Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/7jw2DOqqjCvqTyjcr0ax3hlI6rA.roa
File: 7jw2DOqqjCvqTyjcr0ax3hlI6rA.roa (raw, json)
Hash identifier: 1d3Qx+u+pJpLIJqgdXpKdP1FBFlaQhPnftOoP162lOg=
Subject key identifier: EE:3C:36:0C:EA:AA:8C:2B:EA:4F:28:DC:AF:46:B1:DE:19:48:EA:B0
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 047CE53B
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/7jw2DOqqjCvqTyjcr0ax3hlI6rA.roa
Signing time: Sat 01 Jan 2022 09:02:03 +0000
ROA not before: Sat 01 Jan 2022 09:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16235
IP address blocks: 185.186.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75294011 (0x47ce53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 1 09:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee3c360ceaaa8c2bea4f28dcaf46b1de1948eab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:f3:de:53:07:d3:f2:8e:fc:6e:b1:5f:b8:
91:5a:ee:05:b8:4e:8b:cd:61:b0:c1:7b:37:42:71:
30:6b:e6:ed:c5:6e:a2:75:c1:4e:5c:6a:10:dd:b8:
f3:84:ec:6b:4b:a1:95:d1:a1:c0:d2:a8:41:fc:70:
ad:f4:bc:79:42:93:00:20:ec:85:58:61:34:5b:c8:
90:64:a4:9c:cf:1e:f3:af:0e:a9:83:d4:a6:e2:df:
15:93:81:24:13:05:10:6e:b1:8f:f6:f6:a1:91:20:
ac:61:05:e5:f5:05:92:ce:37:27:89:5f:a4:1e:2d:
9f:ac:1c:9d:da:46:65:e7:2c:be:c3:8a:d4:cf:49:
83:64:9c:ef:e3:2b:78:98:c2:24:99:68:95:0c:23:
ce:c6:77:ec:b8:83:d9:e5:54:64:6b:a4:db:d8:42:
cb:bc:37:33:d8:0c:de:dc:09:68:aa:37:4b:59:ca:
3b:c9:31:a6:b7:cc:59:69:3e:80:6e:4f:f5:9b:c7:
20:b3:01:76:35:2b:0c:d8:33:1e:41:1a:0d:be:c7:
86:04:f0:0c:0e:17:61:76:39:c1:7a:ff:6a:5b:f0:
1e:78:bf:84:19:5a:6e:96:10:ab:bc:55:ed:4e:d2:
ae:54:e8:bc:15:b3:aa:2e:b2:6f:e5:c0:a7:4b:3f:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:36:0C:EA:AA:8C:2B:EA:4F:28:DC:AF:46:B1:DE:19:48:EA:B0
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/7jw2DOqqjCvqTyjcr0ax3hlI6rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.241.0/24
Signature Algorithm: sha256WithRSAEncryption
be:bd:a1:57:1e:ef:40:cd:c0:14:ce:4d:f3:64:74:1f:15:16:
28:d0:b6:9d:e4:f6:34:a3:e4:d4:fa:af:75:19:d3:41:94:29:
3d:38:90:79:31:c2:22:05:96:5d:5e:55:8e:be:03:f9:d4:4f:
da:9e:cf:8c:f0:11:28:67:96:de:88:3f:70:5a:bf:0e:af:01:
dd:f7:ca:81:d5:89:e0:06:c2:b0:9c:71:46:b1:87:74:e3:a5:
00:f7:a6:22:92:7d:aa:70:dd:a9:34:8a:15:79:96:b4:c7:00:
29:b9:34:98:08:e6:87:e2:ab:29:4a:80:c6:f9:34:d9:13:75:
8d:99:fb:25:e9:ea:92:ad:84:8d:f2:b1:bf:db:41:21:4a:bf:
6b:a5:84:66:34:79:b5:9e:f6:87:ee:ec:69:c5:91:0f:3c:1c:
ed:16:f8:68:39:94:d7:d5:4b:ea:a6:c1:fb:6a:2f:a6:f8:ff:
b3:d1:25:ca:8d:9a:3e:27:cf:9e:c6:f3:50:8e:15:10:b8:7a:
63:06:68:9e:fb:9e:7a:d5:08:62:75:27:f5:81:6b:49:dd:12:
9b:e4:a8:4d:9a:05:9a:27:b0:c9:98:4d:d0:ac:f7:11:7f:c4:
3c:00:4a:d6:d9:ae:14:cb:73:5f:1f:8c:45:f3:ff:c2:0d:6a:
5f:38:e3:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBHzlOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODAxYTViODE2MTU4ZjA3YThjYThhY2IzN2U5N2UyZjIwYjA2OTExMB4XDTIyMDEw
MTA5MDIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWUzYzM2MGNlYWFh
OGMyYmVhNGYyOGRjYWY0NmIxZGUxOTQ4ZWFiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJiW895TB9PyjvxusV+4kVruBbhOi81hsMF7N0JxMGvm7cVu
onXBTlxqEN2484Tsa0uhldGhwNKoQfxwrfS8eUKTACDshVhhNFvIkGSknM8e868O
qYPUpuLfFZOBJBMFEG6xj/b2oZEgrGEF5fUFks43J4lfpB4tn6wcndpGZecsvsOK
1M9Jg2Sc7+MreJjCJJlolQwjzsZ37LiD2eVUZGuk29hCy7w3M9gM3twJaKo3S1nK
O8kxprfMWWk+gG5P9ZvHILMBdjUrDNgzHkEaDb7HhgTwDA4XYXY5wXr/alvwHni/
hBlabpYQq7xV7U7SrlTovBWzqi6yb+XAp0s/lMcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTuPDYM6qqMK+pPKNyvRrHeGUjqsDAfBgNVHSMEGDAWgBRIAaW4FhWPB6jK
iss36X4vILBpETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBR2x1QllWandlb3lvckxOLWwtTHlDd2FSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvNzA5MGE5LWZlZWQtNGVhMS04NDU5LWVlODEwYjgzYWRjZC8x
LzdqdzJET3FxakN2cVR5amNyMGF4M2hsSTZyQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
NzA5MGE5LWZlZWQtNGVhMS04NDU5LWVlODEwYjgzYWRjZC8xL1NBR2x1QllWandl
b3lvckxOLWwtTHlDd2FSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm68TANBgkqhkiG9w0BAQsFAAOC
AQEAvr2hVx7vQM3AFM5N82R0HxUWKNC2neT2NKPk1PqvdRnTQZQpPTiQeTHCIgWW
XV5Vjr4D+dRP2p7PjPARKGeW3og/cFq/Dq8B3ffKgdWJ4AbCsJxxRrGHdOOlAPem
IpJ9qnDdqTSKFXmWtMcAKbk0mAjmh+KrKUqAxvk02RN1jZn7Jenqkq2EjfKxv9tB
IUq/a6WEZjR5tZ72h+7sacWRDzwc7Rb4aDmU19VL6qbB+2ovpvj/s9Elyo2aPifP
nsbzUI4VELh6YwZonvueetUIYnUn9YFrSd0Sm+SoTZoFmiewyZhN0Kz3EX/EPABK
1tmuFMtzXx+MRfP/wg1qXzjjjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org