Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/1-_wBhD4VxG0riqSSxwOORd1rXDg.roa
File: 1-_wBhD4VxG0riqSSxwOORd1rXDg.roa (raw, json)
Hash identifier: N0ld2BHDlyaM4h349aqJT+Wc5zNZsZIgapNPEbT3Ef8=
Subject key identifier: FB:FC:01:84:3E:15:C4:6D:2B:8A:A4:92:C7:03:8E:45:DD:6B:5C:38
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 01828BCB22B6D0EEB02843060F05AE4CE339
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/1-_wBhD4VxG0riqSSxwOORd1rXDg.roa
Signing time: Thu 11 Aug 2022 07:25:21 +0000
ROA not before: Thu 11 Aug 2022 07:25:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 195.234.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:cb:22:b6:d0:ee:b0:28:43:06:0f:05:ae:4c:e3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Aug 11 07:25:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbfc01843e15c46d2b8aa492c7038e45dd6b5c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:81:43:2a:21:47:72:fd:21:ca:a8:08:de:
f4:c7:a9:9d:03:1b:29:c5:ff:b7:1a:3e:60:b6:42:
8d:cb:e7:65:0e:86:02:4b:e9:25:54:7f:32:0c:aa:
a4:47:3e:df:3a:7a:e1:31:8f:3e:f3:67:e1:e9:a9:
d4:2b:c4:65:fe:fd:a6:32:5c:c2:ae:f5:e0:00:cf:
79:34:b5:9f:28:78:9c:71:de:a6:55:a0:c6:3c:5a:
76:aa:e7:e9:c2:d0:30:de:03:fd:43:f2:8a:5f:dd:
8a:97:cf:72:49:81:28:50:57:c7:e6:d4:36:fc:89:
d9:4e:00:61:c8:3b:56:47:be:cf:f2:02:34:2a:d5:
9a:c5:a3:f0:5f:f6:9b:b3:3c:5b:1e:a5:72:b8:bb:
10:f6:ad:43:ad:33:6f:af:00:0f:d3:4e:ea:ef:f7:
36:96:14:73:da:37:57:7a:00:6f:e4:18:63:12:20:
c3:9f:ca:41:82:35:24:16:9a:51:8e:5d:3b:75:23:
68:b7:4f:35:3a:f3:ff:6f:64:cf:fc:5c:56:76:b8:
ac:32:9a:2d:c4:4c:8d:e6:4f:05:11:5f:4a:45:8a:
4d:2d:a1:a3:52:44:9c:f8:77:e3:15:a4:f9:5f:31:
e6:8c:ea:4a:f5:73:13:3d:3e:62:0f:14:51:36:a7:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FC:01:84:3E:15:C4:6D:2B:8A:A4:92:C7:03:8E:45:DD:6B:5C:38
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/1-_wBhD4VxG0riqSSxwOORd1rXDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.145.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c5:b1:31:06:49:ee:9e:57:6d:d6:dc:6e:74:3e:ca:05:76:
ed:7d:da:1c:8e:ef:f9:aa:1d:31:e3:15:cf:2d:5b:13:53:56:
2f:2e:6a:5a:fc:dd:70:7b:6f:c6:9e:b5:21:d1:5d:f1:ef:bc:
6c:4d:0e:3a:8b:a2:88:91:7b:92:81:ab:21:20:1f:ab:51:27:
b2:1d:ca:a0:32:2d:b6:e0:ae:b6:0b:05:d7:2e:35:4a:d2:c4:
9d:39:59:85:6d:d7:6c:7e:9e:8f:0e:c7:53:ac:e2:cb:a7:d1:
bb:e6:00:6b:a2:af:82:4d:4d:09:9f:3d:bc:02:ac:ad:9e:02:
24:69:18:5d:6b:52:c4:7a:4f:0e:dc:ef:20:f1:3c:36:4c:2e:
6f:8f:db:51:89:34:47:d2:f4:a2:52:a8:47:38:b0:cf:70:87:
cd:90:f0:ef:d7:2b:65:62:1d:58:ee:e0:7c:c0:50:ab:2e:93:
36:21:b1:63:60:8e:23:ec:42:15:bf:e3:2a:fb:ab:8d:bf:0b:
47:22:58:ff:37:3b:17:fc:71:c4:d0:03:5a:d6:9a:70:c4:f1:
7c:21:7b:39:6d:e2:70:a8:b0:46:8a:e4:8c:29:9e:11:93:98:
ca:f5:90:dd:c3:5a:6a:f2:67:72:69:ce:40:df:5d:68:30:c3:
35:6d:c5:c5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYKLyyK20O6wKEMGDwWuTOM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5
YjA2MjkwHhcNMjIwODExMDcyNTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmZjMDE4NDNlMTVjNDZkMmI4YWE0OTJjNzAzOGU0NWRkNmI1YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8uBQyohR3L9IcqoCN70x6mdAxsp
xf+3Gj5gtkKNy+dlDoYCS+klVH8yDKqkRz7fOnrhMY8+82fh6anUK8Rl/v2mMlzC
rvXgAM95NLWfKHiccd6mVaDGPFp2qufpwtAw3gP9Q/KKX92Kl89ySYEoUFfH5tQ2
/InZTgBhyDtWR77P8gI0KtWaxaPwX/abszxbHqVyuLsQ9q1DrTNvrwAP007q7/c2
lhRz2jdXegBv5BhjEiDDn8pBgjUkFppRjl07dSNot081OvP/b2TP/FxWdrisMpot
xEyN5k8FEV9KRYpNLaGjUkSc+HfjFaT5XzHmjOpK9XMTPT5iDxRRNqegqQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPv8AYQ+FcRtK4qkkscDjkXda1w4MB8GA1UdIwQY
MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt
NjQ4ZjUwMWFmYWU1LzEvMS1fd0JoRDRWeEcwcmlxU1N4d09PUmQxclhEZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODQvMzEwZDM0LWY1ZDgtNGU5Ni05YjdjLTY0OGY1MDFhZmFl
NS8xL3pHVXlaSnBxNzBjVWhCdWNqMVJtRFlpYkJpay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMPqkTAN
BgkqhkiG9w0BAQsFAAOCAQEARcWxMQZJ7p5XbdbcbnQ+ygV27X3aHI7v+aodMeMV
zy1bE1NWLy5qWvzdcHtvxp61IdFd8e+8bE0OOouiiJF7koGrISAfq1Ensh3KoDIt
tuCutgsF1y41StLEnTlZhW3XbH6ejw7HU6ziy6fRu+YAa6Kvgk1NCZ89vAKsrZ4C
JGkYXWtSxHpPDtzvIPE8Nkwub4/bUYk0R9L0olKoRziwz3CHzZDw79crZWIdWO7g
fMBQqy6TNiGxY2COI+xCFb/jKvurjb8LRyJY/zc7F/xxxNADWtaacMTxfCF7OW3i
cKiwRorkjCmeEZOYyvWQ3cNaavJncmnOQN9daDDDNW3FxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:48 2023 by rpki-client on console-fra.rpki-client.org