Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N55pesoFq6Xzjv1SYpL1svzDgLs.roa
File: N55pesoFq6Xzjv1SYpL1svzDgLs.roa (raw, json)
Hash identifier: TbHfcQpPwZlEc9vgFhFmLdm4JyUvudt+XMII73RTTAs=
Subject key identifier: 37:9E:69:7A:CA:05:AB:A5:F3:8E:FD:52:62:92:F5:B2:FC:C3:80:BB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A957DCF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N55pesoFq6Xzjv1SYpL1svzDgLs.roa
Signing time: Sat 01 Jan 2022 04:52:18 +0000
ROA not before: Sat 01 Jan 2022 04:52:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206948
IP address blocks: 195.136.92.0/22 maxlen: 22
195.136.147.0/24 maxlen: 24
195.136.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982875599 (0x3a957dcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=379e697aca05aba5f38efd526292f5b2fcc380bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:d4:0d:cb:2f:16:b7:92:d1:11:33:4d:e1:
4e:24:bb:b7:29:75:20:61:48:ad:c1:25:f9:e3:a8:
54:36:ae:b0:74:35:90:89:11:53:b1:47:fd:11:60:
11:f4:e8:88:1d:39:0a:03:ea:d9:91:58:59:b3:af:
fa:59:50:6f:69:11:3c:c7:6d:97:60:70:37:b9:4e:
d4:a2:ed:72:f7:33:8e:99:56:54:f4:c7:8e:65:99:
09:66:3a:c2:ca:ba:52:24:86:ff:ef:80:a4:ea:b7:
fd:34:d8:1d:37:3a:8b:94:96:ae:54:d5:79:2b:82:
f1:1b:9e:c3:95:aa:98:ea:6c:ae:8e:bc:5f:63:6e:
de:a4:a8:66:a8:90:bf:01:b6:c6:98:36:88:8f:1d:
01:a5:be:31:81:b5:4d:de:a4:f0:c1:84:25:cd:64:
53:2d:f1:73:51:9b:90:6b:71:b4:23:57:6f:40:bf:
a4:2e:b3:f4:e2:0b:64:fc:ba:52:74:2d:cc:d0:e7:
c7:d2:f1:b8:13:32:f8:de:90:5e:70:d6:c8:39:27:
d1:b6:0f:3e:d0:10:03:17:91:9a:fa:bc:83:ef:34:
b9:af:65:c0:5a:9a:c0:d2:d5:19:4d:d6:7d:be:d4:
08:22:a4:ad:c7:90:56:b3:e4:77:43:a0:b0:58:d4:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9E:69:7A:CA:05:AB:A5:F3:8E:FD:52:62:92:F5:B2:FC:C3:80:BB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N55pesoFq6Xzjv1SYpL1svzDgLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.92.0/22
195.136.147.0/24
195.136.152.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:8c:13:27:c8:d0:b6:83:48:02:72:cf:8e:06:3c:c6:24:1b:
59:3b:82:63:36:d1:ab:b8:d0:9c:5a:be:ed:c8:54:07:ff:7d:
35:98:01:59:8c:39:a3:b2:76:be:3b:42:46:3d:7b:79:c1:89:
86:f8:c6:4a:29:0c:cd:a4:a5:ae:aa:4c:10:a9:96:35:f8:f2:
ca:a8:fa:05:32:3b:52:15:1b:1b:21:26:48:f1:27:9a:a8:08:
31:85:29:4c:6f:16:62:bb:0f:59:14:ef:87:0f:12:08:96:30:
d9:9c:55:d8:41:07:6a:e5:9f:a8:ea:f5:ee:0b:9b:a1:8d:68:
72:4b:4e:b1:c6:06:a3:e6:ff:12:b7:91:d1:a8:63:5b:2b:5e:
51:66:cb:5e:2f:c8:a2:4e:e3:bc:2a:66:b7:b2:17:86:cb:2c:
78:0d:4a:1c:5f:03:89:d8:49:e0:d6:f0:1d:90:bb:d5:bc:6b:
e4:00:94:42:53:51:de:34:92:5e:df:62:ed:bb:37:d6:0e:64:
a6:2a:bd:50:a0:1c:ca:2f:7a:4a:06:4f:9e:08:5e:7a:e6:5c:
3f:ec:31:1f:b1:3f:63:60:9b:c3:9d:e8:65:d2:98:b0:e5:a1:
58:d0:a7:72:47:5f:a2:1f:89:72:e1:7b:20:40:1b:be:34:ad:
6a:b5:e7:12
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEOpV9zzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc5ZTY5N2FjYTA1
YWJhNWYzOGVmZDUyNjI5MmY1YjJmY2MzODBiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANjy1A3LLxa3ktERM03hTiS7tyl1IGFIrcEl+eOoVDausHQ1
kIkRU7FH/RFgEfToiB05CgPq2ZFYWbOv+llQb2kRPMdtl2BwN7lO1KLtcvczjplW
VPTHjmWZCWY6wsq6UiSG/++ApOq3/TTYHTc6i5SWrlTVeSuC8Ruew5WqmOpsro68
X2Nu3qSoZqiQvwG2xpg2iI8dAaW+MYG1Td6k8MGEJc1kUy3xc1GbkGtxtCNXb0C/
pC6z9OILZPy6UnQtzNDnx9LxuBMy+N6QXnDWyDkn0bYPPtAQAxeRmvq8g+80ua9l
wFqawNLVGU3Wfb7UCCKkrceQVrPkd0OgsFjUrIUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQ3nml6ygWrpfOO/VJikvWy/MOAuzAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L041NXBlc29GcTZYemp2MVNZcEwxc3Z6RGdMcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAsOIXAMEAMOIkwMEAcOImDANBgkq
hkiG9w0BAQsFAAOCAQEAbIwTJ8jQtoNIAnLPjgY8xiQbWTuCYzbRq7jQnFq+7chU
B/99NZgBWYw5o7J2vjtCRj17ecGJhvjGSikMzaSlrqpMEKmWNfjyyqj6BTI7UhUb
GyEmSPEnmqgIMYUpTG8WYrsPWRTvhw8SCJYw2ZxV2EEHauWfqOr17guboY1ocktO
scYGo+b/EreR0ahjWyteUWbLXi/Iok7jvCpmt7IXhssseA1KHF8DidhJ4NbwHZC7
1bxr5ACUQlNR3jSSXt9i7bs31g5kpiq9UKAcyi96SgZPngheeuZcP+wxH7E/Y2Cb
w53oZdKYsOWhWNCnckdfoh+JcuF7IEAbvjStarXnEg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org