Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/95JIuGrdrpff2im_ADKbZpoFVG8.roa
File: 95JIuGrdrpff2im_ADKbZpoFVG8.roa (raw, json)
Hash identifier: gFZUzzDOR2M5RTYVnF6NEX9HojLsiXybXxUaVmJMC18=
Subject key identifier: F7:92:48:B8:6A:DD:AE:97:DF:DA:29:BF:00:32:9B:66:9A:05:54:6F
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 0182B574F903BF0BEAA7CA86AE53A154768A
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/95JIuGrdrpff2im_ADKbZpoFVG8.roa
Signing time: Fri 19 Aug 2022 09:35:18 +0000
ROA not before: Fri 19 Aug 2022 09:35:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34804
IP address blocks: 85.159.224.0/21 maxlen: 21
46.29.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:74:f9:03:bf:0b:ea:a7:ca:86:ae:53:a1:54:76:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Aug 19 09:35:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f79248b86addae97dfda29bf00329b669a05546f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:bd:b4:de:fc:05:b7:43:d2:61:70:6f:f8:
cd:9e:b9:ec:76:34:c3:78:54:38:aa:e2:37:6d:8f:
28:e5:7e:d1:7d:e8:bf:5b:8c:91:7e:2a:06:03:9f:
6d:40:ec:18:f0:0c:93:1d:42:5e:11:d9:f0:99:9c:
21:c1:0b:c2:a2:da:da:e7:b5:43:e6:31:13:5d:ad:
0e:35:83:a5:b1:f3:18:b0:4b:fb:55:15:e7:49:95:
67:cb:e8:a6:ae:93:7d:59:c5:09:06:32:d6:f6:0b:
1d:42:b1:23:7a:06:71:f3:0e:a7:cd:61:e6:8b:23:
60:36:f6:03:4d:ee:b8:52:be:70:21:24:ec:8d:65:
df:76:2d:e2:82:9c:2b:3a:8c:44:01:b5:0b:ad:2e:
ca:f2:cb:15:2f:b5:c9:db:f0:9e:a9:59:76:89:f3:
cb:29:2a:3c:6d:79:df:13:8c:21:fb:15:7d:e1:93:
51:1c:f5:07:1f:b6:72:5d:b7:94:63:52:5b:62:ff:
86:80:db:a3:42:06:83:fb:51:75:e7:4b:f1:a6:8b:
aa:99:3d:5c:cc:4d:2a:2e:39:a5:fd:0a:51:3b:95:
e3:98:b5:80:0b:24:3d:94:c6:3a:4b:31:2c:01:e2:
11:99:d6:74:8c:a6:6b:06:a8:70:69:18:eb:43:bf:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:92:48:B8:6A:DD:AE:97:DF:DA:29:BF:00:32:9B:66:9A:05:54:6F
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/95JIuGrdrpff2im_ADKbZpoFVG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.232.0/21
85.159.224.0/21
Signature Algorithm: sha256WithRSAEncryption
19:d2:d1:72:e4:ad:a2:92:da:f9:4f:07:ed:8b:bf:40:dd:fa:
57:1b:59:5b:b1:f8:02:87:ea:6d:19:81:12:b6:64:a9:c9:22:
78:f7:71:9b:1e:b5:5c:7c:69:9f:f2:d8:ed:58:db:1e:f6:0d:
7b:1d:83:e6:e7:ef:76:ac:c2:b1:68:a5:01:5c:81:96:39:69:
80:6e:2f:50:1b:09:37:9b:aa:fd:aa:08:73:cb:f9:58:c4:1f:
c8:23:a4:2d:ed:ac:b7:04:d9:42:5e:1e:9b:19:03:6e:00:8d:
6d:03:f6:db:98:68:34:bc:cd:ac:2a:6c:81:4a:6d:9e:4f:4d:
02:6d:05:12:be:40:35:a3:67:7c:28:af:75:18:f6:ad:c3:29:
72:ef:56:63:6c:15:c9:7d:08:f4:cd:5f:ee:5e:5b:ce:0b:eb:
06:7b:88:ec:ad:a1:5e:19:84:be:9e:d7:e4:88:05:1d:0e:83:
0b:26:a5:6a:f2:f3:17:15:97:e9:2e:e3:10:27:04:74:28:9f:
9a:3e:a0:ac:d2:80:0b:6c:11:cb:37:3a:9b:88:2a:a8:54:e2:
55:98:59:51:8a:89:d2:f3:2e:ed:00:6e:8b:85:6a:df:6b:92:
f9:a4:46:2e:70:e2:8e:8d:d4:f5:b3:f9:be:02:f4:69:98:d2:
61:d7:17:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYK1dPkDvwvqp8qGrlOhVHaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjIwODE5MDkzNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzkyNDhiODZhZGRhZTk3ZGZkYTI5YmYwMDMyOWI2NjlhMDU1NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPa9tN78BbdD0mFwb/jNnrnsdjTD
eFQ4quI3bY8o5X7Rfei/W4yRfioGA59tQOwY8AyTHUJeEdnwmZwhwQvCotra57VD
5jETXa0ONYOlsfMYsEv7VRXnSZVny+imrpN9WcUJBjLW9gsdQrEjegZx8w6nzWHm
iyNgNvYDTe64Ur5wISTsjWXfdi3igpwrOoxEAbULrS7K8ssVL7XJ2/CeqVl2ifPL
KSo8bXnfE4wh+xV94ZNRHPUHH7ZyXbeUY1JbYv+GgNujQgaD+1F150vxpouqmT1c
zE0qLjml/QpRO5XjmLWACyQ9lMY6SzEsAeIRmdZ0jKZrBqhwaRjrQ7+qFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPeSSLhq3a6X39opvwAym2aaBVRvMB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvOTVKSXVHcmRycGZmMmltX0FES2JacG9GVkc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLh3oAwQD
VZ/gMA0GCSqGSIb3DQEBCwUAA4IBAQAZ0tFy5K2iktr5Twfti79A3fpXG1lbsfgC
h+ptGYEStmSpySJ493GbHrVcfGmf8tjtWNse9g17HYPm5+92rMKxaKUBXIGWOWmA
bi9QGwk3m6r9qghzy/lYxB/II6Qt7ay3BNlCXh6bGQNuAI1tA/bbmGg0vM2sKmyB
Sm2eT00CbQUSvkA1o2d8KK91GPatwyly71ZjbBXJfQj0zV/uXlvOC+sGe4jsraFe
GYS+ntfkiAUdDoMLJqVq8vMXFZfpLuMQJwR0KJ+aPqCs0oALbBHLNzqbiCqoVOJV
mFlRionS8y7tAG6LhWrfa5L5pEYucOKOjdT1s/m+AvRpmNJh1xc0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:42 2023 by rpki-client on console-fra.rpki-client.org