Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/1-HpI41qu9F6WRUMy4IxDoP7DER4.roa
File: 1-HpI41qu9F6WRUMy4IxDoP7DER4.roa (raw, json)
Hash identifier: kizE2T3uFD5zgFdY0cWl3q135YE6CXR6+w2cDdmH1as=
Subject key identifier: F8:7A:48:E3:5A:AE:F4:5E:96:45:43:32:E0:8C:43:A0:FE:C3:11:1E
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 018394FD8E1A0F6CA0BDAFB0777F42E8CFFE
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/1-HpI41qu9F6WRUMy4IxDoP7DER4.roa
Signing time: Sat 01 Oct 2022 19:19:48 +0000
ROA not before: Sat 01 Oct 2022 19:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2860
IP address blocks: 195.246.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:94:fd:8e:1a:0f:6c:a0:bd:af:b0:77:7f:42:e8:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Oct 1 19:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f87a48e35aaef45e96454332e08c43a0fec3111e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:25:ff:75:04:e4:a3:6c:a2:c6:7d:b2:fa:
d8:dd:cd:9c:28:51:b0:5b:00:54:1f:c6:ed:bb:8c:
c4:e0:be:3d:76:d2:83:cc:86:4f:45:78:22:17:9f:
d6:a0:95:27:02:07:14:3e:29:17:39:34:2e:3c:9a:
73:04:f0:34:93:18:bd:df:ec:f8:4d:cb:f4:dd:3c:
89:24:f0:7f:26:9e:c4:61:5e:5b:07:56:75:71:4c:
99:65:d4:aa:c5:fa:af:a8:a5:be:4d:0b:bb:08:1f:
cb:4a:fc:88:60:e2:e0:b4:af:ab:ff:72:42:89:a9:
ea:ef:0c:a2:d8:35:06:8c:24:29:bc:9b:9b:31:eb:
26:7f:f2:7a:18:e0:f8:98:96:92:5e:81:fa:af:c8:
33:35:d5:4b:a2:c1:27:64:05:9e:b3:41:51:ed:61:
92:56:fd:16:08:38:39:fe:b2:17:4f:1d:22:4d:77:
3c:9d:74:ba:cb:9b:64:b7:8f:6d:20:2b:40:d7:96:
58:a4:ea:67:44:14:48:16:7b:1f:e6:d5:30:07:e5:
37:11:81:b0:13:c3:01:35:da:0d:1a:78:64:d9:7f:
b7:47:3e:30:98:53:2e:7a:6a:75:8a:df:45:53:5b:
86:83:55:39:6d:91:40:d9:ec:60:59:5c:56:11:4c:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:48:E3:5A:AE:F4:5E:96:45:43:32:E0:8C:43:A0:FE:C3:11:1E
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/1-HpI41qu9F6WRUMy4IxDoP7DER4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.238.0/23
Signature Algorithm: sha256WithRSAEncryption
88:60:07:67:26:6d:33:a9:96:da:50:d8:6d:83:e9:44:fc:c3:
f9:3d:54:a8:37:a1:b4:be:a4:c4:fd:d5:21:72:06:bf:6a:37:
b9:f4:09:75:f6:3b:27:f3:5f:39:4a:ed:76:fb:42:7b:eb:d6:
99:9e:16:76:b0:99:cb:eb:ff:71:f0:d8:a4:e7:29:e1:ef:9d:
b1:b8:a8:ab:87:1d:a6:f4:68:80:0a:32:ac:64:0e:db:40:b9:
55:73:7a:bd:1d:75:c9:0f:2a:ca:12:be:70:95:69:e5:d4:88:
e1:4e:91:0b:34:f7:b1:54:79:f7:f5:d8:95:55:a3:e3:b2:c3:
43:11:0f:7c:dc:d5:99:c8:aa:0f:71:ac:fc:f3:61:13:54:8b:
f3:51:e0:a9:19:f7:dd:4c:ce:73:13:af:db:4e:26:e2:90:d3:
e4:71:12:31:40:9f:83:8b:79:82:7c:88:e2:ea:67:96:39:aa:
61:b5:7c:3c:c2:93:8b:c1:75:3a:6e:9a:c5:f3:d0:73:08:85:
60:c5:8c:a9:9d:e3:0c:5f:4e:64:06:e6:49:9d:13:20:d6:1e:
d5:1b:43:2a:66:39:52:84:d2:ed:44:0b:15:6d:d9:cd:04:6e:
b6:ea:e5:7e:fb:67:76:63:6c:df:d1:28:63:29:0a:83:5d:6d:
a0:86:f9:e9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYOU/Y4aD2ygva+wd39C6M/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy
MDQyYjIwHhcNMjIxMDAxMTkxOTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODdhNDhlMzVhYWVmNDVlOTY0NTQzMzJlMDhjNDNhMGZlYzMxMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsesl/3UE5KNsosZ9svrY3c2cKFGw
WwBUH8btu4zE4L49dtKDzIZPRXgiF5/WoJUnAgcUPikXOTQuPJpzBPA0kxi93+z4
Tcv03TyJJPB/Jp7EYV5bB1Z1cUyZZdSqxfqvqKW+TQu7CB/LSvyIYOLgtK+r/3JC
ianq7wyi2DUGjCQpvJubMesmf/J6GOD4mJaSXoH6r8gzNdVLosEnZAWes0FR7WGS
Vv0WCDg5/rIXTx0iTXc8nXS6y5tkt49tICtA15ZYpOpnRBRIFnsf5tUwB+U3EYGw
E8MBNdoNGnhk2X+3Rz4wmFMuemp1it9FU1uGg1U5bZFA2exgWVxWEUw9wwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPh6SONarvRelkVDMuCMQ6D+wxEeMB8GA1UdIwQY
MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt
OGE1ZjE2OWE1YWU3LzEvMS1IcEk0MXF1OUY2V1JVTXk0SXhEb1A3REVSNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGYvY2NmM2E1LTAzMGQtNGI1NC04MDc5LThhNWYxNjlhNWFl
Ny8xL1R6Vnp6WDFXSE5OLUR6TWZiS09ONlNBZ1FySS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcP27jAN
BgkqhkiG9w0BAQsFAAOCAQEAiGAHZyZtM6mW2lDYbYPpRPzD+T1UqDehtL6kxP3V
IXIGv2o3ufQJdfY7J/NfOUrtdvtCe+vWmZ4WdrCZy+v/cfDYpOcp4e+dsbioq4cd
pvRogAoyrGQO20C5VXN6vR11yQ8qyhK+cJVp5dSI4U6RCzT3sVR59/XYlVWj47LD
QxEPfNzVmciqD3Gs/PNhE1SL81HgqRn33UzOcxOv204m4pDT5HESMUCfg4t5gnyI
4upnljmqYbV8PMKTi8F1Om6axfPQcwiFYMWMqZ3jDF9OZAbmSZ0TINYe1RtDKmY5
UoTS7UQLFW3ZzQRuturlfvtndmNs39EoYykKg11toIb56Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:33 2024 by rpki-client on console-ams.rpki-client.org