Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/lT-tVYWw3UCp2VY3br5H26mvVJI.roa
File: lT-tVYWw3UCp2VY3br5H26mvVJI.roa (raw, json)
Hash identifier: F46NFg/21HVXK+BkEf+en8WRxxXqVLC8gH8MepSH4+4=
Subject key identifier: 95:3F:AD:55:85:B0:DD:40:A9:D9:56:37:6E:BE:47:DB:A9:AF:54:92
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01850FC824F10899DA325E5EAB5C93354E6C
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/lT-tVYWw3UCp2VY3br5H26mvVJI.roa
Signing time: Wed 14 Dec 2022 08:37:32 +0000
ROA not before: Wed 14 Dec 2022 08:37:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399486
IP address blocks: 194.180.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:c8:24:f1:08:99:da:32:5e:5e:ab:5c:93:35:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Dec 14 08:37:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=953fad5585b0dd40a9d956376ebe47dba9af5492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:ba:de:80:ea:59:c4:7a:70:34:dd:91:ae:
c1:c1:9e:c1:90:10:3d:99:2d:d5:43:85:11:fc:4c:
d7:9c:ad:72:8b:b2:5c:e2:f1:43:d8:d1:48:93:2d:
a6:94:43:c3:d7:13:8f:3a:5b:8b:fc:e4:c9:10:f7:
03:65:28:4d:96:8a:9d:23:47:79:d1:90:3a:da:8b:
66:85:ee:b6:6a:3f:17:7d:42:ca:4e:98:b6:c1:c5:
5c:b0:03:4d:0d:0b:ea:33:f1:db:51:0b:6b:1e:fd:
f9:89:d2:cf:6c:6e:c6:53:91:87:0c:62:b5:00:e4:
43:65:28:1d:49:5a:ad:02:33:ff:66:10:22:91:cd:
77:2e:18:66:0a:d9:7b:aa:8d:2d:57:ac:b9:0f:bf:
5c:f8:35:f2:f9:8b:e5:a3:d4:a6:a4:3e:54:2b:60:
af:47:15:cf:48:cb:2d:e3:68:5e:4a:83:e4:98:67:
a0:c9:cf:54:a9:f8:c7:9e:02:9e:8b:0d:83:ee:5b:
8c:0e:36:ac:2c:2a:76:94:12:0e:74:cc:00:60:16:
ce:8f:23:cb:1e:64:3b:dd:77:32:51:62:b2:fa:d4:
b9:bf:8d:76:94:a7:65:5f:df:df:c0:01:05:db:aa:
b6:84:4f:78:09:74:1d:e6:64:ea:58:c3:99:31:d5:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:AD:55:85:B0:DD:40:A9:D9:56:37:6E:BE:47:DB:A9:AF:54:92
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/lT-tVYWw3UCp2VY3br5H26mvVJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8c:e7:fd:0b:4d:d2:30:29:4e:a5:f6:29:6e:91:1a:c5:0e:
92:ce:eb:ca:d1:50:b9:89:d0:1f:40:82:8a:62:83:af:07:d4:
07:78:96:2e:4a:a0:62:0d:e9:99:f0:9b:cb:79:16:e0:f8:82:
f1:71:4c:29:27:92:59:01:6c:05:77:d1:99:cd:5b:b6:23:2f:
55:23:c4:41:e5:12:95:24:e8:7d:2a:e9:be:83:f6:ca:13:2c:
aa:c7:af:66:e5:cd:5a:e7:b9:3e:6d:90:2c:b4:8f:b9:10:0c:
72:04:16:4c:a8:72:7c:2e:c1:ef:98:ad:75:9f:53:6c:86:6c:
7c:dc:6b:64:17:fc:f3:55:9f:64:f6:dd:1c:c2:97:3d:49:25:
8f:42:5f:41:55:ed:59:ce:2d:bd:bd:19:88:15:ce:4d:70:9f:
78:c7:47:96:e9:7b:71:8e:e1:37:d6:3e:9d:d7:4e:1a:db:03:
26:91:37:bc:f2:cb:9b:d8:a9:da:9b:2b:db:00:0f:7e:c2:6d:
94:e0:76:b0:4c:b2:4a:b1:3c:e3:8c:11:8d:ab:a0:31:b4:7e:
04:45:2a:45:3d:2f:38:d1:8c:36:ce:e8:8e:49:76:15:73:fc:
7c:de:18:ce:6e:0f:97:53:93:dd:0b:ac:25:33:2a:b8:39:b9:
22:6b:96:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUPyCTxCJnaMl5eq1yTNU5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjIxMjE0MDgzNzMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTNmYWQ1NTg1YjBkZDQwYTlkOTU2Mzc2ZWJlNDdkYmE5YWY1NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzO63oDqWcR6cDTdka7BwZ7BkBA9
mS3VQ4UR/EzXnK1yi7Jc4vFD2NFIky2mlEPD1xOPOluL/OTJEPcDZShNloqdI0d5
0ZA62otmhe62aj8XfULKTpi2wcVcsANNDQvqM/HbUQtrHv35idLPbG7GU5GHDGK1
AORDZSgdSVqtAjP/ZhAikc13LhhmCtl7qo0tV6y5D79c+DXy+Yvlo9SmpD5UK2Cv
RxXPSMst42heSoPkmGegyc9UqfjHngKeiw2D7luMDjasLCp2lBIOdMwAYBbOjyPL
HmQ73XcyUWKy+tS5v412lKdlX9/fwAEF26q2hE94CXQd5mTqWMOZMdVvWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJU/rVWFsN1AqdlWN26+R9upr1SSMB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEvbFQtdFZZV3czVUNwMlZZM2JyNUgyNm12VkpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrThMA0G
CSqGSIb3DQEBCwUAA4IBAQAqjOf9C03SMClOpfYpbpEaxQ6SzuvK0VC5idAfQIKK
YoOvB9QHeJYuSqBiDemZ8JvLeRbg+ILxcUwpJ5JZAWwFd9GZzVu2Iy9VI8RB5RKV
JOh9Kum+g/bKEyyqx69m5c1a57k+bZAstI+5EAxyBBZMqHJ8LsHvmK11n1Nshmx8
3GtkF/zzVZ9k9t0cwpc9SSWPQl9BVe1Zzi29vRmIFc5NcJ94x0eW6XtxjuE31j6d
104a2wMmkTe88sub2KnamyvbAA9+wm2U4HawTLJKsTzjjBGNq6AxtH4ERSpFPS84
0Yw2zuiOSXYVc/x83hjObg+XU5PdC6wlMyq4Obkia5aq
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org