Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/Pswu6nVqvkP3yGczC_2kPD5VDbU.roa
File: Pswu6nVqvkP3yGczC_2kPD5VDbU.roa (raw, json)
Hash identifier: jaqv2k7lezewbIQ9toRFcbmwn8454mk0sqkNtEUVSyQ=
Subject key identifier: 3E:CC:2E:EA:75:6A:BE:43:F7:C8:67:33:0B:FD:A4:3C:3E:55:0D:B5
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 02C8DA
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/Pswu6nVqvkP3yGczC_2kPD5VDbU.roa
Signing time: Thu 27 Jan 2022 14:28:55 +0000
ROA not before: Thu 27 Jan 2022 14:28:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210653
IP address blocks: 194.8.86.0/23 maxlen: 24
194.9.0.0/23 maxlen: 24
2a0f:ee80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182490 (0x2c8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Jan 27 14:28:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ecc2eea756abe43f7c867330bfda43c3e550db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:b4:cc:6b:fb:09:78:ab:33:4b:3c:6b:ea:
c5:c7:42:df:c8:3c:1e:60:fc:44:ab:e6:58:c8:20:
58:02:1b:ae:d4:da:76:90:30:4a:bf:50:ce:d4:3b:
82:e4:5a:a9:7d:06:77:42:75:0f:72:1c:49:2b:01:
a0:57:69:8f:cd:89:f4:51:ba:9e:e1:2c:a2:2a:41:
69:79:ad:f9:c4:6f:21:f3:30:5d:3e:67:60:a2:36:
95:21:10:46:60:69:ae:2a:09:4c:89:c2:1c:4b:70:
db:71:ba:59:a5:3e:8b:13:e6:65:04:b9:2c:79:b4:
b1:a3:9c:c0:d6:ab:6e:55:e8:3e:72:25:54:a6:a3:
3b:8f:cd:ee:c5:c3:b1:65:12:41:56:86:82:3e:af:
3c:dc:55:53:09:0d:28:30:51:17:f8:af:9f:48:5d:
d5:43:4f:f2:be:e9:46:a2:a9:ff:96:52:67:07:21:
b3:c7:84:97:31:c2:50:d2:17:2e:84:e2:fe:f8:a5:
e5:28:f8:ab:73:5a:65:68:5d:42:68:79:d9:3b:d1:
3d:12:b8:37:42:d0:22:29:b2:34:ee:16:94:72:fe:
76:bd:8d:2e:f6:b7:57:1e:fc:86:e9:a1:56:63:20:
94:30:6b:70:0b:8a:dd:28:bb:5f:4b:65:8b:96:3d:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CC:2E:EA:75:6A:BE:43:F7:C8:67:33:0B:FD:A4:3C:3E:55:0D:B5
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/Pswu6nVqvkP3yGczC_2kPD5VDbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.86.0/23
194.9.0.0/23
IPv6:
2a0f:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
48:4a:93:9f:08:47:5e:bf:aa:b0:b8:63:e1:40:3d:35:bd:65:
39:0b:e4:d9:36:c4:cd:d8:23:78:6a:4f:1d:f1:d0:68:ae:57:
cb:b1:24:7c:02:98:99:f2:0d:4c:99:e0:bd:a2:8d:7e:13:44:
c9:6b:b9:1d:c1:2c:8b:73:2e:3f:20:1a:28:e2:1c:b4:a2:72:
ea:2c:15:24:26:c4:14:8f:30:10:a2:ad:d0:21:09:ff:b7:f6:
18:a9:8b:8d:b0:e2:50:56:14:e0:72:f8:25:e3:b7:75:9f:a6:
8f:a5:97:58:37:11:61:34:e6:9c:3d:b1:ae:2b:f8:16:94:48:
96:e5:82:0a:da:42:4b:88:63:fb:29:13:fc:98:3b:e2:a2:e5:
61:b4:b0:08:71:28:62:49:f0:e2:ec:e6:a5:e6:96:79:e4:08:
bb:cb:c2:c4:a3:b5:69:3e:92:1d:74:f4:db:c9:69:68:24:49:
48:31:80:74:96:97:9e:8f:fe:85:a0:83:40:89:f9:ac:54:2f:
77:6c:46:48:5e:78:a4:92:3e:46:e8:67:2c:ae:39:17:27:fc:
95:f9:9c:cc:f6:d2:49:fa:04:73:17:b7:04:83:38:43:89:c0:
b7:d0:32:df:3f:9c:c1:03:d6:92:6e:30:9d:2c:f3:4a:43:55:
e9:3b:98:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIDAsjaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4NzJkMzUwHhcNMjIwMTI3
MTQyODU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzZWNjMmVlYTc1NmFi
ZTQzZjdjODY3MzMwYmZkYTQzYzNlNTUwZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArRG0zGv7CXirM0s8a+rFx0LfyDweYPxEq+ZYyCBYAhuu1Np2
kDBKv1DO1DuC5FqpfQZ3QnUPchxJKwGgV2mPzYn0Ubqe4SyiKkFpea35xG8h8zBd
PmdgojaVIRBGYGmuKglMicIcS3DbcbpZpT6LE+ZlBLksebSxo5zA1qtuVeg+ciVU
pqM7j83uxcOxZRJBVoaCPq883FVTCQ0oMFEX+K+fSF3VQ0/yvulGoqn/llJnByGz
x4SXMcJQ0hcuhOL++KXlKPirc1plaF1CaHnZO9E9Erg3QtAiKbI07haUcv52vY0u
9rdXHvyG6aFWYyCUMGtwC4rdKLtfS2WLlj1/xwIDAQABo4ICHjCCAhowHQYDVR0O
BBYEFD7MLup1ar5D98hnMwv9pDw+VQ21MB8GA1UdIwQYMBaAFGlyapYTNvvnggs9
dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBkLzEv
UHN3dTZuVnF2a1AzeUdjekNfMmtQRDVWRGJVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8y
NWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBkLzEvYVhKcWxoTTItLWVD
Q3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQG
CCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwghWAwQBwgkAMA0EAgACMAcDBQMq
D+6AMA0GCSqGSIb3DQEBCwUAA4IBAQBISpOfCEdev6qwuGPhQD01vWU5C+TZNsTN
2CN4ak8d8dBorlfLsSR8ApiZ8g1MmeC9oo1+E0TJa7kdwSyLcy4/IBoo4hy0onLq
LBUkJsQUjzAQoq3QIQn/t/YYqYuNsOJQVhTgcvgl47d1n6aPpZdYNxFhNOacPbGu
K/gWlEiW5YIK2kJLiGP7KRP8mDviouVhtLAIcShiSfDi7Oal5pZ55Ai7y8LEo7Vp
PpIddPTbyWloJElIMYB0lpeej/6FoINAifmsVC93bEZIXnikkj5G6GcsrjkXJ/yV
+ZzM9tJJ+gRzF7cEgzhDicC30DLfP5zBA9aSbjCdLPNKQ1XpO5ik
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:32 2024 by rpki-client on console-ams.rpki-client.org