Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/G23EJYpfqSijHBp8Dr13SxPHYI0.roa
File: G23EJYpfqSijHBp8Dr13SxPHYI0.roa (raw, json)
Hash identifier: eEdAwwyvNFgl/ZCq6Zne0LqFs+ClyhSL59gXUcYYDmI=
Subject key identifier: 1B:6D:C4:25:8A:5F:A9:28:A3:1C:1A:7C:0E:BD:77:4B:13:C7:60:8D
Certificate issuer: /CN=a5915bc8a982fe61eb4aed5418323288329504d7
Certificate serial: 076BBDA5
Authority key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/G23EJYpfqSijHBp8Dr13SxPHYI0.roa
Signing time: Fri 06 May 2022 06:39:55 +0000
ROA not before: Fri 06 May 2022 06:39:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43046
IP address blocks: 195.225.58.0/24 maxlen: 24
195.225.58.0/23 maxlen: 23
195.225.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124501413 (0x76bbda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5915bc8a982fe61eb4aed5418323288329504d7
Validity
Not Before: May 6 06:39:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b6dc4258a5fa928a31c1a7c0ebd774b13c7608d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:da:a7:b3:b8:7e:c6:e9:96:0f:5f:b3:8e:
ff:b0:b3:f3:ae:7f:df:9f:ed:d8:37:d8:a0:da:bf:
ba:76:dc:a6:ce:2d:af:0b:71:e6:ee:b2:8e:3f:25:
42:25:3c:8e:b6:3d:2a:99:da:a8:64:47:b0:8a:2e:
75:32:b9:e0:32:73:87:9c:4a:d4:5a:09:ae:b1:7e:
2f:0d:5c:2c:4c:c3:c7:46:83:fe:ec:5f:e5:6c:39:
b8:36:6f:e8:15:11:49:33:3c:63:5e:1d:29:8b:4b:
16:fb:83:9e:89:5c:16:a7:38:3f:4c:be:7f:a0:b7:
da:c6:7b:c5:b0:de:6f:cb:6d:7c:c7:c9:25:b3:56:
f4:ae:36:81:c5:2f:74:fd:4d:4e:50:7d:e9:0b:d5:
d6:cd:cb:15:37:e0:7a:99:d3:6f:46:72:6b:11:7a:
78:94:82:75:5c:a5:f9:8f:16:62:92:4c:dd:e8:44:
8b:4c:bd:cb:1a:7a:8f:85:11:7a:d4:25:9b:a3:1d:
a3:ec:9c:f7:28:c5:ad:3f:63:83:ab:42:46:5f:99:
c6:5e:cb:40:c8:de:0e:c1:b2:c3:81:1a:2b:71:9c:
83:74:3e:c7:83:42:44:4d:9b:cf:b9:22:80:d7:d6:
c8:f7:f4:f5:b7:d0:e7:ff:db:80:fd:59:5b:e4:ea:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:C4:25:8A:5F:A9:28:A3:1C:1A:7C:0E:BD:77:4B:13:C7:60:8D
X509v3 Authority Key Identifier:
keyid:A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/G23EJYpfqSijHBp8Dr13SxPHYI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.58.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:ac:06:9e:d0:ec:ca:f2:4f:e3:ab:07:99:09:80:db:78:24:
e7:76:4b:ca:10:23:40:74:67:ab:a6:64:26:3d:be:d4:c9:83:
ae:b2:20:c7:bb:60:77:b8:58:2a:8d:c6:f9:91:53:93:61:7a:
6b:b6:06:08:e2:9d:c4:97:57:06:57:23:db:a2:4b:6c:e2:5d:
cb:9e:43:44:09:93:49:54:29:0a:c7:71:60:72:c5:8a:01:e0:
f4:6c:70:0a:86:51:e2:52:fd:49:79:f3:89:e4:b8:67:75:dc:
25:1a:35:f6:00:84:43:ef:63:11:a6:d5:6b:0d:76:4e:54:fb:
9d:3d:72:a1:20:79:72:45:59:a2:42:15:1f:f7:78:b9:a9:a8:
79:43:a4:87:8a:a1:ed:8b:13:ef:45:b1:3e:bc:db:33:e7:fd:
b1:54:89:79:1c:1f:bd:c1:b4:41:3b:da:fb:d8:d6:03:49:c3:
1b:a0:44:10:4d:1b:74:92:08:3b:f5:e4:3e:95:06:37:42:6e:
5c:13:09:54:00:fd:b8:88:2a:95:a2:d4:0e:2a:d7:7d:88:6b:
07:18:62:3e:29:ef:6e:89:1a:69:c2:e7:25:86:84:4b:c1:10:
79:a4:d2:ee:ba:10:71:47:04:f3:84:61:37:d9:3d:3a:5a:dd:
86:76:24:23
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2u9pTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTkxNWJjOGE5ODJmZTYxZWI0YWVkNTQxODMyMzI4ODMyOTUwNGQ3MB4XDTIyMDUw
NjA2Mzk1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWI2ZGM0MjU4YTVm
YTkyOGEzMWMxYTdjMGViZDc3NGIxM2M3NjA4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAG2qezuH7G6ZYPX7OO/7Cz865/35/t2DfYoNq/unbcps4t
rwtx5u6yjj8lQiU8jrY9KpnaqGRHsIoudTK54DJzh5xK1FoJrrF+Lw1cLEzDx0aD
/uxf5Ww5uDZv6BURSTM8Y14dKYtLFvuDnolcFqc4P0y+f6C32sZ7xbDeb8ttfMfJ
JbNW9K42gcUvdP1NTlB96QvV1s3LFTfgepnTb0ZyaxF6eJSCdVyl+Y8WYpJM3ehE
i0y9yxp6j4URetQlm6Mdo+yc9yjFrT9jg6tCRl+Zxl7LQMjeDsGyw4EaK3Gcg3Q+
x4NCRE2bz7kigNfWyPf09bfQ5//bgP1ZW+TqM7kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQbbcQlil+pKKMcGnwOvXdLE8dgjTAfBgNVHSMEGDAWgBSlkVvIqYL+YetK
7VQYMjKIMpUE1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BaRmJ5S21DX21IclN1MVVHREl5aURLVkJOYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvOGUzN2QzLWM2MzItNDhiOC05YjBiLTUwMTIwNTRmOWQyNi8x
L0cyM0VKWXBmcVNpakhCcDhEcjEzU3hQSFlJMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
OGUzN2QzLWM2MzItNDhiOC05YjBiLTUwMTIwNTRmOWQyNi8xL3BaRmJ5S21DX21I
clN1MVVHREl5aURLVkJOYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcPhOjANBgkqhkiG9w0BAQsFAAOC
AQEAOqwGntDsyvJP46sHmQmA23gk53ZLyhAjQHRnq6ZkJj2+1MmDrrIgx7tgd7hY
Ko3G+ZFTk2F6a7YGCOKdxJdXBlcj26JLbOJdy55DRAmTSVQpCsdxYHLFigHg9Gxw
CoZR4lL9SXnzieS4Z3XcJRo19gCEQ+9jEabVaw12TlT7nT1yoSB5ckVZokIVH/d4
uamoeUOkh4qh7YsT70WxPrzbM+f9sVSJeRwfvcG0QTva+9jWA0nDG6BEEE0bdJII
O/XkPpUGN0JuXBMJVAD9uIgqlaLUDirXfYhrBxhiPinvbokaacLnJYaES8EQeaTS
7roQcUcE84RhN9k9OlrdhnYkIw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net