Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/1hoaD1B4MlMevsce4VqJ8BNUseg.roa
File: 1hoaD1B4MlMevsce4VqJ8BNUseg.roa (raw, json)
Hash identifier: d/ch7irbOZZOnoGrVrZSibtaA/T5RHqKthQLSPt9oSI=
Subject key identifier: D6:1A:1A:0F:50:78:32:53:1E:BE:C7:1E:E1:5A:89:F0:13:54:B1:E8
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 01AD9E
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/1hoaD1B4MlMevsce4VqJ8BNUseg.roa
Signing time: Wed 27 Apr 2022 08:34:03 +0000
ROA not before: Wed 27 Apr 2022 08:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58175
IP address blocks: 193.200.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109982 (0x1ad9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Apr 27 08:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d61a1a0f507832531ebec71ee15a89f01354b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:7b:63:51:74:51:a1:75:5a:15:35:95:97:
48:91:52:7a:87:22:4e:a3:7f:e9:51:49:94:ed:8e:
4b:0a:fa:0f:5c:dd:07:e8:79:98:b4:37:38:0e:eb:
06:5e:4e:5d:5c:6c:ed:1d:7b:15:c4:2a:c4:73:54:
bc:69:c5:61:f7:25:04:77:ea:35:67:d8:74:9f:c2:
3d:8d:65:2c:6f:c0:04:9f:5f:6e:51:d9:a3:56:3b:
9a:f5:ab:a6:c1:6c:c8:30:96:fb:63:c7:ee:df:51:
62:7c:37:6e:7d:d7:3b:f6:06:5d:53:22:cf:24:79:
e7:72:60:69:dc:d3:2d:fd:cf:9a:6c:81:9d:d0:83:
86:83:f3:c5:bf:5e:76:75:84:1f:fd:58:5e:4e:a4:
c7:77:98:2f:f5:02:7a:24:43:5b:a7:a4:65:b9:11:
15:3f:01:d0:c5:43:19:ef:b4:14:e6:0d:0f:f1:7f:
5e:b0:48:01:25:57:f0:28:37:ee:d6:5e:54:1f:e0:
07:ad:73:1c:39:66:30:bf:b7:64:b6:ac:6e:0b:54:
54:03:d8:e4:77:e4:de:54:95:f1:dc:0f:dd:88:cc:
89:fb:54:ec:b6:ec:e7:9b:fc:8f:ee:64:47:b6:68:
ec:76:48:7c:c1:12:b3:3f:6f:21:60:8c:d2:fb:46:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:1A:0F:50:78:32:53:1E:BE:C7:1E:E1:5A:89:F0:13:54:B1:E8
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/1hoaD1B4MlMevsce4VqJ8BNUseg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bb:b3:24:eb:ec:65:b0:f1:68:c5:31:bd:d3:5a:ce:32:82:
24:71:2e:65:49:e6:4c:43:a5:e6:e2:9b:d9:90:b6:99:33:2c:
e6:7e:da:37:33:8a:2d:57:62:af:bb:3f:12:b2:35:30:27:3f:
77:e9:78:29:c9:6f:a0:af:e6:a7:6d:b2:b3:cc:ff:fe:eb:b1:
28:b0:55:e6:df:49:8f:df:21:8c:a7:97:52:23:b5:9d:24:a7:
a3:61:5a:8e:4e:11:d7:cf:4e:39:83:32:25:c8:94:ac:15:6a:
25:8c:22:90:5f:a5:30:48:e2:f3:31:96:48:cf:83:f3:8d:09:
5e:58:e3:d0:af:d1:80:71:49:cc:e5:76:43:46:f1:f4:85:72:
2b:f5:e6:71:56:93:6d:bb:d3:58:35:37:8c:ec:6b:64:4a:00:
6b:f6:14:f9:bd:f7:de:40:90:2e:c3:88:c7:69:69:c2:7f:c6:
9b:5d:ec:ae:04:3b:47:ec:b5:df:ce:5d:ac:ee:48:c7:e0:3b:
c2:96:9c:5e:b9:78:99:47:89:12:2d:c1:9a:3f:1e:a3:92:84:
52:c6:f3:6d:2c:8e:2b:e9:84:31:d5:54:f5:c8:05:2d:14:32:
85:57:5e:98:33:92:8b:e8:b5:dc:c6:b5:ff:f4:16:d4:46:98:
7c:94:31:94
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAa2eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
ZmUxMDU4YTMxZTNjMTg5NGJjZjA2NGM3ZTgzNzBiYmE2Y2Y4ZTQwHhcNMjIwNDI3
MDgzNDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkNjFhMWEwZjUwNzgz
MjUzMWViZWM3MWVlMTVhODlmMDEzNTRiMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuHh7Y1F0UaF1WhU1lZdIkVJ6hyJOo3/pUUmU7Y5LCvoPXN0H
6HmYtDc4DusGXk5dXGztHXsVxCrEc1S8acVh9yUEd+o1Z9h0n8I9jWUsb8AEn19u
UdmjVjua9aumwWzIMJb7Y8fu31FifDdufdc79gZdUyLPJHnncmBp3NMt/c+abIGd
0IOGg/PFv152dYQf/VheTqTHd5gv9QJ6JENbp6RluREVPwHQxUMZ77QU5g0P8X9e
sEgBJVfwKDfu1l5UH+AHrXMcOWYwv7dktqxuC1RUA9jkd+TeVJXx3A/diMyJ+1Ts
tuznm/yP7mRHtmjsdkh8wRKzP28hYIzS+0Y42wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNYaGg9QeDJTHr7HHuFaifATVLHoMB8GA1UdIwQYMBaAFAz+EFijHjwYlLzw
ZMfoNwu6bPjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2YwLzEv
MWhvYUQxQjRNbE1ldnNjZTRWcUo4Qk5Vc2VnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85
MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2YwLzEvRFA0UVdLTWVQQmlV
dlBCa3gtZzNDN3BzLU9RLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcj+MA0GCSqGSIb3DQEBCwUAA4IB
AQAbu7Mk6+xlsPFoxTG901rOMoIkcS5lSeZMQ6Xm4pvZkLaZMyzmfto3M4otV2Kv
uz8SsjUwJz936XgpyW+gr+anbbKzzP/+67EosFXm30mP3yGMp5dSI7WdJKejYVqO
ThHXz045gzIlyJSsFWoljCKQX6UwSOLzMZZIz4PzjQleWOPQr9GAcUnM5XZDRvH0
hXIr9eZxVpNtu9NYNTeM7GtkSgBr9hT5vffeQJAuw4jHaWnCf8abXeyuBDtH7LXf
zl2s7kjH4DvClpxeuXiZR4kSLcGaPx6jkoRSxvNtLI4r6YQx1VT1yAUtFDKFV16Y
M5KL6LXcxrX/9BbURph8lDGU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org