Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/lbDRlqQh2qnc2nJeyu0oA0S9y1A.roa
File: lbDRlqQh2qnc2nJeyu0oA0S9y1A.roa (raw, json)
Hash identifier: ynmv5hL2Puvdkn+ToZ8IfCC7xpss7R4GM8r5YJY5QWo=
Subject key identifier: 95:B0:D1:96:A4:21:DA:A9:DC:DA:72:5E:CA:ED:28:03:44:BD:CB:50
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 082F47DD
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/lbDRlqQh2qnc2nJeyu0oA0S9y1A.roa
Signing time: Sat 01 Jan 2022 00:51:19 +0000
ROA not before: Sat 01 Jan 2022 00:51:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209085
IP address blocks: 195.80.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137316317 (0x82f47dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Jan 1 00:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b0d196a421daa9dcda725ecaed280344bdcb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:b4:60:f1:51:27:91:a4:2b:f1:9b:26:88:
05:d8:cd:6a:c8:80:ed:fe:a0:0d:f6:60:b4:97:14:
a3:c1:0b:46:fd:2e:bd:9f:d2:be:6c:60:b5:ff:f5:
43:74:98:89:13:7b:d0:98:f2:bb:1d:c5:fd:03:27:
77:d7:de:e2:29:ea:5a:ec:31:65:84:9b:37:8e:60:
09:3c:d1:f0:f1:0c:41:6d:81:b7:0f:12:09:71:4b:
8c:42:67:78:6d:cf:66:3e:5f:05:03:bc:84:2b:59:
6c:c2:b1:50:58:2e:da:44:07:c9:43:64:12:98:57:
38:b8:1d:0a:8b:38:0f:38:e5:74:ff:9f:08:11:22:
b8:75:c2:33:cc:ec:ce:36:17:16:59:2a:de:f9:d2:
14:c9:96:de:a5:0b:8b:82:23:72:08:6f:cc:07:99:
af:a7:3d:52:e2:c7:bb:26:4f:00:9b:e5:a8:54:40:
23:e8:80:77:fb:6e:76:63:16:16:59:69:fa:cf:70:
0b:a6:74:2c:0e:84:07:1a:ce:0d:e1:f6:7c:ca:5e:
73:93:d2:03:7a:7a:ae:46:16:13:63:c4:ad:02:b5:
89:b1:e6:17:64:71:d4:27:4b:f1:56:7e:c9:ce:39:
73:b3:b6:2e:27:01:b0:e7:34:c5:5d:ae:06:fd:33:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:D1:96:A4:21:DA:A9:DC:DA:72:5E:CA:ED:28:03:44:BD:CB:50
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/lbDRlqQh2qnc2nJeyu0oA0S9y1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.44.0/22
Signature Algorithm: sha256WithRSAEncryption
43:b1:2f:ac:e4:62:38:94:59:a2:c8:83:24:3c:77:f2:79:78:
d7:12:ac:42:ae:07:39:0b:35:bb:6e:a1:f6:d4:91:ef:c0:18:
28:bc:f9:c7:2d:45:fc:03:e8:f6:08:72:e6:a6:7f:cf:2f:9b:
e5:1a:49:c9:83:ff:97:d5:c3:ed:ef:5c:a8:9a:44:12:4e:4f:
15:bb:aa:0b:81:73:68:0b:39:ca:22:9e:fb:62:f0:2c:1d:ab:
9f:5f:f6:15:01:6a:c0:06:62:d9:4a:85:cd:8b:53:0d:ea:dc:
23:06:48:83:a2:41:a3:38:c6:00:c3:36:ee:23:cb:d7:b4:52:
79:59:7f:54:02:85:ef:12:a9:cb:aa:4c:4e:f9:b3:38:6f:6b:
24:a6:f5:bf:c5:99:1d:08:5b:63:30:53:19:ff:6a:9c:da:4c:
13:76:39:e6:47:3e:37:13:f8:7f:6d:83:29:08:ce:1c:8a:de:
df:23:6c:70:51:82:1f:3e:1a:96:a4:07:c8:2e:ab:4d:be:d6:
fb:7c:50:6e:24:9e:3f:e1:ba:94:f4:13:a3:ae:22:5d:d4:79:
58:ad:36:cf:e3:5b:66:2c:41:b4:20:a1:6c:89:ef:90:7e:fe:
88:b7:dd:60:17:ec:cc:01:3e:ef:e6:39:83:bd:a4:a5:fa:3d:
a0:9d:23:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECC9H3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NjJjMmI3MzAwMDQwNjgyNGRmYmM3YWUzODg2ZWI3ODY3ZjhlYzZlMB4XDTIyMDEw
MTAwNTExOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTViMGQxOTZhNDIx
ZGFhOWRjZGE3MjVlY2FlZDI4MDM0NGJkY2I1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWRtGDxUSeRpCvxmyaIBdjNasiA7f6gDfZgtJcUo8ELRv0u
vZ/Svmxgtf/1Q3SYiRN70Jjyux3F/QMnd9fe4inqWuwxZYSbN45gCTzR8PEMQW2B
tw8SCXFLjEJneG3PZj5fBQO8hCtZbMKxUFgu2kQHyUNkEphXOLgdCos4DzjldP+f
CBEiuHXCM8zszjYXFlkq3vnSFMmW3qULi4IjcghvzAeZr6c9UuLHuyZPAJvlqFRA
I+iAd/tudmMWFllp+s9wC6Z0LA6EBxrODeH2fMpec5PSA3p6rkYWE2PErQK1ibHm
F2Rx1CdL8VZ+yc45c7O2LicBsOc0xV2uBv0zzWcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVsNGWpCHaqdzacl7K7SgDRL3LUDAfBgNVHSMEGDAWgBT2LCtzAAQGgk37
x644hut4Z/jsbjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzlpd3Jjd0FFQm9KTi04ZXVPSWJyZUdmNDdHNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGEvNjgyOWFhLTExYTUtNDJlNy05Zjk2LTU2ZWJmODI5ZDZiMi8x
L2xiRFJscVFoMnFuYzJuSmV5dTBvQTBTOXkxQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEv
NjgyOWFhLTExYTUtNDJlNy05Zjk2LTU2ZWJmODI5ZDZiMi8xLzlpd3Jjd0FFQm9K
Ti04ZXVPSWJyZUdmNDdHNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsNQLDANBgkqhkiG9w0BAQsFAAOC
AQEAQ7EvrORiOJRZosiDJDx38nl41xKsQq4HOQs1u26h9tSR78AYKLz5xy1F/APo
9ghy5qZ/zy+b5RpJyYP/l9XD7e9cqJpEEk5PFbuqC4FzaAs5yiKe+2LwLB2rn1/2
FQFqwAZi2UqFzYtTDercIwZIg6JBozjGAMM27iPL17RSeVl/VAKF7xKpy6pMTvmz
OG9rJKb1v8WZHQhbYzBTGf9qnNpME3Y55kc+NxP4f22DKQjOHIre3yNscFGCHz4a
lqQHyC6rTb7W+3xQbiSeP+G6lPQTo64iXdR5WK02z+NbZixBtCChbInvkH7+iLfd
YBfszAE+7+Y5g72kpfo9oJ0jdg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:51 2023 by rpki-client on console-fra.rpki-client.org