Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/oaTaN8_ydfaxn2Cya0ZOUWa4Ka0.roa
File: oaTaN8_ydfaxn2Cya0ZOUWa4Ka0.roa (raw, json)
Hash identifier: wsZQJcQyJRsJg0FuVWCobA4zGPkkisGRF+dJcnvN8w0=
Subject key identifier: A1:A4:DA:37:CF:F2:75:F6:B1:9F:60:B2:6B:46:4E:51:66:B8:29:AD
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 18CBEE1E
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/oaTaN8_ydfaxn2Cya0ZOUWa4Ka0.roa
Signing time: Fri 21 Jan 2022 09:28:34 +0000
ROA not before: Fri 21 Jan 2022 09:28:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209049
IP address blocks: 195.110.176.0/21 maxlen: 24
195.110.183.0/24 maxlen: 24
195.110.180.0/22 maxlen: 24
195.110.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416017950 (0x18cbee1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 21 09:28:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1a4da37cff275f6b19f60b26b464e5166b829ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:b7:5e:93:48:21:42:84:54:c2:ef:ab:86:
86:dd:c7:50:1f:2b:2d:d2:a3:05:0e:10:85:ef:50:
f8:5c:05:40:96:b2:f1:1b:4b:89:3b:6d:64:d1:94:
97:6d:9b:e3:fc:7d:e1:5e:50:b4:ce:5b:49:e8:42:
92:be:24:ce:1e:22:d6:17:c3:84:7f:b1:70:c0:18:
7b:84:dd:5b:76:33:f9:8b:a8:5f:91:ff:22:92:fc:
89:09:1e:7a:ee:8b:f8:02:c6:3b:c1:87:42:06:84:
04:3b:49:dd:d7:fa:7f:64:a6:dc:b3:60:6b:c5:5e:
8e:d1:cf:fd:89:e1:9c:d9:5c:0c:b0:1e:8a:b9:20:
f0:9d:85:73:a9:15:16:41:e0:f5:97:87:8a:35:52:
20:9f:d5:dd:f3:3c:3f:4d:fd:df:13:54:52:ba:0c:
7c:45:8c:85:65:d7:77:ea:1b:81:7e:29:ed:6c:72:
54:77:b3:89:80:85:5d:72:42:d4:6c:5d:21:d1:65:
b0:35:ea:3d:b1:31:c7:c6:e0:b7:aa:1c:8e:1d:f9:
f2:ca:86:a3:2e:d9:14:6c:ba:51:f3:02:2f:b9:bc:
82:52:21:0e:c4:c6:2c:45:ca:d7:f2:7f:d1:5c:f1:
8d:55:60:34:e2:d2:15:d6:17:c6:fe:7d:c1:05:8a:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:DA:37:CF:F2:75:F6:B1:9F:60:B2:6B:46:4E:51:66:B8:29:AD
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/oaTaN8_ydfaxn2Cya0ZOUWa4Ka0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:1f:72:cc:98:fd:33:b3:79:be:4b:6b:40:d4:ed:2c:2b:c1:
48:a1:8d:61:dd:31:f7:11:c6:d8:9c:a7:bd:a3:3f:f6:a4:b6:
16:43:9c:63:0a:de:03:47:ab:16:6f:05:3d:21:bc:bf:52:34:
da:c8:d6:8b:ff:dd:8c:f5:74:04:f9:32:fa:b9:e1:d1:44:bf:
83:36:33:bc:38:05:f4:00:1e:51:f5:83:a7:b1:4c:f0:a3:de:
f0:4b:ab:7e:a9:5d:57:94:90:0e:40:e5:5d:93:cb:4e:c8:11:
c9:6a:6b:fc:cd:af:f9:eb:57:70:32:cc:2b:76:07:8c:9d:f5:
21:54:59:4a:2f:34:9f:4a:8c:c3:60:f8:31:dc:54:1e:b2:7a:
9e:3d:83:74:e1:5a:18:4b:fe:e2:40:51:4e:82:7e:66:b7:89:
ae:00:ec:92:ee:0f:a8:a0:b3:45:ce:ed:e2:75:4d:ce:11:7c:
06:d2:07:ff:15:f8:ef:a5:a2:59:8a:46:cd:a8:52:f4:d2:e9:
d6:ff:90:f2:b8:f4:b3:6b:07:77:05:cf:2f:08:8c:2d:07:4b:
18:53:49:4b:22:5f:e0:8c:a5:a1:42:42:e4:d8:09:c4:61:ef:
81:0f:96:db:39:66:d8:ec:fc:6a:12:9e:e2:59:67:02:95:a0:
e2:4f:6d:ac
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGMvuHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZTZkOGZkNzdkYWRlM2QzZjk2Y2I0OTkzMTk0OGMyNzI5YWRhMGRlMB4XDTIyMDEy
MTA5MjgzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTFhNGRhMzdjZmYy
NzVmNmIxOWY2MGIyNmI0NjRlNTE2NmI4MjlhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJBNt16TSCFChFTC76uGht3HUB8rLdKjBQ4Qhe9Q+FwFQJay
8RtLiTttZNGUl22b4/x94V5QtM5bSehCkr4kzh4i1hfDhH+xcMAYe4TdW3Yz+Yuo
X5H/IpL8iQkeeu6L+ALGO8GHQgaEBDtJ3df6f2Sm3LNga8VejtHP/YnhnNlcDLAe
irkg8J2Fc6kVFkHg9ZeHijVSIJ/V3fM8P0393xNUUroMfEWMhWXXd+obgX4p7Wxy
VHeziYCFXXJC1GxdIdFlsDXqPbExx8bgt6ocjh358sqGoy7ZFGy6UfMCL7m8glIh
DsTGLEXK1/J/0VzxjVVgNOLSFdYXxv59wQWKH7cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBShpNo3z/J19rGfYLJrRk5RZrgprTAfBgNVHSMEGDAWgBQObY/Xfa3j0/ls
tJkxlIwnKa2g3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RtMlAxMzJ0NDlQNWJMU1pNWlNNSnltdG9ONC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvNjk3N2NkLTQzNDMtNGI0Yy04Y2VhLWJkMzVjMDQ4YjkzMC8x
L29hVGFOOF95ZGZheG4yQ3lhMFpPVVdhNEthMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
Njk3N2NkLTQzNDMtNGI0Yy04Y2VhLWJkMzVjMDQ4YjkzMC8xL0RtMlAxMzJ0NDlQ
NWJMU1pNWlNNSnltdG9ONC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8NusDANBgkqhkiG9w0BAQsFAAOC
AQEATR9yzJj9M7N5vktrQNTtLCvBSKGNYd0x9xHG2JynvaM/9qS2FkOcYwreA0er
Fm8FPSG8v1I02sjWi//djPV0BPky+rnh0US/gzYzvDgF9AAeUfWDp7FM8KPe8Eur
fqldV5SQDkDlXZPLTsgRyWpr/M2v+etXcDLMK3YHjJ31IVRZSi80n0qMw2D4MdxU
HrJ6nj2DdOFaGEv+4kBRToJ+ZreJrgDsku4PqKCzRc7t4nVNzhF8BtIH/xX476Wi
WYpGzahS9NLp1v+Q8rj0s2sHdwXPLwiMLQdLGFNJSyJf4IyloUJC5NgJxGHvgQ+W
2zlm2Oz8ahKe4llnApWg4k9trA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:11 2023 by rpki-client on console-fra.rpki-client.org