Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/KCJyJGRW7t4dpvVbAZ9JERrhVmI.roa
File: KCJyJGRW7t4dpvVbAZ9JERrhVmI.roa (raw, json)
Hash identifier: pXDP9HcSNehuZqKID6aEgykKhIuhFebe9Mtx0JqKOM8=
Subject key identifier: 28:22:72:24:64:56:EE:DE:1D:A6:F5:5B:01:9F:49:11:1A:E1:56:62
Certificate issuer: /CN=a0415b6357b1eb232821091fd4f26879540e6857
Certificate serial: 10768E8C
Authority key identifier: A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/KCJyJGRW7t4dpvVbAZ9JERrhVmI.roa
Signing time: Sat 01 Jan 2022 10:04:03 +0000
ROA not before: Sat 01 Jan 2022 10:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51815
IP address blocks: 195.190.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276205196 (0x10768e8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0415b6357b1eb232821091fd4f26879540e6857
Validity
Not Before: Jan 1 10:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=282272246456eede1da6f55b019f49111ae15662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:d2:f7:f9:49:3a:41:58:c4:99:21:89:d8:
97:56:74:99:e7:05:3c:3e:88:09:1c:fd:72:1b:4d:
30:7f:2b:21:f7:8f:88:be:fb:73:31:da:c1:40:04:
32:33:4a:a4:0f:0f:bc:df:8e:a0:76:8c:f3:15:ae:
31:1a:2e:ca:30:72:d8:9f:8d:ae:2d:51:34:43:b3:
6a:48:74:e9:b6:12:f6:45:fd:b0:24:a2:14:4f:72:
49:d4:7a:60:8b:83:28:7e:3a:2c:8d:9e:72:a6:48:
ff:5f:ef:a6:b1:cd:e9:d4:15:4b:7e:55:9c:1f:29:
20:24:c8:69:b0:53:52:b8:ef:5b:0b:a5:c0:cb:69:
70:db:28:9c:a9:5c:3a:82:02:0a:68:3e:58:f6:73:
43:9c:bd:49:ce:e0:5a:f0:fe:e7:2c:0c:0a:db:a3:
15:fc:bf:45:8a:43:47:d7:ea:e7:85:5e:a3:be:a8:
00:1d:50:dd:9c:ee:4e:71:06:90:51:a4:06:c4:5b:
d6:00:de:05:10:ee:8b:dd:89:8e:0a:b4:d8:12:25:
54:be:8e:a0:12:6e:54:69:79:d5:e6:55:5b:bc:ba:
8f:6b:4a:f3:4e:16:e6:64:1c:a9:c4:e1:f2:ab:d9:
d5:67:03:d5:ea:de:55:17:ce:ed:67:06:ec:6f:62:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:72:24:64:56:EE:DE:1D:A6:F5:5B:01:9F:49:11:1A:E1:56:62
X509v3 Authority Key Identifier:
keyid:A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/KCJyJGRW7t4dpvVbAZ9JERrhVmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.133.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f5:9a:11:6d:b2:e0:7b:0b:f0:39:24:b3:60:fe:b9:b1:ca:
e1:1f:a2:f1:c3:21:ce:30:34:74:2b:6a:10:c4:01:63:5a:38:
c6:32:1b:f7:ab:52:5c:f8:2c:17:0c:41:88:60:12:b9:e7:65:
f9:26:5a:26:25:61:db:35:3a:16:a5:28:26:6a:2d:3d:0f:80:
c6:63:1f:b2:fe:a1:4c:97:ab:22:ef:e3:21:13:c6:bb:13:63:
b3:fe:20:d3:58:96:6f:5c:b1:0c:06:f2:55:71:0f:e0:c6:83:
02:2c:24:33:d6:6a:af:d1:7f:25:7a:f4:86:62:5c:b3:2f:03:
5f:04:3a:02:b9:8c:b4:48:33:ea:10:18:c0:85:d5:d3:99:db:
1e:3c:42:a7:86:26:cb:bb:6b:bf:fb:30:6d:d1:55:ec:49:98:
06:a0:c3:2e:d5:db:12:55:a2:28:4a:4f:5c:e5:7e:f4:a2:ca:
a1:e5:60:e4:a1:cd:0b:28:a0:83:cc:10:4b:b1:3d:38:68:fa:
5e:16:32:eb:a9:f2:a9:84:b4:66:0e:22:0c:20:c0:4b:a2:25:
07:7f:18:4f:e7:44:ec:a2:e5:ee:09:6c:cf:ec:d5:bc:57:9c:
88:0c:f0:1b:cc:4c:39:5b:34:f8:e5:49:73:eb:dc:3f:c8:3c:
30:13:f7:8a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEHaOjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MDQxNWI2MzU3YjFlYjIzMjgyMTA5MWZkNGYyNjg3OTU0MGU2ODU3MB4XDTIyMDEw
MTEwMDQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjgyMjcyMjQ2NDU2
ZWVkZTFkYTZmNTViMDE5ZjQ5MTExYWUxNTY2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANnI0vf5STpBWMSZIYnYl1Z0mecFPD6ICRz9chtNMH8rIfeP
iL77czHawUAEMjNKpA8PvN+OoHaM8xWuMRouyjBy2J+Nri1RNEOzakh06bYS9kX9
sCSiFE9ySdR6YIuDKH46LI2ecqZI/1/vprHN6dQVS35VnB8pICTIabBTUrjvWwul
wMtpcNsonKlcOoICCmg+WPZzQ5y9Sc7gWvD+5ywMCtujFfy/RYpDR9fq54Veo76o
AB1Q3ZzuTnEGkFGkBsRb1gDeBRDui92Jjgq02BIlVL6OoBJuVGl51eZVW7y6j2tK
804W5mQcqcTh8qvZ1WcD1ereVRfO7WcG7G9iREECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQoInIkZFbu3h2m9VsBn0kRGuFWYjAfBgNVHSMEGDAWgBSgQVtjV7HrIygh
CR/U8mh5VA5oVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29FRmJZMWV4NnlNb0lRa2YxUEpvZVZRT2FGYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvYTY2NWQ2LWI2MDUtNGRlOC04MmNhLTljMGU2NDZiNjg4MS8x
L0tDSnlKR1JXN3Q0ZHB2VmJBWjlKRVJyaFZtSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
YTY2NWQ2LWI2MDUtNGRlOC04MmNhLTljMGU2NDZiNjg4MS8xL29FRmJZMWV4NnlN
b0lRa2YxUEpvZVZRT2FGYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMO+hTANBgkqhkiG9w0BAQsFAAOC
AQEAJvWaEW2y4HsL8Dkks2D+ubHK4R+i8cMhzjA0dCtqEMQBY1o4xjIb96tSXPgs
FwxBiGASuedl+SZaJiVh2zU6FqUoJmotPQ+AxmMfsv6hTJerIu/jIRPGuxNjs/4g
01iWb1yxDAbyVXEP4MaDAiwkM9Zqr9F/JXr0hmJcsy8DXwQ6ArmMtEgz6hAYwIXV
05nbHjxCp4Ymy7trv/swbdFV7EmYBqDDLtXbElWiKEpPXOV+9KLKoeVg5KHNCyig
g8wQS7E9OGj6XhYy66nyqYS0Zg4iDCDAS6IlB38YT+dE7KLl7glsz+zVvFeciAzw
G8xMOVs0+OVJc+vcP8g8MBP3ig==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:15 2023 by rpki-client on console-ams.rpki-client.org