Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/CAtejL7CIEQ1G0mnRREdZ0AJ8l8.roa
File: CAtejL7CIEQ1G0mnRREdZ0AJ8l8.roa (raw, json)
Hash identifier: c/iiZqITd0MU2nk6MGX2MEGYlqYZfCtKtdcPnbK/lbs=
Subject key identifier: 08:0B:5E:8C:BE:C2:20:44:35:1B:49:A7:45:11:1D:67:40:09:F2:5F
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 170B4CB3
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/CAtejL7CIEQ1G0mnRREdZ0AJ8l8.roa
Signing time: Sat 01 Jan 2022 00:59:12 +0000
ROA not before: Sat 01 Jan 2022 00:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3292
IP address blocks: 185.73.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386616499 (0x170b4cb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jan 1 00:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=080b5e8cbec22044351b49a745111d674009f25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:40:09:e8:1c:c0:79:47:7b:ed:4b:92:22:
78:71:78:67:fc:06:a5:f6:76:62:04:ef:c5:03:a7:
f6:40:aa:35:1f:e9:ce:85:76:f9:93:a0:8c:dd:12:
59:f9:9e:a9:dd:c9:96:32:89:d3:51:9c:e1:9e:77:
85:02:e2:da:62:fa:65:e3:ee:31:64:2d:15:0b:bf:
70:b8:1d:43:5a:ab:1a:cc:95:98:fe:33:d9:7c:26:
a6:81:58:0b:58:d0:c5:02:5d:4e:ce:a9:b2:d0:e1:
cc:01:67:b8:16:25:00:5f:7f:2d:59:e2:52:e7:ab:
5f:d6:d7:e9:b4:34:27:77:6b:c6:ed:ec:44:0a:a3:
ac:31:84:5f:e3:e6:db:44:33:5e:4e:c0:b3:0d:e9:
85:b5:63:c6:7c:83:c3:52:af:11:f8:10:46:d4:3a:
c2:5e:92:5b:7e:77:c8:d7:09:98:cb:e2:e0:3f:c8:
e8:38:ec:0d:69:f9:31:da:9e:d8:3b:3a:1e:ab:d1:
e1:d9:d8:c6:62:f4:eb:85:cd:f2:e7:25:ee:be:dc:
b2:0e:76:a4:bf:e1:59:49:67:9e:35:90:4c:ea:3a:
dc:b4:53:60:c0:8e:32:46:f2:c6:10:db:75:51:7c:
51:0d:29:d1:3c:44:0e:fd:59:11:c4:81:86:b3:44:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0B:5E:8C:BE:C2:20:44:35:1B:49:A7:45:11:1D:67:40:09:F2:5F
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/CAtejL7CIEQ1G0mnRREdZ0AJ8l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.73.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f1:91:bb:3c:ed:d3:dc:0f:8e:cf:47:fe:b4:0e:59:9c:27:
1e:0e:d4:64:2b:e2:8c:1c:a8:d9:af:90:c6:e2:f3:c9:17:72:
03:7f:80:a1:08:6b:f7:e3:3b:19:b0:bf:ce:3e:d4:34:cd:b1:
d7:28:f5:06:19:90:58:c8:54:17:af:d4:3a:1f:57:3c:ff:f5:
64:93:92:61:bc:2c:68:a6:6c:7d:7b:a9:19:ab:c8:2a:d7:ea:
87:5f:3e:b6:3b:77:f7:7f:5a:d4:bb:22:12:a2:5e:b5:c2:a3:
2f:7e:9d:0c:af:fc:a4:e8:b7:08:b3:31:3f:47:ea:c2:87:6b:
e7:34:8d:3f:50:81:82:33:15:99:f2:59:7d:94:52:54:a9:11:
42:d9:88:61:15:56:d9:bb:06:66:e9:4d:b5:fa:94:61:b7:3a:
f8:6c:d0:f9:4f:5e:a0:a1:24:0c:e1:bc:99:94:d2:38:ba:42:
dc:0d:7a:ec:76:e5:c1:f1:f3:30:6a:80:6d:d9:0d:ba:7d:11:
76:40:87:23:87:be:35:26:95:e6:28:ff:8a:3b:c2:a9:a9:d3:
29:b1:7e:3d:58:3d:45:79:65:bb:24:b7:f5:02:e8:52:cd:db:
dd:60:18:18:19:7e:99:f7:bb:7f:34:bd:08:84:5b:ce:f3:85:
17:b3:4a:8e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFwtMszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OGY0YmU0MTA1NGVhZjc4N2VhYTM4MzNmZmNhZThmMWVkN2ZhYTgwMB4XDTIyMDEw
MTAwNTkxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDgwYjVlOGNiZWMy
MjA0NDM1MWI0OWE3NDUxMTFkNjc0MDA5ZjI1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJNgQAnoHMB5R3vtS5IieHF4Z/wGpfZ2YgTvxQOn9kCqNR/p
zoV2+ZOgjN0SWfmeqd3JljKJ01Gc4Z53hQLi2mL6ZePuMWQtFQu/cLgdQ1qrGsyV
mP4z2XwmpoFYC1jQxQJdTs6pstDhzAFnuBYlAF9/LVniUuerX9bX6bQ0J3drxu3s
RAqjrDGEX+Pm20QzXk7Asw3phbVjxnyDw1KvEfgQRtQ6wl6SW353yNcJmMvi4D/I
6DjsDWn5Mdqe2Ds6HqvR4dnYxmL064XN8ucl7r7csg52pL/hWUlnnjWQTOo63LRT
YMCOMkbyxhDbdVF8UQ0p0TxEDv1ZEcSBhrNEoocCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQIC16MvsIgRDUbSadFER1nQAnyXzAfBgNVHSMEGDAWgBS49L5BBU6veH6q
ODP/yujx7X+qgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VQUy1RUVZPcjNoLXFqZ3pfOHJvOGUxX3FvQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTYvMTZhMTJlLThiNWEtNDY0OS1hMDNjLTcxY2Q2YWYwNzJhNS8x
L0NBdGVqTDdDSUVRMUcwbW5SUkVkWjBBSjhsOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYv
MTZhMTJlLThiNWEtNDY0OS1hMDNjLTcxY2Q2YWYwNzJhNS8xL3VQUy1RUVZPcjNo
LXFqZ3pfOHJvOGUxX3FvQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlJSTANBgkqhkiG9w0BAQsFAAOC
AQEAA/GRuzzt09wPjs9H/rQOWZwnHg7UZCvijByo2a+QxuLzyRdyA3+AoQhr9+M7
GbC/zj7UNM2x1yj1BhmQWMhUF6/UOh9XPP/1ZJOSYbwsaKZsfXupGavIKtfqh18+
tjt3939a1LsiEqJetcKjL36dDK/8pOi3CLMxP0fqwodr5zSNP1CBgjMVmfJZfZRS
VKkRQtmIYRVW2bsGZulNtfqUYbc6+GzQ+U9eoKEkDOG8mZTSOLpC3A167HblwfHz
MGqAbdkNun0RdkCHI4e+NSaV5ij/ijvCqanTKbF+PVg9RXlluyS39QLoUs3b3WAY
GBl+mfe7fzS9CIRbzvOFF7NKjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:41 2024 by rpki-client on console-ams.rpki-client.org