Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/1-uCkYNSb6hWJ0nZalO5jisEowV4.roa
File: 1-uCkYNSb6hWJ0nZalO5jisEowV4.roa (raw, json)
Hash identifier: BowG4sZYz9COQKMURC+/zPAffi947nl9JYp6GwdaN0g=
Subject key identifier: FA:E0:A4:60:D4:9B:EA:15:89:D2:76:5A:94:EE:63:8A:C1:28:C1:5E
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0FD38630
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/1-uCkYNSb6hWJ0nZalO5jisEowV4.roa
Signing time: Sat 01 Jan 2022 15:59:24 +0000
ROA not before: Sat 01 Jan 2022 15:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209943
IP address blocks: 194.56.221.0/24 maxlen: 32
2001:67c:28ec::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265520688 (0xfd38630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jan 1 15:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fae0a460d49bea1589d2765a94ee638ac128c15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:41:dc:95:db:a0:80:7b:53:91:f2:48:08:72:
59:48:d9:23:d7:e4:e1:33:72:e6:11:07:79:3e:d8:
06:74:6b:1b:8f:60:ed:60:0c:3d:6f:7d:a9:e8:83:
fd:ce:04:b3:2d:2f:14:05:9d:be:4a:11:02:20:5c:
12:d1:97:26:62:25:3d:fe:0f:01:c7:57:e4:ac:42:
f8:e0:53:1f:95:cd:8a:d4:3f:d1:c9:d6:b0:f1:cf:
2c:81:80:13:c0:43:d6:51:3d:da:7b:4b:f4:53:d5:
ea:8e:3f:ad:b6:b4:86:75:51:1b:97:f4:85:97:42:
c8:12:96:05:12:1c:23:55:c0:23:6d:49:e5:b8:65:
1e:91:4c:6a:39:29:87:b4:2d:a7:b1:46:2c:76:d6:
23:d1:0f:4c:a4:65:09:bc:87:06:39:54:ec:45:c5:
45:9c:35:bb:7a:89:67:9b:be:e5:ec:e1:70:5c:8e:
26:39:a1:87:e4:7f:13:8d:4d:e1:df:64:dd:77:52:
b9:87:2f:04:b2:3d:f5:b5:a4:39:a1:9f:e4:75:f7:
50:d3:95:62:ef:0f:21:a0:b5:fc:83:02:b0:1f:98:
1a:57:a6:ca:54:1c:11:cb:81:86:5b:c2:2a:4c:4c:
70:9c:b6:d9:a5:52:11:0f:a5:34:1a:a6:fd:bf:f2:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:A4:60:D4:9B:EA:15:89:D2:76:5A:94:EE:63:8A:C1:28:C1:5E
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/1-uCkYNSb6hWJ0nZalO5jisEowV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.221.0/24
IPv6:
2001:67c:28ec::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d9:91:79:df:2a:75:3d:4e:52:98:ff:34:bb:55:56:52:54:
98:79:75:5e:cf:8c:a2:4c:9a:55:bc:4c:5f:92:3b:c6:15:37:
ef:68:a7:ff:2d:3a:d1:ab:74:f2:11:e4:05:d2:3c:c7:f8:85:
b9:50:1a:ee:45:36:15:6d:bd:ca:b5:b9:70:9e:84:a8:cc:13:
8b:bc:35:b2:a9:b2:0d:c8:07:5e:a3:14:c7:36:32:b1:27:77:
90:74:df:1a:d9:96:bb:d9:7b:c6:be:20:ad:02:ac:a2:d2:db:
f2:8d:21:04:fe:78:46:f4:db:66:0d:c0:02:46:18:8c:95:70:
16:bb:95:a3:94:3c:42:ca:06:c1:76:5d:ac:2c:d2:f0:c5:1c:
f8:93:e0:08:c8:53:35:16:c8:ab:ad:c0:d0:7c:e0:7e:5d:ce:
44:6d:9e:d2:67:62:94:1c:fb:58:70:6b:2b:cc:cb:63:7b:58:
f1:ba:92:bb:48:12:b5:cf:80:f7:04:1e:27:ca:01:a1:35:ee:
df:ca:fe:9e:76:0c:de:68:8e:9e:b5:6d:0a:72:bc:64:0a:db:
f6:62:78:fb:98:13:b4:54:fd:22:b7:d6:dc:a9:77:48:ba:5d:
42:5f:85:f8:52:a2:84:24:5f:16:14:e9:ae:a4:90:3e:92:5b:
12:87:d1:48
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIED9OGMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTVhOTJiNzc4ZWRkZmE4ZGNkOTE3Y2JiODdjZGUzMWJhMmM3MzJmMB4XDTIyMDEw
MTE1NTkyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFlMGE0NjBkNDli
ZWExNTg5ZDI3NjVhOTRlZTYzOGFjMTI4YzE1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPBB3JXboIB7U5HySAhyWUjZI9fk4TNy5hEHeT7YBnRrG49g
7WAMPW99qeiD/c4Esy0vFAWdvkoRAiBcEtGXJmIlPf4PAcdX5KxC+OBTH5XNitQ/
0cnWsPHPLIGAE8BD1lE92ntL9FPV6o4/rba0hnVRG5f0hZdCyBKWBRIcI1XAI21J
5bhlHpFMajkph7Qtp7FGLHbWI9EPTKRlCbyHBjlU7EXFRZw1u3qJZ5u+5ezhcFyO
Jjmhh+R/E41N4d9k3XdSuYcvBLI99bWkOaGf5HX3UNOVYu8PIaC1/IMCsB+YGlem
ylQcEcuBhlvCKkxMcJy22aVSEQ+lNBqm/b/yJ18CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT64KRg1JvqFYnSdlqU7mOKwSjBXjAfBgNVHSMEGDAWgBQpWpK3eO3fqNzZ
F8u4fN4xuixzLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tWcVN0M2p0MzZqYzJSZkx1SHplTWJvc2N5OC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvNzU3MGUxLWFlM2QtNDkwMS05Yzg1LWRjZGM1Y2VlMjc2Zi8x
LzEtdUNrWU5TYjZoV0owblphbE81amlzRW93VjQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3
Lzc1NzBlMS1hZTNkLTQ5MDEtOWM4NS1kY2RjNWNlZTI3NmYvMS9LVnFTdDNqdDM2
amMyUmZMdUh6ZU1ib3NjeTguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADCON0wDwQCAAIwCQMHACABBnwo
7DANBgkqhkiG9w0BAQsFAAOCAQEAj9mRed8qdT1OUpj/NLtVVlJUmHl1Xs+Mokya
VbxMX5I7xhU372in/y060at08hHkBdI8x/iFuVAa7kU2FW29yrW5cJ6EqMwTi7w1
sqmyDcgHXqMUxzYysSd3kHTfGtmWu9l7xr4grQKsotLb8o0hBP54RvTbZg3AAkYY
jJVwFruVo5Q8QsoGwXZdrCzS8MUc+JPgCMhTNRbIq63A0Hzgfl3ORG2e0mdilBz7
WHBrK8zLY3tY8bqSu0gStc+A9wQeJ8oBoTXu38r+nnYM3miOnrVtCnK8ZArb9mJ4
+5gTtFT9IrfW3Kl3SLpdQl+F+FKihCRfFhTprqSQPpJbEofRSA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:31 2024 by rpki-client on console-ams.rpki-client.org