Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/dbumoq9FF_SP-ijri3zWXGkmTlg.roa
File: dbumoq9FF_SP-ijri3zWXGkmTlg.roa (raw, json)
Hash identifier: DVoms22yKfRrkeZbBVvde6y4ACwChXR0X7ow9bunm14=
Subject key identifier: 75:BB:A6:A2:AF:45:17:F4:8F:FA:28:EB:8B:7C:D6:5C:69:26:4E:58
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 189EEF8C
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/dbumoq9FF_SP-ijri3zWXGkmTlg.roa
Signing time: Sat 01 Jan 2022 16:05:27 +0000
ROA not before: Sat 01 Jan 2022 16:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12552
IP address blocks: 185.57.136.0/22 maxlen: 24
2a04:ddc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413069196 (0x189eef8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Jan 1 16:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75bba6a2af4517f48ffa28eb8b7cd65c69264e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:68:06:33:e2:14:f9:4f:d1:0f:ac:49:0b:
e1:43:8f:d8:ad:c7:cb:45:c7:50:97:d9:20:c6:b2:
cf:7d:9e:c3:03:d6:bb:a5:dd:e0:2a:c0:2f:a2:bd:
44:39:11:06:96:f2:14:e5:da:bc:38:6f:18:96:f9:
01:d6:c4:c7:ec:c0:97:13:d7:33:d0:75:bf:26:5e:
b3:6a:a5:6e:22:2a:13:a4:40:3f:33:34:56:b2:2b:
2b:f8:6b:64:2c:d5:51:db:5a:a5:63:ef:6d:fd:d2:
cc:f4:e4:c5:9c:66:95:58:a7:d7:44:0a:b2:55:cb:
6e:51:3f:8c:7d:eb:3c:e8:93:03:7d:b5:25:d9:e2:
be:fc:7b:34:d1:83:8e:f6:2f:58:92:c4:75:05:f0:
aa:18:fd:b7:d1:b7:89:04:b5:be:9f:46:fb:f1:8b:
3a:82:2a:cb:3f:f2:15:5f:f6:ba:0c:1f:85:ad:5a:
e5:c0:a8:f5:26:f1:0d:7d:1b:0e:1d:27:cf:49:76:
a5:f3:3c:ed:fc:3e:22:65:45:16:cd:5a:65:d9:52:
4f:57:ad:a1:11:46:4e:96:44:97:c5:c3:62:14:21:
07:58:f0:f7:37:ee:e4:0c:35:11:0d:86:64:4f:e8:
92:8e:45:63:51:11:d6:b1:af:dc:cd:33:2d:06:fa:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:A6:A2:AF:45:17:F4:8F:FA:28:EB:8B:7C:D6:5C:69:26:4E:58
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/dbumoq9FF_SP-ijri3zWXGkmTlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.136.0/22
IPv6:
2a04:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:66:c7:b0:a9:88:45:f4:d4:2f:0d:ff:80:a8:84:f9:16:72:
34:6d:28:65:9b:eb:02:87:7e:a1:df:3f:2b:b5:33:74:fa:e4:
9e:33:87:f2:59:6c:5f:b3:5e:57:b7:7f:7c:8b:1f:84:9a:55:
f4:d0:f9:a0:dc:90:ee:38:fd:e1:b3:72:09:98:83:bd:22:fa:
0a:a0:b7:bf:c9:e0:3f:ae:2e:55:8c:0c:dc:4c:b9:8d:7e:5c:
8a:fd:bd:68:ec:8e:e4:bb:3c:6a:f3:05:66:7d:9a:44:26:6d:
b8:46:5d:0b:50:ac:a8:c1:52:c9:94:dd:cf:2d:2c:11:a9:d7:
67:9b:54:ef:de:97:db:a2:2f:0d:33:22:cb:97:da:1e:c6:54:
14:bd:52:c3:d8:db:b3:e7:9b:9e:c1:03:25:ca:d6:70:98:9e:
2f:95:bd:4c:4a:bf:31:d1:55:ef:61:9f:4c:35:a6:d0:bd:b2:
7f:9f:32:88:68:3a:4f:28:3c:78:50:c7:88:ae:84:45:d9:73:
79:76:ac:b1:f6:84:89:dc:8e:a2:dd:79:45:62:a2:d8:3d:d9:
1c:94:ff:5f:53:8d:4e:1b:5c:5f:7f:8d:4b:08:3d:c2:16:a4:
ca:0c:d5:2f:21:c4:f7:2a:73:2f:d5:09:fe:4f:62:fe:fc:12:
06:66:d4:01
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEGJ7vjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OThlZWJlZDk3NTNmNTgwYmVhNzViMzUyZTcwNjMyNWExOGQxNDQ3MB4XDTIyMDEw
MTE2MDUyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzViYmE2YTJhZjQ1
MTdmNDhmZmEyOGViOGI3Y2Q2NWM2OTI2NGU1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdkaAYz4hT5T9EPrEkL4UOP2K3Hy0XHUJfZIMayz32ewwPW
u6Xd4CrAL6K9RDkRBpbyFOXavDhvGJb5AdbEx+zAlxPXM9B1vyZes2qlbiIqE6RA
PzM0VrIrK/hrZCzVUdtapWPvbf3SzPTkxZxmlVin10QKslXLblE/jH3rPOiTA321
Jdnivvx7NNGDjvYvWJLEdQXwqhj9t9G3iQS1vp9G+/GLOoIqyz/yFV/2ugwfha1a
5cCo9SbxDX0bDh0nz0l2pfM87fw+ImVFFs1aZdlST1etoRFGTpZEl8XDYhQhB1jw
9zfu5Aw1EQ2GZE/oko5FY1ER1rGv3M0zLQb6wUcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR1u6air0UX9I/6KOuLfNZcaSZOWDAfBgNVHSMEGDAWgBSpjuvtl1P1gL6n
WzUucGMloY0URzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FZN3I3WmRUOVlDLXAxczFMbkJqSmFHTkZFYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvYTc0NzQ0LWVkNDgtNDcwNy1hNjNlLTUyZjY5MTkxMzljNC8x
L2RidW1vcTlGRl9TUC1panJpM3pXWEdrbVRsZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
YTc0NzQ0LWVkNDgtNDcwNy1hNjNlLTUyZjY5MTkxMzljNC8xL3FZN3I3WmRUOVlD
LXAxczFMbkJqSmFHTkZFYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArk5iDANBAIAAjAHAwUDKgTdwDAN
BgkqhkiG9w0BAQsFAAOCAQEAb2bHsKmIRfTULw3/gKiE+RZyNG0oZZvrAod+od8/
K7UzdPrknjOH8llsX7NeV7d/fIsfhJpV9ND5oNyQ7jj94bNyCZiDvSL6CqC3v8ng
P64uVYwM3Ey5jX5civ29aOyO5Ls8avMFZn2aRCZtuEZdC1CsqMFSyZTdzy0sEanX
Z5tU796X26IvDTMiy5faHsZUFL1Sw9jbs+ebnsEDJcrWcJieL5W9TEq/MdFV72Gf
TDWm0L2yf58yiGg6Tyg8eFDHiK6ERdlzeXassfaEidyOot15RWKi2D3ZHJT/X1ON
ThtcX3+NSwg9whakygzVLyHE9ypzL9UJ/k9i/vwSBmbUAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:49 2024 by rpki-client on console-ams.rpki-client.org