Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/4gSD7zr_j0mDF5MlVafVZwCsXn4.roa
File: 4gSD7zr_j0mDF5MlVafVZwCsXn4.roa (raw, json)
Hash identifier: RbfrzYXGxrBa8LGcH75zRRDembrwcggtDd3FlgeOBgU=
Subject key identifier: E2:04:83:EF:3A:FF:8F:49:83:17:93:25:55:A7:D5:67:00:AC:5E:7E
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 08828EF0
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/4gSD7zr_j0mDF5MlVafVZwCsXn4.roa
Signing time: Sat 01 Jan 2022 10:00:16 +0000
ROA not before: Sat 01 Jan 2022 10:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48136
IP address blocks: 95.131.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142774000 (0x8828ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 10:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e20483ef3aff8f498317932555a7d56700ac5e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:45:22:13:90:43:04:78:f7:31:5d:23:d5:
21:ed:9d:38:22:04:83:45:f9:6a:b7:6d:00:2d:f1:
a0:c3:33:38:5d:7b:f7:68:00:be:21:a2:36:4b:43:
0f:49:53:00:94:c9:cf:39:5e:31:b4:57:36:c7:97:
a0:e1:62:4d:b8:88:4c:bd:29:db:90:1e:f2:ab:48:
b4:3c:dd:d6:28:71:7f:6c:f0:49:e2:55:ba:71:da:
0d:aa:4f:54:79:dc:0a:d6:54:61:ca:c0:76:ef:f0:
54:b7:45:88:c2:c8:81:42:6d:1f:c6:90:1c:d9:ce:
20:e1:e3:8d:ff:03:76:e5:09:38:17:ff:c8:23:7b:
42:0c:2f:62:3c:49:1f:c9:1e:df:c8:f3:4b:15:46:
5d:bd:f1:d6:06:6b:cc:72:e9:67:19:ac:56:04:46:
74:90:8e:20:a2:d8:d0:97:a0:87:1d:4a:43:e7:66:
a3:35:6c:ed:52:12:ea:59:f3:3f:56:fb:4a:1b:05:
9d:6b:34:59:b7:ed:8d:4d:43:78:9d:24:0f:00:2e:
97:b5:65:32:d5:c6:0a:e2:a8:1d:7c:16:be:1c:30:
1f:b9:59:f4:04:5a:d4:44:bf:ec:d8:17:eb:c6:26:
78:ab:d5:9f:6a:d4:e6:83:a0:d8:67:78:47:5a:c3:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:04:83:EF:3A:FF:8F:49:83:17:93:25:55:A7:D5:67:00:AC:5E:7E
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/4gSD7zr_j0mDF5MlVafVZwCsXn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.32.0/24
Signature Algorithm: sha256WithRSAEncryption
92:13:f2:f7:06:8c:d5:73:ce:7f:78:fe:49:37:db:19:65:75:
5a:5c:e1:71:3a:3d:d2:2c:b5:98:7f:ca:e0:d3:68:12:aa:b6:
be:73:bb:11:e9:9a:a3:a4:4b:21:a9:39:bc:da:3e:20:eb:36:
22:ed:a8:d6:98:48:b4:d5:26:01:10:8a:8f:67:5a:52:98:fd:
c7:4a:7a:e3:f5:49:ef:c2:c5:cd:2a:35:74:e7:66:ee:6a:d3:
bf:fb:39:ee:77:0b:bf:53:bb:64:18:98:3f:e0:90:43:00:ce:
36:78:70:1a:29:29:8c:52:15:cc:31:a3:b5:cb:78:d1:b5:23:
88:06:db:e0:ac:32:2e:f9:b0:b4:2a:c9:bf:e9:ef:ac:77:01:
ed:4a:2c:ab:39:47:1a:93:84:a4:3b:24:48:4b:4f:cc:41:a6:
e1:31:7b:3e:16:22:04:a2:84:28:05:ea:03:b4:38:32:c7:c7:
9a:18:78:6f:44:ff:f5:26:c6:81:ef:67:04:c6:e8:45:71:a8:
27:c3:20:0d:d6:7c:d6:8b:89:e5:fc:52:9e:b2:a4:b3:35:d5:
58:d5:c7:51:6c:fb:1b:88:e6:90:ef:fd:02:2b:77:a0:da:92:
c6:59:d5:44:64:8c:cf:8b:a8:b2:1e:c6:f6:eb:9f:b0:2a:e8:
bc:b2:47:2f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECIKO8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OWE2Y2Q5ZjRiZWI3YjBjMDRkMzFmZmU1YzY3NGE4N2E3NzM5ZDIxMB4XDTIyMDEw
MTEwMDAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTIwNDgzZWYzYWZm
OGY0OTgzMTc5MzI1NTVhN2Q1NjcwMGFjNWU3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMRRRSITkEMEePcxXSPVIe2dOCIEg0X5ardtAC3xoMMzOF17
92gAviGiNktDD0lTAJTJzzleMbRXNseXoOFiTbiITL0p25Ae8qtItDzd1ihxf2zw
SeJVunHaDapPVHncCtZUYcrAdu/wVLdFiMLIgUJtH8aQHNnOIOHjjf8DduUJOBf/
yCN7QgwvYjxJH8ke38jzSxVGXb3x1gZrzHLpZxmsVgRGdJCOIKLY0Jeghx1KQ+dm
ozVs7VIS6lnzP1b7ShsFnWs0WbftjU1DeJ0kDwAul7VlMtXGCuKoHXwWvhwwH7lZ
9ARa1ES/7NgX68YmeKvVn2rU5oOg2Gd4R1rDsT8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTiBIPvOv+PSYMXkyVVp9VnAKxefjAfBgNVHSMEGDAWgBSJps2fS+t7DATT
H/5cZ0qHp3OdITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lhYk5uMHZyZXd3RTB4Xy1YR2RLaDZkem5TRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvOTlhNGNjLTQ3MjAtNGE2NC1hYTA2LTFmOTI0NDk1ZmNkZC8x
LzRnU0Q3enJfajBtREY1TWxWYWZWWndDc1huNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
OTlhNGNjLTQ3MjAtNGE2NC1hYTA2LTFmOTI0NDk1ZmNkZC8xL2lhYk5uMHZyZXd3
RTB4Xy1YR2RLaDZkem5TRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF+DIDANBgkqhkiG9w0BAQsFAAOC
AQEAkhPy9waM1XPOf3j+STfbGWV1WlzhcTo90iy1mH/K4NNoEqq2vnO7Eemao6RL
Iak5vNo+IOs2Iu2o1phItNUmARCKj2daUpj9x0p64/VJ78LFzSo1dOdm7mrTv/s5
7ncLv1O7ZBiYP+CQQwDONnhwGikpjFIVzDGjtct40bUjiAbb4KwyLvmwtCrJv+nv
rHcB7UosqzlHGpOEpDskSEtPzEGm4TF7PhYiBKKEKAXqA7Q4MsfHmhh4b0T/9SbG
ge9nBMboRXGoJ8MgDdZ81ouJ5fxSnrKkszXVWNXHUWz7G4jmkO/9Ait3oNqSxlnV
RGSMz4uosh7G9uufsCrovLJHLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:22 2024 by rpki-client on console-fra.rpki-client.org