Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/CDFAJQ20Oym84Ban6FiGFa_Xxvg.roa
File: CDFAJQ20Oym84Ban6FiGFa_Xxvg.roa (raw, json)
Hash identifier: 9CXJFHPoHnGN/v2iDZtRRbDNLXtVlRWH/AEvDStIKAI=
Subject key identifier: 08:31:40:25:0D:B4:3B:29:BC:E0:16:A7:E8:58:86:15:AF:D7:C6:F8
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 0182F4DF2B0CCB422751F28B480344757937
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/CDFAJQ20Oym84Ban6FiGFa_Xxvg.roa
Signing time: Wed 31 Aug 2022 17:07:22 +0000
ROA not before: Wed 31 Aug 2022 17:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41513
IP address blocks: 195.3.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:df:2b:0c:cb:42:27:51:f2:8b:48:03:44:75:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Aug 31 17:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=083140250db43b29bce016a7e8588615afd7c6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:9f:a7:4d:d9:5b:92:a3:7d:67:36:94:ba:
8f:3c:a2:aa:a6:81:b3:ee:64:1f:04:21:06:d5:fd:
64:50:c8:53:05:00:02:db:0a:da:c2:ed:26:46:8f:
bc:25:d2:54:81:e6:17:dc:cb:08:be:b2:37:fc:47:
73:59:5a:fb:c2:b3:d6:d0:8a:df:a2:11:fc:af:29:
28:d1:48:8d:18:61:6d:31:fd:3b:eb:a2:56:fd:02:
4d:23:fb:9e:11:23:01:b2:14:ec:85:67:a4:c5:71:
82:bf:d0:aa:15:ba:64:24:9b:cd:15:d4:4c:5e:2f:
ed:73:ee:2e:f3:84:fd:ad:06:7c:96:40:bf:85:35:
3b:38:a9:aa:05:31:c0:61:86:ed:36:0a:5b:93:c6:
71:b4:96:64:c2:77:12:4c:7d:9f:90:e9:6a:19:d8:
ea:41:14:d5:0b:01:fc:00:ce:cd:60:00:f8:c0:a0:
a8:ec:e8:b2:a3:1a:ed:80:b3:d2:5c:39:1c:89:39:
6c:e6:ef:f7:5b:54:bd:00:47:7c:73:21:74:db:be:
95:b3:ed:32:76:b1:76:d8:8b:9d:ba:20:b4:1e:94:
73:fa:fd:af:20:35:1d:37:77:8c:ac:9d:9f:4c:42:
4e:88:2e:d6:1c:ca:da:f4:58:43:48:7a:47:93:e3:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:40:25:0D:B4:3B:29:BC:E0:16:A7:E8:58:86:15:AF:D7:C6:F8
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/CDFAJQ20Oym84Ban6FiGFa_Xxvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.224.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:7b:25:fc:21:62:3c:76:f1:0a:6d:f9:ed:9b:62:6b:7b:fe:
76:a3:2a:31:0f:b3:ea:a0:19:ad:c7:b7:ef:f0:59:ca:da:46:
27:bc:bb:39:0c:41:b2:a3:51:39:95:e4:42:09:13:80:07:ca:
ef:59:d8:88:ba:c4:5f:4b:1b:c9:77:a3:51:b3:5e:16:49:bf:
d3:b5:f6:ae:fb:77:d8:4c:19:5a:b9:79:06:f2:84:d9:8e:7e:
9c:90:ee:c4:da:b0:da:11:95:20:07:f6:40:d4:26:d5:c3:d3:
b1:bf:45:80:96:fd:eb:10:46:5c:5a:1c:69:ee:01:07:af:75:
d3:4c:75:c1:07:06:bc:3d:3e:09:a5:54:ca:2d:ac:1b:6e:ff:
da:8f:01:09:a3:b8:ca:1b:73:46:00:4e:f8:da:93:92:70:28:
fe:36:68:fc:7b:1a:97:83:34:00:ed:ff:e9:0f:ca:dd:67:1d:
52:d7:2d:a0:c1:06:35:e7:3f:df:b9:03:7b:17:a0:a6:c9:4e:
91:98:91:ac:9e:67:cd:bf:86:52:1a:40:ed:02:14:bd:16:d9:
ff:b0:65:f7:42:e5:8c:1a:fc:e6:b2:05:81:c7:81:f4:b3:ae:
2f:a7:16:52:7a:b9:f1:69:a1:50:67:7b:b6:70:f8:eb:a5:af:
da:0d:40:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL03ysMy0InUfKLSANEdXk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGU0NTZkNGQ0MDVjNmY0MjkyZDYzNjg4Njc2Y2UxNTBl
N2YwN2UwHhcNMjIwODMxMTcwNzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODMxNDAyNTBkYjQzYjI5YmNlMDE2YTdlODU4ODYxNWFmZDdjNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3qfp03ZW5KjfWc2lLqPPKKqpoGz
7mQfBCEG1f1kUMhTBQAC2wrawu0mRo+8JdJUgeYX3MsIvrI3/EdzWVr7wrPW0Irf
ohH8ryko0UiNGGFtMf0766JW/QJNI/ueESMBshTshWekxXGCv9CqFbpkJJvNFdRM
Xi/tc+4u84T9rQZ8lkC/hTU7OKmqBTHAYYbtNgpbk8ZxtJZkwncSTH2fkOlqGdjq
QRTVCwH8AM7NYAD4wKCo7OiyoxrtgLPSXDkciTls5u/3W1S9AEd8cyF0276Vs+0y
drF22IuduiC0HpRz+v2vIDUdN3eMrJ2fTEJOiC7WHMra9FhDSHpHk+Oc7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgxQCUNtDspvOAWp+hYhhWv18b4MB8GA1UdIwQY
MBaAFKHeRW1NQFxvQpLWNohnbOFQ5/B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUt
MGM5ZTBjZjdlOWZjLzEvQ0RGQUpRMjBPeW04NEJhbjZGaUdGYV9YeHZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUtMGM5ZTBjZjdlOWZj
LzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwwPgMA0G
CSqGSIb3DQEBCwUAA4IBAQC/eyX8IWI8dvEKbfntm2Jre/52oyoxD7PqoBmtx7fv
8FnK2kYnvLs5DEGyo1E5leRCCROAB8rvWdiIusRfSxvJd6NRs14WSb/Ttfau+3fY
TBlauXkG8oTZjn6ckO7E2rDaEZUgB/ZA1CbVw9Oxv0WAlv3rEEZcWhxp7gEHr3XT
THXBBwa8PT4JpVTKLawbbv/ajwEJo7jKG3NGAE742pOScCj+Nmj8exqXgzQA7f/p
D8rdZx1S1y2gwQY15z/fuQN7F6CmyU6RmJGsnmfNv4ZSGkDtAhS9Ftn/sGX3QuWM
GvzmsgWBx4H0s64vpxZSernxaaFQZ3u2cPjrpa/aDUAb
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:10 2025 by rpki-client