Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/schXSbvKwoon1Aj3mmmYth5iKDc.roa
File: schXSbvKwoon1Aj3mmmYth5iKDc.roa (raw, json)
Hash identifier: g51fk1J7YTMJssKjCJdquBvouEPsOqA+yWxfBORwO9A=
Subject key identifier: B1:C8:57:49:BB:CA:C2:8A:27:D4:08:F7:9A:69:98:B6:1E:62:28:37
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01FE4071
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/schXSbvKwoon1Aj3mmmYth5iKDc.roa
Signing time: Sat 01 Jan 2022 13:59:44 +0000
ROA not before: Sat 01 Jan 2022 13:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212578
IP address blocks: 195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.193.0/24 maxlen: 24
195.114.194.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.204.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
45.155.243.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33439857 (0x1fe4071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 13:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1c85749bbcac28a27d408f79a6998b61e622837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:ce:8f:84:76:62:3a:27:2b:cc:53:de:73:
60:76:4d:e7:21:55:76:45:25:27:9c:10:12:07:63:
23:d6:f4:05:68:2e:41:77:96:95:72:82:a1:48:2e:
5a:94:28:fe:7b:e7:89:51:ff:10:08:16:7c:e6:6b:
e0:a0:02:54:55:96:a2:73:9e:a3:1a:5b:e9:49:07:
e6:0f:9c:5e:5c:91:51:e0:ab:39:b8:d5:4e:54:65:
c3:b2:8d:a3:07:28:dc:cd:fe:0d:3b:03:bc:92:5b:
1b:f4:a2:c0:0a:13:48:b3:c5:56:72:b6:97:1a:d6:
92:17:3e:dc:c5:71:26:5f:83:df:c6:4e:3c:14:80:
d8:b3:2a:87:61:25:59:32:8f:92:6d:7a:1f:98:22:
4a:3e:2f:c4:31:85:d6:38:af:1c:12:23:a6:9d:d4:
f7:72:3c:39:a5:cb:bb:b9:42:7e:c6:66:a1:d4:9f:
86:72:89:60:bb:68:f8:36:f1:29:95:84:1f:59:7e:
02:6e:76:b8:e3:a7:04:d3:5e:ed:b7:7d:a2:fd:7e:
9f:e0:69:ad:6f:68:51:72:56:d2:ce:67:9a:f9:32:
88:ea:aa:f5:2a:4e:77:e1:01:d2:e5:60:8b:17:45:
40:2a:6f:dc:35:b7:d1:05:2c:39:f1:ec:a6:c2:0c:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:57:49:BB:CA:C2:8A:27:D4:08:F7:9A:69:98:B6:1E:62:28:37
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/schXSbvKwoon1Aj3mmmYth5iKDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/22
195.114.192.0-195.114.198.255
195.114.200.0-195.114.206.255
Signature Algorithm: sha256WithRSAEncryption
70:21:77:fb:3d:c3:d9:94:62:aa:16:83:6d:89:6a:a5:5c:31:
e4:a4:8a:f3:e0:a2:5d:02:2d:0d:c6:fa:ab:40:e6:51:5e:d1:
12:d2:73:07:4e:b0:f1:63:ac:5c:24:b2:3f:33:0a:c7:52:45:
94:c4:cc:b8:a4:e3:fc:62:2d:0a:97:39:9e:97:a4:ca:fb:1b:
8f:99:23:5d:08:90:99:2d:88:69:cc:ea:9e:4f:a0:1b:e3:2f:
c3:56:8d:3f:a8:32:4e:c7:eb:df:38:7d:04:a4:d6:97:f9:7b:
63:ca:7a:c5:11:ac:f5:1f:2c:cb:48:35:9a:19:6b:3a:c5:97:
81:de:f2:cc:76:9c:5d:bc:96:29:f9:c3:5f:ca:73:cf:dd:e2:
ff:0b:c8:ec:0e:72:5d:f7:95:4e:b3:2a:2a:00:42:82:4c:82:
c2:f7:f3:31:af:ed:51:e0:77:31:b9:b0:65:ed:0a:d8:d5:2f:
e9:75:78:e7:8d:b3:01:5f:f1:42:89:1d:1e:d9:87:92:47:c9:
63:57:ea:88:87:76:1f:b5:42:c7:e9:5f:67:ea:51:b8:94:37:
3b:6e:78:d5:b8:36:0b:7e:83:34:34:c1:cf:61:70:bf:e8:77:
51:13:c7:e3:45:0d:5f:d7:03:e3:e9:65:44:1c:fa:6f:9a:26:
76:3f:14:06
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEAf5AcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NjcxZGNjN2E5YWM3MzUxYzcxZTBiYzIyNzhjZjQ1ZmQwMjBhZTJlMB4XDTIyMDEw
MTEzNTk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjFjODU3NDliYmNh
YzI4YTI3ZDQwOGY3OWE2OTk4YjYxZTYyMjgzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzXzo+EdmI6JyvMU95zYHZN5yFVdkUlJ5wQEgdjI9b0BWgu
QXeWlXKCoUguWpQo/nvniVH/EAgWfOZr4KACVFWWonOeoxpb6UkH5g+cXlyRUeCr
ObjVTlRlw7KNowco3M3+DTsDvJJbG/SiwAoTSLPFVnK2lxrWkhc+3MVxJl+D38ZO
PBSA2LMqh2ElWTKPkm16H5giSj4vxDGF1jivHBIjpp3U93I8OaXLu7lCfsZmodSf
hnKJYLto+DbxKZWEH1l+Am52uOOnBNNe7bd9ov1+n+BprW9oUXJW0s5nmvkyiOqq
9SpOd+EB0uVgixdFQCpv3DW30QUsOfHspsIM/70CAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBSxyFdJu8rCiifUCPeaaZi2HmIoNzAfBgNVHSMEGDAWgBQGcdzHqaxzUcce
C8InjPRf0CCuLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JuSGN4Nm1zYzFISEhndkNKNHowWDlBZ3JpNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvMWY5NDkzLWQ0NjgtNGE3Yy04YzRiLTFkZGVjNGNjZTI0Yy8x
L3NjaFhTYnZLd29vbjFBajNtbW1ZdGg1aUtEYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
MWY5NDkzLWQ0NjgtNGE3Yy04YzRiLTFkZGVjNGNjZTI0Yy8xL0JuSGN4Nm1zYzFI
SEhndkNKNHowWDlBZ3JpNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7
BggrBgEFBQcBBwEB/wQsMCowKAQCAAEwIgMEAi2b8DAMAwQGw3LAAwQAw3LGMAwD
BAPDcsgDBADDcs4wDQYJKoZIhvcNAQELBQADggEBAHAhd/s9w9mUYqoWg22JaqVc
MeSkivPgol0CLQ3G+qtA5lFe0RLScwdOsPFjrFwksj8zCsdSRZTEzLik4/xiLQqX
OZ6XpMr7G4+ZI10IkJktiGnM6p5PoBvjL8NWjT+oMk7H6984fQSk1pf5e2PKesUR
rPUfLMtINZoZazrFl4He8sx2nF28lin5w1/Kc8/d4v8LyOwOcl33lU6zKioAQoJM
gsL38zGv7VHgdzG5sGXtCtjVL+l1eOeNswFf8UKJHR7Zh5JHyWNX6oiHdh+1Qsfp
X2fqUbiUNztueNW4Ngt+gzQ0wc9hcL/od1ETx+NFDV/XA+PpZUQc+m+aJnY/FAY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:18 2024 by rpki-client on console-fra.rpki-client.org