Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/gIY2gwLMtjp_EKAOcYKQWsZDl5Y.roa
File: gIY2gwLMtjp_EKAOcYKQWsZDl5Y.roa (raw, json)
Hash identifier: X6cFfCzyV+XjO/bnN7zMhAdtn5MKDLq909MShPGlokM=
Subject key identifier: 80:86:36:83:02:CC:B6:3A:7F:10:A0:0E:71:82:90:5A:C6:43:97:96
Certificate issuer: /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial: 08990155
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/gIY2gwLMtjp_EKAOcYKQWsZDl5Y.roa
Signing time: Sat 01 Jan 2022 03:55:53 +0000
ROA not before: Sat 01 Jan 2022 03:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47866
IP address blocks: 185.85.244.0/24 maxlen: 24
185.85.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144245077 (0x8990155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Validity
Not Before: Jan 1 03:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8086368302ccb63a7f10a00e7182905ac6439796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:ed:55:dc:ce:85:3a:c7:4f:9e:ff:73:99:
f6:0a:e6:be:09:da:6e:c8:88:56:1f:10:5b:5c:cb:
41:e0:6c:1c:4f:ad:a2:7b:74:be:c3:43:da:49:32:
b8:f2:22:e3:0b:0a:55:ad:ec:01:63:15:ff:ca:53:
66:f0:13:4a:4d:d6:fa:95:e6:93:04:03:93:d0:ec:
47:f8:89:81:33:46:e5:61:ab:8b:ad:1f:7c:8d:18:
1d:5a:a7:a9:21:f0:fb:a8:df:b8:df:91:14:67:a2:
db:e6:5f:cf:67:6b:ed:f7:44:21:f3:26:07:c0:ba:
da:4d:8f:5e:f7:9f:6e:78:94:47:50:d4:f1:78:e3:
c0:40:a0:ac:84:39:5a:63:c6:3c:44:d2:2b:b0:24:
55:8f:62:37:b5:ad:4f:bb:ce:b9:1d:f3:4f:10:7c:
93:c3:72:68:66:32:9e:44:a6:63:88:77:3f:47:2e:
61:1a:77:7f:b8:33:20:05:43:55:5e:10:0d:2e:c8:
ca:7c:b1:19:02:fc:a4:da:58:da:87:fa:7b:2c:89:
f3:47:36:32:d2:db:cd:b5:af:5a:5b:25:91:f2:7f:
71:2e:91:fe:6b:75:a0:32:b7:09:68:7f:35:ff:aa:
31:45:82:9f:c2:de:de:99:b1:4f:b4:ba:40:e1:36:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:36:83:02:CC:B6:3A:7F:10:A0:0E:71:82:90:5A:C6:43:97:96
X509v3 Authority Key Identifier:
keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/gIY2gwLMtjp_EKAOcYKQWsZDl5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.244.0/22
Signature Algorithm: sha256WithRSAEncryption
af:2b:93:03:50:84:45:7d:41:52:45:ec:25:64:b7:6e:9f:76:
95:83:6b:fb:2a:b9:15:fc:dd:5b:c3:81:c6:62:8c:cc:59:50:
56:be:bd:49:57:1b:39:83:41:e5:c1:85:a2:df:c1:56:c1:51:
c2:c4:00:2a:00:cb:bd:52:b1:65:22:6d:e6:b1:a0:fc:eb:cf:
da:65:de:45:ab:17:39:d8:d6:ca:3a:65:8d:23:6a:94:d6:55:
af:77:2f:99:ae:70:78:fc:69:05:b4:b2:6f:66:b6:aa:8e:52:
cb:ed:67:de:5d:2a:2f:95:d8:e0:3d:25:df:f0:ab:ef:ce:24:
f7:6e:f3:21:73:a4:b7:44:bd:1f:df:66:bb:63:66:a4:e4:f4:
a2:bc:63:a0:1f:78:12:29:0c:1c:45:55:ed:6a:67:f8:88:8d:
7f:e1:ea:82:e7:6a:45:5e:a8:99:c6:14:e0:d4:af:fe:a1:15:
e1:3a:12:48:18:cb:38:6c:40:5c:5b:e6:31:a1:fa:32:1d:33:
ae:92:65:14:ed:88:d7:61:c7:a3:4f:33:1f:2b:df:13:da:b2:
68:3a:5a:6a:67:09:32:fe:65:96:6c:93:c0:20:02:be:dc:f8:
9d:67:d4:b3:01:cf:80:c0:b5:19:eb:4f:98:de:23:1b:fa:ac:
86:44:19:95
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECJkBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWYxZDUyNWQ5ZTFjOGZlZTdmNTFjOTI5OTg0MzIxOTEyZmZmMzRjMB4XDTIyMDEw
MTAzNTU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODA4NjM2ODMwMmNj
YjYzYTdmMTBhMDBlNzE4MjkwNWFjNjQzOTc5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLw7VXczoU6x0+e/3OZ9grmvgnabsiIVh8QW1zLQeBsHE+t
ont0vsND2kkyuPIi4wsKVa3sAWMV/8pTZvATSk3W+pXmkwQDk9DsR/iJgTNG5WGr
i60ffI0YHVqnqSHw+6jfuN+RFGei2+Zfz2dr7fdEIfMmB8C62k2PXvefbniUR1DU
8XjjwECgrIQ5WmPGPETSK7AkVY9iN7WtT7vOuR3zTxB8k8NyaGYynkSmY4h3P0cu
YRp3f7gzIAVDVV4QDS7IynyxGQL8pNpY2of6eyyJ80c2MtLbzbWvWlslkfJ/cS6R
/mt1oDK3CWh/Nf+qMUWCn8Le3pmxT7S6QOE2uEcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSAhjaDAsy2On8QoA5xgpBaxkOXljAfBgNVHSMEGDAWgBRa8dUl2eHI/uf1
HJKZhDIZEv/zTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1d2SFZKZG5oeVA3bjlSeVNtWVF5R1JMXzgwdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvZDBmZWE2LTIyYTEtNGFhNS1iNTBkLWExMTQ5MzljZGFhNS8x
L2dJWTJnd0xNdGpwX0VLQU9jWUtRV3NaRGw1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
ZDBmZWE2LTIyYTEtNGFhNS1iNTBkLWExMTQ5MzljZGFhNS8xL1d2SFZKZG5oeVA3
bjlSeVNtWVF5R1JMXzgwdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlV9DANBgkqhkiG9w0BAQsFAAOC
AQEAryuTA1CERX1BUkXsJWS3bp92lYNr+yq5FfzdW8OBxmKMzFlQVr69SVcbOYNB
5cGFot/BVsFRwsQAKgDLvVKxZSJt5rGg/OvP2mXeRasXOdjWyjpljSNqlNZVr3cv
ma5wePxpBbSyb2a2qo5Sy+1n3l0qL5XY4D0l3/Cr784k927zIXOkt0S9H99mu2Nm
pOT0orxjoB94EikMHEVV7Wpn+IiNf+HqgudqRV6omcYU4NSv/qEV4ToSSBjLOGxA
XFvmMaH6Mh0zrpJlFO2I12HHo08zHyvfE9qyaDpaamcJMv5llmyTwCACvtz4nWfU
swHPgMC1GetPmN4jG/qshkQZlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org