Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/1-n_dX1tr5GKtP6JYxl4_HB5eK0g.roa
File: 1-n_dX1tr5GKtP6JYxl4_HB5eK0g.roa (raw, json)
Hash identifier: 4/We6rI69TQC4TNC11l4LJcpnYQml9v0ymT8+/uZV9Y=
Subject key identifier: FA:7F:DD:5F:5B:6B:E4:62:AD:3F:A2:58:C6:5E:3F:1C:1E:5E:2B:48
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 06C1215A
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/1-n_dX1tr5GKtP6JYxl4_HB5eK0g.roa
Signing time: Sat 01 Jan 2022 14:06:25 +0000
ROA not before: Sat 01 Jan 2022 14:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47264
IP address blocks: 80.247.95.0/24 maxlen: 24
185.95.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113320282 (0x6c1215a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 1 14:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa7fdd5f5b6be462ad3fa258c65e3f1c1e5e2b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:53:67:bf:32:d8:50:13:cc:88:f0:ac:dc:
ec:a4:8d:8b:4f:94:e2:04:0a:a4:7f:dc:18:73:2a:
c3:74:39:d0:a4:54:38:4d:47:b4:2c:a3:db:c4:f8:
9e:68:f3:1c:96:d7:68:8d:fe:cb:ce:9f:94:8d:ea:
1f:8b:e8:aa:ba:62:74:bf:32:e7:a7:bd:29:9f:15:
6b:12:c2:19:35:ac:ec:3c:51:33:16:ba:37:b6:12:
59:b1:f4:9b:57:4c:bb:4a:95:33:8d:c7:87:61:10:
35:4d:a6:43:a9:85:f8:3f:b9:8e:c5:1b:5e:15:81:
e2:1b:dd:77:e3:32:12:e6:79:ab:4b:aa:f2:94:af:
6d:8c:60:63:77:11:ab:99:2c:0f:74:30:f1:da:be:
7b:ba:74:26:85:32:77:bf:71:3c:21:fe:3b:cd:9c:
56:e2:e7:bc:64:68:52:c9:75:c4:10:76:02:c1:67:
68:33:d5:53:b7:f9:3a:38:91:d1:64:00:f0:4e:c6:
4b:d3:6c:c5:9a:a5:f9:fd:42:95:e6:05:ac:77:ea:
cc:1b:eb:96:6e:cb:e6:f3:bf:35:f4:46:16:37:ea:
74:d7:55:33:39:91:72:6b:0d:f7:3e:82:71:e9:37:
b2:e1:b8:de:14:be:17:ee:18:ee:74:32:98:0b:e0:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:DD:5F:5B:6B:E4:62:AD:3F:A2:58:C6:5E:3F:1C:1E:5E:2B:48
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/1-n_dX1tr5GKtP6JYxl4_HB5eK0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.95.0/24
185.95.48.0/22
Signature Algorithm: sha256WithRSAEncryption
80:fe:27:31:8a:13:f9:cd:ce:9f:c4:e4:75:d9:d0:c1:88:63:
98:bb:39:ea:20:89:13:56:41:9a:77:86:d0:2b:b7:4b:48:4e:
49:32:12:e2:a2:29:35:d8:e9:ee:73:71:c8:8c:e2:bc:94:dc:
f6:d3:6a:98:5c:09:80:fe:64:14:68:9f:0e:54:3c:6e:26:41:
da:7d:99:8b:52:a1:ec:2b:e6:b2:54:db:72:b6:f3:84:6f:86:
88:f9:54:ae:1a:42:21:e4:ee:8c:b9:82:b2:f1:3d:70:5c:a0:
1b:9d:34:9a:89:ae:09:d5:9b:05:ef:40:68:ad:38:15:34:96:
28:93:e6:69:d3:98:5a:77:de:4d:c3:05:46:f8:90:a8:86:ff:
4d:79:cf:ab:66:02:91:26:2d:68:d4:1d:01:96:5f:e3:e0:c0:
09:fc:85:cb:77:90:48:27:62:ac:72:62:5b:ee:8c:69:92:73:
7e:7c:30:8d:df:31:6b:92:e8:72:17:b8:af:e3:35:70:55:70:
6a:59:c6:54:61:41:45:7b:c8:c6:5c:5e:39:b7:39:c6:1d:31:
67:c6:70:e7:2f:64:13:62:9a:e5:8e:2f:81:d6:34:14:c6:a0:
1d:9b:35:3c:19:ae:b6:de:b2:38:c7:2a:d5:86:1a:17:53:bc:
c1:33:54:9b
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIEBsEhWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZDZmMmU0OWEzMWU4ZGY5YzVhYTA4YWFmMjQwYjVjODMyYjljYjkzMB4XDTIyMDEw
MTE0MDYyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmE3ZmRkNWY1YjZi
ZTQ2MmFkM2ZhMjU4YzY1ZTNmMWMxZTVlMmI0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWHU2e/MthQE8yI8Kzc7KSNi0+U4gQKpH/cGHMqw3Q50KRU
OE1HtCyj28T4nmjzHJbXaI3+y86flI3qH4voqrpidL8y56e9KZ8VaxLCGTWs7DxR
Mxa6N7YSWbH0m1dMu0qVM43Hh2EQNU2mQ6mF+D+5jsUbXhWB4hvdd+MyEuZ5q0uq
8pSvbYxgY3cRq5ksD3Qw8dq+e7p0JoUyd79xPCH+O82cVuLnvGRoUsl1xBB2AsFn
aDPVU7f5OjiR0WQA8E7GS9NsxZql+f1CleYFrHfqzBvrlm7L5vO/NfRGFjfqdNdV
MzmRcmsN9z6Ccek3suG43hS+F+4Y7nQymAvg0YkCAwEAAaOCAhAwggIMMB0GA1Ud
DgQWBBT6f91fW2vkYq0/oljGXj8cHl4rSDAfBgNVHSMEGDAWgBRdby5Jox6N+cWq
CKryQLXIMrnLkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hXOHVTYU1lamZuRnFnaXE4a0MxeURLNXk1TS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvNTUyMWY3LTJmNzEtNGJmOS1hMTQ4LTJlOWRlMjUyZDFmNi8x
LzEtbl9kWDF0cjVHS3RQNkpZeGw0X0hCNWVLMGcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Ni
LzU1MjFmNy0yZjcxLTRiZjktYTE0OC0yZTlkZTI1MmQxZjYvMS9YVzh1U2FNZWpm
bkZxZ2lxOGtDMXlESzV5NU0uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABQ918DBAK5XzAwDQYJKoZIhvcN
AQELBQADggEBAID+JzGKE/nNzp/E5HXZ0MGIY5i7OeogiRNWQZp3htArt0tITkky
EuKiKTXY6e5zcciM4ryU3PbTaphcCYD+ZBRonw5UPG4mQdp9mYtSoewr5rJU23K2
84Rvhoj5VK4aQiHk7oy5grLxPXBcoBudNJqJrgnVmwXvQGitOBU0liiT5mnTmFp3
3k3DBUb4kKiG/015z6tmApEmLWjUHQGWX+PgwAn8hct3kEgnYqxyYlvujGmSc358
MI3fMWuS6HIXuK/jNXBVcGpZxlRhQUV7yMZcXjm3OcYdMWfGcOcvZBNimuWOL4HW
NBTGoB2bNTwZrrbesjjHKtWGGhdTvMEzVJs=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:00 2023 by rpki-client on console-fra.rpki-client.org