Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/UO2WvmvgD9ErNxMp2_fgXjM-W_s.roa
File: UO2WvmvgD9ErNxMp2_fgXjM-W_s.roa (raw, json)
Hash identifier: IWEe0qpY1PVKnEeqGjR6bdS7Dz3/CcynR/g65yACyHE=
Subject key identifier: 50:ED:96:BE:6B:E0:0F:D1:2B:37:13:29:DB:F7:E0:5E:33:3E:5B:FB
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 393E70CE
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/UO2WvmvgD9ErNxMp2_fgXjM-W_s.roa
Signing time: Sat 01 Jan 2022 03:52:57 +0000
ROA not before: Sat 01 Jan 2022 03:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8617
IP address blocks: 195.251.152.0/21 maxlen: 21
195.251.160.0/21 maxlen: 21
195.251.168.0/21 maxlen: 21
195.251.176.0/21 maxlen: 21
195.251.184.0/21 maxlen: 21
195.251.128.0/18 maxlen: 18
2001:648:2050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960393422 (0x393e70ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50ed96be6be00fd12b371329dbf7e05e333e5bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:7c:3e:7f:8a:0f:1f:13:b5:37:8d:e1:26:
3d:7c:01:0a:b1:00:4b:a7:37:db:dd:74:d9:eb:45:
2f:a1:6d:72:68:69:a0:7b:4d:b1:6c:de:86:4f:aa:
8d:02:04:03:e6:78:eb:c2:da:ab:ab:81:e9:ec:df:
e3:25:72:ad:cd:9d:ee:be:6c:51:13:f1:90:ce:13:
81:14:3c:12:2b:41:f5:67:21:ee:da:61:18:7c:db:
bf:b1:57:39:81:b2:e7:02:36:ef:83:ac:60:8a:39:
7e:19:dc:03:3c:4a:9d:28:82:d9:9b:ff:95:3a:e2:
ef:73:dd:20:96:41:53:c6:0e:d3:e8:f0:9f:27:e1:
4b:e8:2b:f5:11:a7:37:b3:4f:a2:ee:90:c6:71:75:
52:15:90:95:14:64:d8:b5:29:2f:f1:fc:1d:92:33:
f1:04:0d:21:1e:98:52:c0:17:a0:86:5b:51:1a:ac:
1a:ee:6d:00:22:d9:dc:bd:95:73:c3:f5:ac:70:ee:
d9:2c:0b:48:a6:90:ca:bd:56:c0:85:96:56:45:19:
0d:6f:64:45:59:1b:01:cd:1b:c1:c5:61:d7:fb:a4:
9d:ab:f7:08:a4:8f:4e:ed:bd:8d:75:15:5b:ea:07:
85:5b:d3:5a:a9:4a:56:df:7e:3b:3f:ab:1b:88:c1:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:ED:96:BE:6B:E0:0F:D1:2B:37:13:29:DB:F7:E0:5E:33:3E:5B:FB
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/UO2WvmvgD9ErNxMp2_fgXjM-W_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.128.0/18
IPv6:
2001:648:2050::/48
Signature Algorithm: sha256WithRSAEncryption
0b:b6:bb:52:0e:ce:61:c7:27:d6:78:7d:f0:4e:91:42:fd:a2:
72:0b:6a:6a:27:2a:cb:c2:65:30:00:24:24:9d:59:7c:4b:d8:
1d:23:18:dc:af:58:b8:4f:96:b4:4d:12:7b:96:3f:16:d4:51:
0d:66:cd:1d:cf:8e:e0:76:5d:e4:eb:96:f6:60:24:82:ad:b6:
e4:8b:a1:fa:8c:37:be:fb:5d:95:ab:04:5a:d8:d3:8a:7d:ed:
9f:15:fc:9e:9b:20:da:54:00:17:95:37:40:29:dc:4e:08:02:
f4:4a:97:f6:53:e9:33:d2:fd:81:6c:0f:3b:c8:59:b1:3b:98:
50:95:c0:95:91:37:18:43:58:6b:43:59:bc:9b:8b:41:c3:5e:
6e:22:39:73:05:b3:bb:12:de:29:2e:bf:4b:91:58:72:ea:e1:
7a:47:b1:ac:57:6c:9d:4e:7f:55:98:9f:2c:45:4f:8b:dd:be:
2c:3a:82:be:1e:31:99:9f:ad:1c:e0:4d:d1:7b:dc:54:65:b1:
0f:c5:47:03:5f:6f:cd:eb:28:90:82:0f:77:5c:9a:71:80:a9:
77:ba:1a:9c:d9:5e:68:3e:fd:79:a7:17:bf:e2:1e:db:6d:95:
37:4b:29:0c:22:0a:31:07:45:4a:9a:d8:d6:48:96:b6:7b:60:
b4:66:78:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEOT5wzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YTZmOTI5NTUyMWRmMzBhMTU4ZjUwNmJhN2NiODczYWI5NTI5ZGMzMB4XDTIyMDEw
MTAzNTI1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBlZDk2YmU2YmUw
MGZkMTJiMzcxMzI5ZGJmN2UwNWUzMzNlNWJmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAnfD5/ig8fE7U3jeEmPXwBCrEAS6c329102etFL6Ftcmhp
oHtNsWzehk+qjQIEA+Z468Laq6uB6ezf4yVyrc2d7r5sURPxkM4TgRQ8EitB9Wch
7tphGHzbv7FXOYGy5wI274OsYIo5fhncAzxKnSiC2Zv/lTri73PdIJZBU8YO0+jw
nyfhS+gr9RGnN7NPou6QxnF1UhWQlRRk2LUpL/H8HZIz8QQNIR6YUsAXoIZbURqs
Gu5tACLZ3L2Vc8P1rHDu2SwLSKaQyr1WwIWWVkUZDW9kRVkbAc0bwcVh1/uknav3
CKSPTu29jXUVW+oHhVvTWqlKVt9+Oz+rG4jBOz8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRQ7Za+a+AP0Ss3Eynb9+BeMz5b+zAfBgNVHSMEGDAWgBRab5KVUh3zChWP
UGuny4c6uVKdwzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dtLVNsVklkOHdvVmoxQnJwOHVIT3JsU25jTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYTlmOTNiLWJlMzEtNDVjZi1hYTdlLWFhYTQ1NTNkMmFiZC8x
L1VPMld2bXZnRDlFck54TXAyX2ZnWGpNLVdfcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YTlmOTNiLWJlMzEtNDVjZi1hYTdlLWFhYTQ1NTNkMmFiZC8xL1dtLVNsVklkOHdv
VmoxQnJwOHVIT3JsU25jTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEBsP7gDAPBAIAAjAJAwcAIAEGSCBQ
MA0GCSqGSIb3DQEBCwUAA4IBAQALtrtSDs5hxyfWeH3wTpFC/aJyC2pqJyrLwmUw
ACQknVl8S9gdIxjcr1i4T5a0TRJ7lj8W1FENZs0dz47gdl3k65b2YCSCrbbki6H6
jDe++12VqwRa2NOKfe2fFfyemyDaVAAXlTdAKdxOCAL0Spf2U+kz0v2BbA87yFmx
O5hQlcCVkTcYQ1hrQ1m8m4tBw15uIjlzBbO7Et4pLr9LkVhy6uF6R7GsV2ydTn9V
mJ8sRU+L3b4sOoK+HjGZn60c4E3Re9xUZbEPxUcDX2/N6yiQgg93XJpxgKl3uhqc
2V5oPv15pxe/4h7bbZU3SykMIgoxB0VKmtjWSJa2e2C0ZniT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org