Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/t1rSlpE2i18csDdus9abd113L80.roa
File: t1rSlpE2i18csDdus9abd113L80.roa (raw, json)
Hash identifier: +N2P28j6FTmJmK8b8yaG+xHWeSCDwEUejE+zPPIQ3AU=
Subject key identifier: B7:5A:D2:96:91:36:8B:5F:1C:B0:37:6E:B3:D6:9B:77:5D:77:2F:CD
Certificate issuer: /CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Certificate serial: E96EBC
Authority key identifier: 92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/t1rSlpE2i18csDdus9abd113L80.roa
Signing time: Sat 01 Jan 2022 05:00:40 +0000
ROA not before: Sat 01 Jan 2022 05:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.9.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15298236 (0xe96ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Validity
Not Before: Jan 1 05:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b75ad29691368b5f1cb0376eb3d69b775d772fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:b1:2f:40:3f:5e:6c:86:3e:7c:f8:24:f2:
ec:e4:b7:f5:ce:a6:e8:b7:76:33:2f:b3:75:57:5f:
17:49:f7:59:3b:3c:91:b7:4c:e4:4e:2d:8b:35:41:
c4:d0:67:18:1c:0a:9f:5f:56:ff:ec:66:3e:c8:5f:
9c:35:ef:b5:4d:c5:4a:b2:b5:fa:69:51:d8:0c:c4:
99:3d:2b:bd:20:3a:33:63:bc:90:27:6c:2b:53:39:
83:40:2e:11:8c:39:65:57:fd:e5:db:76:6b:f5:58:
89:be:db:1e:77:06:e8:ac:b0:43:40:89:42:a5:41:
53:a6:bd:71:71:65:f3:64:dc:62:23:ff:2c:ab:bf:
0b:c1:57:26:98:95:05:7a:c0:97:31:96:48:73:21:
e8:27:30:63:b8:4e:a0:5b:0b:a4:b3:21:96:5a:ba:
60:d8:e5:3e:fd:4b:04:0d:75:b4:4a:14:5c:29:86:
62:54:77:fa:36:89:1f:c2:1f:44:5c:12:e2:43:5d:
b7:02:8d:c3:61:bf:e5:8d:85:5a:f3:83:51:0e:6e:
f8:ba:c1:89:9e:34:fc:f6:b4:92:4e:a0:20:8e:27:
fe:f1:6f:8c:c5:af:e1:b6:cd:62:8f:93:e2:2d:3b:
f1:f0:6f:e6:28:9a:9e:5e:74:9c:15:4b:ed:09:b7:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:D2:96:91:36:8B:5F:1C:B0:37:6E:B3:D6:9B:77:5D:77:2F:CD
X509v3 Authority Key Identifier:
keyid:92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/t1rSlpE2i18csDdus9abd113L80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b1:47:cd:6d:e8:84:73:e3:65:68:53:1c:f9:92:87:d3:d5:
c5:0a:ef:ae:5e:5c:6d:ca:9a:98:dd:65:ea:c0:09:d3:7b:83:
78:07:6b:68:d4:61:34:5b:b0:04:03:6e:b8:12:85:15:d1:59:
26:36:63:20:19:61:0f:8a:1a:0f:ec:8f:4c:6f:50:f9:32:b4:
8a:25:89:5c:d9:a1:1a:24:f3:fe:5b:ae:19:8e:37:80:96:8f:
5a:0e:14:5f:3a:4d:2b:6c:00:50:d0:61:74:d4:b1:c7:75:e4:
e4:c3:dc:34:c6:aa:ed:5e:04:4b:0f:b2:d2:35:cd:d8:62:83:
e0:a0:93:48:fc:bf:bf:c1:46:c4:08:b2:6a:fd:dc:94:01:72:
03:ce:da:70:67:cf:a3:96:47:88:0a:1d:09:f2:7f:67:9e:99:
b3:68:d4:c3:0d:45:70:37:24:ee:08:8e:b2:48:ca:cd:d0:fd:
e1:ab:37:67:ff:45:9e:12:9f:40:f8:68:a4:71:af:93:dd:e9:
64:38:0b:c3:32:00:7a:00:81:cd:13:d1:47:5c:5e:ec:be:1f:
5f:25:fa:f7:12:0c:a8:6a:91:b5:1f:51:1f:79:9d:98:60:2f:
73:89:26:a7:9c:90:38:a2:cb:4a:de:47:9c:70:4e:9a:db:0a:
c2:64:01:1f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOluvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjVhOWNhNWI0OWNlZjM4ZWE2MjdjOWIyMGQ0NzBhN2Y1OTlmNjA4MB4XDTIyMDEw
MTA1MDA0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjc1YWQyOTY5MTM2
OGI1ZjFjYjAzNzZlYjNkNjliNzc1ZDc3MmZjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMoNsS9AP15shj58+CTy7OS39c6m6Ld2My+zdVdfF0n3WTs8
kbdM5E4tizVBxNBnGBwKn19W/+xmPshfnDXvtU3FSrK1+mlR2AzEmT0rvSA6M2O8
kCdsK1M5g0AuEYw5ZVf95dt2a/VYib7bHncG6KywQ0CJQqVBU6a9cXFl82TcYiP/
LKu/C8FXJpiVBXrAlzGWSHMh6CcwY7hOoFsLpLMhllq6YNjlPv1LBA11tEoUXCmG
YlR3+jaJH8IfRFwS4kNdtwKNw2G/5Y2FWvODUQ5u+LrBiZ40/Pa0kk6gII4n/vFv
jMWv4bbNYo+T4i078fBv5iianl50nBVL7Qm3kT8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS3WtKWkTaLXxywN26z1pt3XXcvzTAfBgNVHSMEGDAWgBSSWpyltJzvOOpi
fJsg1HCn9Zn2CDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tscWNwYlNjN3pqcVlueWJJTlJ3cF9XWjlnZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvMmRlYzM3LTdkNjQtNGU1Yy1hYjg3LWEyZjU5Y2I1MjY4Ni8x
L3QxclNscEUyaTE4Y3NEZHVzOWFiZDExM0w4MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
MmRlYzM3LTdkNjQtNGU1Yy1hYjg3LWEyZjU5Y2I1MjY4Ni8xL2tscWNwYlNjN3pq
cVlueWJJTlJ3cF9XWjlnZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIJtTANBgkqhkiG9w0BAQsFAAOC
AQEAq7FHzW3ohHPjZWhTHPmSh9PVxQrvrl5cbcqamN1l6sAJ03uDeAdraNRhNFuw
BANuuBKFFdFZJjZjIBlhD4oaD+yPTG9Q+TK0iiWJXNmhGiTz/luuGY43gJaPWg4U
XzpNK2wAUNBhdNSxx3Xk5MPcNMaq7V4ESw+y0jXN2GKD4KCTSPy/v8FGxAiyav3c
lAFyA87acGfPo5ZHiAodCfJ/Z56Zs2jUww1FcDck7giOskjKzdD94as3Z/9FnhKf
QPhopHGvk93pZDgLwzIAegCBzRPRR1xe7L4fXyX69xIMqGqRtR9RH3mdmGAvc4km
p5yQOKLLSt5HnHBOmtsKwmQBHw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:02 2023 by rpki-client on console-ams.rpki-client.org