Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/CszSm3u_9NscUHGHZE2hoxIyilA.roa
File: CszSm3u_9NscUHGHZE2hoxIyilA.roa (raw, json)
Hash identifier: okXkn23W433Eg/JvayAyZYDgYQQKK5Kz9nwlBx5+RWk=
Subject key identifier: 0A:CC:D2:9B:7B:BF:F4:DB:1C:50:71:87:64:4D:A1:A3:12:32:8A:50
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 051DF854
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/CszSm3u_9NscUHGHZE2hoxIyilA.roa
Signing time: Sat 01 Jan 2022 04:04:15 +0000
ROA not before: Sat 01 Jan 2022 04:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.80.0/24 maxlen: 24
95.81.81.0/24 maxlen: 24
95.81.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85850196 (0x51df854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 04:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0accd29b7bbff4db1c507187644da1a312328a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:4f:ee:a5:52:f0:70:ee:04:ea:57:97:20:
32:c5:8b:ec:06:0f:25:06:25:70:12:31:b4:ac:4e:
9e:95:4d:f0:1e:0c:e2:c6:69:f4:1c:f1:6c:72:6a:
16:2b:16:0b:a6:2e:a5:f7:9a:ee:e3:af:07:01:e0:
b2:0a:52:00:3d:bc:32:62:b9:7c:4b:2e:30:63:18:
9c:57:04:e2:50:e0:ce:ec:85:3b:c2:e8:61:45:35:
89:44:2d:6d:af:96:3a:d0:11:d0:fa:b2:20:a3:06:
d5:28:d5:0c:76:e2:f1:7b:c1:5a:af:3a:ad:0e:98:
e1:47:2b:f1:da:b8:1b:c5:53:71:84:02:a2:30:cf:
0d:12:ea:ce:61:9c:b7:04:ba:2e:c3:5f:6b:8e:07:
6d:a6:fa:6b:0e:13:1f:d7:d7:bf:c2:4a:51:2f:25:
28:92:5c:7d:99:50:59:37:ad:36:fb:0f:fc:af:71:
55:c0:54:e7:b1:db:79:d8:c1:c0:70:96:10:02:80:
42:b1:32:43:31:a1:f4:21:87:48:9b:be:b2:0c:27:
92:32:fe:e9:70:66:a9:d9:dc:fb:6b:ac:39:84:a7:
1e:ae:e6:7d:12:31:62:7e:60:34:ee:2b:dd:86:2f:
9f:87:5d:d1:3a:51:bf:5e:f8:f9:25:49:a7:cf:1b:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:D2:9B:7B:BF:F4:DB:1C:50:71:87:64:4D:A1:A3:12:32:8A:50
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/CszSm3u_9NscUHGHZE2hoxIyilA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.80.0/22
95.81.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:ac:16:a6:3a:43:7c:67:75:6a:c9:bd:6d:b2:c7:2a:ce:af:
7f:47:a9:72:a9:bc:9e:34:55:8a:a1:36:6d:b0:70:99:9f:d9:
24:bf:93:c6:49:15:60:e3:cb:01:84:97:21:87:78:be:90:f5:
a3:6c:a4:79:3d:2c:8d:d1:ad:ce:91:55:3e:f8:7c:28:d1:f2:
8d:fa:bc:d2:fe:33:a0:5d:8e:2c:18:e5:17:58:87:b7:18:5a:
c8:c9:9a:83:e4:df:f3:db:93:c7:08:b1:bf:ca:59:29:1e:4a:
d3:e7:2d:e3:88:a9:d3:a6:4c:bd:85:80:d0:c7:e2:9d:35:b2:
62:0e:9f:0a:78:8d:cb:9d:94:f9:96:73:e0:7b:04:de:c9:0a:
b3:58:6b:03:9c:2c:70:b5:47:30:8d:35:eb:96:c0:f5:4c:a5:
25:40:95:e4:58:15:2a:ba:d8:15:10:ae:c4:87:e2:c0:47:b0:
02:01:a0:cf:f0:6c:b5:76:c1:92:57:19:c6:8b:6b:f2:88:0d:
ac:de:09:e4:84:34:de:8b:bb:a3:c3:4d:8b:b7:a3:65:45:7b:
8e:7a:55:10:b9:db:3e:1f:27:4e:02:ae:1f:48:5a:11:fe:69:
07:26:11:44:40:0d:7e:bf:f8:71:cc:bb:73:90:3d:34:96:77:
36:13:5d:d8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBR34VDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NzJlZDA5MGFjZjdjODI5YTIyYmJmYmUyYjBlOTk4Y2QyMGFkODI2MB4XDTIyMDEw
MTA0MDQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGFjY2QyOWI3YmJm
ZjRkYjFjNTA3MTg3NjQ0ZGExYTMxMjMyOGE1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVtT+6lUvBw7gTqV5cgMsWL7AYPJQYlcBIxtKxOnpVN8B4M
4sZp9BzxbHJqFisWC6Yupfea7uOvBwHgsgpSAD28MmK5fEsuMGMYnFcE4lDgzuyF
O8LoYUU1iUQtba+WOtAR0PqyIKMG1SjVDHbi8XvBWq86rQ6Y4Ucr8dq4G8VTcYQC
ojDPDRLqzmGctwS6LsNfa44Hbab6aw4TH9fXv8JKUS8lKJJcfZlQWTetNvsP/K9x
VcBU57HbedjBwHCWEAKAQrEyQzGh9CGHSJu+sgwnkjL+6XBmqdnc+2usOYSnHq7m
fRIxYn5gNO4r3YYvn4dd0TpRv174+SVJp88b5p8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQKzNKbe7/02xxQcYdkTaGjEjKKUDAfBgNVHSMEGDAWgBQnLtCQrPfIKaIr
v74rDpmM0grYJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0p5N1FrS3ozeUNtaUs3LS1LdzZaak5JSzJDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjMvYTE1Zjk2LWVjMTgtNDY0NC04OWIzLWFjYzIyYmI0ZGNlZC8x
L0NzelNtM3VfOU5zY1VIR0haRTJob3hJeWlsQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMv
YTE1Zjk2LWVjMTgtNDY0NC04OWIzLWFjYzIyYmI0ZGNlZC8xL0p5N1FrS3ozeUNt
aUs3LS1LdzZaak5JSzJDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAl9RUAMEAl9RWDANBgkqhkiG9w0B
AQsFAAOCAQEAfawWpjpDfGd1asm9bbLHKs6vf0epcqm8njRViqE2bbBwmZ/ZJL+T
xkkVYOPLAYSXIYd4vpD1o2ykeT0sjdGtzpFVPvh8KNHyjfq80v4zoF2OLBjlF1iH
txhayMmag+Tf89uTxwixv8pZKR5K0+ct44ip06ZMvYWA0MfinTWyYg6fCniNy52U
+ZZz4HsE3skKs1hrA5wscLVHMI0165bA9UylJUCV5FgVKrrYFRCuxIfiwEewAgGg
z/BstXbBklcZxotr8ogNrN4J5IQ03ou7o8NNi7ejZUV7jnpVELnbPh8nTgKuH0ha
Ef5pByYRREANfr/4ccy7c5A9NJZ3NhNd2A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:22 2025 by rpki-client