Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/sukpwMXAztH5J8qRiDzFqD7YT_8.roa
File: sukpwMXAztH5J8qRiDzFqD7YT_8.roa (raw, json)
Hash identifier: f5sqKTg+0qsvYBWyDifY87gnmCNLqhyNXgnPrqZfbow=
Subject key identifier: B2:E9:29:C0:C5:C0:CE:D1:F9:27:CA:91:88:3C:C5:A8:3E:D8:4F:FF
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 0D82
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/sukpwMXAztH5J8qRiDzFqD7YT_8.roa
Signing time: Sat 22 Jan 2022 21:43:17 +0000
ROA not before: Sat 22 Jan 2022 21:43:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39460
IP address blocks: 195.66.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3458 (0xd82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Jan 22 21:43:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2e929c0c5c0ced1f927ca91883cc5a83ed84fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e0:a1:ff:75:86:b3:20:57:31:8c:4a:f8:90:
cc:1b:be:27:aa:71:fe:93:38:ad:38:9a:df:1f:dd:
ec:97:d3:c9:10:58:29:2a:c8:4f:16:96:a0:88:37:
ee:52:ee:58:d4:34:27:12:41:2e:73:66:aa:52:5d:
66:cc:8e:fb:67:ff:e4:28:28:43:aa:fb:f6:a3:6c:
e9:9a:94:d8:3b:b5:df:09:b2:b5:be:d5:a1:7e:18:
fd:13:cc:e0:48:fe:24:59:c1:6a:67:20:5d:85:c3:
86:9e:b2:3b:21:98:eb:23:64:f3:ec:03:5d:f8:ba:
f5:fd:ec:3c:50:14:12:d2:b3:93:34:73:c1:1f:64:
3a:43:0b:c4:66:26:0b:f7:56:18:7e:01:da:47:42:
e2:34:3e:8b:48:b0:5f:e2:78:b1:b0:7b:87:2c:04:
c4:ac:86:76:c9:ed:4e:9b:e9:78:cc:79:27:ff:ae:
5b:b2:a0:ba:f2:0c:27:14:c3:3c:c7:49:8f:ab:6c:
c1:75:72:83:8e:c4:c9:f3:c5:ed:8c:78:27:2b:53:
20:de:14:75:a4:10:b8:27:14:8f:3d:cb:1d:dc:ff:
af:5d:f9:42:51:fb:41:f7:d9:86:19:8b:41:6c:e3:
37:98:75:ba:a4:85:60:ef:63:e0:90:70:1f:19:ef:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:29:C0:C5:C0:CE:D1:F9:27:CA:91:88:3C:C5:A8:3E:D8:4F:FF
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/sukpwMXAztH5J8qRiDzFqD7YT_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5f:cd:cd:af:6a:ad:71:3f:85:32:c8:e9:9d:bc:04:79:cb:
45:07:da:16:09:c4:fc:b3:59:70:47:56:63:9e:0f:0c:90:4c:
93:7b:c8:42:60:d3:a1:35:0e:5e:69:71:fc:cf:a2:f7:79:5b:
bd:9f:a0:d4:2d:40:a6:d0:46:ef:f1:4f:58:a7:fd:14:6a:63:
74:3c:03:06:e2:02:8c:ba:bf:8d:41:cf:fa:0b:5e:bf:51:a9:
8b:d4:be:cb:44:92:e0:9b:6f:37:7d:b7:bf:05:db:ca:35:fd:
6b:b2:71:cc:ad:69:e9:94:11:fc:6c:ee:20:5c:dc:81:91:20:
0b:eb:5c:72:3b:70:ff:0c:27:73:f1:ea:fd:7e:66:00:96:b0:
65:0e:c3:aa:4f:93:48:54:c2:de:a9:21:88:45:e5:ff:87:8e:
50:78:ca:6b:81:ce:99:26:12:48:3f:1f:0b:07:18:37:9d:7f:
de:54:33:4c:80:35:8a:cb:e5:83:fc:18:20:59:bf:fd:51:63:
e3:3e:42:df:d1:e5:0e:35:7b:8a:d4:7d:ac:d2:64:1b:90:59:
87:41:0b:44:cb:03:9e:b7:55:e3:ce:62:4b:cc:72:55:3f:23:
cd:dc:8f:2c:bf:d6:8e:1d:62:b2:ce:64:0c:ed:95:42:3d:fa:
91:bf:fb:51
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYWYw
MmZiNTZiNDU5YzdhMjFhNzliNjhiNGUxMThhYjg3NmZjOTZhNTAeFw0yMjAxMjIy
MTQzMTdaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGIyZTkyOWMwYzVjMGNl
ZDFmOTI3Y2E5MTg4M2NjNWE4M2VkODRmZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD44KH/dYazIFcxjEr4kMwbvieqcf6TOK04mt8f3eyX08kQWCkq
yE8WlqCIN+5S7ljUNCcSQS5zZqpSXWbMjvtn/+QoKEOq+/ajbOmalNg7td8JsrW+
1aF+GP0TzOBI/iRZwWpnIF2Fw4aesjshmOsjZPPsA134uvX97DxQFBLSs5M0c8Ef
ZDpDC8RmJgv3Vhh+AdpHQuI0PotIsF/ieLGwe4csBMSshnbJ7U6b6XjMeSf/rluy
oLryDCcUwzzHSY+rbMF1coOOxMnzxe2MeCcrUyDeFHWkELgnFI89yx3c/69d+UJR
+0H32YYZi0Fs4zeYdbqkhWDvY+CQcB8Z77ihAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUsukpwMXAztH5J8qRiDzFqD7YT/8wHwYDVR0jBBgwFoAUrwL7VrRZx6IaebaL
ThGKuHb8lqUwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9y
d0w3VnJSWng2SWFlYmFMVGhHS3VIYjhscVUuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2E4LzMzZmI5MC0xODliLTRlMzEtYjkyYS0wYzE4ZDg1OTczMjgvMS9z
dWtwd01YQXp0SDVKOHFSaUR6RnFEN1lUXzgucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzMz
ZmI5MC0xODliLTRlMzEtYjkyYS0wYzE4ZDg1OTczMjgvMS9yd0w3VnJSWng2SWFl
YmFMVGhHS3VIYjhscVUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDQlwwDQYJKoZIhvcNAQELBQADggEB
ADxfzc2vaq1xP4UyyOmdvAR5y0UH2hYJxPyzWXBHVmOeDwyQTJN7yEJg06E1Dl5p
cfzPovd5W72foNQtQKbQRu/xT1in/RRqY3Q8AwbiAoy6v41Bz/oLXr9RqYvUvstE
kuCbbzd9t78F28o1/WuyccytaemUEfxs7iBc3IGRIAvrXHI7cP8MJ3Px6v1+ZgCW
sGUOw6pPk0hUwt6pIYhF5f+HjlB4ymuBzpkmEkg/HwsHGDedf95UM0yANYrL5YP8
GCBZv/1RY+M+Qt/R5Q41e4rUfazSZBuQWYdBC0TLA563VePOYkvMclU/I83cjyy/
1o4dYrLOZAztlUI9+pG/+1E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org