Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/0W4NwHRHB1_EJvvEHZ1G4EtftVk.roa
File: 0W4NwHRHB1_EJvvEHZ1G4EtftVk.roa (raw, json)
Hash identifier: ygM3qb1unS8vbmOqJKIZ0t1PjZUN0zSLx3Qgn+NTkjI=
Subject key identifier: D1:6E:0D:C0:74:47:07:5F:C4:26:FB:C4:1D:9D:46:E0:4B:5F:B5:59
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 05163684
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/0W4NwHRHB1_EJvvEHZ1G4EtftVk.roa
Signing time: Sat 01 Jan 2022 04:56:42 +0000
ROA not before: Sat 01 Jan 2022 04:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60395
IP address blocks: 195.10.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85341828 (0x5163684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jan 1 04:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d16e0dc07447075fc426fbc41d9d46e04b5fb559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:f7:c5:8f:71:cb:f1:14:30:c4:7a:78:08:
ca:0c:4c:97:7b:b0:ca:77:7c:dc:21:43:2f:34:ff:
ad:b3:1c:a6:dc:70:5d:a1:b2:2c:9d:92:87:d9:0b:
fc:a4:ab:8a:9d:64:22:96:12:2e:16:76:53:82:40:
b6:ed:40:4f:c1:5b:db:1a:f2:a7:4a:11:f8:92:f4:
a2:4d:bb:04:e7:ba:be:e1:03:14:bf:3c:73:d4:61:
70:28:61:19:3a:83:2c:f7:70:55:44:78:91:51:c6:
b4:aa:52:e2:3c:84:ad:90:be:14:7a:e2:5b:d6:33:
b9:03:2f:9b:0d:38:e4:4d:26:2b:e4:2f:37:b8:8a:
2d:be:74:d2:b9:c4:ad:6c:57:05:6c:f9:fe:33:27:
36:2d:7f:a9:23:c9:1b:b3:df:72:79:4f:83:cb:74:
17:d7:45:0a:b1:4e:23:e5:ab:03:58:de:91:d7:4e:
4b:65:1a:5a:5e:41:eb:a7:a9:7f:25:ea:1b:66:5c:
de:c1:5f:c7:54:4d:87:46:e0:60:fb:ba:eb:6e:24:
5b:9d:0e:30:67:0e:2a:12:87:fe:24:f1:54:49:6a:
91:b0:f6:30:81:d3:71:9c:6a:aa:04:b1:75:0d:50:
fe:c0:58:a2:dc:27:e4:48:f7:45:7a:83:87:19:18:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:0D:C0:74:47:07:5F:C4:26:FB:C4:1D:9D:46:E0:4B:5F:B5:59
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/0W4NwHRHB1_EJvvEHZ1G4EtftVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
56:54:ff:f6:e2:c2:04:5f:9a:68:09:84:6f:a2:50:42:b4:7b:
5e:e0:25:5a:a3:53:a1:49:c5:a0:5b:3b:4f:15:b3:28:23:88:
fe:74:66:73:c0:80:cb:a8:2d:a1:f0:39:94:06:b8:b7:08:52:
f7:e5:7b:a6:cf:32:54:59:9d:aa:c8:b9:21:68:bb:07:5a:71:
bc:bc:84:5d:f4:ff:0b:5d:50:e3:08:aa:dc:a7:9e:29:36:a5:
36:79:fe:96:7a:30:db:0c:02:cd:2b:1c:1d:d2:eb:9d:9c:d1:
c9:cc:22:4f:6d:c3:db:cc:aa:ff:0e:72:31:21:bf:f8:6f:5f:
0f:fa:0f:66:c1:c3:ae:9f:29:6f:08:59:18:31:be:5a:e7:9d:
3d:18:32:79:0b:d8:2d:4a:aa:ce:e1:4d:e5:f5:0d:92:48:af:
19:66:e0:1b:99:26:a0:e3:75:01:10:db:1d:a1:37:81:87:62:
bf:d1:18:4d:25:d6:9b:09:5d:96:a5:19:c5:42:85:d2:23:96:
38:3c:ed:7a:64:31:8c:d0:a4:b3:5e:d6:d8:75:7e:2b:1e:57:
b0:e2:77:35:c5:b8:7b:7f:2a:aa:52:ed:67:22:52:e6:aa:14:
7e:5a:11:37:c0:2c:29:30:08:23:89:71:ba:6f:b8:93:2e:83:
39:95:f9:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBRY2hDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZDQ0MmJkZGEyYTM1MzIwYTk2ZDgwNmJmMTY4ZDViODRhNzZkNDI2MB4XDTIyMDEw
MTA0NTY0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDE2ZTBkYzA3NDQ3
MDc1ZmM0MjZmYmM0MWQ5ZDQ2ZTA0YjVmYjU1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxq98WPccvxFDDEengIygxMl3uwynd83CFDLzT/rbMcptxw
XaGyLJ2Sh9kL/KSrip1kIpYSLhZ2U4JAtu1AT8Fb2xryp0oR+JL0ok27BOe6vuED
FL88c9RhcChhGTqDLPdwVUR4kVHGtKpS4jyErZC+FHriW9YzuQMvmw045E0mK+Qv
N7iKLb500rnErWxXBWz5/jMnNi1/qSPJG7PfcnlPg8t0F9dFCrFOI+WrA1jekddO
S2UaWl5B66epfyXqG2Zc3sFfx1RNh0bgYPu6624kW50OMGcOKhKH/iTxVElqkbD2
MIHTcZxqqgSxdQ1Q/sBYotwn5Ej3RXqDhxkYF18CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTRbg3AdEcHX8Qm+8QdnUbgS1+1WTAfBgNVHSMEGDAWgBStRCvdoqNTIKlt
gGvxaNW4SnbUJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JVUXIzYUtqVXlDcGJZQnI4V2pWdUVwMjFDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzkvZGQ2NzJkLWU5ODAtNGRjYS05MTk1LTg1OWRiY2EzODcxNC8x
LzBXNE53SFJIQjFfRUp2dkVIWjFHNEV0ZnRWay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkv
ZGQ2NzJkLWU5ODAtNGRjYS05MTk1LTg1OWRiY2EzODcxNC8xL3JVUXIzYUtqVXlD
cGJZQnI4V2pWdUVwMjFDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMK3jANBgkqhkiG9w0BAQsFAAOC
AQEAVlT/9uLCBF+aaAmEb6JQQrR7XuAlWqNToUnFoFs7TxWzKCOI/nRmc8CAy6gt
ofA5lAa4twhS9+V7ps8yVFmdqsi5IWi7B1pxvLyEXfT/C11Q4wiq3KeeKTalNnn+
lnow2wwCzSscHdLrnZzRycwiT23D28yq/w5yMSG/+G9fD/oPZsHDrp8pbwhZGDG+
WuedPRgyeQvYLUqqzuFN5fUNkkivGWbgG5kmoON1ARDbHaE3gYdiv9EYTSXWmwld
lqUZxUKF0iOWODztemQxjNCks17W2HV+Kx5XsOJ3NcW4e38qqlLtZyJS5qoUfloR
N8AsKTAII4lxum+4ky6DOZX5hQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:48 2024 by rpki-client on console-fra.rpki-client.org