Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/95FdVic3_GdNAGwX7jmJwRYKJE8.roa
File: 95FdVic3_GdNAGwX7jmJwRYKJE8.roa (raw, json)
Hash identifier: lNeEahT2M7dg5CXoGyzPALuVXH//SvF8BZlpiMK8s0A=
Subject key identifier: F7:91:5D:56:27:37:FC:67:4D:00:6C:17:EE:39:89:C1:16:0A:24:4F
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0281BB38
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/95FdVic3_GdNAGwX7jmJwRYKJE8.roa
Signing time: Wed 27 Apr 2022 13:19:29 +0000
ROA not before: Wed 27 Apr 2022 13:19:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203551
IP address blocks: 185.238.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42056504 (0x281bb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Apr 27 13:19:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7915d562737fc674d006c17ee3989c1160a244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:90:e8:ed:b8:cf:6a:e4:11:11:27:d2:71:
12:3e:1b:15:f9:45:92:ee:7a:e9:e2:12:59:64:48:
28:16:dc:84:0d:5c:3e:34:d4:88:b8:89:03:e8:16:
b5:73:72:eb:f1:60:c1:61:4a:2f:e4:b3:aa:49:c0:
0e:b0:b7:62:2a:c1:17:55:3e:50:0b:bf:6b:20:ac:
ea:8a:6b:a4:4a:16:25:5d:94:63:dd:c9:a0:21:eb:
9b:09:8f:97:c4:a9:34:5e:3f:69:22:91:e7:d0:95:
8d:7c:9a:e4:b1:b9:15:5d:1d:72:15:82:08:52:b8:
01:c0:3f:f9:8a:15:67:2a:bb:3a:d3:21:6e:83:63:
c2:83:65:c5:22:62:66:15:bd:bf:ba:56:15:63:2d:
d6:65:f3:05:df:bd:23:bd:5e:c1:a2:c8:c3:f4:7b:
6a:74:f4:b5:e3:6c:ac:41:b4:79:9d:1c:25:e9:ff:
4e:8d:c8:d8:1c:fb:9f:97:a2:c4:c0:68:f0:08:a7:
40:34:3d:86:b0:35:00:5c:ce:d7:2d:32:46:d6:6b:
9f:2e:02:d9:0b:26:6a:c4:f0:62:02:4c:f0:32:ff:
dc:d0:18:99:a4:1c:0a:55:48:94:68:7e:c1:f0:4a:
8d:d0:97:e1:0d:21:df:0d:9d:c9:26:bd:c5:25:89:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:5D:56:27:37:FC:67:4D:00:6C:17:EE:39:89:C1:16:0A:24:4F
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/95FdVic3_GdNAGwX7jmJwRYKJE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.62.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bd:52:d1:3a:ad:7b:f6:f5:05:d1:84:f2:57:aa:3c:83:94:
e1:36:5d:d6:fd:3d:66:65:62:cf:6a:1e:e3:c2:a3:24:af:59:
7c:7e:96:87:13:cd:83:83:ce:34:48:3e:b2:8c:a3:98:d8:cb:
22:04:b6:2b:67:93:b2:70:10:43:3c:25:7b:50:9a:f0:d5:5e:
6c:c1:a0:ab:a0:8d:50:2e:4a:2a:f2:ea:31:52:98:44:ec:63:
a5:65:64:da:08:fe:cb:6a:fb:24:1d:1c:15:4a:3a:0b:17:1c:
bc:69:4a:5b:5c:3f:93:62:e1:e1:37:01:71:39:d9:7c:e8:c4:
19:12:db:41:0e:b8:c8:d7:25:5c:49:11:00:8f:54:ce:09:d0:
4b:a6:45:20:3d:8d:b4:cf:ce:65:b9:e7:3c:23:12:80:8f:6f:
23:ef:3e:3b:79:3b:70:12:9a:ad:ea:2a:31:f8:d4:f3:21:a9:
80:eb:d8:5e:8a:a2:50:ee:b4:8a:f5:2e:85:c3:ee:60:15:c9:
7c:fb:01:87:96:36:ed:5e:48:ea:09:51:aa:04:41:d5:64:22:
ad:8f:46:5a:97:8e:09:84:38:f8:34:0c:b9:0b:c0:4d:af:2d:
7c:9a:cf:ce:1c:eb:c9:5d:93:16:57:b8:ab:20:b6:89:f1:da:
9d:fb:2d:1a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAoG7ODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ODhmNWIyMTBmM2MzZWI0MjA2NTk2MGU4NWQwNjFlOWQ5ZDYzYWI4MB4XDTIyMDQy
NzEzMTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc5MTVkNTYyNzM3
ZmM2NzRkMDA2YzE3ZWUzOTg5YzExNjBhMjQ0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEmkOjtuM9q5BERJ9JxEj4bFflFku566eISWWRIKBbchA1c
PjTUiLiJA+gWtXNy6/FgwWFKL+SzqknADrC3YirBF1U+UAu/ayCs6oprpEoWJV2U
Y93JoCHrmwmPl8SpNF4/aSKR59CVjXya5LG5FV0dchWCCFK4AcA/+YoVZyq7OtMh
boNjwoNlxSJiZhW9v7pWFWMt1mXzBd+9I71ewaLIw/R7anT0teNsrEG0eZ0cJen/
To3I2Bz7n5eixMBo8AinQDQ9hrA1AFzO1y0yRtZrny4C2QsmasTwYgJM8DL/3NAY
maQcClVIlGh+wfBKjdCX4Q0h3w2dySa9xSWJBwcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT3kV1WJzf8Z00AbBfuOYnBFgokTzAfBgNVHSMEGDAWgBR4j1shDzw+tCBl
lg6F0GHp2dY6uDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VJOWJJUTg4UHJRZ1paWU9oZEJoNmRuV09yZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvZTEwMGI1LTZmMGEtNGZlOS1iZWZiLWM0YWNiODk2OWM0OS8x
Lzk1RmRWaWMzX0dkTkFHd1g3am1Kd1JZS0pFOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
ZTEwMGI1LTZmMGEtNGZlOS1iZWZiLWM0YWNiODk2OWM0OS8xL2VJOWJJUTg4UHJR
Z1paWU9oZEJoNmRuV09yZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnuPjANBgkqhkiG9w0BAQsFAAOC
AQEAZr1S0Tqte/b1BdGE8leqPIOU4TZd1v09ZmViz2oe48KjJK9ZfH6WhxPNg4PO
NEg+soyjmNjLIgS2K2eTsnAQQzwle1Ca8NVebMGgq6CNUC5KKvLqMVKYROxjpWVk
2gj+y2r7JB0cFUo6CxccvGlKW1w/k2Lh4TcBcTnZfOjEGRLbQQ64yNclXEkRAI9U
zgnQS6ZFID2NtM/OZbnnPCMSgI9vI+8+O3k7cBKareoqMfjU8yGpgOvYXoqiUO60
ivUuhcPuYBXJfPsBh5Y27V5I6glRqgRB1WQirY9GWpeOCYQ4+DQMuQvATa8tfJrP
zhzryV2TFle4qyC2ifHanfstGg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:21 2025 by rpki-client