Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/chLNirZ5cdwXDvfJaPsijKzEdc0.roa
File: chLNirZ5cdwXDvfJaPsijKzEdc0.roa (raw, json)
Hash identifier: LSvptCFpS2BBipgx3qPR7eNsNKqOp8xz5H47JYkbSq8=
Subject key identifier: 72:12:CD:8A:B6:79:71:DC:17:0E:F7:C9:68:FB:22:8C:AC:C4:75:CD
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 05B01A8C
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/chLNirZ5cdwXDvfJaPsijKzEdc0.roa
Signing time: Sat 01 Jan 2022 05:01:52 +0000
ROA not before: Sat 01 Jan 2022 05:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8676
IP address blocks: 194.13.236.0/23 maxlen: 24
194.13.140.0/23 maxlen: 24
2a06:2100::/30 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95427212 (0x5b01a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jan 1 05:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7212cd8ab67971dc170ef7c968fb228cacc475cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:23:ab:2d:ac:40:8a:28:93:78:f0:9a:a6:
50:d5:e9:2e:26:37:9a:ef:ad:15:12:09:1b:72:6b:
45:71:a2:2f:f6:5b:72:60:1f:1f:db:71:28:8b:50:
e9:95:c5:59:ae:e5:54:01:8e:a0:68:89:6d:6b:d4:
e0:46:29:e7:87:ab:17:ab:4d:8f:05:eb:d4:b9:76:
b5:7c:fa:50:51:56:9f:22:fc:38:b9:90:04:ef:56:
0e:bb:52:d3:0d:d7:72:58:dc:d0:a5:66:97:9c:f7:
a2:ca:52:1a:93:59:0a:7d:1a:af:83:5f:23:6e:78:
10:33:75:14:4e:80:33:ad:4f:76:1a:a6:04:a3:54:
db:81:f7:6b:fc:90:5b:25:26:6a:65:1f:a2:b8:e0:
b4:c7:cc:f6:3b:d2:b5:86:57:e7:1c:16:8f:68:f6:
1e:9b:b2:5e:ec:d8:ec:23:42:d4:3f:93:41:d7:03:
8a:1f:0a:93:a3:db:94:ee:5f:68:16:db:89:3c:f5:
34:2e:fa:7b:55:0f:87:55:01:0b:2e:84:7b:60:cd:
73:11:0c:5c:1f:1d:8a:8c:79:2e:9e:b4:b6:be:b2:
3c:18:39:e7:2e:70:33:31:e0:76:4e:cc:aa:ec:1b:
48:72:4d:0c:d2:43:88:37:62:4c:53:6c:d8:75:93:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:CD:8A:B6:79:71:DC:17:0E:F7:C9:68:FB:22:8C:AC:C4:75:CD
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/chLNirZ5cdwXDvfJaPsijKzEdc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.140.0/23
194.13.236.0/23
IPv6:
2a06:2100::/30
Signature Algorithm: sha256WithRSAEncryption
b0:01:ed:b0:ce:30:57:3a:9d:dc:0d:1d:0e:8d:52:6f:94:6d:
64:ac:d7:9c:31:9d:dd:40:ac:31:e6:0d:b1:da:09:c0:a6:b4:
04:d7:de:45:09:70:f4:a0:8c:62:d4:8f:e4:1c:c4:9e:bc:7b:
f2:3a:34:41:a8:00:93:2e:19:41:be:31:50:41:b6:f7:01:c9:
76:ce:26:f4:99:36:d3:9b:4b:28:52:14:06:5f:2a:76:2b:f0:
13:80:e9:30:df:c2:ce:c3:c4:77:06:e2:48:19:2f:b4:3d:f4:
90:68:3f:36:4e:bb:8c:cf:9e:dc:ac:c3:53:09:e9:2e:b7:6c:
45:17:cb:d0:cf:69:37:d6:22:45:35:a8:ed:12:50:60:31:30:
07:b6:b1:71:fd:42:d0:6c:7a:f2:8c:27:2c:c8:4d:ef:b9:86:
f7:2c:d9:1b:2b:82:c0:ff:05:53:ce:4d:e4:c9:06:1d:0d:6d:
43:8d:66:10:4c:01:2c:f2:1d:e1:3a:9a:d6:76:52:69:e6:ae:
d9:32:97:c9:18:87:33:8d:b9:67:40:2d:ea:8b:c2:06:18:1b:
20:94:3c:2a:d4:87:56:50:1a:4f:a0:d3:0b:40:97:06:65:88:
21:ec:35:b1:11:b8:7e:c2:d8:b1:2b:28:48:71:13:94:f0:25:
9f:04:6d:35
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBbAajDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDMzOWQzMDQ0OTlkMDY5YWVjZDhiZDBlOGZiYTAyZTUyMmY1NzZhMB4XDTIyMDEw
MTA1MDE1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzIxMmNkOGFiNjc5
NzFkYzE3MGVmN2M5NjhmYjIyOGNhY2M0NzVjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOTEI6strECKKJN48JqmUNXpLiY3mu+tFRIJG3JrRXGiL/Zb
cmAfH9txKItQ6ZXFWa7lVAGOoGiJbWvU4EYp54erF6tNjwXr1Ll2tXz6UFFWnyL8
OLmQBO9WDrtS0w3Xcljc0KVml5z3ospSGpNZCn0ar4NfI254EDN1FE6AM61Pdhqm
BKNU24H3a/yQWyUmamUforjgtMfM9jvStYZX5xwWj2j2HpuyXuzY7CNC1D+TQdcD
ih8Kk6PblO5faBbbiTz1NC76e1UPh1UBCy6Ee2DNcxEMXB8diox5Lp60tr6yPBg5
5y5wMzHgdk7MquwbSHJNDNJDiDdiTFNs2HWTK60CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRyEs2Ktnlx3BcO98lo+yKMrMR1zTAfBgNVHSMEGDAWgBRAM50wRJnQaa7N
i9Do+6AuUi9XajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FET2RNRVNaMEdtdXpZdlE2UHVnTGxJdlYyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvNWZlODhhLTE2ZTEtNDgxZi05OGU4LTAzMWU1ODkwNTkyMy8x
L2NoTE5pclo1Y2R3WER2ZkphUHNpakt6RWRjMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
NWZlODhhLTE2ZTEtNDgxZi05OGU4LTAzMWU1ODkwNTkyMy8xL1FET2RNRVNaMEdt
dXpZdlE2UHVnTGxJdlYyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAcINjAMEAcIN7DANBAIAAjAHAwUC
KgYhADANBgkqhkiG9w0BAQsFAAOCAQEAsAHtsM4wVzqd3A0dDo1Sb5RtZKzXnDGd
3UCsMeYNsdoJwKa0BNfeRQlw9KCMYtSP5BzEnrx78jo0QagAky4ZQb4xUEG29wHJ
ds4m9Jk205tLKFIUBl8qdivwE4DpMN/CzsPEdwbiSBkvtD30kGg/Nk67jM+e3KzD
UwnpLrdsRRfL0M9pN9YiRTWo7RJQYDEwB7axcf1C0Gx68ownLMhN77mG9yzZGyuC
wP8FU85N5MkGHQ1tQ41mEEwBLPId4Tqa1nZSaeau2TKXyRiHM425Z0At6ovCBhgb
IJQ8KtSHVlAaT6DTC0CXBmWIIew1sRG4fsLYsSsoSHETlPAlnwRtNQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:31 2025 by rpki-client