Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lTi7oAvTE1Dxr33T89_ZwY6HpxA.roa
File: lTi7oAvTE1Dxr33T89_ZwY6HpxA.roa (raw, json)
Hash identifier: fXpyHAeYYUBZnsXgPhMPAjszYl3iBubf+vACLVJRuSU=
Subject key identifier: 95:38:BB:A0:0B:D3:13:50:F1:AF:7D:D3:F3:DF:D9:C1:8E:87:A7:10
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09047894
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lTi7oAvTE1Dxr33T89_ZwY6HpxA.roa
Signing time: Thu 14 Apr 2022 11:34:24 +0000
ROA not before: Thu 14 Apr 2022 11:34:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63213
IP address blocks: 94.241.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151287956 (0x9047894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 14 11:34:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9538bba00bd31350f1af7dd3f3dfd9c18e87a710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:aa:e7:34:10:08:fc:ed:18:15:e6:d5:04:
af:33:7d:b7:b0:7f:6a:67:76:f5:91:7b:fc:02:c3:
ff:52:d4:22:4e:9f:ab:c9:14:d7:72:88:c5:c7:3b:
22:98:5f:c4:ba:ff:43:01:e3:dd:40:2e:fe:0e:79:
4a:22:b2:cc:b1:a4:e4:74:f1:8a:8e:3b:3d:c7:98:
4b:f8:69:d2:2a:09:82:b5:88:ea:b5:13:a8:f7:1d:
ec:10:8b:a8:29:7d:bd:74:e5:04:2c:23:61:aa:0e:
5e:b7:32:bf:c1:72:26:07:6d:ce:d1:19:ba:e2:fa:
dc:3d:42:8f:93:df:bb:e0:e7:9f:a2:bd:48:3e:fd:
d1:29:69:95:10:eb:f3:52:39:bb:b2:92:4c:aa:b2:
17:45:77:ad:9e:6f:7f:cd:79:61:b2:b6:eb:e7:87:
77:8d:18:f5:0b:9e:cb:f7:20:39:98:3c:96:69:d3:
85:5f:bd:f8:8b:67:8c:10:bc:50:84:8d:76:3a:3d:
ed:38:a0:c4:bf:38:c3:ef:c7:a6:99:ec:a9:d0:c5:
31:8c:76:9d:0d:4c:d8:0a:31:cd:5a:76:e7:cc:1c:
ed:8a:5e:93:d4:e9:c9:cd:03:00:89:e1:75:55:b1:
99:af:40:e4:4c:6b:19:c2:22:6b:ea:b6:4e:0e:37:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:BB:A0:0B:D3:13:50:F1:AF:7D:D3:F3:DF:D9:C1:8E:87:A7:10
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lTi7oAvTE1Dxr33T89_ZwY6HpxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/22
Signature Algorithm: sha256WithRSAEncryption
85:53:01:ee:a7:0c:78:03:c4:e0:fd:fe:d3:52:eb:b0:e8:1b:
49:a6:83:e1:e8:e6:d3:9e:e4:74:60:9d:2b:48:78:6a:99:2f:
b7:9b:7c:81:ef:a4:fc:c3:f5:74:f6:f7:07:bb:88:2d:87:45:
5d:53:e4:11:33:a2:09:80:67:b7:bd:6a:a1:49:70:84:ca:54:
a2:a8:74:42:4d:29:38:14:e2:58:6c:99:86:21:38:8a:69:cc:
4b:5f:80:f0:a5:77:fd:bf:89:8a:7d:94:2a:bb:3a:31:4b:92:
52:23:13:a2:52:dc:cf:e4:5b:4f:18:bc:08:7b:e7:b0:67:5e:
ca:63:ef:60:39:2d:cc:38:a8:49:13:10:ea:a3:af:94:36:55:
89:09:7a:64:de:48:0b:40:b4:8e:42:cc:d2:bc:3a:81:12:59:
4f:55:d5:f1:17:2b:44:e8:e4:89:0e:1c:d0:4d:37:db:77:b9:
af:ef:26:2e:ee:06:43:64:3a:bd:27:80:b1:13:91:79:e2:5f:
60:06:9f:0d:b8:3d:a5:fe:40:b9:d9:aa:38:b8:70:c2:6a:49:
fa:38:c3:8f:3b:86:6c:16:db:ab:28:19:8a:ad:b4:e7:ad:44:
b1:04:ad:db:74:1b:1e:25:f0:35:29:06:e2:91:9b:91:34:dc:
96:62:39:6e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECQR4lDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDQx
NDExMzQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTUzOGJiYTAwYmQz
MTM1MGYxYWY3ZGQzZjNkZmQ5YzE4ZTg3YTcxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL0squc0EAj87RgV5tUErzN9t7B/amd29ZF7/ALD/1LUIk6f
q8kU13KIxcc7IphfxLr/QwHj3UAu/g55SiKyzLGk5HTxio47PceYS/hp0ioJgrWI
6rUTqPcd7BCLqCl9vXTlBCwjYaoOXrcyv8FyJgdtztEZuuL63D1Cj5Pfu+Dnn6K9
SD790SlplRDr81I5u7KSTKqyF0V3rZ5vf815YbK26+eHd40Y9Quey/cgOZg8lmnT
hV+9+ItnjBC8UISNdjo97TigxL84w+/HppnsqdDFMYx2nQ1M2AoxzVp258wc7Ype
k9Tpyc0DAInhdVWxma9A5ExrGcIia+q2Tg43XCUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVOLugC9MTUPGvfdPz39nBjoenEDAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L2xUaTdvQXZURTFEeHIzM1Q4OV9ad1k2SHB4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl7xoDANBgkqhkiG9w0BAQsFAAOC
AQEAhVMB7qcMeAPE4P3+01LrsOgbSaaD4ejm057kdGCdK0h4apkvt5t8ge+k/MP1
dPb3B7uILYdFXVPkETOiCYBnt71qoUlwhMpUoqh0Qk0pOBTiWGyZhiE4imnMS1+A
8KV3/b+Jin2UKrs6MUuSUiMTolLcz+RbTxi8CHvnsGdeymPvYDktzDioSRMQ6qOv
lDZViQl6ZN5IC0C0jkLM0rw6gRJZT1XV8RcrROjkiQ4c0E0323e5r+8mLu4GQ2Q6
vSeAsROReeJfYAafDbg9pf5AudmqOLhwwmpJ+jjDjzuGbBbbqygZiq20561EsQSt
23QbHiXwNSkG4pGbkTTclmI5bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org