Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/0m1wXJJFsfX3AyKf39o0-3mRqkA.roa
File: 0m1wXJJFsfX3AyKf39o0-3mRqkA.roa (raw, json)
Hash identifier: 3cpGyFChdNN7q15LJsAYCSUGEaOeRFHSzM24Q4KAuUM=
Subject key identifier: D2:6D:70:5C:92:45:B1:F5:F7:03:22:9F:DF:DA:34:FB:79:91:AA:40
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0185C370
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/0m1wXJJFsfX3AyKf39o0-3mRqkA.roa
Signing time: Sat 01 Jan 2022 05:52:53 +0000
ROA not before: Sat 01 Jan 2022 05:52:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16262
IP address blocks: 194.147.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25543536 (0x185c370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 05:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d26d705c9245b1f5f703229fdfda34fb7991aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:e0:e5:f4:d0:09:f5:ae:ad:04:f3:6b:6c:
35:31:44:c7:1b:27:27:de:f8:1b:37:13:30:22:8b:
7d:ed:60:13:3a:20:2f:b1:86:24:35:4f:88:9b:80:
1c:b7:3a:a4:72:20:f5:b6:a7:ec:fc:84:ee:7d:a2:
df:a7:45:36:13:16:0d:d2:7b:51:bf:87:63:84:b0:
56:1e:00:db:57:ac:d4:c1:86:0e:c7:eb:3a:20:bb:
74:50:ae:8d:8f:51:aa:22:69:22:1d:99:ce:45:89:
cd:d0:da:29:56:3f:69:9f:06:8a:90:18:e1:d7:62:
2e:84:c7:48:7b:1b:18:8f:2b:78:77:5c:d0:50:30:
25:81:15:85:8e:1b:78:d2:18:d8:51:9a:8f:36:ff:
3c:26:82:e6:2b:58:a6:ff:b4:81:9f:66:01:00:66:
07:1a:d1:af:06:21:8a:7a:e4:6f:46:a0:8a:1a:82:
51:f7:a9:07:ce:e2:38:95:ac:1e:db:ff:b9:02:3f:
a1:54:f8:ee:9b:f1:f8:c1:8e:8a:43:72:f1:fd:ab:
4f:03:42:d6:f9:17:60:4c:83:6e:01:af:a5:43:7b:
12:97:a7:d4:90:1e:b0:a7:1e:3a:71:fa:a5:6c:ea:
09:b2:97:43:76:34:d7:a9:6c:6d:2d:70:91:75:7e:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:70:5C:92:45:B1:F5:F7:03:22:9F:DF:DA:34:FB:79:91:AA:40
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/0m1wXJJFsfX3AyKf39o0-3mRqkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f3:3f:2d:de:06:24:16:bb:2f:2c:ef:9b:98:52:16:af:e3:
96:b7:a8:34:9d:8f:60:c9:a4:f8:9d:d9:59:6f:46:b5:30:2e:
46:2a:c4:4f:63:bf:2b:14:ad:fe:b0:3e:db:31:ff:19:9b:6c:
e1:e2:a5:e1:d4:b5:22:9a:23:4d:d5:81:12:51:19:bd:5f:e2:
24:e4:f1:75:75:8a:db:23:61:a9:9a:bf:d0:48:a9:00:20:a6:
6e:79:0b:43:81:84:37:5b:77:22:92:a1:45:fa:08:53:ad:f6:
a4:00:72:be:8f:f5:c1:c2:24:12:28:64:96:6b:ea:c1:80:14:
50:e0:ac:cc:40:6c:15:5e:28:d3:6e:87:e5:2c:66:14:4a:33:
33:94:6b:5c:98:3d:9a:cd:a4:09:25:71:01:4a:2d:05:19:fc:
85:88:9e:d0:aa:7a:bf:8a:27:73:f6:2b:1f:22:9c:66:39:2b:
83:36:b9:69:b7:3b:18:e3:f1:a7:2c:58:ab:cf:01:fd:f2:4c:
ae:34:8f:2a:39:5c:e5:99:0d:8c:2a:a1:62:87:86:1f:de:b5:
29:96:3d:3a:ab:a5:b4:c4:39:fa:b8:91:eb:5b:3e:33:11:3d:
ff:34:7e:8c:ff:a7:a9:36:a1:d7:44:ca:0a:b9:09:ea:f6:7a:
4b:5d:a8:a2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAYXDcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ODdiNTk0ZTVlNjcxM2E1YjgwYTU0ODFhNWNlNzFlNjUyZDg0NTczMB4XDTIyMDEw
MTA1NTI1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI2ZDcwNWM5MjQ1
YjFmNWY3MDMyMjlmZGZkYTM0ZmI3OTkxYWE0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXq4OX00An1rq0E82tsNTFExxsnJ974GzcTMCKLfe1gEzog
L7GGJDVPiJuAHLc6pHIg9ban7PyE7n2i36dFNhMWDdJ7Ub+HY4SwVh4A21es1MGG
DsfrOiC7dFCujY9RqiJpIh2ZzkWJzdDaKVY/aZ8GipAY4ddiLoTHSHsbGI8reHdc
0FAwJYEVhY4beNIY2FGajzb/PCaC5itYpv+0gZ9mAQBmBxrRrwYhinrkb0agihqC
UfepB87iOJWsHtv/uQI/oVT47pvx+MGOikNy8f2rTwNC1vkXYEyDbgGvpUN7Epen
1JAesKceOnH6pWzqCbKXQ3Y016lsbS1wkXV+5lECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSbXBckkWx9fcDIp/f2jT7eZGqQDAfBgNVHSMEGDAWgBTIe1lOXmcTpbgK
VIGlznHmUthFczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lIdFpUbDVuRTZXNENsU0JwYzV4NWxMWVJYTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvODI0Zjc4LWRlZTItNDdiYy1hZjJmLTM4Y2I2ZTQxNmYzYS8x
LzBtMXdYSkpGc2ZYM0F5S2YzOW8wLTNtUnFrQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
ODI0Zjc4LWRlZTItNDdiYy1hZjJmLTM4Y2I2ZTQxNmYzYS8xL3lIdFpUbDVuRTZX
NENsU0JwYzV4NWxMWVJYTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKTjDANBgkqhkiG9w0BAQsFAAOC
AQEAE/M/Ld4GJBa7Lyzvm5hSFq/jlreoNJ2PYMmk+J3ZWW9GtTAuRirET2O/KxSt
/rA+2zH/GZts4eKl4dS1IpojTdWBElEZvV/iJOTxdXWK2yNhqZq/0EipACCmbnkL
Q4GEN1t3IpKhRfoIU632pAByvo/1wcIkEihklmvqwYAUUOCszEBsFV4o026H5Sxm
FEozM5RrXJg9ms2kCSVxAUotBRn8hYie0Kp6v4onc/YrHyKcZjkrgza5abc7GOPx
pyxYq88B/fJMrjSPKjlc5ZkNjCqhYoeGH961KZY9OqultMQ5+riR61s+MxE9/zR+
jP+nqTah10TKCrkJ6vZ6S12oog==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org