Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/p7sEbIBuM8CJNhJhwYUwEYCshAc.roa
File: p7sEbIBuM8CJNhJhwYUwEYCshAc.roa (raw, json)
Hash identifier: TelwYXIypS6Iysuoc8BkWB6vcJTDuFvWqL1gl0nnjKg=
Subject key identifier: A7:BB:04:6C:80:6E:33:C0:89:36:12:61:C1:85:30:11:80:AC:84:07
Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial: 0557F87E
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/p7sEbIBuM8CJNhJhwYUwEYCshAc.roa
Signing time: Sat 01 Jan 2022 06:55:31 +0000
ROA not before: Sat 01 Jan 2022 06:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48943
IP address blocks: 195.10.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89651326 (0x557f87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Validity
Not Before: Jan 1 06:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7bb046c806e33c089361261c185301180ac8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:d0:a7:b0:fc:ac:e6:58:9e:5c:cd:a5:86:
28:33:0e:d0:f9:b9:55:f6:77:bd:b0:ad:fe:27:e5:
79:68:12:b4:2b:8b:56:da:1b:ec:25:a9:bf:22:16:
d9:41:56:5c:c6:9c:cc:41:d9:1d:79:71:34:86:1f:
ae:af:da:72:3f:84:4c:1d:db:10:a1:4c:28:b7:ff:
53:f7:7f:41:07:c9:74:c8:9a:40:95:8f:18:24:8c:
0e:bd:69:26:9f:e7:e0:3b:0d:7f:14:c3:8e:73:99:
56:40:1c:db:84:f8:99:d4:a4:e3:21:64:70:53:c9:
16:65:07:e1:17:0f:57:ee:53:1f:e8:69:39:6a:37:
69:78:f8:1c:c3:a3:c6:5e:02:5c:4c:76:0c:04:70:
5e:55:4a:10:5c:b6:15:62:20:4c:b8:28:2a:5a:31:
c1:f3:4f:80:2a:62:eb:bb:2a:8c:94:04:e8:b1:d2:
cc:79:3d:2f:04:2e:8a:a4:f1:29:e0:23:fd:7e:9b:
cc:55:1f:5f:64:af:3b:54:15:d9:bf:77:cf:43:22:
9e:54:d7:a1:ac:39:1e:53:74:b6:cb:5f:e9:22:39:
ae:24:8b:5c:ea:1f:24:d4:e1:d6:d4:6e:6f:3a:5f:
f1:2a:4c:e2:e5:c7:b2:83:9e:75:dd:3c:f6:75:0a:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:04:6C:80:6E:33:C0:89:36:12:61:C1:85:30:11:80:AC:84:07
X509v3 Authority Key Identifier:
keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/p7sEbIBuM8CJNhJhwYUwEYCshAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5b:7c:b2:05:e6:fb:b4:2f:7a:bb:6b:b1:70:99:4a:49:4a:
0b:50:f8:55:45:ae:19:0f:f5:5d:b7:9b:1f:29:21:88:0b:79:
43:17:4c:4b:b0:bd:76:3d:40:47:6d:3f:2b:46:8e:28:80:57:
39:b8:e3:3b:66:99:2f:ba:f5:79:17:89:87:74:58:34:78:c6:
38:4d:ed:6f:d2:40:72:39:a6:5c:e2:7b:17:99:4a:4a:7b:f9:
3d:5d:e3:21:66:c4:3e:48:dc:83:47:eb:c6:74:21:da:93:92:
7c:9f:fe:66:a0:05:06:8a:cb:4d:4a:90:6d:b9:2f:79:03:ad:
3c:ec:f3:99:b8:36:bb:b9:2f:7b:7c:7c:53:57:6a:cf:83:73:
d0:34:db:af:a6:2f:74:b1:0c:fd:03:3f:e4:19:8f:e6:13:d3:
28:6c:d0:8b:90:86:18:42:a3:30:cd:24:01:6b:48:91:17:2b:
91:86:8f:af:a0:ec:29:5e:27:86:0f:6f:f7:3b:87:ad:1a:20:
0d:80:b8:6c:0a:49:a5:e4:cd:4a:a4:a9:81:9c:b1:76:b4:ae:
63:13:20:6e:51:eb:9c:43:6c:d6:fd:42:29:0f:d9:e2:42:f6:
5a:81:2e:f2:45:e8:cd:d8:c5:ec:81:02:ce:5d:c1:ad:73:a2:
73:d8:06:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBVf4fjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Y2JkNmNkOTFhZDZhNzI4NmIyMWY2NTA5ZmRkOWY1MGZlZTc1ZDg3MB4XDTIyMDEw
MTA2NTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTdiYjA0NmM4MDZl
MzNjMDg5MzYxMjYxYzE4NTMwMTE4MGFjODQwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAME50Kew/KzmWJ5czaWGKDMO0Pm5VfZ3vbCt/ifleWgStCuL
Vtob7CWpvyIW2UFWXMaczEHZHXlxNIYfrq/acj+ETB3bEKFMKLf/U/d/QQfJdMia
QJWPGCSMDr1pJp/n4DsNfxTDjnOZVkAc24T4mdSk4yFkcFPJFmUH4RcPV+5TH+hp
OWo3aXj4HMOjxl4CXEx2DARwXlVKEFy2FWIgTLgoKloxwfNPgCpi67sqjJQE6LHS
zHk9LwQuiqTxKeAj/X6bzFUfX2SvO1QV2b93z0MinlTXoaw5HlN0tstf6SI5riSL
XOofJNTh1tRubzpf8SpM4uXHsoOedd089nUKAOUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSnuwRsgG4zwIk2EmHBhTARgKyEBzAfBgNVHSMEGDAWgBRcvWzZGtanKGsh
9lCf3Z9Q/uddhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hMMXMyUnJXcHlocklmWlFuOTJmVVA3blhZYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvZTAyMjNhLTMxZmQtNGNhYy04MTY0LWZiYTA3NGJhMWI5MC8x
L3A3c0ViSUJ1TThDSk5oSmh3WVV3RVlDc2hBYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
ZTAyMjNhLTMxZmQtNGNhYy04MTY0LWZiYTA3NGJhMWI5MC8xL1hMMXMyUnJXcHlo
cklmWlFuOTJmVVA3blhZYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMKzjANBgkqhkiG9w0BAQsFAAOC
AQEADVt8sgXm+7QvertrsXCZSklKC1D4VUWuGQ/1XbebHykhiAt5QxdMS7C9dj1A
R20/K0aOKIBXObjjO2aZL7r1eReJh3RYNHjGOE3tb9JAcjmmXOJ7F5lKSnv5PV3j
IWbEPkjcg0frxnQh2pOSfJ/+ZqAFBorLTUqQbbkveQOtPOzzmbg2u7kve3x8U1dq
z4Nz0DTbr6YvdLEM/QM/5BmP5hPTKGzQi5CGGEKjMM0kAWtIkRcrkYaPr6DsKV4n
hg9v9zuHrRogDYC4bApJpeTNSqSpgZyxdrSuYxMgblHrnENs1v1CKQ/Z4kL2WoEu
8kXozdjF7IECzl3BrXOic9gGAw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:09 2023 by rpki-client on console-fra.rpki-client.org