Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/tVD4H9E6NKoCjO5hoZgq5gngp_Q.roa
File: tVD4H9E6NKoCjO5hoZgq5gngp_Q.roa (raw, json)
Hash identifier: JP6y7JALJ3g71eFd8TcC94dMlQoqA3+AOlV9sd1pBTo=
Subject key identifier: B5:50:F8:1F:D1:3A:34:AA:02:8C:EE:61:A1:98:2A:E6:09:E0:A7:F4
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0852E6
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/tVD4H9E6NKoCjO5hoZgq5gngp_Q.roa
Signing time: Thu 28 Apr 2022 11:32:57 +0000
ROA not before: Thu 28 Apr 2022 11:32:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209307
IP address blocks: 192.54.76.0/23 maxlen: 24
192.54.186.0/23 maxlen: 24
95.183.42.0/24 maxlen: 24
95.183.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545510 (0x852e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Apr 28 11:32:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b550f81fd13a34aa028cee61a1982ae609e0a7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:1f:c0:da:83:36:e7:b7:b6:ac:a1:a8:02:
74:8d:5e:bc:8b:3b:a7:63:6f:e6:b7:c3:d7:05:3a:
a1:45:f0:2e:d6:3f:42:05:7e:9d:48:25:a9:f4:32:
76:31:ea:e2:0a:e4:d5:ab:2d:13:52:d4:e0:1c:34:
0b:46:2b:b8:a3:0e:63:95:2c:2c:4c:ef:cc:1d:a3:
9a:98:f2:8f:0a:cd:24:b4:43:6a:ad:42:12:fb:49:
6a:64:03:33:c1:64:d1:85:09:16:16:9d:17:c5:f1:
e9:0a:50:ae:f2:59:99:80:a2:96:ba:33:e1:aa:c7:
ea:13:f8:99:31:a2:6f:e4:a5:86:76:3c:15:ce:79:
1a:c4:ef:ba:34:f1:cc:ea:b8:85:02:86:76:2a:17:
58:cc:49:5a:ec:84:0b:28:9e:5f:23:37:30:f3:c7:
7d:7f:fd:56:ab:37:cf:f6:12:2c:c1:a2:47:68:88:
5a:e2:2e:22:5a:68:15:54:21:71:5b:7d:92:ba:81:
6c:7a:1e:0a:87:69:8a:f9:78:bc:86:95:3a:96:89:
a3:fc:1d:3d:2b:7f:9e:16:a6:1a:e6:f1:de:78:27:
c2:1d:99:cf:a8:30:f1:3b:c4:61:e0:e5:71:3c:eb:
eb:03:94:fc:08:a8:c6:bb:dd:38:4c:e9:42:bb:6f:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:50:F8:1F:D1:3A:34:AA:02:8C:EE:61:A1:98:2A:E6:09:E0:A7:F4
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/tVD4H9E6NKoCjO5hoZgq5gngp_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.42.0/23
192.54.76.0/23
192.54.186.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:77:9e:25:9f:40:24:b0:2d:9c:9c:b9:1d:d0:58:06:11:53:
0b:07:de:b6:5f:32:8e:7e:c0:8a:09:0d:3b:41:1c:01:e1:22:
80:f3:9c:c8:b9:1d:2f:44:d6:0a:9b:72:db:8d:a4:58:47:01:
32:76:ba:30:1c:06:89:ab:cc:ee:4a:20:5d:b7:93:cb:f1:57:
ba:c9:bd:c1:54:b0:c1:9a:4b:57:4a:56:18:22:2b:b4:02:e7:
92:63:6a:93:dd:2e:81:0c:cc:15:9f:2f:40:ef:8c:28:37:54:
5b:96:55:44:10:9b:79:b4:34:b3:ae:e5:c7:61:b4:a4:3a:5b:
c9:21:11:9b:e2:af:fd:8e:37:f4:4d:c1:35:88:46:af:94:79:
c4:f6:f6:00:94:a5:25:05:f9:f2:ff:d6:de:18:f8:5e:5e:2c:
67:10:80:2c:d1:19:11:5e:c3:49:c8:11:cc:0a:0c:7d:b2:3b:
c5:3a:8e:c8:be:20:60:dc:8a:58:c2:5a:18:8c:99:e3:cf:49:
23:34:36:75:e5:4b:85:32:65:84:d7:5c:28:83:ac:0b:f2:af:
ff:14:76:11:be:36:c8:d7:06:73:d0:24:2b:99:19:e7:ba:e8:
33:5e:90:96:36:de:65:4c:21:3d:ac:80:5f:4a:4a:6f:50:83:
97:6b:a3:f8
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDCFLmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
YmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1NDg4OTQwHhcNMjIwNDI4
MTEzMjU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiNTUwZjgxZmQxM2Ez
NGFhMDI4Y2VlNjFhMTk4MmFlNjA5ZTBhN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr8ofwNqDNue3tqyhqAJ0jV68izunY2/mt8PXBTqhRfAu1j9C
BX6dSCWp9DJ2MeriCuTVqy0TUtTgHDQLRiu4ow5jlSwsTO/MHaOamPKPCs0ktENq
rUIS+0lqZAMzwWTRhQkWFp0XxfHpClCu8lmZgKKWujPhqsfqE/iZMaJv5KWGdjwV
znkaxO+6NPHM6riFAoZ2KhdYzEla7IQLKJ5fIzcw88d9f/1WqzfP9hIswaJHaIha
4i4iWmgVVCFxW32SuoFseh4Kh2mK+Xi8hpU6lomj/B09K3+eFqYa5vHeeCfCHZnP
qDDxO8Rh4OVxPOvrA5T8CKjGu904TOlCu2/nJQIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFLVQ+B/ROjSqAozuYaGYKuYJ4Kf0MB8GA1UdIwQYMBaAFG29UVdrSpNGCkZa
815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQzLzEv
dFZENEg5RTZOS29Dak81aG9aZ3E1Z25ncF9RLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84
ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQzLzEvYmIxUlYydEtrMFlL
UmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBX7cqAwQBwDZMAwQBwDa6MA0GCSqG
SIb3DQEBCwUAA4IBAQCPd54ln0AksC2cnLkd0FgGEVMLB962XzKOfsCKCQ07QRwB
4SKA85zIuR0vRNYKm3LbjaRYRwEydrowHAaJq8zuSiBdt5PL8Ve6yb3BVLDBmktX
SlYYIiu0AueSY2qT3S6BDMwVny9A74woN1RbllVEEJt5tDSzruXHYbSkOlvJIRGb
4q/9jjf0TcE1iEavlHnE9vYAlKUlBfny/9beGPheXixnEIAs0RkRXsNJyBHMCgx9
sjvFOo7IviBg3IpYwloYjJnjz0kjNDZ15UuFMmWE11wog6wL8q//FHYRvjbI1wZz
0CQrmRnnuugzXpCWNt5lTCE9rIBfSkpvUIOXa6P4
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-ams.rpki-client.org