Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/PrJhsmBIBEURtwhGwC95FUAFtdQ.roa
File: PrJhsmBIBEURtwhGwC95FUAFtdQ.roa (raw, json)
Hash identifier: 4fDqR5pYJK9qXigihKSbDguQ4PUL/anZS2PyIalucCI=
Subject key identifier: 3E:B2:61:B2:60:48:04:45:11:B7:08:46:C0:2F:79:15:40:05:B5:D4
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 16410FC4
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/PrJhsmBIBEURtwhGwC95FUAFtdQ.roa
Signing time: Sat 01 Jan 2022 08:52:55 +0000
ROA not before: Sat 01 Jan 2022 08:52:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60655
IP address blocks: 185.15.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373362628 (0x16410fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 08:52:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eb261b26048044511b70846c02f79154005b5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:ee:83:a4:35:dd:75:25:d0:e9:75:89:d3:
e8:9e:a1:4b:b2:5b:2e:34:e1:37:0f:b1:b8:78:f4:
a9:f7:05:98:7c:a3:c6:bf:e6:3a:78:d4:0a:7e:96:
74:f5:73:ab:40:29:bc:4a:28:c6:78:a3:5f:14:e0:
91:fe:0f:47:61:5a:a9:e9:f2:c1:68:7c:00:00:1c:
4c:47:86:c7:56:89:a9:76:93:5b:fa:83:7c:1f:63:
5e:8f:3d:49:3f:31:2f:14:b3:2e:8f:47:4f:80:c1:
f5:ac:77:8f:5a:9d:2f:9c:91:24:9b:7f:ad:a3:f5:
20:ba:48:22:f1:ea:34:3e:63:52:61:7e:e3:eb:5f:
87:2e:92:e5:24:03:80:11:e9:af:d9:48:e2:5b:f9:
b7:99:fa:b0:e3:cc:66:31:06:f3:38:e5:a6:44:4a:
4f:20:8d:d0:c4:ab:2d:d7:af:c0:8c:c1:b2:8e:b0:
e9:e8:90:e1:ac:ba:9f:ca:b4:af:f9:92:81:ea:7a:
30:79:ea:19:fb:62:ca:a9:4b:8f:cd:00:71:07:dc:
e8:cf:c3:ea:4b:04:8d:d7:ea:08:0c:8a:05:ee:97:
fc:a2:7d:35:67:0d:33:12:b4:d9:3b:e9:fc:1c:5e:
66:14:5e:38:ad:c5:63:cf:ed:38:30:7d:37:ba:61:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:61:B2:60:48:04:45:11:B7:08:46:C0:2F:79:15:40:05:B5:D4
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/PrJhsmBIBEURtwhGwC95FUAFtdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.159.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ae:68:3b:1c:8f:f5:4b:76:1e:ca:56:e7:f1:df:c3:54:bf:
3d:70:dd:bc:8d:f6:fd:d8:45:69:fc:73:46:9f:84:58:6c:43:
47:b2:f2:9e:d3:9c:0a:b9:09:f6:4a:a2:7c:df:1e:9a:8c:b5:
d6:8d:22:8f:69:a6:4a:c5:31:53:41:7a:bc:b1:8c:4e:e5:44:
88:52:b6:11:2e:1f:66:aa:17:e4:a5:c5:72:9d:65:6f:cc:32:
33:9c:5c:93:48:31:5f:a2:98:7c:68:51:6a:85:95:4c:d4:88:
73:23:88:54:ce:1d:f8:f8:fd:5a:b3:a0:fa:09:6c:c6:28:10:
22:fb:0c:73:26:3d:c0:83:de:f4:6d:2a:61:d3:57:a5:ee:fe:
03:f7:46:3b:bf:21:66:b6:f8:c6:40:be:95:08:ac:12:13:01:
27:96:ff:2f:7f:50:5f:93:fe:87:55:57:43:fe:c7:51:b8:6a:
66:52:35:13:d6:41:5d:a9:f8:90:eb:a9:b3:17:70:1b:29:db:
61:c9:14:ec:b1:61:df:94:25:5c:6a:22:f9:4d:5b:67:74:b9:
a3:90:46:dc:e8:92:7b:86:52:99:2e:fb:f2:9c:d0:b2:4a:e4:
79:87:3b:9f:93:b5:7c:9a:4c:2a:39:66:a4:49:5a:45:bd:8b:
e3:5c:35:e5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFkEPxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTEwMTAzNWQ1MzM3N2M1YTcyYmVkY2E1MjJmYzE0NTZlMGI4NDE5MB4XDTIyMDEw
MTA4NTI1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2ViMjYxYjI2MDQ4
MDQ0NTExYjcwODQ2YzAyZjc5MTU0MDA1YjVkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIUh7oOkNd11JdDpdYnT6J6hS7JbLjThNw+xuHj0qfcFmHyj
xr/mOnjUCn6WdPVzq0ApvEooxnijXxTgkf4PR2FaqenywWh8AAAcTEeGx1aJqXaT
W/qDfB9jXo89ST8xLxSzLo9HT4DB9ax3j1qdL5yRJJt/raP1ILpIIvHqND5jUmF+
4+tfhy6S5SQDgBHpr9lI4lv5t5n6sOPMZjEG8zjlpkRKTyCN0MSrLdevwIzBso6w
6eiQ4ay6n8q0r/mSgep6MHnqGftiyqlLj80AcQfc6M/D6ksEjdfqCAyKBe6X/KJ9
NWcNMxK02Tvp/BxeZhReOK3FY8/tODB9N7phgTECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ+smGyYEgERRG3CEbAL3kVQAW11DAfBgNVHSMEGDAWgBR5EBA11TN3xacr
7cpSL8FFbguEGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VSQVFOZFV6ZDhXbkstM0tVaV9CUlc0TGhCay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvOTU4YzJjLWI0YzMtNDMyZC05YWIxLTBjYzgzYjAwZmM1OC8x
L1BySmhzbUJJQkVVUnR3aEd3Qzk1RlVBRnRkUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
OTU4YzJjLWI0YzMtNDMyZC05YWIxLTBjYzgzYjAwZmM1OC8xL2VSQVFOZFV6ZDhX
bkstM0tVaV9CUlc0TGhCay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkPnzANBgkqhkiG9w0BAQsFAAOC
AQEAg65oOxyP9Ut2HspW5/Hfw1S/PXDdvI32/dhFafxzRp+EWGxDR7LyntOcCrkJ
9kqifN8emoy11o0ij2mmSsUxU0F6vLGMTuVEiFK2ES4fZqoX5KXFcp1lb8wyM5xc
k0gxX6KYfGhRaoWVTNSIcyOIVM4d+Pj9WrOg+glsxigQIvsMcyY9wIPe9G0qYdNX
pe7+A/dGO78hZrb4xkC+lQisEhMBJ5b/L39QX5P+h1VXQ/7HUbhqZlI1E9ZBXan4
kOupsxdwGynbYckU7LFh35QlXGoi+U1bZ3S5o5BG3OiSe4ZSmS778pzQskrkeYc7
n5O1fJpMKjlmpElaRb2L41w15Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:30 2024 by rpki-client on console-fra.rpki-client.org