Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/jGDCesrsxkOv5DOND9mdywB5eVI.roa
File: jGDCesrsxkOv5DOND9mdywB5eVI.roa (raw, json)
Hash identifier: kdc91jjqpQsOzbf3mJ5t2oHonwreyX5VLDtO4o/RzU0=
Subject key identifier: 8C:60:C2:7A:CA:EC:C6:43:AF:E4:33:8D:0F:D9:9D:CB:00:79:79:52
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 016B4428
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/jGDCesrsxkOv5DOND9mdywB5eVI.roa
Signing time: Wed 25 May 2022 13:48:14 +0000
ROA not before: Wed 25 May 2022 13:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207020
IP address blocks: 185.203.138.0/23 maxlen: 23
185.203.136.0/23 maxlen: 23
2a0a:e740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23807016 (0x16b4428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: May 25 13:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c60c27acaecc643afe4338d0fd99dcb00797952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:a1:13:60:04:b4:55:13:8b:5e:fe:59:e5:
de:7b:99:7a:9e:9d:43:d4:cc:e5:31:44:26:46:40:
72:c5:04:fe:f7:32:c1:0a:c5:0f:f8:bf:a8:0e:fa:
b2:c5:e9:b6:c2:10:2f:1f:6f:16:9b:2f:56:45:79:
e6:e2:81:c6:e4:14:73:f9:51:b4:1b:2c:35:6d:cc:
6b:2b:1c:cf:9c:15:d7:0c:22:93:60:29:45:02:76:
96:21:38:37:3f:ca:7c:72:e5:f2:c0:71:e3:85:7b:
e8:fe:6f:d1:03:2c:9a:95:8b:c8:3f:6f:c8:8d:63:
7b:3c:e2:2c:1d:2c:ac:db:ce:60:71:ff:c2:f8:e1:
bc:d5:eb:aa:a8:a5:53:ae:64:22:ee:11:1d:95:59:
14:ae:86:45:2b:17:5f:52:f1:ed:cc:70:c5:3a:44:
1c:96:ff:85:d4:ad:df:23:ea:9f:d3:78:dc:4f:9c:
74:66:73:fb:51:da:e7:8c:26:80:aa:97:bd:cf:2b:
c1:95:37:c8:1e:24:40:74:fa:0e:03:f1:35:1f:39:
72:68:e2:32:2d:ee:ef:df:cb:7a:fc:ed:53:30:de:
6f:88:95:98:8f:88:1e:25:f9:74:5b:ff:45:85:ed:
4f:58:b5:6e:21:4d:55:9a:f1:56:2f:db:5f:2d:3b:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:C2:7A:CA:EC:C6:43:AF:E4:33:8D:0F:D9:9D:CB:00:79:79:52
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/jGDCesrsxkOv5DOND9mdywB5eVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.136.0/22
IPv6:
2a0a:e740::/29
Signature Algorithm: sha256WithRSAEncryption
a3:c0:05:98:df:1f:da:90:64:63:26:20:a3:1b:b5:b1:87:44:
18:57:5a:51:74:60:4a:83:08:f8:fa:db:5c:af:5b:cf:33:0f:
cc:f3:6d:45:04:3b:e1:03:18:0e:5a:a5:0e:97:80:df:46:1a:
d2:54:f4:66:ef:84:80:0a:75:2d:16:dd:a5:93:12:06:54:2f:
4a:ba:c4:fa:8c:7c:f0:8d:33:08:83:45:0f:f0:54:e0:60:e9:
07:05:90:95:c0:74:ce:49:03:a9:ce:df:b6:75:2c:e7:ae:7a:
f9:02:d2:de:ad:d3:c9:42:98:93:4a:ab:85:09:1d:fc:35:f2:
b9:1f:39:c6:58:b9:d0:a3:21:d7:f6:fc:cf:63:6c:04:a8:11:
34:3e:ef:eb:89:e8:c9:6a:a1:49:c7:54:94:ec:55:8f:de:7c:
06:83:f4:58:ea:f0:1e:42:88:54:a7:b7:10:08:6c:03:d3:2b:
38:90:2c:c0:f1:4b:59:b6:72:11:fe:ff:1b:a0:e1:bc:63:8c:
0b:e1:e2:4a:d0:e0:6e:dd:a0:31:4d:4c:7a:90:63:38:f8:5b:
c3:86:c7:59:b9:02:8c:9b:a1:9f:01:aa:f4:cd:8f:df:63:56:
19:7c:e5:d5:a7:25:66:e8:2d:fe:bf:b2:96:c6:28:c7:6b:d9:
cf:e5:59:34
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAWtEKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDcyMWVhZDZhNDU3NTY0M2NiNzAzMDYyYzA5Njg3NTVlODI4MWViMB4XDTIyMDUy
NTEzNDgxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGM2MGMyN2FjYWVj
YzY0M2FmZTQzMzhkMGZkOTlkY2IwMDc5Nzk1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALj7oRNgBLRVE4te/lnl3nuZep6dQ9TM5TFEJkZAcsUE/vcy
wQrFD/i/qA76ssXptsIQLx9vFpsvVkV55uKBxuQUc/lRtBssNW3Mayscz5wV1wwi
k2ApRQJ2liE4Nz/KfHLl8sBx44V76P5v0QMsmpWLyD9vyI1jezziLB0srNvOYHH/
wvjhvNXrqqilU65kIu4RHZVZFK6GRSsXX1Lx7cxwxTpEHJb/hdSt3yPqn9N43E+c
dGZz+1Ha54wmgKqXvc8rwZU3yB4kQHT6DgPxNR85cmjiMi3u79/LevztUzDeb4iV
mI+IHiX5dFv/RYXtT1i1biFNVZrxVi/bXy07ATMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSMYMJ6yuzGQ6/kM40P2Z3LAHl5UjAfBgNVHSMEGDAWgBQQch6takV1ZDy3
AwYsCWh1XoKB6zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VISWVyV3BGZFdROHR3TUdMQWxvZFY2Q2dlcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvY2E5MzViLTI0ODQtNDAyMC1iODE0LTNkNGFlODBmYzQ1ZC8x
L2pHRENlc3JzeGtPdjVET05EOW1keXdCNWVWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
Y2E5MzViLTI0ODQtNDAyMC1iODE0LTNkNGFlODBmYzQ1ZC8xL0VISWVyV3BGZFdR
OHR3TUdMQWxvZFY2Q2dlcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnLiDANBAIAAjAHAwUDKgrnQDAN
BgkqhkiG9w0BAQsFAAOCAQEAo8AFmN8f2pBkYyYgoxu1sYdEGFdaUXRgSoMI+Prb
XK9bzzMPzPNtRQQ74QMYDlqlDpeA30Ya0lT0Zu+EgAp1LRbdpZMSBlQvSrrE+ox8
8I0zCINFD/BU4GDpBwWQlcB0zkkDqc7ftnUs5656+QLS3q3TyUKYk0qrhQkd/DXy
uR85xli50KMh1/b8z2NsBKgRND7v64noyWqhScdUlOxVj958BoP0WOrwHkKIVKe3
EAhsA9MrOJAswPFLWbZyEf7/G6DhvGOMC+HiStDgbt2gMU1MepBjOPhbw4bHWbkC
jJuhnwGq9M2P32NWGXzl1aclZugt/r+ylsYox2vZz+VZNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:37 2024 by rpki-client on console-fra.rpki-client.org