Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/J0zA5r1Kh1NWnby6J3o6scUptME.roa
File: J0zA5r1Kh1NWnby6J3o6scUptME.roa (raw, json)
Hash identifier: nUFRHHC6oO0capd2Lnjv/Bmnm5LX7KY/mo6KZovulpQ=
Subject key identifier: 27:4C:C0:E6:BD:4A:87:53:56:9D:BC:BA:27:7A:3A:B1:C5:29:B4:C1
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A6AEB6B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/J0zA5r1Kh1NWnby6J3o6scUptME.roa
Signing time: Sat 01 Jan 2022 04:51:49 +0000
ROA not before: Sat 01 Jan 2022 04:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35115
IP address blocks: 195.136.68.0/23 maxlen: 23
195.136.74.0/23 maxlen: 23
195.136.188.0/23 maxlen: 23
195.136.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980085611 (0x3a6aeb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=274cc0e6bd4a8753569dbcba277a3ab1c529b4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:5c:b1:a7:63:82:5d:80:94:6b:80:04:8e:
8b:11:ee:98:fc:5a:72:8c:28:1a:1b:e7:d8:c1:49:
12:10:92:a6:43:13:04:d0:0f:8c:bf:df:1d:63:21:
e2:b4:50:74:7d:53:38:a1:43:27:98:a2:3f:d4:fe:
1c:51:d4:d9:dc:88:78:91:d4:42:41:f4:ea:34:76:
e7:64:98:6d:89:6e:6b:06:bd:a2:e4:18:ba:37:44:
9b:bf:6c:ad:ea:22:f0:28:90:6e:db:20:ff:04:d5:
7f:54:47:c2:fa:94:6c:7f:1c:ea:2b:2a:6a:26:13:
fa:44:eb:6e:3f:2e:99:50:91:8e:62:00:ab:a8:2e:
ed:c2:8f:4f:49:a5:7e:35:f3:4e:b8:6f:03:6b:2f:
30:f9:80:3f:e3:b6:cf:fe:f0:c0:fb:0b:d3:11:7d:
1f:e0:c8:a0:99:d0:5b:ae:e3:c0:df:a4:23:ff:45:
4d:00:18:03:44:81:eb:3c:1f:8f:cb:64:69:77:60:
05:ff:00:96:2d:7e:26:4f:d0:c0:c8:9a:ac:d4:5f:
72:44:3b:64:aa:c4:85:62:34:35:d8:4e:b9:41:23:
a7:39:71:cb:88:8d:ff:06:dc:82:1b:f8:52:6a:0c:
5f:18:6d:a2:76:a2:30:04:a3:5f:cf:b9:88:e2:0c:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:C0:E6:BD:4A:87:53:56:9D:BC:BA:27:7A:3A:B1:C5:29:B4:C1
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/J0zA5r1Kh1NWnby6J3o6scUptME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.68.0/23
195.136.74.0/23
195.136.96.0/22
195.136.188.0/23
Signature Algorithm: sha256WithRSAEncryption
30:97:bd:b2:c7:69:e5:1f:1f:fa:b3:6f:4a:12:25:94:25:f3:
9c:ce:d8:3f:f3:a0:83:94:f9:6a:be:97:f2:00:6a:e4:17:03:
22:82:10:69:4a:a1:c9:4a:dd:47:01:40:b9:03:3c:f2:06:fd:
8d:59:43:3b:b1:29:45:4b:53:1a:fe:0c:52:96:ea:bf:57:f6:
aa:84:c1:3f:9d:97:4d:28:cd:32:6e:9c:66:0a:05:18:36:2f:
d3:f7:d7:f9:1e:35:18:b3:24:19:ac:57:a9:3a:d8:b3:f4:95:
52:0e:cd:01:55:be:ad:52:d7:d6:32:d5:04:88:b8:fd:eb:1a:
d5:93:9f:be:15:b4:62:1e:d2:5b:ca:39:6e:7c:a0:c1:75:cc:
33:99:1b:4c:b2:c6:d7:8d:be:7a:f2:01:e6:e6:a8:40:8d:a1:
31:a0:79:0d:a3:24:1e:74:d1:e0:c3:32:04:f9:2f:cc:b9:e1:
aa:82:33:39:15:b3:93:63:cf:30:f9:b7:ef:1b:44:b9:9c:4e:
5a:0d:c8:a6:4d:5e:6b:46:2c:03:1c:57:d5:ef:b9:5f:12:05:
47:d5:a6:0c:7d:e7:a1:4f:e1:d0:8a:37:cd:9c:32:01:59:a0:
57:db:45:b8:35:0a:ff:6d:70:89:d7:62:b9:73:80:8c:f2:ec:
37:05:41:60
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEOmrrazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjc0Y2MwZTZiZDRh
ODc1MzU2OWRiY2JhMjc3YTNhYjFjNTI5YjRjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJuyXLGnY4JdgJRrgASOixHumPxacowoGhvn2MFJEhCSpkMT
BNAPjL/fHWMh4rRQdH1TOKFDJ5iiP9T+HFHU2dyIeJHUQkH06jR252SYbYluawa9
ouQYujdEm79sreoi8CiQbtsg/wTVf1RHwvqUbH8c6isqaiYT+kTrbj8umVCRjmIA
q6gu7cKPT0mlfjXzTrhvA2svMPmAP+O2z/7wwPsL0xF9H+DIoJnQW67jwN+kI/9F
TQAYA0SB6zwfj8tkaXdgBf8Ali1+Jk/QwMiarNRfckQ7ZKrEhWI0NdhOuUEjpzlx
y4iN/wbcghv4UmoMXxhtonaiMASjX8+5iOIMPhECAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQnTMDmvUqHU1advLonejqxxSm0wTAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L0owekE1cjFLaDFOV25ieTZKM282c2NVcHRNRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAcOIRAMEAcOISgMEAsOIYAMEAcOI
vDANBgkqhkiG9w0BAQsFAAOCAQEAMJe9ssdp5R8f+rNvShIllCXznM7YP/Ogg5T5
ar6X8gBq5BcDIoIQaUqhyUrdRwFAuQM88gb9jVlDO7EpRUtTGv4MUpbqv1f2qoTB
P52XTSjNMm6cZgoFGDYv0/fX+R41GLMkGaxXqTrYs/SVUg7NAVW+rVLX1jLVBIi4
/esa1ZOfvhW0Yh7SW8o5bnygwXXMM5kbTLLG142+evIB5uaoQI2hMaB5DaMkHnTR
4MMyBPkvzLnhqoIzORWzk2PPMPm37xtEuZxOWg3Ipk1ea0YsAxxX1e+5XxIFR9Wm
DH3noU/h0Io3zZwyAVmgV9tFuDUK/21widdiuXOAjPLsNwVBYA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org