Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/mm0m0H67SM3avLuV3OUFxq5_F5U.roa
File: mm0m0H67SM3avLuV3OUFxq5_F5U.roa (raw, json)
Hash identifier: Cz5yW6QFNG3tvp2HVvHpeV6CKW9FBtWujblpZgYdit0=
Subject key identifier: 9A:6D:26:D0:7E:BB:48:CD:DA:BC:BB:95:DC:E5:05:C6:AE:7F:17:95
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 3943D5A4
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/mm0m0H67SM3avLuV3OUFxq5_F5U.roa
Signing time: Sat 01 Jan 2022 03:53:03 +0000
ROA not before: Sat 01 Jan 2022 03:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15948
IP address blocks: 195.251.205.0/24 maxlen: 24
195.251.206.0/23 maxlen: 23
194.177.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960746916 (0x3943d5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a6d26d07ebb48cddabcbb95dce505c6ae7f1795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:d7:76:5e:4b:29:5b:28:52:f8:eb:f1:08:
52:52:c3:dd:f4:02:02:31:53:f4:9d:cd:3a:c7:da:
16:a8:12:21:26:e5:08:2c:0e:1d:ee:4c:81:ce:94:
8d:c4:d5:a7:79:8a:2b:f2:09:f3:80:e8:ac:58:fa:
c9:01:7d:0d:9a:a2:31:f2:86:89:39:7a:e9:e9:99:
95:4c:99:9c:0f:f1:55:d8:72:ed:ec:ea:fa:8b:9d:
51:c9:09:21:58:c3:ee:18:07:af:43:1a:d0:4a:eb:
92:1e:b9:60:1a:23:52:e1:2c:f7:ef:c8:cd:f0:6e:
73:61:38:af:b9:a7:b8:d3:c9:9c:32:0d:a5:69:a2:
28:34:cd:4b:43:c7:d4:b6:78:4f:d4:b3:5d:24:fc:
20:86:3d:98:bc:c8:90:35:2c:88:4d:a6:db:13:00:
aa:34:58:f9:fb:2e:f5:25:86:e4:99:31:8c:0d:78:
b4:33:77:d5:a1:b2:79:74:f0:f8:91:5e:48:76:43:
f2:e1:a9:fa:30:be:7f:38:7a:c6:73:a8:6d:31:06:
26:7a:b3:b6:75:bd:13:fa:35:f8:68:15:12:b7:1a:
3d:88:51:fb:84:68:a7:f0:36:f4:9c:6d:7c:9e:77:
9e:7e:b4:dd:b7:80:4e:e3:f6:0d:26:b4:97:f7:6a:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:26:D0:7E:BB:48:CD:DA:BC:BB:95:DC:E5:05:C6:AE:7F:17:95
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/mm0m0H67SM3avLuV3OUFxq5_F5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.193.0/24
195.251.205.0-195.251.207.255
Signature Algorithm: sha256WithRSAEncryption
31:39:80:6a:ec:d2:7e:b2:e6:2f:3b:54:a7:a3:58:87:5c:19:
7c:77:24:66:5e:d2:a1:8a:05:55:47:48:88:ba:de:a3:c8:6c:
d5:82:f1:d9:c3:4e:9e:e6:24:a1:46:37:33:8b:6e:db:06:83:
f9:0e:b4:9a:e0:cf:24:de:84:40:2b:f0:8a:3c:fa:fb:25:d3:
01:1e:8f:31:33:ca:62:ff:ed:c0:0e:ef:7e:37:ca:93:b8:49:
27:39:9b:50:d0:56:64:f9:a3:9c:43:f4:ad:da:f9:48:11:a0:
f2:57:d5:6f:77:1d:1e:05:d2:df:59:48:b8:55:53:48:12:aa:
fc:50:9f:c1:35:5b:8d:c4:64:9a:b1:61:bf:77:fc:9a:ee:f8:
a1:d1:39:68:42:0a:00:2f:a2:c7:70:98:79:28:ed:4d:44:3d:
38:74:a1:a0:fb:d3:fb:73:81:46:e2:c6:7d:e9:d7:0e:0b:68:
e4:15:ea:7e:d1:bb:50:38:93:27:b7:69:24:3c:7e:79:6a:1f:
23:e8:ec:49:e4:08:b0:c6:72:b9:5e:dd:a4:63:08:63:d7:09:
dc:df:f2:73:da:d3:b0:1c:99:e1:a1:7e:58:6f:31:1a:d8:99:
5f:f8:86:6d:29:8f:17:2a:dd:58:72:17:00:15:5c:26:cd:50:
d7:4f:46:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEOUPVpDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YTZmOTI5NTUyMWRmMzBhMTU4ZjUwNmJhN2NiODczYWI5NTI5ZGMzMB4XDTIyMDEw
MTAzNTMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE2ZDI2ZDA3ZWJi
NDhjZGRhYmNiYjk1ZGNlNTA1YzZhZTdmMTc5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAODG13ZeSylbKFL46/EIUlLD3fQCAjFT9J3NOsfaFqgSISbl
CCwOHe5Mgc6UjcTVp3mKK/IJ84DorFj6yQF9DZqiMfKGiTl66emZlUyZnA/xVdhy
7ezq+oudUckJIVjD7hgHr0Ma0Errkh65YBojUuEs9+/IzfBuc2E4r7mnuNPJnDIN
pWmiKDTNS0PH1LZ4T9SzXST8IIY9mLzIkDUsiE2m2xMAqjRY+fsu9SWG5JkxjA14
tDN31aGyeXTw+JFeSHZD8uGp+jC+fzh6xnOobTEGJnqztnW9E/o1+GgVErcaPYhR
+4Rop/A29JxtfJ53nn603beATuP2DSa0l/dqCTkCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBSabSbQfrtIzdq8u5Xc5QXGrn8XlTAfBgNVHSMEGDAWgBRab5KVUh3zChWP
UGuny4c6uVKdwzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dtLVNsVklkOHdvVmoxQnJwOHVIT3JsU25jTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYTlmOTNiLWJlMzEtNDVjZi1hYTdlLWFhYTQ1NTNkMmFiZC8x
L21tMG0wSDY3U00zYXZMdVYzT1VGeHE1X0Y1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YTlmOTNiLWJlMzEtNDVjZi1hYTdlLWFhYTQ1NTNkMmFiZC8xL1dtLVNsVklkOHdv
VmoxQnJwOHVIT3JsU25jTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAMKxwTAMAwQAw/vNAwQEw/vAMA0G
CSqGSIb3DQEBCwUAA4IBAQAxOYBq7NJ+suYvO1Sno1iHXBl8dyRmXtKhigVVR0iI
ut6jyGzVgvHZw06e5iShRjczi27bBoP5DrSa4M8k3oRAK/CKPPr7JdMBHo8xM8pi
/+3ADu9+N8qTuEknOZtQ0FZk+aOcQ/St2vlIEaDyV9Vvdx0eBdLfWUi4VVNIEqr8
UJ/BNVuNxGSasWG/d/ya7vih0TloQgoAL6LHcJh5KO1NRD04dKGg+9P7c4FG4sZ9
6dcOC2jkFep+0btQOJMnt2kkPH55ah8j6OxJ5AiwxnK5Xt2kYwhj1wnc3/Jz2tOw
HJnhoX5YbzEa2Jlf+IZtKY8XKt1YchcAFVwmzVDXT0Y4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org