Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/m7E331ZEVXfHieKo2Nd8_BSe3zs.roa
File: m7E331ZEVXfHieKo2Nd8_BSe3zs.roa (raw, json)
Hash identifier: s3lvFjyHZEV2yT4fHbDmSkTSDK2zAbL3MI0jJoaJgoU=
Subject key identifier: 9B:B1:37:DF:56:44:55:77:C7:89:E2:A8:D8:D7:7C:FC:14:9E:DF:3B
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0B9BEEA9
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/m7E331ZEVXfHieKo2Nd8_BSe3zs.roa
Signing time: Sat 01 Jan 2022 08:58:48 +0000
ROA not before: Sat 01 Jan 2022 08:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2593
IP address blocks: 95.140.128.0/21 maxlen: 21
2001:7f8:5f::/48 maxlen: 48
2a09:8d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194768553 (0xb9beea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Jan 1 08:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bb137df56445577c789e2a8d8d77cfc149edf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:c3:1d:a0:86:31:3c:7e:f3:ac:91:73:71:
74:ef:a7:27:3e:b0:23:5c:f0:48:83:29:71:f2:76:
d6:8b:2a:c3:19:9c:6e:be:1e:6f:8c:07:17:af:ee:
8f:37:98:f7:a2:f6:22:f9:b6:a4:89:b3:05:64:b9:
41:99:6c:2e:7a:b1:01:45:ca:34:0a:e5:16:76:a6:
01:67:d1:a4:ef:9e:e9:1f:0d:6b:e1:be:72:94:db:
e2:3e:19:78:34:37:14:87:e3:46:df:aa:68:3e:36:
99:29:6d:83:2e:67:1c:6a:26:f7:b5:ca:07:bc:78:
f1:e8:67:7a:f8:00:da:23:d5:30:1f:f8:e3:ad:19:
0a:89:75:86:ae:72:3a:9e:8f:d8:c2:b6:2f:e4:b2:
59:bf:c4:0f:6c:8d:6c:4e:25:a1:3d:d3:15:82:1e:
d3:0d:ad:4c:a6:5b:50:d2:98:7c:93:68:5b:a5:12:
43:c5:26:1d:49:78:67:1b:3a:fc:3c:b3:92:9b:f3:
9b:6d:de:eb:36:7c:da:31:e2:ce:99:ab:84:0b:75:
3b:e3:67:7d:ab:10:b0:19:c9:9c:f0:21:13:57:57:
cf:f1:70:84:95:1c:f3:ad:a0:ac:f9:24:8b:b9:ce:
3d:c7:87:3b:88:21:e7:0f:42:04:db:47:fe:df:4a:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B1:37:DF:56:44:55:77:C7:89:E2:A8:D8:D7:7C:FC:14:9E:DF:3B
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/m7E331ZEVXfHieKo2Nd8_BSe3zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.128.0/21
IPv6:
2001:7f8:5f::/48
2a09:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
8d:7a:a7:b6:87:fe:54:ba:0e:8b:b4:e8:12:7c:be:7e:3e:f5:
01:a6:a4:4e:4c:a8:d6:b4:ea:64:b2:a3:53:9c:e8:8a:39:85:
23:6a:4f:f0:f2:90:40:a7:9c:f1:f4:63:d4:13:10:0c:14:c7:
a8:ee:a9:99:ba:0e:f7:0a:ae:ee:ec:a5:6e:2c:c9:65:63:da:
80:91:44:05:ce:ee:17:72:2b:57:5f:f2:69:2d:96:fe:95:0b:
15:15:bf:cf:70:d0:55:94:cb:17:e4:66:5e:02:be:d0:c1:1c:
80:2a:51:9b:50:50:14:4b:45:1f:91:39:5f:30:05:cf:4a:c4:
36:b8:74:41:5d:04:14:f5:f5:dd:19:8d:08:dc:d6:58:83:3c:
5a:4d:ef:7b:c4:7e:5d:93:fa:73:7c:bd:e6:30:8a:d4:2b:6e:
2d:21:00:b9:4f:06:29:ad:c8:0e:d6:1a:d3:f2:35:76:74:fe:
cd:54:ae:82:83:af:3e:ac:30:33:47:b0:97:86:ee:36:dc:2c:
ba:08:fb:81:dd:71:80:3c:9f:f0:44:ce:11:26:e8:7b:ad:5c:
3d:9d:32:5e:a9:1a:aa:51:9e:88:27:c4:85:88:06:c8:2c:85:
62:74:71:3e:71:9f:39:60:38:39:e0:72:99:42:14:43:89:12:
c6:2d:56:6f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEC5vuqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA5OGVmYWFlODA2M2NhY2VjYzRmMWMxYTBiNjQ0ODNiYjY5NTAzMB4XDTIyMDEw
MTA4NTg0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJiMTM3ZGY1NjQ0
NTU3N2M3ODllMmE4ZDhkNzdjZmMxNDllZGYzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYDwx2ghjE8fvOskXNxdO+nJz6wI1zwSIMpcfJ21osqwxmc
br4eb4wHF6/ujzeY96L2Ivm2pImzBWS5QZlsLnqxAUXKNArlFnamAWfRpO+e6R8N
a+G+cpTb4j4ZeDQ3FIfjRt+qaD42mSltgy5nHGom97XKB7x48ehnevgA2iPVMB/4
460ZCol1hq5yOp6P2MK2L+SyWb/ED2yNbE4loT3TFYIe0w2tTKZbUNKYfJNoW6US
Q8UmHUl4Zxs6/Dyzkpvzm23e6zZ82jHizpmrhAt1O+NnfasQsBnJnPAhE1dXz/Fw
hJUc862grPkki7nOPceHO4gh5w9CBNtH/t9KrsECAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSbsTffVkRVd8eJ4qjY13z8FJ7fOzAfBgNVHSMEGDAWgBRyCY76roBjys7M
TxwaC2RIO7aVAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnbU8tcTZBWThyT3pFOGNHZ3RrU0R1MmxRTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvYjRkYWY2LTQ0OGQtNGYzZS05NDRhLTU3M2NhNWE2MDljMC8x
L203RTMzMVpFVlhmSGllS28yTmQ4X0JTZTN6cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
YjRkYWY2LTQ0OGQtNGYzZS05NDRhLTU3M2NhNWE2MDljMC8xL2NnbU8tcTZBWThy
T3pFOGNHZ3RrU0R1MmxRTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwDAQCAAEwBgMEA1+MgDAWBAIAAjAQAwcAIAEH+ABf
AwUDKgmNADANBgkqhkiG9w0BAQsFAAOCAQEAjXqntof+VLoOi7ToEny+fj71Aaak
Tkyo1rTqZLKjU5zoijmFI2pP8PKQQKec8fRj1BMQDBTHqO6pmboO9wqu7uylbizJ
ZWPagJFEBc7uF3IrV1/yaS2W/pULFRW/z3DQVZTLF+RmXgK+0MEcgCpRm1BQFEtF
H5E5XzAFz0rENrh0QV0EFPX13RmNCNzWWIM8Wk3ve8R+XZP6c3y95jCK1CtuLSEA
uU8GKa3IDtYa0/I1dnT+zVSugoOvPqwwM0ewl4buNtwsugj7gd1xgDyf8ETOESbo
e61cPZ0yXqkaqlGeiCfEhYgGyCyFYnRxPnGfOWA4OeBymUIUQ4kSxi1Wbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:37 2024 by rpki-client on console-fra.rpki-client.org