Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/53hP5pSUcqa85AdYv43ywsTmZfA.roa
File: 53hP5pSUcqa85AdYv43ywsTmZfA.roa (raw, json)
Hash identifier: 4RotbiKlLDyYJrUboQ9q0CFVEDMBrP8g+7XJzVe/Crg=
Subject key identifier: E7:78:4F:E6:94:94:72:A6:BC:E4:07:58:BF:8D:F2:C2:C4:E6:65:F0
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01840EA9610FF51EC70CF848D529B136DD6C
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/53hP5pSUcqa85AdYv43ywsTmZfA.roa
Signing time: Tue 25 Oct 2022 10:21:32 +0000
ROA not before: Tue 25 Oct 2022 10:21:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62257
IP address blocks: 194.36.175.0/24 maxlen: 24
194.180.208.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:a9:61:0f:f5:1e:c7:0c:f8:48:d5:29:b1:36:dd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Oct 25 10:21:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7784fe6949472a6bce40758bf8df2c2c4e665f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:f1:75:5a:90:61:f5:1c:ce:64:42:1b:c1:
8b:28:ed:69:b3:4f:71:02:69:a5:68:5e:3b:8c:0f:
03:ce:eb:e9:36:e7:26:9f:8a:3e:1b:89:59:15:af:
2e:f2:7b:e4:87:b9:5a:ee:c5:a5:f4:02:9b:e1:93:
97:08:5f:5d:5f:95:6f:4e:11:a1:90:06:a1:84:b3:
46:63:f6:79:16:3d:a7:8a:22:28:1c:4a:6e:0d:41:
96:4b:37:fc:ac:5f:8f:73:f7:83:ad:72:46:67:14:
85:cb:fb:6c:7d:bd:38:69:8e:16:2f:36:06:22:cd:
33:55:89:f1:60:87:42:ba:f6:6a:fc:91:a2:b2:88:
9b:a9:3f:d6:8e:b0:66:a0:03:a4:7f:05:2b:50:e8:
45:49:31:09:c1:e4:58:47:64:90:52:69:3b:c2:1c:
e6:c9:94:a9:5c:f3:35:dd:35:d0:dc:21:1b:59:e1:
cb:0a:84:e4:85:95:10:a0:bc:eb:53:2d:b4:9f:4e:
11:68:d4:0e:6f:a5:ce:74:99:ee:c8:36:18:02:ce:
f0:d0:3e:fa:34:69:74:bb:8f:e6:8a:fd:ce:31:7d:
dc:28:c8:11:23:fb:54:54:b5:a2:a6:c9:96:75:07:
f9:47:61:13:fe:27:1d:ab:68:46:66:e6:e3:78:75:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:4F:E6:94:94:72:A6:BC:E4:07:58:BF:8D:F2:C2:C4:E6:65:F0
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/53hP5pSUcqa85AdYv43ywsTmZfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.175.0/24
194.180.208.0/23
Signature Algorithm: sha256WithRSAEncryption
11:f6:31:a4:fb:31:6e:20:63:15:3b:20:7e:55:49:1b:25:28:
d5:ba:39:aa:a4:f5:c3:50:c4:fb:8e:e1:71:d7:e6:3a:4f:54:
04:a5:18:fe:e7:ef:81:9b:01:9e:98:78:9c:82:aa:40:db:f4:
6d:b6:df:9f:0b:f7:4d:a7:36:4c:9a:28:1a:0c:50:10:35:8b:
99:4e:28:de:9c:a9:d2:86:a4:59:68:04:fa:2c:c2:9b:6a:0a:
c2:50:ef:98:d2:0e:c7:b8:31:77:94:70:00:ac:f3:1c:5b:3e:
f7:03:27:91:1e:53:5d:d0:cf:dc:10:75:51:78:b9:5c:00:e1:
b3:42:34:28:c5:4c:d2:11:4f:3a:3c:1c:7e:d2:ee:35:9a:25:
a1:8d:f9:b3:df:94:cc:79:a3:fc:86:34:52:0c:09:7b:98:65:
f7:08:9f:5e:96:09:19:cd:50:ab:41:8f:c7:4a:dd:fe:8d:6f:
1b:0d:9c:1e:54:cc:b2:5e:d1:14:ae:67:7f:3a:b4:a0:81:1a:
3c:62:bd:46:26:62:12:bc:fe:ec:f5:73:dd:e0:a7:e3:b8:58:
bb:22:8d:1a:01:39:57:19:38:24:ed:d8:90:c3:84:12:59:10:
3d:df:1b:46:9e:59:60:48:55:e9:7e:7d:a5:91:5a:21:fb:da:
98:54:72:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQOqWEP9R7HDPhI1SmxNt1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjIxMDI1MTAyMTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzc4NGZlNjk0OTQ3MmE2YmNlNDA3NThiZjhkZjJjMmM0ZTY2NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwizxdVqQYfUczmRCG8GLKO1ps09x
AmmlaF47jA8DzuvpNucmn4o+G4lZFa8u8nvkh7la7sWl9AKb4ZOXCF9dX5VvThGh
kAahhLNGY/Z5Fj2niiIoHEpuDUGWSzf8rF+Pc/eDrXJGZxSFy/tsfb04aY4WLzYG
Is0zVYnxYIdCuvZq/JGisoibqT/WjrBmoAOkfwUrUOhFSTEJweRYR2SQUmk7whzm
yZSpXPM13TXQ3CEbWeHLCoTkhZUQoLzrUy20n04RaNQOb6XOdJnuyDYYAs7w0D76
NGl0u4/miv3OMX3cKMgRI/tUVLWipsmWdQf5R2ET/icdq2hGZubjeHXGXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOd4T+aUlHKmvOQHWL+N8sLE5mXwMB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEvNTNoUDVwU1VjcWE4NUFkWXY0M3l3c1RtWmZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiSvAwQB
wrTQMA0GCSqGSIb3DQEBCwUAA4IBAQAR9jGk+zFuIGMVOyB+VUkbJSjVujmqpPXD
UMT7juFx1+Y6T1QEpRj+5++BmwGemHicgqpA2/Rttt+fC/dNpzZMmigaDFAQNYuZ
TijenKnShqRZaAT6LMKbagrCUO+Y0g7HuDF3lHAArPMcWz73AyeRHlNd0M/cEHVR
eLlcAOGzQjQoxUzSEU86PBx+0u41miWhjfmz35TMeaP8hjRSDAl7mGX3CJ9elgkZ
zVCrQY/HSt3+jW8bDZweVMyyXtEUrmd/OrSggRo8Yr1GJmISvP7s9XPd4KfjuFi7
Io0aATlXGTgk7diQw4QSWRA93xtGnllgSFXpfn2lkVoh+9qYVHJW
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org