Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa
File: ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa (raw, json)
Hash identifier: BEBc24bD3cGf9tpg2lzPrTUb9LjxKGOGHAKRsHx4IIc=
Subject key identifier: 13:14:30:B6:BE:11:6F:75:3F:9B:B8:7D:65:E6:3F:96:56:31:67:86
Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial: 194AC6F7
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa
Signing time: Mon 14 Mar 2022 09:14:09 +0000
ROA not before: Mon 14 Mar 2022 09:14:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12975
IP address blocks: 195.114.28.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424330999 (0x194ac6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Validity
Not Before: Mar 14 09:14:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=131430b6be116f753f9bb87d65e63f9656316786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:bb:dd:cd:70:77:8a:90:e3:f2:33:32:24:
4b:9e:77:d3:53:85:a9:94:bc:37:1a:5a:91:fb:b0:
83:ff:09:76:b8:51:b5:c6:cf:eb:19:b5:55:6a:9e:
fd:00:82:61:2a:ba:46:12:27:aa:0b:1e:3e:87:7d:
bc:ec:4c:cd:3a:d9:b9:e1:a9:60:53:78:4c:a9:fd:
40:dc:f7:b8:19:2c:fb:da:2c:ce:b7:50:44:f7:89:
d3:cd:4a:ac:f8:83:9e:15:be:3a:2c:cb:09:9a:f7:
a5:82:4c:42:bc:b6:73:f1:ea:6e:1d:b7:bd:08:83:
a0:7c:16:5d:b1:65:0f:25:cc:76:be:a1:57:6b:69:
78:03:49:1f:dd:d3:99:ec:de:b4:fa:ce:55:de:64:
5d:07:e9:4c:cd:40:b2:79:18:d6:66:77:fa:09:87:
c4:e4:7f:48:0f:8c:ec:17:1a:6a:78:91:0a:8d:b1:
a1:14:c8:99:1e:4e:31:9f:ed:69:dc:9b:10:b1:fa:
76:23:dc:8d:eb:5b:f8:4f:db:ab:f9:8b:6d:64:d9:
58:89:a7:b2:35:8d:95:5e:b9:e1:0a:96:bb:2f:a1:
4f:70:38:9b:29:9f:27:2d:68:a3:37:a2:13:d3:c9:
52:8b:db:cf:85:2d:67:8a:6c:bd:e9:d5:17:2f:49:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:30:B6:BE:11:6F:75:3F:9B:B8:7D:65:E6:3F:96:56:31:67:86
X509v3 Authority Key Identifier:
keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.28.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:d6:95:ec:d8:18:e6:4d:40:1c:61:df:99:a1:53:7e:1a:72:
45:db:8c:26:75:50:bb:49:80:32:3e:80:28:14:09:9c:4d:f1:
be:b3:1e:77:1d:f8:bf:39:f6:d8:b4:09:f8:c6:e8:39:2b:0b:
6f:74:36:7e:1a:10:ef:26:21:f7:13:64:f7:ed:64:4a:7b:b0:
77:4a:7c:fb:46:c2:f5:ec:90:da:56:4b:ae:1f:fd:35:1e:b7:
3f:3f:af:02:d7:3b:d7:04:a3:da:12:6a:9f:25:d2:8c:7a:1e:
6e:68:42:82:21:5c:ea:38:f1:01:e0:38:d5:80:8a:53:e8:8c:
cb:9f:7f:46:2a:f2:9c:83:e1:d6:5b:5b:07:a4:83:1a:dc:80:
02:24:e2:3e:7f:5a:c8:f3:d4:11:d8:cc:6a:aa:9e:1c:0f:fb:
af:eb:40:2e:f0:d7:85:d5:e5:48:da:8b:f4:ea:85:99:88:74:
e7:e5:e2:5d:e5:43:95:f5:39:ef:03:00:cc:ab:59:8f:4e:d9:
73:9b:f3:2e:8e:4f:7b:b2:80:c6:49:44:6e:a2:86:35:73:50:
94:25:98:b7:7d:22:d5:b9:85:ad:e6:4d:ad:05:c2:9a:43:10:
df:f5:14:7c:a2:14:5c:e9:1e:22:9e:e1:54:aa:a8:94:39:dd:
18:8f:7a:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGUrG9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NGM3YzRlYWI1YzA3OTQ4Y2JmNDRhOGEwMWM2YTgyN2ZkYWU5MzQxMB4XDTIyMDMx
NDA5MTQwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTMxNDMwYjZiZTEx
NmY3NTNmOWJiODdkNjVlNjNmOTY1NjMxNjc4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVau93NcHeKkOPyMzIkS55301OFqZS8Nxpakfuwg/8JdrhR
tcbP6xm1VWqe/QCCYSq6RhInqgsePod9vOxMzTrZueGpYFN4TKn9QNz3uBks+9os
zrdQRPeJ081KrPiDnhW+OizLCZr3pYJMQry2c/Hqbh23vQiDoHwWXbFlDyXMdr6h
V2tpeANJH93TmezetPrOVd5kXQfpTM1AsnkY1mZ3+gmHxOR/SA+M7BcaaniRCo2x
oRTImR5OMZ/tadybELH6diPcjetb+E/bq/mLbWTZWImnsjWNlV654QqWuy+hT3A4
mymfJy1oozeiE9PJUovbz4UtZ4psvenVFy9JLXECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQTFDC2vhFvdT+buH1l5j+WVjFnhjAfBgNVHSMEGDAWgBTUx8TqtcB5SMv0
SooBxqgn/a6TQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFNZkU2clhBZVVqTDlFcUtBY2FvSl8ydWswRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvNTg2M2VhLTQxOWEtNGMyOS04ZTNlLThkNTI1YTU2M2U2MS8x
L0V4UXd0cjRSYjNVX203aDlaZVlfbGxZeFo0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
NTg2M2VhLTQxOWEtNGMyOS04ZTNlLThkNTI1YTU2M2U2MS8xLzFNZkU2clhBZVVq
TDlFcUtBY2FvSl8ydWswRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcNyHDANBgkqhkiG9w0BAQsFAAOC
AQEApdaV7NgY5k1AHGHfmaFTfhpyRduMJnVQu0mAMj6AKBQJnE3xvrMedx34vzn2
2LQJ+MboOSsLb3Q2fhoQ7yYh9xNk9+1kSnuwd0p8+0bC9eyQ2lZLrh/9NR63Pz+v
Atc71wSj2hJqnyXSjHoebmhCgiFc6jjxAeA41YCKU+iMy59/RirynIPh1ltbB6SD
GtyAAiTiPn9ayPPUEdjMaqqeHA/7r+tALvDXhdXlSNqL9OqFmYh05+XiXeVDlfU5
7wMAzKtZj07Zc5vzLo5Pe7KAxklEbqKGNXNQlCWYt30i1bmFreZNrQXCmkMQ3/UU
fKIUXOkeIp7hVKqolDndGI96ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:48 2024 by rpki-client on console-fra.rpki-client.org