Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sswBpQhMtJ48uJJ0GKwFswuOqc0.roa
File: sswBpQhMtJ48uJJ0GKwFswuOqc0.roa (raw, json)
Hash identifier: 0jhk2vjBw29OVXuXtwo1F7ulMXbnHLj3u/ZRuiYDoq8=
Subject key identifier: B2:CC:01:A5:08:4C:B4:9E:3C:B8:92:74:18:AC:05:B3:0B:8E:A9:CD
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19F0B8D9
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sswBpQhMtJ48uJJ0GKwFswuOqc0.roa
Signing time: Sat 01 Jan 2022 15:56:55 +0000
ROA not before: Sat 01 Jan 2022 15:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211043
IP address blocks: 185.227.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435206361 (0x19f0b8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2cc01a5084cb49e3cb8927418ac05b30b8ea9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:c9:c0:11:ea:c2:5b:a9:a6:bb:13:d9:21:
70:88:a7:31:78:84:ce:d4:f2:ea:b6:41:67:e9:71:
44:ce:7c:39:4c:58:47:51:e7:20:9c:bb:30:78:1b:
d6:8a:6b:fb:a3:1f:e3:2a:92:da:59:a2:2b:e8:aa:
fe:3c:9b:df:e1:01:85:9f:09:f5:f7:a6:b8:28:c2:
7a:8a:2d:1a:1c:35:8a:fe:38:a7:57:f8:e9:0d:bf:
6e:6d:83:d6:98:26:da:cd:e6:7b:bc:4b:9e:7f:1c:
30:03:e5:f8:0b:29:33:9d:3b:4b:56:f5:3f:9e:17:
5e:41:2a:cd:4c:22:84:1c:7b:84:c4:3c:12:0e:d8:
6f:80:d5:11:40:9d:54:b8:a6:c3:d5:f3:5f:9c:77:
38:1a:9f:13:21:34:a2:3d:43:37:88:48:de:2b:6c:
20:cd:2a:4b:be:68:b0:b3:50:4b:d2:6f:3c:81:34:
d2:c1:de:e9:54:14:00:c6:99:ad:84:0f:f9:18:dc:
17:77:10:ae:87:b6:ee:6a:a8:18:48:30:3a:ca:e0:
f7:f2:84:96:8e:9a:6f:4a:f4:30:ff:c0:1f:0b:a1:
95:f4:f3:a0:40:a8:8a:a3:ce:14:77:52:3e:6e:c3:
11:7a:07:1c:b5:bc:0e:eb:7a:f2:0c:1e:08:78:4e:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:01:A5:08:4C:B4:9E:3C:B8:92:74:18:AC:05:B3:0B:8E:A9:CD
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sswBpQhMtJ48uJJ0GKwFswuOqc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8b:ec:c4:99:73:2a:c5:dc:b2:2b:4e:6f:2e:ef:97:36:ed:
a3:87:17:d3:b7:e8:74:c4:70:81:76:37:59:c5:35:03:79:e7:
4f:d8:3d:78:13:66:ca:6f:f9:d8:d8:9a:c0:39:d0:3c:8a:87:
25:73:cb:9f:ff:d2:7d:b3:fd:88:00:2d:2c:9c:2c:22:5f:d5:
cb:00:99:9d:08:1d:6d:d1:33:6d:26:a2:ea:4c:52:02:de:42:
bb:bf:93:93:00:51:b1:49:42:f7:9c:22:75:0c:f3:6c:be:4c:
2a:40:d2:f8:86:ea:16:3c:54:25:80:da:93:ec:26:29:2f:bb:
85:49:22:e5:20:57:af:4d:7a:a6:44:42:e2:a7:e0:fb:6c:a3:
6b:d4:9a:f4:3d:0b:cd:10:32:1f:4c:fe:6d:55:ac:50:60:5a:
7f:49:f8:c8:06:e3:a3:38:4c:2b:72:7f:94:39:f3:27:5a:a9:
49:26:c2:bb:cc:68:c2:63:fd:33:7c:9d:c2:f8:be:56:c7:ca:
a0:0f:a9:b1:8c:41:6d:0f:a7:50:d0:41:36:6a:55:89:48:7c:
28:28:25:7d:c5:3b:5f:dc:5e:bc:79:83:d3:48:f2:08:d5:53:
df:34:3e:45:07:8a:90:99:85:a2:fe:f2:ec:4a:71:b8:5b:8e:
db:2e:a4:1b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGfC42TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDEw
MTE1NTY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjJjYzAxYTUwODRj
YjQ5ZTNjYjg5Mjc0MThhYzA1YjMwYjhlYTljZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVrycAR6sJbqaa7E9khcIinMXiEztTy6rZBZ+lxRM58OUxY
R1HnIJy7MHgb1opr+6Mf4yqS2lmiK+iq/jyb3+EBhZ8J9femuCjCeootGhw1iv44
p1f46Q2/bm2D1pgm2s3me7xLnn8cMAPl+AspM507S1b1P54XXkEqzUwihBx7hMQ8
Eg7Yb4DVEUCdVLimw9XzX5x3OBqfEyE0oj1DN4hI3itsIM0qS75osLNQS9JvPIE0
0sHe6VQUAMaZrYQP+RjcF3cQroe27mqoGEgwOsrg9/KElo6ab0r0MP/AHwuhlfTz
oECoiqPOFHdSPm7DEXoHHLW8Dut68gweCHhOhJ0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSyzAGlCEy0njy4knQYrAWzC46pzTAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L3Nzd0JwUWhNdEo0OHVKSjBHS3dGc3d1T3FjMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnjIjANBgkqhkiG9w0BAQsFAAOC
AQEApYvsxJlzKsXcsitOby7vlzbto4cX07fodMRwgXY3WcU1A3nnT9g9eBNmym/5
2NiawDnQPIqHJXPLn//SfbP9iAAtLJwsIl/VywCZnQgdbdEzbSai6kxSAt5Cu7+T
kwBRsUlC95widQzzbL5MKkDS+IbqFjxUJYDak+wmKS+7hUki5SBXr016pkRC4qfg
+2yja9Sa9D0LzRAyH0z+bVWsUGBaf0n4yAbjozhMK3J/lDnzJ1qpSSbCu8xowmP9
M3ydwvi+VsfKoA+psYxBbQ+nUNBBNmpViUh8KCglfcU7X9xevHmD00jyCNVT3zQ+
RQeKkJmFov7y7EpxuFuO2y6kGw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org