Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/qBRH80lxnwJFw4pXcg9e9jodSv4.roa
File: qBRH80lxnwJFw4pXcg9e9jodSv4.roa (raw, json)
Hash identifier: gOugwYyyf1480wOVo9awCleKi7c7CwS1otWeF5Zyv8U=
Subject key identifier: A8:14:47:F3:49:71:9F:02:45:C3:8A:57:72:0F:5E:F6:3A:1D:4A:FE
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 0182D93954E64FF920229440A20C140856F8
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/qBRH80lxnwJFw4pXcg9e9jodSv4.roa
Signing time: Fri 26 Aug 2022 08:16:29 +0000
ROA not before: Fri 26 Aug 2022 08:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210213
IP address blocks: 195.244.146.0/24 maxlen: 24
195.244.152.0/24 maxlen: 24
195.244.156.0/24 maxlen: 24
2a00:1780:dc00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:39:54:e6:4f:f9:20:22:94:40:a2:0c:14:08:56:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Aug 26 08:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a81447f349719f0245c38a57720f5ef63a1d4afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:85:25:8f:f6:39:c8:30:5c:99:0c:21:a2:
c7:7b:08:f8:f6:70:04:74:82:96:01:40:ed:88:6f:
45:fd:0d:f6:b4:8e:52:b6:56:c3:98:67:14:55:87:
0a:50:66:28:bc:95:af:c4:8a:0b:1d:8f:ea:4f:f9:
85:57:9a:83:2b:8e:39:7e:fb:8b:9b:78:0d:59:a5:
e1:70:d7:f0:a3:d1:ef:ac:d5:93:61:12:77:45:9f:
e0:b0:6e:20:8d:4e:79:51:c5:db:3b:c5:a1:ae:75:
27:2c:6d:9f:3e:6b:68:41:85:5e:6a:89:b5:93:c5:
51:a6:a0:fa:8d:58:52:3b:62:77:7b:21:97:16:42:
ca:23:23:d4:78:b8:7c:35:8d:b2:94:42:b3:09:1f:
4d:c8:ec:31:a4:99:13:ae:72:9f:4f:9a:99:85:7f:
c7:f4:7d:fc:38:88:d1:3f:78:58:9b:ef:d2:32:8c:
06:8d:29:75:4e:eb:a1:4f:2a:dc:d1:99:4a:10:38:
30:d3:1c:24:02:05:bc:e6:8f:cd:de:97:7d:69:5d:
27:07:d2:5a:50:a7:d6:71:5c:cf:60:45:a6:af:34:
da:52:ca:64:39:cc:ce:87:51:00:4c:fa:3b:ee:fd:
6f:a2:78:49:f2:33:e8:c2:2e:bf:da:0a:f0:e8:75:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:14:47:F3:49:71:9F:02:45:C3:8A:57:72:0F:5E:F6:3A:1D:4A:FE
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/qBRH80lxnwJFw4pXcg9e9jodSv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.146.0/24
195.244.152.0/24
195.244.156.0/24
IPv6:
2a00:1780:dc00::/40
Signature Algorithm: sha256WithRSAEncryption
33:1a:34:9b:04:1b:ec:3a:bd:91:97:c7:ed:06:e2:67:63:8f:
aa:20:03:2e:94:1b:ce:be:91:70:7d:cd:13:6f:2c:45:27:59:
b5:89:09:92:eb:0f:ec:9e:a8:1b:8b:1c:55:4a:f7:0b:b0:3d:
e4:85:17:e2:0d:b5:08:f2:7e:7e:43:fc:05:11:c7:1c:3f:db:
87:7d:1f:c6:78:d1:b7:8f:93:76:fc:0a:66:5f:b5:cc:fc:06:
59:b9:30:d5:21:89:87:b4:3b:39:74:90:cb:b8:45:e9:85:98:
0a:8c:a2:6c:f7:de:f4:1a:2b:b8:69:fe:80:d1:96:57:b8:af:
c7:8d:7d:2d:08:15:f5:b8:2d:d5:58:6d:15:09:54:4b:95:90:
87:b5:fd:02:85:79:ab:48:f3:37:bc:46:6e:8a:86:bd:19:e1:
71:07:04:5b:29:6a:92:22:00:e6:ec:de:cf:b7:57:97:d9:bb:
f6:06:53:59:9e:8d:2a:fe:d0:dc:e0:9c:c7:49:47:f8:b5:43:
03:38:c5:2e:2f:81:d9:6e:3c:6d:1a:54:56:35:67:9f:19:53:
fd:80:9d:36:12:1b:ae:37:56:55:d3:80:57:d6:03:00:d3:2d:
ef:f4:0a:3f:cf:42:77:ab:62:a2:13:43:f5:e9:2d:d2:04:f7:
06:6f:e7:80
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYLZOVTmT/kgIpRAogwUCFb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2
NjQxZDkwHhcNMjIwODI2MDgxNjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODE0NDdmMzQ5NzE5ZjAyNDVjMzhhNTc3MjBmNWVmNjNhMWQ0YWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPeFJY/2OcgwXJkMIaLHewj49nAE
dIKWAUDtiG9F/Q32tI5StlbDmGcUVYcKUGYovJWvxIoLHY/qT/mFV5qDK445fvuL
m3gNWaXhcNfwo9HvrNWTYRJ3RZ/gsG4gjU55UcXbO8WhrnUnLG2fPmtoQYVeaom1
k8VRpqD6jVhSO2J3eyGXFkLKIyPUeLh8NY2ylEKzCR9NyOwxpJkTrnKfT5qZhX/H
9H38OIjRP3hYm+/SMowGjSl1TuuhTyrc0ZlKEDgw0xwkAgW85o/N3pd9aV0nB9Ja
UKfWcVzPYEWmrzTaUspkOczOh1EATPo77v1vonhJ8jPowi6/2grw6HWLuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKgUR/NJcZ8CRcOKV3IPXvY6HUr+MB8GA1UdIwQY
MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt
NTdjZDY4ZDljYjRlLzEvcUJSSDgwbHhud0pGdzRwWGNnOWU5am9kU3Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl
LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQAw/SSAwQA
w/SYAwQAw/ScMA4EAgACMAgDBgAqABeA3DANBgkqhkiG9w0BAQsFAAOCAQEAMxo0
mwQb7Dq9kZfH7QbiZ2OPqiADLpQbzr6RcH3NE28sRSdZtYkJkusP7J6oG4scVUr3
C7A95IUX4g21CPJ+fkP8BRHHHD/bh30fxnjRt4+TdvwKZl+1zPwGWbkw1SGJh7Q7
OXSQy7hF6YWYCoyibPfe9BoruGn+gNGWV7ivx419LQgV9bgt1VhtFQlUS5WQh7X9
AoV5q0jzN7xGboqGvRnhcQcEWylqkiIA5uzez7dXl9m79gZTWZ6NKv7Q3OCcx0lH
+LVDAzjFLi+B2W48bRpUVjVnnxlT/YCdNhIbrjdWVdOAV9YDANMt7/QKP89Cd6ti
ohND9ekt0gT3Bm/ngA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:07 2024 by rpki-client on console-fra.rpki-client.org