Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/xvUqIf8g2VVh3jMx5qmTQET1VZs.roa
File: xvUqIf8g2VVh3jMx5qmTQET1VZs.roa (raw, json)
Hash identifier: LXusE56AtHU0tMh+uFaFNadHtDRSJw0zyrAxWH0JAB4=
Subject key identifier: C6:F5:2A:21:FF:20:D9:55:61:DE:33:31:E6:A9:93:40:44:F5:55:9B
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 0183D3227DE57ACDAE994090846CE6AE1F5A
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/xvUqIf8g2VVh3jMx5qmTQET1VZs.roa
Signing time: Thu 13 Oct 2022 20:56:36 +0000
ROA not before: Thu 13 Oct 2022 20:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 185.230.183.0/24 maxlen: 24
185.230.182.0/24 maxlen: 24
185.230.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d3:22:7d:e5:7a:cd:ae:99:40:90:84:6c:e6:ae:1f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Oct 13 20:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6f52a21ff20d95561de3331e6a9934044f5559b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:3f:b2:22:1e:72:3d:ad:82:65:b6:dc:6a:
79:51:a1:a6:76:ee:41:4f:4b:24:a0:64:64:7f:db:
d0:6c:f5:71:7e:74:e3:40:e4:71:03:64:23:ad:a2:
df:fa:07:ba:01:fc:e1:55:c7:f1:35:e6:c5:c1:fa:
1b:90:d4:34:a5:58:73:ee:81:e8:14:a4:36:98:d7:
ca:a7:cc:72:a5:b5:a9:34:72:11:5d:3a:ff:d1:f3:
38:76:fa:0f:6f:a5:b8:ef:79:10:a9:ba:58:40:74:
e5:ce:f8:d1:7c:02:91:fa:9d:ca:4a:67:7f:66:ee:
cc:a1:fe:5d:51:3e:40:f6:df:d7:e7:4c:b1:08:bc:
ce:e6:51:d3:9a:dc:e7:31:5d:f5:62:21:35:92:2d:
ea:78:74:0e:dc:2b:31:2e:c1:48:46:56:50:6a:55:
03:f3:cd:19:d5:6d:40:e0:5a:1e:39:e2:a3:92:64:
3f:d9:bd:25:4f:de:5e:d9:9a:87:8f:9c:e9:37:dc:
eb:a0:ee:26:94:73:26:bc:e4:bf:58:75:98:8e:f5:
27:1c:c8:2e:4d:55:99:4e:64:85:2d:0c:1d:25:06:
f9:45:10:e7:4a:eb:b8:a2:e7:29:92:20:74:d4:12:
02:34:bd:26:9c:59:1c:a2:1c:0b:f7:7a:06:d6:1f:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:2A:21:FF:20:D9:55:61:DE:33:31:E6:A9:93:40:44:F5:55:9B
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/xvUqIf8g2VVh3jMx5qmTQET1VZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.181.0-185.230.183.255
Signature Algorithm: sha256WithRSAEncryption
56:ec:af:4c:b5:ae:31:c1:87:74:cc:93:b9:63:15:bc:05:d8:
0e:5f:0e:09:e5:ec:64:5e:a2:09:1d:19:ab:e3:4b:da:6b:37:
57:3c:dc:28:8f:30:ae:c9:68:51:0b:a1:fe:77:b2:db:10:82:
f6:82:d9:c7:ed:c5:eb:df:e8:a8:b1:09:af:9a:2b:ae:aa:30:
58:2b:cb:fd:12:bd:5b:87:0a:03:c5:23:ba:dc:20:1b:11:83:
85:51:f4:15:f7:fb:21:1f:76:7c:c7:25:a5:c5:77:d0:ce:ab:
8e:0b:05:bb:37:0a:df:dd:50:51:3c:50:52:ff:c2:16:4f:44:
0d:e0:ac:b8:78:70:ab:ec:da:4a:cd:a3:71:a3:fd:44:62:79:
5d:95:b8:e6:46:c3:02:3b:70:02:81:68:aa:0c:f3:c5:d8:be:
d3:f2:7b:7f:7e:e6:d3:56:c3:1a:74:55:10:70:87:2e:0f:e0:
5e:82:c3:ac:08:6e:f5:50:ac:60:c7:67:e8:23:b2:c4:0e:f7:
98:67:54:b0:a8:9b:69:80:1f:26:4e:6a:ee:11:84:03:51:81:
35:ad:dd:a0:f7:e0:c3:4e:ae:60:19:f5:d9:fd:e2:6c:f3:22:
3b:8a:22:42:0b:dc:56:af:aa:3f:0f:a7:e3:45:aa:91:ce:81:
cf:c0:2a:ce
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYPTIn3les2umUCQhGzmrh9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjIxMDEzMjA1NjM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmY1MmEyMWZmMjBkOTU1NjFkZTMzMzFlNmE5OTM0MDQ0ZjU1NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbI/siIecj2tgmW23Gp5UaGmdu5B
T0skoGRkf9vQbPVxfnTjQORxA2QjraLf+ge6AfzhVcfxNebFwfobkNQ0pVhz7oHo
FKQ2mNfKp8xypbWpNHIRXTr/0fM4dvoPb6W473kQqbpYQHTlzvjRfAKR+p3KSmd/
Zu7Mof5dUT5A9t/X50yxCLzO5lHTmtznMV31YiE1ki3qeHQO3CsxLsFIRlZQalUD
880Z1W1A4FoeOeKjkmQ/2b0lT95e2ZqHj5zpN9zroO4mlHMmvOS/WHWYjvUnHMgu
TVWZTmSFLQwdJQb5RRDnSuu4oucpkiB01BICNL0mnFkcohwL93oG1h8PgwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMb1KiH/INlVYd4zMeapk0BE9VWbMB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEveHZVcUlmOGcyVlZoM2pNeDVxbVRRRVQxVlpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC55rUD
BAO55rAwDQYJKoZIhvcNAQELBQADggEBAFbsr0y1rjHBh3TMk7ljFbwF2A5fDgnl
7GReogkdGavjS9prN1c83CiPMK7JaFELof53stsQgvaC2cftxevf6KixCa+aK66q
MFgry/0SvVuHCgPFI7rcIBsRg4VR9BX3+yEfdnzHJaXFd9DOq44LBbs3Ct/dUFE8
UFL/whZPRA3grLh4cKvs2krNo3Gj/URieV2VuOZGwwI7cAKBaKoM88XYvtPye39+
5tNWwxp0VRBwhy4P4F6Cw6wIbvVQrGDHZ+gjssQO95hnVLCom2mAHyZOau4RhANR
gTWt3aD34MNOrmAZ9dn94mzzIjuKIkIL3Favqj8Pp+NFqpHOgc/AKs4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:32 2024 by rpki-client on console-fra.rpki-client.org