Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iszWVkIsfVXExH_QVLxdAeCDenk.roa
File: iszWVkIsfVXExH_QVLxdAeCDenk.roa (raw, json)
Hash identifier: M81TfXv7TNP5wIURTCYo31P5OWvZhJvax5zV+sx8Nbg=
Subject key identifier: 8A:CC:D6:56:42:2C:7D:55:C4:C4:7F:D0:54:BC:5D:01:E0:83:7A:79
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4251FDCF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iszWVkIsfVXExH_QVLxdAeCDenk.roa
Signing time: Sat 01 Jan 2022 14:02:55 +0000
ROA not before: Sat 01 Jan 2022 14:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 194.132.24.0/24 maxlen: 24
194.132.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112669647 (0x4251fdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8accd656422c7d55c4c47fd054bc5d01e0837a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:58:52:e5:25:d6:4a:af:5a:61:60:43:29:
58:f0:42:a1:a4:95:a3:04:a4:99:b0:c4:a9:92:ba:
85:77:cd:51:e3:d2:92:fe:81:17:b0:a2:b1:22:7b:
1a:b4:cb:78:f6:4d:73:70:4c:95:13:38:32:fd:a2:
ed:d0:d6:b8:75:42:33:62:35:90:29:a6:e7:24:81:
3b:e1:1b:9d:49:20:ab:cf:64:d3:77:1c:4c:af:2c:
d4:a5:07:ec:64:84:45:c2:b1:4a:db:8e:20:8f:b0:
b6:af:4f:bf:b8:e9:26:c8:c1:78:25:51:e3:5f:17:
ed:83:cb:6a:50:9e:8e:11:b3:23:16:82:1e:7c:b9:
95:d1:ba:2c:7e:7a:6a:ab:90:40:01:ec:7c:af:bd:
a7:58:7d:6a:fb:51:4e:31:9b:39:b4:72:90:9f:ce:
60:75:db:ff:29:6e:aa:1d:9e:a8:4e:71:b1:3f:50:
6f:66:49:ea:41:08:e3:30:4c:4b:d9:d2:e5:92:f5:
8d:58:aa:60:ed:dd:5b:97:5a:b6:f8:18:eb:8a:df:
00:b9:48:11:1a:dc:53:f3:f8:c1:d1:44:e1:ce:ec:
8e:76:b9:f3:4d:31:9c:92:9d:f2:ae:ea:84:49:75:
52:a5:fc:29:fb:e6:b9:d9:d3:e9:f9:c7:9e:65:3e:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:D6:56:42:2C:7D:55:C4:C4:7F:D0:54:BC:5D:01:E0:83:7A:79
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iszWVkIsfVXExH_QVLxdAeCDenk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.24.0/23
Signature Algorithm: sha256WithRSAEncryption
43:0b:07:33:03:0f:97:46:b8:d7:2a:33:55:57:57:f3:d3:8d:
7b:eb:fd:26:56:6c:19:ec:86:c2:1b:b7:39:88:9f:b5:51:fe:
c7:e3:5a:20:d5:a6:1a:d4:f3:67:0f:22:48:5e:28:6f:cb:f3:
1a:49:dd:0e:93:98:8f:56:75:bf:14:c6:32:cf:2e:82:48:1d:
db:fc:88:6e:68:a9:cb:ce:99:8e:d9:b3:a4:fd:84:49:c9:77:
e2:47:79:3f:64:6e:c3:85:73:a7:fa:6c:3a:c3:19:5b:ed:d3:
38:3f:91:20:65:27:6c:ef:7c:5d:2b:61:d4:f1:a2:06:b1:cd:
94:18:48:07:d2:a0:b5:05:b6:5a:ea:d0:fe:84:3e:83:bc:49:
6a:c3:b6:cb:eb:66:d7:f7:61:f7:92:72:70:12:fe:c1:0f:e0:
b8:31:29:66:4b:ca:45:18:7c:5f:0d:b8:57:75:f6:35:b6:e8:
5b:ff:1c:0f:27:8d:b1:cb:76:4d:1b:63:8c:60:28:91:d2:4b:
2d:51:17:b3:ea:e1:9e:fe:59:fb:de:a8:df:a5:75:86:e8:a5:
5c:1d:26:9a:f1:83:4d:7f:95:68:a1:05:02:f5:a7:32:b2:59:
c3:2f:b7:f6:4f:58:19:7c:ac:57:1c:97:45:c8:92:14:37:16:
98:1f:38:f5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQlH9zzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDEw
MTE0MDI1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFjY2Q2NTY0MjJj
N2Q1NWM0YzQ3ZmQwNTRiYzVkMDFlMDgzN2E3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALp+WFLlJdZKr1phYEMpWPBCoaSVowSkmbDEqZK6hXfNUePS
kv6BF7CisSJ7GrTLePZNc3BMlRM4Mv2i7dDWuHVCM2I1kCmm5ySBO+EbnUkgq89k
03ccTK8s1KUH7GSERcKxStuOII+wtq9Pv7jpJsjBeCVR418X7YPLalCejhGzIxaC
Hny5ldG6LH56aquQQAHsfK+9p1h9avtRTjGbObRykJ/OYHXb/yluqh2eqE5xsT9Q
b2ZJ6kEI4zBMS9nS5ZL1jViqYO3dW5datvgY64rfALlIERrcU/P4wdFE4c7sjna5
800xnJKd8q7qhEl1UqX8KfvmudnT6fnHnmU+p+ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKzNZWQix9VcTEf9BUvF0B4IN6eTAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
L2lzeldWa0lzZlZYRXhIX1FWTHhkQWVDRGVuay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcKEGDANBgkqhkiG9w0BAQsFAAOC
AQEAQwsHMwMPl0a41yozVVdX89ONe+v9JlZsGeyGwhu3OYiftVH+x+NaINWmGtTz
Zw8iSF4ob8vzGkndDpOYj1Z1vxTGMs8ugkgd2/yIbmipy86ZjtmzpP2EScl34kd5
P2Ruw4Vzp/psOsMZW+3TOD+RIGUnbO98XSth1PGiBrHNlBhIB9KgtQW2WurQ/oQ+
g7xJasO2y+tm1/dh95JycBL+wQ/guDEpZkvKRRh8Xw24V3X2NbboW/8cDyeNsct2
TRtjjGAokdJLLVEXs+rhnv5Z+96o36V1huilXB0mmvGDTX+VaKEFAvWnMrJZwy+3
9k9YGXysVxyXRciSFDcWmB849Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org