a:1f:54:2d:24:87:ff:c8:80:
41:cb:75:62:e5:7b:d1:bf:5e:29:8f:3f:47:aa:5b:
4c:d7:36:03:ae:94:fc:0b:b1:91:cb:95:29:0e:c4:
89:1c:da:e0:fa:b9:62:e5:d8:81:41:57:49:31:e9:
af:cd:8d:77:12:57:11:c7:9b:92:5f:3d:88:70:18:
9b:1a:af:13:8d:ae:dc:f8:f4:c8:ce:20:fc:58:22:
5f:26:4e:3d:93:f4:1b:c9:94:88:f8:84:65:79:83:
04:89:fa:f1:93:65:6c:9f:8a:d2:d1:f1:87:e2:70:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:DC:B9:65:93:CC:74:A0:FC:EF:C6:72:E9:6C:1C:CE:8E:B6:77
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/jfjcuWWTzHSg_O_GculsHM6Otnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:50:52:06:f3:e8:19:11:61:4d:99:3f:ac:2f:d4:0a:22:30:
da:d2:18:76:cc:30:d6:36:70:da:b5:0d:73:e1:f6:e8:e6:b8:
a8:69:c5:25:be:29:e5:db:c0:9b:53:b6:39:d9:ea:25:68:04:
ef:3e:a4:2e:3f:c3:9e:48:4b:f5:42:3b:ae:21:97:1a:84:bf:
8e:8f:ae:84:74:63:ba:08:36:dc:30:37:c0:71:32:07:a6:52:
8b:79:50:25:94:a8:90:eb:80:57:f0:99:6c:f0:1e:8b:82:90:
86:0a:a0:95:d9:42:20:ae:72:8c:c3:13:8d:b8:3a:66:42:9f:
ad:4f:18:7b:8a:46:d3:2b:07:94:54:47:a5:a5:60:65:8e:bc:
32:b4:c2:81:07:da:5c:54:6e:be:12:e2:5d:5c:82:64:55:20:
44:d2:62:15:13:2a:0a:71:c3:42:94:78:e9:9a:a8:2e:85:2e:
e0:6b:c9:42:79:c3:e0:4c:38:31:9c:4f:1a:db:76:1b:39:39:
b3:6b:67:96:70:47:0e:0c:ad:e5:ac:35:2b:82:83:98:54:41:
05:27:4e:db:2e:87:9b:0f:3a:1f:06:e7:21:e0:26:e8:cc:f7:
25:12:c1:5b:67:f4:62:42:06:bc:65:d2:d0:5d:3e:e8:3a:52:
b7:f8:9e:d9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDYWh4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTM1MzNkNjYyYzNmMGQ2YmIxZTY5MmYzZmFiNmQ3YmEzODI0YzI4MB4XDTIyMDEw
MTAyNTcwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRmOGRjYjk2NTkz
Y2M3NGEwZmNlZmM2NzJlOTZjMWNjZThlYjY3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAJx435mA0prSsKzIDU5CePCvXUd16psWpPdrFoX6qdX27D
NvaB29ize3FNAbd8LjJtqfI5zwB3X3moifXeXnkYLeK7mp+E0XqSuY6sEqMPW1gV
q2rDwwnfPJ6ktLXPbihRjbsptgi6vAmg975552I/VqPAuXwcCqYjEyixiBXQ3/04
WhIPYndqbVvnmh9ULSSH/8iAQct1YuV70b9eKY8/R6pbTNc2A66U/AuxkcuVKQ7E
iRza4Pq5YuXYgUFXSTHpr82NdxJXEcebkl89iHAYmxqvE42u3Pj0yM4g/FgiXyZO
PZP0G8mUiPiEZXmDBIn68ZNlbJ+K0tHxh+JwShkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSN+Ny5ZZPMdKD878Zy6Wwczo62dzAfBgNVHSMEGDAWgBSeNTPWYsPw1rse
aS8/q217o4JMKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25qVXoxbUxEOE5hN0hta3ZQNnR0ZTZPQ1RDZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvYmViZTZkLTE2YjMtNGIwMi1iMjA1LWE3ODM0MTMwOTlkMy8x
L2pmamN1V1dUekhTZ19PX0djdWxzSE02T3RuYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
YmViZTZkLTE2YjMtNGIwMi1iMjA1LWE3ODM0MTMwOTlkMy8xL25qVXoxbUxEOE5h
N0hta3ZQNnR0ZTZPQ1RDZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMNPTANBgkqhkiG9w0BAQsFAAOC
AQEAHVBSBvPoGRFhTZk/rC/UCiIw2tIYdsww1jZw2rUNc+H26Oa4qGnFJb4p5dvA
m1O2OdnqJWgE7z6kLj/DnkhL9UI7riGXGoS/jo+uhHRjugg23DA3wHEyB6ZSi3lQ
JZSokOuAV/CZbPAei4KQhgqgldlCIK5yjMMTjbg6ZkKfrU8Ye4pG0ysHlFRHpaVg
ZY68MrTCgQfaXFRuvhLiXVyCZFUgRNJiFRMqCnHDQpR46ZqoLoUu4GvJQnnD4Ew4
MZxPGtt2Gzk5s2tnlnBHDgyt5aw1K4KDmFRBBSdO2y6Hmw86HwbnIeAm6Mz3JRLB
W2f0YkIGvGXS0F0+6DpSt/ie2Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org