Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/u5B4U63FnptTzojVFP7cy5L3prg.roa
File: u5B4U63FnptTzojVFP7cy5L3prg.roa (raw, json)
Hash identifier: 7ChHZGyOg4mas3RJlgR2iUiAenq0hqH5/xtlOGnY1m8=
Subject key identifier: BB:90:78:53:AD:C5:9E:9B:53:CE:88:D5:14:FE:DC:CB:92:F7:A6:B8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 1B5E7063
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/u5B4U63FnptTzojVFP7cy5L3prg.roa
Signing time: Sat 01 Jan 2022 07:59:32 +0000
ROA not before: Sat 01 Jan 2022 07:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204326
IP address blocks: 185.18.240.0/22 maxlen: 24
2a04:d00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459173987 (0x1b5e7063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Jan 1 07:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb907853adc59e9b53ce88d514fedccb92f7a6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:e1:90:8e:d8:99:7c:c4:73:58:c7:19:ec:
d2:e7:c9:b0:f2:ec:f7:a2:3b:75:41:17:bd:32:3b:
37:b8:1c:10:27:17:1d:d3:a6:bb:88:c5:8c:d0:d5:
e4:84:8d:0a:cb:df:53:88:f3:f5:5a:77:12:1c:96:
96:a5:c6:d8:87:35:6a:3d:63:47:c9:94:84:89:68:
e2:c0:a6:1c:8c:ec:a1:76:b7:cc:df:41:7a:23:76:
d1:d9:bb:c0:f4:0d:8e:27:1b:23:d9:b1:90:d6:0c:
ee:fd:2b:17:4d:d4:98:ee:06:21:09:2f:d7:c5:71:
91:5b:0a:04:e5:61:96:79:27:83:d0:37:e5:88:0a:
f7:35:cf:0c:50:d7:83:f5:99:5d:d5:66:b6:29:a4:
67:b5:f4:bf:f2:3c:ee:04:ee:34:9e:a0:1c:a2:7c:
23:cd:e0:0f:96:b3:7a:49:b0:7f:52:f8:34:b4:68:
eb:84:52:36:68:ca:d7:d9:90:2a:2d:c0:45:26:d8:
03:30:5b:1f:9b:0e:bb:b9:c3:1e:ca:49:e2:b5:39:
0f:76:f8:52:40:f9:29:e4:6a:f5:78:d9:4f:05:9c:
4f:58:11:dc:f0:81:20:e4:db:5f:5c:bf:05:50:6d:
9a:1a:10:77:0a:12:9e:ea:dd:f2:01:36:e4:76:5a:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:78:53:AD:C5:9E:9B:53:CE:88:D5:14:FE:DC:CB:92:F7:A6:B8
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/u5B4U63FnptTzojVFP7cy5L3prg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.240.0/22
IPv6:
2a04:d00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:1d:1c:c2:47:28:01:8c:c2:ba:3a:6f:ba:6c:00:46:f3:4b:
15:41:5c:83:fd:86:b6:8f:54:2e:a9:f6:85:ec:2a:32:17:f9:
b2:63:b0:0a:de:95:12:39:ad:11:a7:ea:be:a1:cb:d7:b2:9d:
f2:2e:6e:06:5f:ec:5f:c5:0c:7f:b5:49:ef:08:7b:31:5e:95:
93:e2:6e:c2:a7:40:93:9a:02:f1:9e:20:50:8a:9e:14:06:cf:
f8:f5:09:6c:d8:1f:25:ea:a5:94:dc:55:ce:c1:2c:6a:ac:9a:
00:9e:46:fb:b4:d1:95:ce:c5:a0:c3:ac:d8:29:82:cb:08:a1:
9e:d9:6b:74:76:fa:21:6c:10:0d:a8:9d:ee:97:6d:29:84:0e:
8d:11:ae:fe:82:07:78:a5:13:b0:2f:16:e8:79:c0:67:e8:06:
f0:60:c2:6a:cc:b7:70:71:8c:78:0c:e3:41:62:c1:9b:59:24:
c9:7f:4d:95:f0:18:77:d7:a5:83:26:32:33:99:8b:1c:c1:7b:
6e:1c:15:7e:a5:7a:c3:5b:9a:d7:ec:98:3f:1c:17:68:51:84:
54:42:ca:45:06:e6:80:dd:2a:f5:df:e1:c4:41:0f:60:d7:75:
e6:47:a6:3a:1b:2c:8c:c0:66:6c:aa:9b:87:d9:f3:73:f7:42:
96:2a:41:9f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEG15wYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzFlM2ZkZGY3ODg0ZDc4NWE3MDhmZDRlNjY0YjYyZGU5MTBlYmU4MB4XDTIyMDEw
MTA3NTkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmI5MDc4NTNhZGM1
OWU5YjUzY2U4OGQ1MTRmZWRjY2I5MmY3YTZiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqt4ZCO2Jl8xHNYxxns0ufJsPLs96I7dUEXvTI7N7gcECcX
HdOmu4jFjNDV5ISNCsvfU4jz9Vp3EhyWlqXG2Ic1aj1jR8mUhIlo4sCmHIzsoXa3
zN9BeiN20dm7wPQNjicbI9mxkNYM7v0rF03UmO4GIQkv18VxkVsKBOVhlnkng9A3
5YgK9zXPDFDXg/WZXdVmtimkZ7X0v/I87gTuNJ6gHKJ8I83gD5azekmwf1L4NLRo
64RSNmjK19mQKi3ARSbYAzBbH5sOu7nDHspJ4rU5D3b4UkD5KeRq9XjZTwWcT1gR
3PCBIOTbX1y/BVBtmhoQdwoSnurd8gE25HZaTtkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS7kHhTrcWem1POiNUU/tzLkvemuDAfBgNVHSMEGDAWgBQ8Hj/d94hNeFpw
j9TmZLYt6RDr6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BCNF8zZmVJVFhoYWNJX1U1bVMyTGVrUTYtZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvNGU4ZTc0LTc3ZTYtNDFlYi05MDQ3LTU5YzE4YWRhMzUyZi8x
L3U1QjRVNjNGbnB0VHpvalZGUDdjeTVMM3ByZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
NGU4ZTc0LTc3ZTYtNDFlYi05MDQ3LTU5YzE4YWRhMzUyZi8xL1BCNF8zZmVJVFho
YWNJX1U1bVMyTGVrUTYtZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkS8DANBAIAAjAHAwUDKgQNADAN
BgkqhkiG9w0BAQsFAAOCAQEAmh0cwkcoAYzCujpvumwARvNLFUFcg/2Gto9ULqn2
hewqMhf5smOwCt6VEjmtEafqvqHL17Kd8i5uBl/sX8UMf7VJ7wh7MV6Vk+JuwqdA
k5oC8Z4gUIqeFAbP+PUJbNgfJeqllNxVzsEsaqyaAJ5G+7TRlc7FoMOs2CmCywih
ntlrdHb6IWwQDaid7pdtKYQOjRGu/oIHeKUTsC8W6HnAZ+gG8GDCasy3cHGMeAzj
QWLBm1kkyX9NlfAYd9elgyYyM5mLHMF7bhwVfqV6w1ua1+yYPxwXaFGEVELKRQbm
gN0q9d/hxEEPYNd15kemOhssjMBmbKqbh9nzc/dClipBnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org