Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/zIP8wP300ej0Sf0lffkWITf8jY4.roa
File: zIP8wP300ej0Sf0lffkWITf8jY4.roa (raw, json)
Hash identifier: xDaZ2GDpZt/KBMylVJ6gWp2ox3YrcJ2QGuvrXrbu48U=
Subject key identifier: CC:83:FC:C0:FD:F4:D1:E8:F4:49:FD:25:7D:F9:16:21:37:FC:8D:8E
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 05D04FE0
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/zIP8wP300ej0Sf0lffkWITf8jY4.roa
Signing time: Sat 01 Jan 2022 08:52:48 +0000
ROA not before: Sat 01 Jan 2022 08:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58183
IP address blocks: 195.62.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97538016 (0x5d04fe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Jan 1 08:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc83fcc0fdf4d1e8f449fd257df9162137fc8d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:3b:79:cb:08:c5:7d:07:92:13:4b:42:a3:
3b:28:63:7b:ee:ad:5a:7a:50:a0:2b:2f:38:98:0c:
69:36:ab:6a:8f:3c:95:04:ec:59:94:f4:d3:03:10:
be:77:91:bc:69:68:a4:ae:75:e9:ff:30:54:86:21:
71:46:10:38:b1:51:86:07:f6:cb:bb:28:4e:a0:b3:
e4:52:a2:37:61:d1:85:4e:ba:2e:11:04:db:fa:07:
2d:f6:b5:46:cb:cb:4d:b9:6b:00:c8:cf:a8:7d:fc:
df:fe:f2:2a:41:c5:19:5c:af:14:f8:fb:e7:37:07:
ef:0b:41:12:3f:02:54:dd:c6:e0:18:4f:59:8f:b5:
99:7b:0b:54:36:56:b8:c8:4b:fd:54:37:47:b8:25:
b9:d2:f1:9a:0e:93:11:a9:fb:f3:4f:62:cd:cb:3b:
7a:0b:89:18:9e:db:4a:5c:31:29:ea:61:c2:85:9a:
cb:bf:ed:10:d3:c0:74:10:12:10:d1:b3:59:fd:b3:
8d:29:e9:b2:98:18:a4:2d:f8:80:18:1c:f9:2e:76:
cf:28:6c:49:26:c0:7c:00:40:6f:c9:b5:cc:82:6e:
ed:3b:b5:b5:b4:a8:16:fb:41:1f:20:c7:1a:c8:d5:
b8:1d:32:30:cb:e0:45:c3:73:fc:c1:a4:c5:cb:64:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:83:FC:C0:FD:F4:D1:E8:F4:49:FD:25:7D:F9:16:21:37:FC:8D:8E
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/zIP8wP300ej0Sf0lffkWITf8jY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c4:32:77:10:ef:8a:31:fa:90:ba:af:97:c2:77:f4:0b:8e:
2e:f7:52:0e:db:33:52:48:8c:2b:1b:bf:fe:5a:1c:aa:fb:6c:
53:d7:01:fa:81:ff:60:06:56:a1:4e:f1:9e:d2:24:d6:08:f2:
4b:17:1d:40:8e:7c:18:f0:34:7f:bd:42:f4:e2:5b:0e:1c:9e:
91:b5:76:78:c8:76:09:5d:64:23:88:c1:e7:9f:d3:46:46:0e:
cd:90:6f:98:fb:0a:3b:be:8a:c0:32:b4:b0:01:7e:fe:ca:37:
cb:8b:f6:d6:87:ee:16:29:d3:13:60:0c:b9:7c:42:01:28:6b:
9f:dc:31:66:86:68:c8:66:18:d2:fa:5b:af:f9:b4:5e:9e:89:
e9:25:c6:13:97:21:27:78:92:0d:dc:9b:87:8f:ac:b2:a0:4b:
6e:27:b9:f5:09:cf:3d:bc:0c:04:e7:19:f2:26:9e:db:4b:0f:
83:d3:a4:35:04:85:39:85:19:15:69:67:51:2e:30:8d:fc:48:
78:e6:9d:03:8b:82:15:b7:24:1d:28:48:51:2f:4c:fe:92:82:
88:d7:c1:12:a1:42:73:99:87:6d:1b:d9:14:b7:95:e9:5f:ce:
a7:fc:86:7d:05:9a:08:d8:b4:d3:75:9c:ec:e7:fe:da:b8:41:
60:a0:39:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBdBP4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ODVmM2MzM2ZiMDExM2I0NWQ0NTkyOWE0YzA2ZjI4YzcxNGRjYTRiMB4XDTIyMDEw
MTA4NTI0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M4M2ZjYzBmZGY0
ZDFlOGY0NDlmZDI1N2RmOTE2MjEzN2ZjOGQ4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ9aO3nLCMV9B5ITS0KjOyhje+6tWnpQoCsvOJgMaTarao88
lQTsWZT00wMQvneRvGlopK516f8wVIYhcUYQOLFRhgf2y7soTqCz5FKiN2HRhU66
LhEE2/oHLfa1RsvLTblrAMjPqH383/7yKkHFGVyvFPj75zcH7wtBEj8CVN3G4BhP
WY+1mXsLVDZWuMhL/VQ3R7gludLxmg6TEan7809izcs7eguJGJ7bSlwxKephwoWa
y7/tENPAdBASENGzWf2zjSnpspgYpC34gBgc+S52zyhsSSbAfABAb8m1zIJu7Tu1
tbSoFvtBHyDHGsjVuB0yMMvgRcNz/MGkxctkTcUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMg/zA/fTR6PRJ/SV9+RYhN/yNjjAfBgNVHSMEGDAWgBQYXzwz+wETtF1F
kppMBvKMcU3KSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dGODhNX3NCRTdSZFJaS2FUQWJ5akhGTnlrcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvMWNmZWI3LWQwYWEtNGMxZC1iYjliLTc2M2FiYWI5NzEwMS8x
L3pJUDh3UDMwMGVqMFNmMGxmZmtXSVRmOGpZNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
MWNmZWI3LWQwYWEtNGMxZC1iYjliLTc2M2FiYWI5NzEwMS8xL0dGODhNX3NCRTdS
ZFJaS2FUQWJ5akhGTnlrcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMM+IzANBgkqhkiG9w0BAQsFAAOC
AQEAGMQydxDvijH6kLqvl8J39AuOLvdSDtszUkiMKxu//locqvtsU9cB+oH/YAZW
oU7xntIk1gjySxcdQI58GPA0f71C9OJbDhyekbV2eMh2CV1kI4jB55/TRkYOzZBv
mPsKO76KwDK0sAF+/so3y4v21ofuFinTE2AMuXxCAShrn9wxZoZoyGYY0vpbr/m0
Xp6J6SXGE5chJ3iSDdybh4+ssqBLbie59QnPPbwMBOcZ8iae20sPg9OkNQSFOYUZ
FWlnUS4wjfxIeOadA4uCFbckHShIUS9M/pKCiNfBEqFCc5mHbRvZFLeV6V/Op/yG
fQWaCNi003Wc7Of+2rhBYKA5HA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:14 2024 by rpki-client on console-fra.rpki-client.org