Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/fnR4oJUptz30KAPRqojromR-Qrk.roa
File: fnR4oJUptz30KAPRqojromR-Qrk.roa (raw, json)
Hash identifier: 9Cm7xJOiudfSXp8ZMzY2x9ywMwBt6TbnzZo3mz5/V0M=
Subject key identifier: 7E:74:78:A0:95:29:B7:3D:F4:28:03:D1:AA:88:EB:A2:64:7E:42:B9
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0A3510AD
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/fnR4oJUptz30KAPRqojromR-Qrk.roa
Signing time: Fri 13 May 2022 12:09:43 +0000
ROA not before: Fri 13 May 2022 12:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25206
IP address blocks: 46.35.170.0/23 maxlen: 24
95.158.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171249837 (0xa3510ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: May 13 12:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e7478a09529b73df42803d1aa88eba2647e42b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:89:de:c4:f1:d9:ca:54:b0:1e:3c:85:37:
92:2b:d1:04:60:d6:e5:a3:a7:bd:b8:36:92:06:62:
7e:fc:2e:50:af:c2:a5:81:af:9c:87:b7:a5:85:4c:
92:77:41:e6:68:a9:fc:46:3e:fa:cf:59:c2:db:b6:
1e:51:24:f0:76:ae:78:45:5a:68:b1:e1:69:cb:03:
a5:4d:46:15:00:82:56:6c:9f:88:42:a5:a9:8e:a2:
2f:3d:bd:d8:d3:93:67:5e:91:ae:86:e9:3d:bd:17:
9b:05:95:e8:72:13:50:88:e2:1d:fd:b7:96:e3:e7:
7c:f3:3d:29:cf:94:cd:27:fd:31:2e:cd:1b:82:7e:
40:0b:e6:ee:92:9f:a6:20:08:e2:a0:ee:86:82:ee:
f5:aa:92:ce:61:aa:a5:ac:d3:b7:45:04:1e:f1:fb:
f0:67:88:90:e6:24:0c:15:67:ee:7f:9d:c2:be:7e:
65:ed:8c:cf:ab:68:86:39:15:9b:7b:16:7c:a2:f9:
fb:59:07:76:c9:32:51:82:cf:ce:ec:46:85:3e:e4:
9e:5d:51:78:1f:67:47:ea:e5:64:1c:28:6f:d8:be:
7d:3b:27:29:1e:6d:e8:23:5d:09:ee:d0:12:1c:fe:
b8:1a:9e:fb:a8:46:16:cc:f9:95:8a:0e:54:78:15:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:74:78:A0:95:29:B7:3D:F4:28:03:D1:AA:88:EB:A2:64:7E:42:B9
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/fnR4oJUptz30KAPRqojromR-Qrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.170.0/23
95.158.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:27:fe:05:c0:3e:50:42:8b:62:65:3f:09:41:83:fa:7d:c3:
b8:b3:da:2b:86:25:f5:6e:f6:86:64:6f:94:96:a2:62:cf:91:
90:df:ec:9a:ee:3f:00:19:13:25:8e:27:be:80:be:d7:83:a7:
6a:3e:07:ce:f6:3b:7e:8b:8d:73:7b:6c:4c:12:62:93:7d:2b:
70:51:91:f6:a7:36:6d:db:f1:23:aa:d7:09:f9:fd:38:27:a4:
fc:5e:16:7f:07:a1:ce:e6:4f:e6:d1:35:24:b4:a9:5f:36:8a:
ef:85:c6:e4:24:5b:b6:8a:27:47:f6:29:d2:7f:56:1d:8b:32:
07:ae:35:a3:96:87:6f:f4:8f:5c:86:9b:30:d4:d8:68:e2:20:
ac:ff:14:b3:e9:57:a2:33:4c:74:04:4b:12:b9:f8:7d:7f:01:
96:6f:28:01:7b:92:25:a3:f4:33:de:a2:82:db:71:07:df:0e:
46:77:5e:d6:19:33:ca:59:5d:55:36:e0:cb:37:d2:53:ad:c0:
9a:34:00:bc:01:d3:70:ad:6b:95:2f:9d:04:67:7a:7e:bb:cc:
2d:3a:cf:d0:74:63:ab:35:e7:35:49:8b:6d:cd:d3:73:1c:2d:
1a:b1:97:48:fc:22:1b:52:90:d6:c4:1f:88:23:59:a6:7a:4e:
ae:44:48:e2
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECjUQrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIyMDUx
MzEyMDk0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2U3NDc4YTA5NTI5
YjczZGY0MjgwM2QxYWE4OGViYTI2NDdlNDJiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgfid7E8dnKVLAePIU3kivRBGDW5aOnvbg2kgZifvwuUK/C
pYGvnIe3pYVMkndB5mip/EY++s9Zwtu2HlEk8HaueEVaaLHhacsDpU1GFQCCVmyf
iEKlqY6iLz292NOTZ16RrobpPb0XmwWV6HITUIjiHf23luPnfPM9Kc+UzSf9MS7N
G4J+QAvm7pKfpiAI4qDuhoLu9aqSzmGqpazTt0UEHvH78GeIkOYkDBVn7n+dwr5+
Ze2Mz6tohjkVm3sWfKL5+1kHdskyUYLPzuxGhT7knl1ReB9nR+rlZBwob9i+fTsn
KR5t6CNdCe7QEhz+uBqe+6hGFsz5lYoOVHgVIRsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR+dHiglSm3PfQoA9GqiOuiZH5CuTAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
L2ZuUjRvSlVwdHozMEtBUFJxb2pyb21SLVFyay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS4jqgMEAF+eqDANBgkqhkiG9w0B
AQsFAAOCAQEAeyf+BcA+UEKLYmU/CUGD+n3DuLPaK4Yl9W72hmRvlJaiYs+RkN/s
mu4/ABkTJY4nvoC+14Onaj4HzvY7fouNc3tsTBJik30rcFGR9qc2bdvxI6rXCfn9
OCek/F4WfwehzuZP5tE1JLSpXzaK74XG5CRbtoonR/Yp0n9WHYsyB641o5aHb/SP
XIabMNTYaOIgrP8Us+lXojNMdARLErn4fX8Blm8oAXuSJaP0M96igttxB98ORnde
1hkzylldVTbgyzfSU63AmjQAvAHTcK1rlS+dBGd6frvMLTrP0HRjqzXnNUmLbc3T
cxwtGrGXSPwiG1KQ1sQfiCNZpnpOrkRI4g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org