Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/oZW0i2Z0eu-tLE4yK9y4LiojbDo.roa
File: oZW0i2Z0eu-tLE4yK9y4LiojbDo.roa (raw, json)
Hash identifier: blqWD+eeYRaSY48btSx+jwUUW2ebBkTlAp/X1dqFabk=
Subject key identifier: A1:95:B4:8B:66:74:7A:EF:AD:2C:4E:32:2B:DC:B8:2E:2A:23:6C:3A
Certificate issuer: /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial: 01C18BC3
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/oZW0i2Z0eu-tLE4yK9y4LiojbDo.roa
Signing time: Sat 01 Jan 2022 14:57:08 +0000
ROA not before: Sat 01 Jan 2022 14:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199710
IP address blocks: 185.42.236.0/23 maxlen: 23
185.42.236.0/24 maxlen: 24
185.42.239.0/24 maxlen: 24
185.42.238.0/24 maxlen: 24
185.42.238.0/23 maxlen: 23
185.42.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29461443 (0x1c18bc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Validity
Not Before: Jan 1 14:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a195b48b66747aefad2c4e322bdcb82e2a236c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:7f:df:e1:d0:83:0c:9e:09:2d:6d:80:6a:
74:f8:a3:0b:59:f3:e9:58:64:89:08:5a:82:a7:a4:
de:17:e9:3b:3a:3e:9f:e6:f4:69:e2:6a:f4:0e:0a:
41:fb:19:70:2f:1e:24:e7:5a:fb:4e:05:d6:46:16:
dd:ec:68:bc:81:12:30:ec:91:7a:51:b4:1f:0e:3f:
bf:8d:eb:bc:ca:1a:09:d6:51:3f:25:27:74:63:2d:
be:3b:ea:cb:bd:f7:b0:06:0c:02:26:b2:5b:12:a2:
38:83:b5:36:e4:15:f7:0f:91:0f:38:03:0e:13:3e:
f0:d6:7c:85:ae:7a:3e:a9:0c:1d:06:e7:8a:6d:a5:
b6:46:8f:6a:43:d7:fe:b3:79:a7:19:f5:11:3b:97:
3d:72:c2:f8:7b:a0:b0:17:1d:53:a2:7b:76:35:92:
34:59:f6:c3:cb:09:8f:ac:6b:30:5a:2f:a5:d3:f0:
e1:b7:93:17:db:b2:f4:33:96:fe:25:ed:1d:5c:6f:
43:7c:fa:38:4b:49:cb:14:7c:e6:15:87:ab:df:5d:
3a:46:3c:cd:7c:6e:e1:70:a3:d7:5c:83:5a:4f:9a:
46:77:54:27:88:94:2b:d8:3b:68:94:14:e7:7d:58:
e5:1f:22:87:5a:47:34:89:27:fd:02:2e:42:55:6d:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:B4:8B:66:74:7A:EF:AD:2C:4E:32:2B:DC:B8:2E:2A:23:6C:3A
X509v3 Authority Key Identifier:
keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/oZW0i2Z0eu-tLE4yK9y4LiojbDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.236.0/22
Signature Algorithm: sha256WithRSAEncryption
64:62:c1:e6:f9:0d:20:7e:fc:96:15:07:79:7f:58:97:8b:ff:
97:61:1b:01:b4:9c:6c:57:46:a6:ee:0d:e6:69:22:21:42:47:
10:eb:b8:c8:f2:b7:3c:dd:14:8a:86:48:0a:12:25:eb:58:18:
75:2b:3a:d5:f4:2f:43:b4:8b:04:d5:9e:a5:07:05:12:85:ee:
cf:18:45:1e:31:ae:97:a1:a6:7a:4d:ce:35:cc:6a:bd:26:db:
3b:0f:e1:ee:39:20:70:30:30:8a:be:4c:01:80:f3:eb:2d:37:
12:f5:6c:d8:32:73:20:bb:d3:97:d4:af:37:35:a0:fc:58:50:
fb:91:dc:6d:b1:0c:81:bd:32:52:2a:c7:09:22:b7:e6:b9:a9:
23:a8:5b:6b:9e:b4:2b:56:a5:1e:ef:c2:c3:8f:7f:2e:df:48:
7b:bc:87:2f:8b:9d:49:53:2d:72:98:f0:79:21:c5:bd:66:ce:
32:7d:e7:99:d7:8c:b8:50:10:f3:7b:f9:36:7e:b6:d5:ab:80:
8d:16:35:cc:e8:07:e4:f0:90:8e:76:87:78:c1:38:97:d0:af:
03:bf:5e:8c:0c:2e:97:57:03:d7:1c:b4:f9:01:9a:88:26:7c:
03:5c:46:2f:5b:ea:1c:57:5f:31:94:fa:05:54:a8:20:e9:aa:
4b:8d:62:90
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAcGLwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWNmOWRjMGM3YjdmYzRhMzM2ZTRlZWU1N2IxZWMxOTQ4YzhkZGYzMB4XDTIyMDEw
MTE0NTcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTE5NWI0OGI2Njc0
N2FlZmFkMmM0ZTMyMmJkY2I4MmUyYTIzNmMzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJjmf9/h0IMMngktbYBqdPijC1nz6VhkiQhagqek3hfpOzo+
n+b0aeJq9A4KQfsZcC8eJOda+04F1kYW3exovIESMOyRelG0Hw4/v43rvMoaCdZR
PyUndGMtvjvqy733sAYMAiayWxKiOIO1NuQV9w+RDzgDDhM+8NZ8ha56PqkMHQbn
im2ltkaPakPX/rN5pxn1ETuXPXLC+HugsBcdU6J7djWSNFn2w8sJj6xrMFovpdPw
4beTF9uy9DOW/iXtHVxvQ3z6OEtJyxR85hWHq99dOkY8zXxu4XCj11yDWk+aRndU
J4iUK9g7aJQU531Y5R8ih1pHNIkn/QIuQlVtNCsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBShlbSLZnR6760sTjIr3LguKiNsOjAfBgNVHSMEGDAWgBRFz53Ax7f8SjNu
Tu5XsewZSMjd8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JjLWR3TWUzX0VvemJrN3VWN0hzR1VqSTNmTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWMvODkyMGZjLWJiYWUtNDEzMi1iNzUyLWVlNzJmMmIzYTQ3My8x
L29aVzBpMlowZXUtdExFNHlLOXk0TGlvamJEby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMv
ODkyMGZjLWJiYWUtNDEzMi1iNzUyLWVlNzJmMmIzYTQ3My8xL1JjLWR3TWUzX0Vv
emJrN3VWN0hzR1VqSTNmTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkq7DANBgkqhkiG9w0BAQsFAAOC
AQEAZGLB5vkNIH78lhUHeX9Yl4v/l2EbAbScbFdGpu4N5mkiIUJHEOu4yPK3PN0U
ioZIChIl61gYdSs61fQvQ7SLBNWepQcFEoXuzxhFHjGul6Gmek3ONcxqvSbbOw/h
7jkgcDAwir5MAYDz6y03EvVs2DJzILvTl9SvNzWg/FhQ+5HcbbEMgb0yUirHCSK3
5rmpI6hba560K1alHu/Cw49/Lt9Ie7yHL4udSVMtcpjweSHFvWbOMn3nmdeMuFAQ
83v5Nn621auAjRY1zOgH5PCQjnaHeME4l9CvA79ejAwul1cD1xy0+QGaiCZ8A1xG
L1vqHFdfMZT6BVSoIOmqS41ikA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:04 2024 by rpki-client on console-ams.rpki-client.org