Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/P0rx55c5kUCm4L6cvSAUtLI6k5Y.roa
File: P0rx55c5kUCm4L6cvSAUtLI6k5Y.roa (raw, json)
Hash identifier: R61FyQP4eeS9AoQH3MRocTZqGC9AqB6CUtNHU+npjkU=
Subject key identifier: 3F:4A:F1:E7:97:39:91:40:A6:E0:BE:9C:BD:20:14:B4:B2:3A:93:96
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 0284B3
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/P0rx55c5kUCm4L6cvSAUtLI6k5Y.roa
Signing time: Mon 07 Feb 2022 09:25:25 +0000
ROA not before: Mon 07 Feb 2022 09:25:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44991
IP address blocks: 195.230.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165043 (0x284b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Feb 7 09:25:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f4af1e797399140a6e0be9cbd2014b4b23a9396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:b8:04:2a:8f:db:a6:e7:b2:c1:59:3c:dd:
4c:85:39:06:27:3e:ba:e3:93:56:49:17:25:b7:92:
dd:b6:60:63:12:2a:29:74:3a:fc:cd:72:5c:ac:b6:
4a:10:aa:ae:78:95:19:1f:02:2f:34:ca:4b:86:b7:
cc:e3:65:3a:a0:bd:fc:35:e9:e5:5b:3e:fa:5d:94:
ba:22:8b:0a:89:af:ee:c2:39:fb:fe:c9:05:b8:6f:
74:16:13:f1:e8:73:30:90:65:cc:fe:95:d1:52:d6:
1a:d2:42:c4:66:76:c1:60:5a:81:cd:c8:37:14:2d:
0c:5b:f1:be:c9:70:12:6c:85:d3:eb:ce:5b:52:ef:
04:c4:06:59:27:e6:f3:ff:ee:ec:82:e3:fd:ff:2f:
74:44:86:63:d1:a6:54:b8:12:2e:42:43:9b:bf:e9:
1d:fe:31:6e:84:16:19:f8:34:f4:66:cf:f3:05:d4:
49:1f:40:99:21:24:03:df:db:59:b5:fe:90:ae:65:
e9:71:9d:17:06:b3:90:be:38:86:90:6b:34:c0:81:
f8:02:39:cb:0f:1e:7e:68:50:2a:36:4d:80:51:e4:
b3:10:a6:9d:27:b8:4c:90:05:26:4f:8f:25:49:e6:
85:7a:bf:4e:0d:18:b9:c4:68:d1:22:0f:5d:af:93:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:F1:E7:97:39:91:40:A6:E0:BE:9C:BD:20:14:B4:B2:3A:93:96
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/P0rx55c5kUCm4L6cvSAUtLI6k5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3d:29:51:1e:7b:e2:15:98:04:54:9f:b1:ad:01:b6:a8:14:
ba:22:fb:09:76:27:62:cd:4f:11:5e:c9:59:00:62:43:da:4f:
38:6a:8f:b6:b3:54:b5:17:8a:d6:3f:20:59:0d:b8:01:d8:75:
33:1a:6a:da:ed:1f:09:49:69:af:1c:af:45:d8:a4:4d:f7:80:
91:e5:6a:d6:9a:13:84:fb:8e:44:e3:ec:f5:80:e5:0a:b9:35:
4e:5d:ae:0f:dd:85:10:73:de:08:d8:78:40:89:01:64:85:59:
65:21:4c:bd:da:cb:07:68:73:f5:d5:cd:18:a9:15:da:2b:fc:
5d:e7:0e:5a:6f:3a:8e:fe:4d:c1:9d:ce:24:98:0a:3f:1f:3a:
85:de:d3:c0:aa:82:ba:3b:2d:ef:26:11:f6:9b:44:d8:5d:b3:
13:3b:74:97:e6:d3:1a:d3:42:aa:02:c0:14:1f:fa:0f:47:99:
cb:b6:46:d9:20:d2:70:f1:2d:ea:c0:76:2d:b7:63:00:36:00:
48:c7:df:0d:85:3e:0c:b3:27:6d:a0:22:60:2d:7b:4a:fb:46:
ca:31:94:c8:73:79:3a:59:01:2d:f4:20:ff:80:43:2e:e0:61:
06:86:63:af:92:d2:18:e4:d4:c7:42:5a:b8:a3:22:11:d1:f0:
d8:44:84:31
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAoSzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
NmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4YzEzNGYwHhcNMjIwMjA3
MDkyNTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzZjRhZjFlNzk3Mzk5
MTQwYTZlMGJlOWNiZDIwMTRiNGIyM2E5Mzk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwIW4BCqP26bnssFZPN1MhTkGJz6645NWSRclt5LdtmBjEiop
dDr8zXJcrLZKEKqueJUZHwIvNMpLhrfM42U6oL38NenlWz76XZS6IosKia/uwjn7
/skFuG90FhPx6HMwkGXM/pXRUtYa0kLEZnbBYFqBzcg3FC0MW/G+yXASbIXT685b
Uu8ExAZZJ+bz/+7sguP9/y90RIZj0aZUuBIuQkObv+kd/jFuhBYZ+DT0Zs/zBdRJ
H0CZISQD39tZtf6QrmXpcZ0XBrOQvjiGkGs0wIH4AjnLDx5+aFAqNk2AUeSzEKad
J7hMkAUmT48lSeaFer9ODRi5xGjRIg9dr5PxdwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFD9K8eeXOZFApuC+nL0gFLSyOpOWMB8GA1UdIwQYMBaAFO5vQhwlMJYoA0fc
LpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
N205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNiLzEv
UDByeDU1YzVrVUNtNEw2Y3ZTQVV0TEk2azVZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8z
ZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdE
Ujl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZqMA0GCSqGSIb3DQEBCwUAA4IB
AQCPPSlRHnviFZgEVJ+xrQG2qBS6IvsJdidizU8RXslZAGJD2k84ao+2s1S1F4rW
PyBZDbgB2HUzGmra7R8JSWmvHK9F2KRN94CR5WrWmhOE+45E4+z1gOUKuTVOXa4P
3YUQc94I2HhAiQFkhVllIUy92ssHaHP11c0YqRXaK/xd5w5abzqO/k3Bnc4kmAo/
HzqF3tPAqoK6Oy3vJhH2m0TYXbMTO3SX5tMa00KqAsAUH/oPR5nLtkbZINJw8S3q
wHYtt2MANgBIx98NhT4MsydtoCJgLXtK+0bKMZTIc3k6WQEt9CD/gEMu4GEGhmOv
ktIY5NTHQlq4oyIR0fDYRIQx
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:47 2025 by rpki-client