Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0dTxgcgslcewvig1QjuSOLANvfw.roa
File: 0dTxgcgslcewvig1QjuSOLANvfw.roa (raw, json)
Hash identifier: ZoE0L+Jg1UW0r+FPHqqPKk2iZFmH0rwS8QkmRlknrGI=
Subject key identifier: D1:D4:F1:81:C8:2C:95:C7:B0:BE:28:35:42:3B:92:38:B0:0D:BD:FC
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A948960
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0dTxgcgslcewvig1QjuSOLANvfw.roa
Signing time: Sat 01 Jan 2022 04:52:17 +0000
ROA not before: Sat 01 Jan 2022 04:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206781
IP address blocks: 195.136.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982813024 (0x3a948960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1d4f181c82c95c7b0be2835423b9238b00dbdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:42:af:94:08:05:6f:c2:81:49:a1:30:08:
81:45:cb:4c:67:6a:fd:22:d3:c6:ae:ee:91:67:37:
6f:bf:ae:37:d6:0a:c9:20:42:c9:fd:0a:6d:9d:c7:
10:49:68:1d:2c:cf:5a:cc:4f:d5:28:17:32:bb:77:
df:22:a6:21:64:45:1e:38:e9:65:5f:a1:ca:3d:d8:
1b:bd:fd:a3:57:cf:21:2e:50:63:9c:65:42:37:54:
bc:86:c6:64:a0:32:42:43:31:93:01:6f:de:58:3e:
a2:a4:3e:7b:c3:40:a6:56:7f:bd:0e:40:48:85:eb:
28:d8:8d:ed:ce:0f:55:dc:d5:01:70:e7:09:8f:bc:
0a:fb:80:a1:77:3b:11:67:15:a7:bc:1f:ae:78:3d:
8b:3d:c5:bc:d5:ac:1b:06:f2:87:83:44:09:db:c0:
7c:6f:0e:1b:6d:c8:4d:c2:79:2c:37:2c:0b:70:9b:
d2:ce:8d:27:77:13:a4:9c:fd:a6:b1:9e:96:67:dd:
ca:a4:a4:14:15:b2:00:a6:8c:58:f6:7e:05:93:7b:
00:07:34:c4:13:4a:05:74:06:82:65:e0:4a:8a:da:
e6:e5:81:93:20:33:a9:c3:73:e4:6d:67:d0:fc:b9:
0b:46:a9:e0:02:e3:14:d1:8a:19:a5:b6:7e:d3:c1:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:F1:81:C8:2C:95:C7:B0:BE:28:35:42:3B:92:38:B0:0D:BD:FC
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0dTxgcgslcewvig1QjuSOLANvfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:c3:a4:5e:e6:51:15:dc:a9:37:4b:96:06:4e:f9:96:ef:5e:
df:86:d9:2a:6e:53:5c:3b:57:91:9d:12:ac:94:dc:07:9c:b3:
d5:ea:9f:e5:94:dd:39:ad:dc:0e:a2:c6:d0:e1:98:06:a9:78:
3b:3d:2f:dd:42:46:e9:76:fb:4e:47:03:17:0d:0e:d4:f7:b2:
d9:05:fd:05:15:38:88:e4:72:16:59:64:86:df:0d:44:48:78:
8f:57:4b:22:ab:2a:74:a5:d1:62:dc:1b:eb:b2:bf:52:9f:e3:
c9:17:7e:b5:d5:63:54:5e:cd:5d:3e:53:05:db:13:b4:25:ea:
fc:3b:15:f8:54:9c:b3:08:90:88:28:0b:ca:0d:1d:98:88:a8:
b0:84:25:ff:dd:aa:4d:40:4b:30:9a:f4:31:4b:35:7c:2c:75:
8e:62:bc:a9:80:43:a2:2f:6b:c1:df:b8:21:e4:cc:33:13:97:
92:cc:4f:c9:5e:6e:86:af:14:a7:24:ea:78:33:20:1b:cb:15:
78:62:75:52:56:cc:a7:d6:db:85:46:c5:2a:7c:18:f8:36:ea:
a5:aa:17:f7:f0:01:9e:40:b4:65:25:42:b8:75:62:53:c8:a0:
9e:f1:6c:5c:d8:bb:52:70:45:5f:66:79:1b:80:1f:94:63:65:
10:14:17:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOpSJYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDFkNGYxODFjODJj
OTVjN2IwYmUyODM1NDIzYjkyMzhiMDBkYmRmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOdQq+UCAVvwoFJoTAIgUXLTGdq/SLTxq7ukWc3b7+uN9YK
ySBCyf0KbZ3HEEloHSzPWsxP1SgXMrt33yKmIWRFHjjpZV+hyj3YG739o1fPIS5Q
Y5xlQjdUvIbGZKAyQkMxkwFv3lg+oqQ+e8NAplZ/vQ5ASIXrKNiN7c4PVdzVAXDn
CY+8CvuAoXc7EWcVp7wfrng9iz3FvNWsGwbyh4NECdvAfG8OG23ITcJ5LDcsC3Cb
0s6NJ3cTpJz9prGelmfdyqSkFBWyAKaMWPZ+BZN7AAc0xBNKBXQGgmXgSora5uWB
kyAzqcNz5G1n0Py5C0ap4ALjFNGKGaW2ftPBTr8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTR1PGByCyVx7C+KDVCO5I4sA29/DAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
LzBkVHhnY2dzbGNld3ZpZzFRanVTT0xBTnZmdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsOIHDANBgkqhkiG9w0BAQsFAAOC
AQEAKsOkXuZRFdypN0uWBk75lu9e34bZKm5TXDtXkZ0SrJTcB5yz1eqf5ZTdOa3c
DqLG0OGYBql4Oz0v3UJG6Xb7TkcDFw0O1Pey2QX9BRU4iORyFllkht8NREh4j1dL
IqsqdKXRYtwb67K/Up/jyRd+tdVjVF7NXT5TBdsTtCXq/DsV+FScswiQiCgLyg0d
mIiosIQl/92qTUBLMJr0MUs1fCx1jmK8qYBDoi9rwd+4IeTMMxOXksxPyV5uhq8U
pyTqeDMgG8sVeGJ1UlbMp9bbhUbFKnwY+DbqpaoX9/ABnkC0ZSVCuHViU8ignvFs
XNi7UnBFX2Z5G4AflGNlEBQXZg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:02 2025 by rpki-client