Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ad3T9Ni-b2x9O6YXEy4uzq8oX5g.roa
File: ad3T9Ni-b2x9O6YXEy4uzq8oX5g.roa (raw, json)
Hash identifier: OW2H56Muw5OMkQpaEdRf/8XH3qNfS9URw0UQ04MS/tc=
Subject key identifier: 69:DD:D3:F4:D8:BE:6F:6C:7D:3B:A6:17:13:2E:2E:CE:AF:28:5F:98
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 3949B2B6
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ad3T9Ni-b2x9O6YXEy4uzq8oX5g.roa
Signing time: Sat 01 Jan 2022 03:53:05 +0000
ROA not before: Sat 01 Jan 2022 03:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201374
IP address blocks: 195.251.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961131190 (0x3949b2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69ddd3f4d8be6f6c7d3ba617132e2eceaf285f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:f5:78:04:93:cc:a1:38:fa:83:da:80:02:
6a:a3:38:f7:39:76:bd:70:1a:ea:56:00:fe:fc:d7:
a4:be:15:6a:78:40:ea:33:08:2f:81:91:11:9f:f4:
8b:ba:4d:e1:ed:49:28:da:92:c7:f3:5f:ed:74:91:
a0:58:88:f1:3b:33:66:60:07:ab:93:66:d1:eb:b1:
7d:29:8c:67:58:c6:b2:bd:6d:7a:77:07:de:1d:ce:
32:1c:b5:4f:38:df:31:d1:76:33:61:80:b1:46:6a:
65:11:15:27:85:2e:44:a7:ea:c7:90:77:56:cd:5a:
57:e9:f1:6a:5c:ee:54:0d:72:15:b7:3f:30:20:41:
57:d2:e4:2f:59:a7:e8:e7:3a:5f:7f:13:79:27:79:
b2:71:f5:92:ef:b6:f8:9e:83:23:b5:76:41:7f:4d:
23:5e:19:1b:a6:11:ee:b2:62:f4:9c:eb:2e:df:7e:
a1:87:42:c5:55:63:14:1c:13:d3:af:19:db:0d:6a:
1b:b7:ac:81:ee:cd:6d:8f:ab:21:b9:65:3a:af:06:
d6:27:c2:da:31:4c:46:29:25:ab:a7:8f:6c:98:09:
7f:04:69:31:5d:9a:e6:36:20:e9:64:ae:30:3e:74:
ee:fb:c4:b4:45:31:6e:c5:09:23:8d:92:10:92:6d:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:D3:F4:D8:BE:6F:6C:7D:3B:A6:17:13:2E:2E:CE:AF:28:5F:98
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ad3T9Ni-b2x9O6YXEy4uzq8oX5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.32.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c6:a9:17:42:9a:19:d7:1a:f9:c0:2c:7c:6e:c4:4c:02:4e:
68:49:60:f2:2a:f5:2e:1f:66:db:5d:7c:12:b6:d5:d5:87:57:
6f:33:a2:a7:70:ee:ac:e6:91:22:6a:a0:fd:7b:e2:5d:4b:f6:
e3:39:c6:0c:b9:1a:c7:4f:69:bc:c8:0e:f6:75:8b:bd:db:25:
0e:ad:02:b9:f3:d9:a5:bc:de:ed:1d:8f:01:a1:5f:b8:2d:41:
25:cb:b6:67:65:42:f4:d8:71:3f:1a:2b:a7:59:a7:cf:4b:4c:
65:5a:2c:b7:e9:3f:ef:25:00:58:33:20:30:e4:98:8e:9e:f6:
4b:ad:26:ff:0c:e3:ec:b2:fd:67:32:c3:e7:5d:2e:4b:74:6f:
ab:e8:a4:73:39:08:69:03:da:3a:a9:92:75:86:cb:d0:2c:c2:
97:97:cc:c5:2f:47:90:e7:96:93:6c:f7:18:2d:3d:9e:55:eb:
56:96:3a:4b:05:6e:92:4a:da:1d:3c:de:64:0b:4b:d6:79:f6:
35:76:dc:69:6c:a9:3a:9d:0e:86:91:92:ae:42:42:97:b9:ca:
80:99:1a:52:1d:a0:cd:03:ec:2f:3e:af:cd:d1:08:63:7e:5a:
72:d1:68:9f:ab:0a:6c:b9:73:0a:64:34:ea:bf:61:48:b2:12:
62:a0:5a:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOUmytjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YTZmOTI5NTUyMWRmMzBhMTU4ZjUwNmJhN2NiODczYWI5NTI5ZGMzMB4XDTIyMDEw
MTAzNTMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjlkZGQzZjRkOGJl
NmY2YzdkM2JhNjE3MTMyZTJlY2VhZjI4NWY5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMaL9XgEk8yhOPqD2oACaqM49zl2vXAa6lYA/vzXpL4VanhA
6jMIL4GREZ/0i7pN4e1JKNqSx/Nf7XSRoFiI8TszZmAHq5Nm0euxfSmMZ1jGsr1t
encH3h3OMhy1TzjfMdF2M2GAsUZqZREVJ4UuRKfqx5B3Vs1aV+nxalzuVA1yFbc/
MCBBV9LkL1mn6Oc6X38TeSd5snH1ku+2+J6DI7V2QX9NI14ZG6YR7rJi9JzrLt9+
oYdCxVVjFBwT068Z2w1qG7esge7NbY+rIbllOq8G1ifC2jFMRiklq6ePbJgJfwRp
MV2a5jYg6WSuMD507vvEtEUxbsUJI42SEJJtkFUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRp3dP02L5vbH07phcTLi7OryhfmDAfBgNVHSMEGDAWgBRab5KVUh3zChWP
UGuny4c6uVKdwzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dtLVNsVklkOHdvVmoxQnJwOHVIT3JsU25jTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYTlmOTNiLWJlMzEtNDVjZi1hYTdlLWFhYTQ1NTNkMmFiZC8x
L2FkM1Q5TmktYjJ4OU82WVhFeTR1enE4b1g1Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YTlmOTNiLWJlMzEtNDVjZi1hYTdlLWFhYTQ1NTNkMmFiZC8xL1dtLVNsVklkOHdv
VmoxQnJwOHVIT3JsU25jTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMP7IDANBgkqhkiG9w0BAQsFAAOC
AQEAdsapF0KaGdca+cAsfG7ETAJOaElg8ir1Lh9m2118ErbV1YdXbzOip3DurOaR
Imqg/XviXUv24znGDLkax09pvMgO9nWLvdslDq0CufPZpbze7R2PAaFfuC1BJcu2
Z2VC9NhxPxorp1mnz0tMZVost+k/7yUAWDMgMOSYjp72S60m/wzj7LL9ZzLD510u
S3Rvq+ikczkIaQPaOqmSdYbL0CzCl5fMxS9HkOeWk2z3GC09nlXrVpY6SwVukkra
HTzeZAtL1nn2NXbcaWypOp0OhpGSrkJCl7nKgJkaUh2gzQPsLz6vzdEIY35actFo
n6sKbLlzCmQ06r9hSLISYqBaOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org