Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/0hQ1KXXKv4cJ4MdLzJG7GralHjg.roa
File: 0hQ1KXXKv4cJ4MdLzJG7GralHjg.roa (raw, json)
Hash identifier: CvLCXeAPAyOt/F+3bFR+hElpWSxc6ZY31zrH/e7+VFU=
Subject key identifier: D2:14:35:29:75:CA:BF:87:09:E0:C7:4B:CC:91:BB:1A:B6:A5:1E:38
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 05223511
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/0hQ1KXXKv4cJ4MdLzJG7GralHjg.roa
Signing time: Sat 01 Jan 2022 04:04:17 +0000
ROA not before: Sat 01 Jan 2022 04:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64413
IP address blocks: 95.81.84.0/24 maxlen: 24
95.81.84.0/22 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86127889 (0x5223511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 04:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d214352975cabf8709e0c74bcc91bb1ab6a51e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:d2:ac:bc:03:6f:a7:4d:d9:3d:5b:ee:eb:
50:b0:33:ba:8c:57:bc:78:8d:43:5d:1d:9d:61:11:
bc:77:50:cf:d3:ff:ac:eb:53:83:2c:a4:89:96:57:
e8:c3:82:95:c2:1f:dd:68:a6:bd:35:02:cc:fa:63:
bb:5e:cb:47:dd:59:a2:39:2b:a8:8c:c0:67:df:99:
9d:66:77:11:c9:e6:11:45:5d:ee:b3:1c:a8:88:6b:
59:7a:8a:f1:2a:34:96:66:96:60:9c:8c:01:5e:6e:
18:1c:27:b3:d9:99:e3:ec:5e:f4:c2:3b:15:b4:9b:
bd:62:ab:7e:eb:54:a5:0b:fd:3f:fc:a3:9b:05:64:
e0:79:8d:da:88:bb:cc:42:7c:b8:1d:0d:d5:0e:8b:
88:38:83:c9:62:5b:42:e9:b9:08:7e:8e:98:47:30:
3f:23:cf:6a:ce:7f:a7:54:7e:02:7c:8d:d3:8e:c0:
f5:a0:27:90:02:4b:86:9b:95:b1:af:c3:a6:52:63:
1a:5f:2a:9d:79:95:46:be:06:fe:82:12:e3:27:45:
00:a9:a8:01:90:b6:d5:ee:01:28:25:ae:6c:24:bc:
65:c9:a7:90:8e:02:f2:da:c1:2b:05:a5:d6:db:0e:
de:b0:61:4c:24:da:fc:72:6d:77:95:b4:ce:32:f5:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:14:35:29:75:CA:BF:87:09:E0:C7:4B:CC:91:BB:1A:B6:A5:1E:38
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/0hQ1KXXKv4cJ4MdLzJG7GralHjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0/22
95.81.92.0/22
Signature Algorithm: sha256WithRSAEncryption
12:bc:da:17:9c:1b:3c:ae:69:67:c5:20:3a:93:fd:32:5f:b2:
7e:c4:59:6c:7a:5a:d4:a1:d6:be:f4:9a:50:c7:b5:94:b8:09:
18:a6:36:16:f5:a0:ee:c5:45:fd:3d:ee:61:0f:ff:11:d6:81:
ad:9f:3f:4c:04:6c:38:2d:fd:bd:2e:c6:64:7b:1c:1c:64:0e:
b7:a2:af:74:19:0b:bd:86:74:d1:f6:75:f3:b6:49:97:2d:1f:
fe:be:04:c5:d4:d8:78:1f:af:0c:85:5e:b2:24:ef:78:85:16:
d5:00:43:41:47:53:aa:47:e1:bc:c8:38:a3:82:be:97:b6:37:
02:f0:ea:4b:3d:13:14:e0:d6:c9:88:f7:27:df:e4:57:6b:5f:
12:4d:7c:6e:0c:3e:0a:5b:5c:34:a5:ba:31:db:37:03:02:dd:
cf:8e:6c:ee:11:a3:e1:cb:b1:cc:65:27:b1:ff:ea:ba:63:35:
d6:0e:3b:86:63:00:e6:40:1f:a4:e8:5b:00:fc:f1:c0:17:93:
8b:73:e0:1c:4d:69:b5:7e:4f:af:df:d4:b1:a6:cf:67:30:fe:
d5:31:6b:d1:4a:23:c7:10:4f:9a:c0:d3:4b:22:da:4e:fd:cb:
e5:01:3e:d6:76:ed:ad:e0:a0:1c:fb:5e:9f:08:9d:91:dd:10:
f2:e3:d1:65
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBSI1ETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NzJlZDA5MGFjZjdjODI5YTIyYmJmYmUyYjBlOTk4Y2QyMGFkODI2MB4XDTIyMDEw
MTA0MDQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDIxNDM1Mjk3NWNh
YmY4NzA5ZTBjNzRiY2M5MWJiMWFiNmE1MWUzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkw0qy8A2+nTdk9W+7rULAzuoxXvHiNQ10dnWERvHdQz9P/
rOtTgyykiZZX6MOClcIf3WimvTUCzPpju17LR91ZojkrqIzAZ9+ZnWZ3EcnmEUVd
7rMcqIhrWXqK8So0lmaWYJyMAV5uGBwns9mZ4+xe9MI7FbSbvWKrfutUpQv9P/yj
mwVk4HmN2oi7zEJ8uB0N1Q6LiDiDyWJbQum5CH6OmEcwPyPPas5/p1R+AnyN047A
9aAnkAJLhpuVsa/DplJjGl8qnXmVRr4G/oIS4ydFAKmoAZC21e4BKCWubCS8Zcmn
kI4C8trBKwWl1tsO3rBhTCTa/HJtd5W0zjL1I6MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTSFDUpdcq/hwngx0vMkbsatqUeODAfBgNVHSMEGDAWgBQnLtCQrPfIKaIr
v74rDpmM0grYJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0p5N1FrS3ozeUNtaUs3LS1LdzZaak5JSzJDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjMvYTE1Zjk2LWVjMTgtNDY0NC04OWIzLWFjYzIyYmI0ZGNlZC8x
LzBoUTFLWFhLdjRjSjRNZEx6Skc3R3JhbEhqZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMv
YTE1Zjk2LWVjMTgtNDY0NC04OWIzLWFjYzIyYmI0ZGNlZC8xL0p5N1FrS3ozeUNt
aUs3LS1LdzZaak5JSzJDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAl9RVAMEAl9RXDANBgkqhkiG9w0B
AQsFAAOCAQEAErzaF5wbPK5pZ8UgOpP9Ml+yfsRZbHpa1KHWvvSaUMe1lLgJGKY2
FvWg7sVF/T3uYQ//EdaBrZ8/TARsOC39vS7GZHscHGQOt6KvdBkLvYZ00fZ187ZJ
ly0f/r4ExdTYeB+vDIVesiTveIUW1QBDQUdTqkfhvMg4o4K+l7Y3AvDqSz0TFODW
yYj3J9/kV2tfEk18bgw+CltcNKW6Mds3AwLdz45s7hGj4cuxzGUnsf/qumM11g47
hmMA5kAfpOhbAPzxwBeTi3PgHE1ptX5Pr9/UsabPZzD+1TFr0UojxxBPmsDTSyLa
Tv3L5QE+1nbtreCgHPtenwidkd0Q8uPRZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org