Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/lZZ1UlhqChSLmPokm_xJhituFXU.roa
File: lZZ1UlhqChSLmPokm_xJhituFXU.roa (raw, json)
Hash identifier: RHaWu/xGcr0LfNKx9Lf+L0dqrAXjmVKfD68op4+ALl4=
Subject key identifier: 95:96:75:52:58:6A:0A:14:8B:98:FA:24:9B:FC:49:86:2B:6E:15:75
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0677D719
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/lZZ1UlhqChSLmPokm_xJhituFXU.roa
Signing time: Sat 16 Apr 2022 09:04:15 +0000
ROA not before: Sat 16 Apr 2022 09:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 95.38.144.0/24 maxlen: 24
95.38.144.0/22 maxlen: 22
95.38.145.0/24 maxlen: 24
95.38.147.0/24 maxlen: 24
95.38.149.0/24 maxlen: 24
95.38.148.0/22 maxlen: 22
95.38.148.0/24 maxlen: 24
95.38.151.0/24 maxlen: 24
95.38.150.0/24 maxlen: 24
95.38.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108517145 (0x677d719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Apr 16 09:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95967552586a0a148b98fa249bfc49862b6e1575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:15:dd:77:e9:ab:d1:ed:b9:86:ae:36:3b:
2a:03:e1:95:6d:4c:f7:4f:2d:8a:13:f3:61:e3:2f:
c0:ac:2a:94:a1:7a:41:01:9d:91:0d:58:b1:8d:ee:
2e:0d:a5:05:86:cb:b6:d2:41:a7:21:45:74:75:99:
87:e8:0c:c5:89:9f:82:35:9f:4a:04:06:51:83:ea:
1a:33:aa:f9:89:ed:37:2d:31:dd:f1:ed:b6:5e:72:
ed:29:79:3c:6b:77:49:97:9a:03:8a:40:df:da:8c:
11:df:d0:86:c6:9e:27:34:7f:84:2f:c6:a2:22:79:
6e:d9:5f:bf:73:3d:b8:0b:48:55:e6:d3:8f:4f:2f:
83:99:17:0d:fe:47:88:cf:bd:d1:29:3e:c5:a3:8f:
46:bc:cc:c8:0e:f7:75:55:9e:e8:5b:a5:b8:9e:07:
ee:d0:1a:c9:74:0b:cf:b7:22:c0:a7:b8:fd:72:1b:
dc:fc:82:cd:d6:94:6b:60:06:84:4c:de:38:e6:e4:
f1:51:1c:de:78:74:d4:00:1b:7c:e2:0d:76:a5:f0:
c6:9a:23:4f:92:4d:29:81:e1:d3:07:49:eb:7e:b4:
39:d3:52:dc:1b:ad:a1:61:a3:11:4d:d5:9f:12:cd:
60:a5:46:e6:4e:9e:ef:c0:61:6f:0d:3d:5e:0b:55:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:75:52:58:6A:0A:14:8B:98:FA:24:9B:FC:49:86:2B:6E:15:75
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/lZZ1UlhqChSLmPokm_xJhituFXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.144.0/21
Signature Algorithm: sha256WithRSAEncryption
44:d4:66:38:63:a6:05:35:4e:af:c0:e3:98:07:b2:55:49:74:
f7:30:b2:c8:de:74:ca:95:a3:ee:16:2a:8b:16:ba:c3:45:22:
16:8f:b0:09:be:99:ab:0e:60:0d:9c:26:35:9a:6f:bb:ca:dd:
c5:78:ca:2a:57:03:9a:be:22:c7:77:0a:5f:f3:cb:6b:18:99:
bb:7c:53:7e:90:6c:16:6e:1c:f4:f5:2e:02:5d:7b:fb:b1:81:
f2:7f:0d:dd:ae:96:54:dc:71:af:0a:6e:99:2c:e8:3a:38:1a:
83:0e:9a:d7:da:c3:3b:3c:a8:e4:c5:a7:3a:f5:45:75:37:98:
c7:04:59:64:6b:de:8a:b8:44:b0:94:07:f7:06:af:4b:1f:35:
4d:c9:f6:6b:db:7b:05:86:3e:ad:5f:d4:8a:37:bf:a2:02:e3:
c5:39:c3:83:3a:f0:c5:51:0e:d7:b8:56:77:03:2d:02:ff:d0:
cb:39:4b:eb:4b:b3:45:1f:8d:a2:8c:21:8a:ae:a3:71:d2:9f:
b6:b8:3f:f3:89:98:f0:b4:3b:1f:a8:5b:75:9c:ba:df:7b:2c:
4d:e0:36:97:04:55:98:43:45:a2:98:5b:8d:4d:bb:5a:3b:cb:
79:7c:9c:48:fa:b8:64:3a:a5:0c:2e:7f:f9:f5:61:7a:85:ab:
45:32:64:80
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBnfXGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGMxMDQwNDE2OTFkYzM4NGYzYjFhOGNkZjk1Yzk2NjI4ZWE2ZGFmMB4XDTIyMDQx
NjA5MDQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU5Njc1NTI1ODZh
MGExNDhiOThmYTI0OWJmYzQ5ODYyYjZlMTU3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANO1Fd136avR7bmGrjY7KgPhlW1M908tihPzYeMvwKwqlKF6
QQGdkQ1YsY3uLg2lBYbLttJBpyFFdHWZh+gMxYmfgjWfSgQGUYPqGjOq+YntNy0x
3fHttl5y7Sl5PGt3SZeaA4pA39qMEd/QhsaeJzR/hC/GoiJ5btlfv3M9uAtIVebT
j08vg5kXDf5HiM+90Sk+xaOPRrzMyA73dVWe6FuluJ4H7tAayXQLz7ciwKe4/XIb
3PyCzdaUa2AGhEzeOObk8VEc3nh01AAbfOINdqXwxpojT5JNKYHh0wdJ6360OdNS
3ButoWGjEU3VnxLNYKVG5k6e78Bhbw09XgtVD0cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVlnVSWGoKFIuY+iSb/EmGK24VdTAfBgNVHSMEGDAWgBTwwQQEFpHcOE87
GozflclmKOptrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhNRUVCQmFSM0RoUE94cU0zNVhKWmlqcWJhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvNzg5Y2FmLWM4ZDItNDE5ZS1hZTA0LTY5MTQyMjMxMTcyOS8x
L2xaWjFVbGhxQ2hTTG1Qb2ttX3hKaGl0dUZYVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
Nzg5Y2FmLWM4ZDItNDE5ZS1hZTA0LTY5MTQyMjMxMTcyOS8xLzhNRUVCQmFSM0Ro
UE94cU0zNVhKWmlqcWJhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA18mkDANBgkqhkiG9w0BAQsFAAOC
AQEARNRmOGOmBTVOr8DjmAeyVUl09zCyyN50ypWj7hYqixa6w0UiFo+wCb6Zqw5g
DZwmNZpvu8rdxXjKKlcDmr4ix3cKX/PLaxiZu3xTfpBsFm4c9PUuAl17+7GB8n8N
3a6WVNxxrwpumSzoOjgagw6a19rDOzyo5MWnOvVFdTeYxwRZZGveirhEsJQH9wav
Sx81Tcn2a9t7BYY+rV/Uije/ogLjxTnDgzrwxVEO17hWdwMtAv/QyzlL60uzRR+N
oowhiq6jcdKftrg/84mY8LQ7H6hbdZy633ssTeA2lwRVmENFophbjU27WjvLeXyc
SPq4ZDqlDC5/+fVheoWrRTJkgA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org