Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/PFVyImEwc8e2ShTIvLwTLNSlt1c.roa
File: PFVyImEwc8e2ShTIvLwTLNSlt1c.roa (raw, json)
Hash identifier: SDcoprw8iWtikckeXCmPiPrrgmC2ZCYpsCFijlNr9t0=
Subject key identifier: 3C:55:72:22:61:30:73:C7:B6:4A:14:C8:BC:BC:13:2C:D4:A5:B7:57
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0C49DB33
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/PFVyImEwc8e2ShTIvLwTLNSlt1c.roa
Signing time: Sat 05 Feb 2022 11:48:54 +0000
ROA not before: Sat 05 Feb 2022 11:48:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16278
IP address blocks: 195.95.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206166835 (0xc49db33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Feb 5 11:48:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c557222613073c7b64a14c8bcbc132cd4a5b757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:ae:44:c4:65:1f:3e:7a:55:ea:a7:06:25:
34:b8:27:5f:91:35:ed:3b:e0:e9:7b:dd:2a:96:92:
41:c3:d2:b3:73:4c:5a:fb:7a:50:79:62:7c:99:cf:
e7:81:e5:bf:d4:56:ae:c4:7d:0f:34:b4:b8:b8:7b:
a9:72:cb:25:e0:ce:a2:a4:a9:6f:b6:ed:52:43:18:
63:83:7e:d9:fa:66:a2:96:93:b5:ba:ef:43:f1:06:
2c:97:21:12:8d:62:33:71:a0:2c:33:6f:10:fe:a4:
e8:48:76:5d:63:bd:8a:5f:5d:72:d2:21:cc:15:45:
68:80:0d:38:56:6b:26:12:01:a9:3f:d3:54:90:e2:
2b:3c:d2:12:52:ff:d9:f3:38:27:ff:73:67:38:56:
e7:a1:74:32:88:55:cd:82:0a:38:2e:46:5b:4a:a5:
88:25:97:a2:fa:82:f2:57:7c:6b:f7:34:76:5c:df:
37:5e:68:d5:53:a6:8f:d3:43:f2:d0:65:ef:7a:19:
3d:41:7f:e5:41:13:19:40:c6:fa:06:44:d5:a0:80:
de:ec:e5:68:8a:1e:c1:06:ff:35:b3:e9:da:7e:00:
f2:ce:d8:e5:ea:e2:1a:7a:b9:3e:14:42:67:9e:72:
54:5e:25:40:a7:c3:ae:ae:df:34:ef:f4:64:c5:80:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:72:22:61:30:73:C7:B6:4A:14:C8:BC:BC:13:2C:D4:A5:B7:57
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/PFVyImEwc8e2ShTIvLwTLNSlt1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.177.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b7:51:2f:d2:86:2b:a1:44:49:fa:0f:59:ca:3b:0e:7a:ae:
c1:50:a2:2d:bb:2f:38:d4:4d:53:29:1e:bf:4f:8f:0a:b0:1b:
16:09:0e:48:c5:93:eb:dc:ef:fe:38:b4:56:b0:f8:8c:d7:2f:
33:48:dd:94:ac:23:1e:46:a4:dc:36:a8:ea:d7:47:8e:1c:45:
b9:33:04:8d:dc:60:6e:df:f4:41:62:7c:53:6d:14:25:35:20:
e8:8f:0a:2d:b5:e3:49:27:00:df:78:7c:25:d9:67:c5:e4:8c:
98:ce:9e:42:8f:0b:f9:16:4e:ff:a2:eb:78:ad:d8:82:ff:42:
de:1e:09:7c:ac:2c:63:85:10:30:d7:a3:d0:c5:c4:b6:cc:83:
03:c3:52:55:5b:48:c4:95:f6:42:04:0b:e0:1a:54:ef:96:d9:
66:0b:c9:ea:1e:e7:b3:4b:2f:6c:ec:56:82:aa:82:06:05:57:
d5:9a:cf:a4:08:12:a6:ea:d3:d0:14:40:1c:d1:fe:b5:fa:45:
53:b2:d3:37:09:50:f4:d1:de:dc:57:b3:3b:d7:e4:ef:65:88:
85:23:d8:21:70:01:65:f3:af:4a:45:57:42:71:d4:e8:05:0b:
7b:42:6f:cd:95:8d:ff:67:78:a4:04:c0:78:b8:97:ad:69:63:
b7:96:7e:ec
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDEnbMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Y2JkNTc0NmUzMDAwOTFkZWQxYTExYTEzYjE2ODA3YjRmZDBmMWZjMB4XDTIyMDIw
NTExNDg1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2M1NTcyMjI2MTMw
NzNjN2I2NGExNGM4YmNiYzEzMmNkNGE1Yjc1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfirkTEZR8+elXqpwYlNLgnX5E17Tvg6XvdKpaSQcPSs3NM
Wvt6UHlifJnP54Hlv9RWrsR9DzS0uLh7qXLLJeDOoqSpb7btUkMYY4N+2fpmopaT
tbrvQ/EGLJchEo1iM3GgLDNvEP6k6Eh2XWO9il9dctIhzBVFaIANOFZrJhIBqT/T
VJDiKzzSElL/2fM4J/9zZzhW56F0MohVzYIKOC5GW0qliCWXovqC8ld8a/c0dlzf
N15o1VOmj9ND8tBl73oZPUF/5UETGUDG+gZE1aCA3uzlaIoewQb/NbPp2n4A8s7Y
5eriGnq5PhRCZ55yVF4lQKfDrq7fNO/0ZMWAq/MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ8VXIiYTBzx7ZKFMi8vBMs1KW3VzAfBgNVHSMEGDAWgBQcvVdG4wAJHe0a
EaE7FoB7T9Dx/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hMMVhSdU1BQ1IzdEdoR2hPeGFBZTBfUThmdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvZTMwODZjLWQ3MmYtNDFlYS05NDQ0LWJkZWE2M2U1YTdjNC8x
L1BGVnlJbUV3YzhlMlNoVEl2THdUTE5TbHQxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
ZTMwODZjLWQ3MmYtNDFlYS05NDQ0LWJkZWE2M2U1YTdjNC8xL0hMMVhSdU1BQ1Iz
dEdoR2hPeGFBZTBfUThmdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNfsTANBgkqhkiG9w0BAQsFAAOC
AQEAALdRL9KGK6FESfoPWco7DnquwVCiLbsvONRNUykev0+PCrAbFgkOSMWT69zv
/ji0VrD4jNcvM0jdlKwjHkak3Dao6tdHjhxFuTMEjdxgbt/0QWJ8U20UJTUg6I8K
LbXjSScA33h8JdlnxeSMmM6eQo8L+RZO/6LreK3Ygv9C3h4JfKwsY4UQMNej0MXE
tsyDA8NSVVtIxJX2QgQL4BpU75bZZgvJ6h7ns0svbOxWgqqCBgVX1ZrPpAgSpurT
0BRAHNH+tfpFU7LTNwlQ9NHe3FezO9fk72WIhSPYIXABZfOvSkVXQnHU6AULe0Jv
zZWN/2d4pATAeLiXrWljt5Z+7A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org