Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/xklrUcUCra64aP0IdPn-tcs3GcY.roa
File: xklrUcUCra64aP0IdPn-tcs3GcY.roa (raw, json)
Hash identifier: 9cA4rfewgC/2FVPiDsDWxJMysVLoSKirL0FwQdOG0WE=
Subject key identifier: C6:49:6B:51:C5:02:AD:AE:B8:68:FD:08:74:F9:FE:B5:CB:37:19:C6
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 1C3F05
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/xklrUcUCra64aP0IdPn-tcs3GcY.roa
Signing time: Tue 28 Jun 2022 12:25:02 +0000
ROA not before: Tue 28 Jun 2022 12:25:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851141 (0x1c3f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jun 28 12:25:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6496b51c502adaeb868fd0874f9feb5cb3719c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:55:72:d3:ea:08:94:1b:12:97:92:02:99:
12:4a:84:0a:05:17:a0:cf:a0:c8:19:a2:80:48:36:
ef:d5:c7:8d:5d:2b:2f:14:4b:48:d4:6b:d6:16:8b:
a5:ce:55:15:55:71:8d:22:86:5d:59:d1:d9:f0:1b:
85:c6:72:90:85:3d:77:c5:d2:04:86:fa:49:5f:0d:
dd:a4:18:6a:bf:2a:64:9f:75:9a:ee:fb:3f:17:da:
6a:a1:03:ef:13:20:5e:64:cf:7a:a7:89:f2:ab:61:
d1:3c:59:39:e0:1e:10:c9:3a:67:99:23:25:5d:9d:
0b:1b:0c:e3:3e:51:18:0f:72:91:bf:34:27:9c:b3:
5f:98:94:60:41:6f:e5:59:57:b0:8b:d3:0b:62:a7:
a4:20:f7:f6:7d:8f:34:2f:c4:84:65:b6:b2:79:32:
85:32:48:7d:2d:f2:1d:a8:e0:50:0e:83:06:4d:33:
e3:96:2e:55:cd:af:64:de:77:e4:ba:3f:39:c5:55:
f7:ef:90:41:4b:bf:bb:ba:d4:f7:42:52:5b:d5:71:
ca:13:9e:a4:93:c0:59:a8:e2:43:00:12:8e:77:14:
f5:52:2b:91:69:0f:fd:55:74:23:6b:e7:ad:0d:3a:
22:74:12:9a:91:d0:76:99:3b:df:c3:f2:01:86:49:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:6B:51:C5:02:AD:AE:B8:68:FD:08:74:F9:FE:B5:CB:37:19:C6
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/xklrUcUCra64aP0IdPn-tcs3GcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
22:37:88:23:1f:5e:d1:31:c4:c2:95:7e:f1:c9:d4:ce:d1:87:
1e:1b:db:c3:43:4c:63:bf:ab:76:58:bb:ef:5c:10:1f:9c:23:
ad:09:b5:27:d4:f6:be:d3:7c:8d:05:11:22:f9:a5:84:c3:b5:
4a:ef:e5:37:99:46:53:bf:4e:83:69:92:74:c4:c9:11:b7:2d:
0b:15:bb:4b:56:06:3d:b2:48:f5:b9:27:c7:ff:f4:06:12:7a:
8d:bf:d2:d6:6e:8e:f8:2f:a1:77:f9:88:3c:43:43:ef:11:2a:
bd:db:79:c9:c9:56:61:c8:85:3a:f6:e6:5f:cd:71:36:e3:8d:
90:ed:df:03:28:ce:e9:26:f9:37:28:9b:b3:61:36:5b:55:46:
47:f3:33:78:47:c8:37:c6:0a:99:99:e0:ad:0a:32:e4:2d:d2:
bc:6c:7a:d9:31:cb:22:79:52:c2:44:6d:ee:b3:17:52:7f:57:
ab:e1:0c:61:af:aa:75:38:26:31:c8:20:13:b6:e5:62:83:0e:
3e:dd:8d:80:28:78:65:a0:98:75:46:c3:b0:f4:df:4a:1a:46:
45:1e:3b:6e:24:28:17:df:c5:4b:3a:f5:b2:2c:cf:be:d3:08:
6a:cd:8d:75:b7:93:4a:4a:0e:ea:f1:e8:2a:5c:0b:e2:9d:06:
82:dd:b8:8b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDHD8FMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk
NDA2NTk2N2RlYzA5MmI1ZmM5MDE1MmU0YTk1MzM5YmExZDIyODkwHhcNMjIwNjI4
MTIyNTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNjQ5NmI1MWM1MDJh
ZGFlYjg2OGZkMDg3NGY5ZmViNWNiMzcxOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnlFVctPqCJQbEpeSApkSSoQKBRegz6DIGaKASDbv1ceNXSsv
FEtI1GvWFoulzlUVVXGNIoZdWdHZ8BuFxnKQhT13xdIEhvpJXw3dpBhqvypkn3Wa
7vs/F9pqoQPvEyBeZM96p4nyq2HRPFk54B4QyTpnmSMlXZ0LGwzjPlEYD3KRvzQn
nLNfmJRgQW/lWVewi9MLYqekIPf2fY80L8SEZbayeTKFMkh9LfIdqOBQDoMGTTPj
li5Vza9k3nfkuj85xVX375BBS7+7utT3QlJb1XHKE56kk8BZqOJDABKOdxT1UiuR
aQ/9VXQja+etDToidBKakdB2mTvfw/IBhklrAQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMZJa1HFAq2uuGj9CHT5/rXLNxnGMB8GA1UdIwQYMBaAFM1AZZZ97AkrX8kB
UuSpUzm6HSKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
elVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2QtZWRjZWY3NDUxZWY0LzEv
eGtsclVjVUNyYTY0YVAwSWRQbi10Y3MzR2NZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85
NDRmMmEtZjY3My00MmJmLTllM2QtZWRjZWY3NDUxZWY0LzEvelVCbGxuM3NDU3Rm
eVFGUzVLbFRPYm9kSW9rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZAMMA0GCSqGSIb3DQEBCwUAA4IB
AQAiN4gjH17RMcTClX7xydTO0YceG9vDQ0xjv6t2WLvvXBAfnCOtCbUn1Pa+03yN
BREi+aWEw7VK7+U3mUZTv06DaZJ0xMkRty0LFbtLVgY9skj1uSfH//QGEnqNv9LW
bo74L6F3+Yg8Q0PvESq923nJyVZhyIU69uZfzXE2442Q7d8DKM7pJvk3KJuzYTZb
VUZH8zN4R8g3xgqZmeCtCjLkLdK8bHrZMcsieVLCRG3usxdSf1er4Qxhr6p1OCYx
yCATtuVigw4+3Y2AKHhloJh1RsOw9N9KGkZFHjtuJCgX38VLOvWyLM++0whqzY11
t5NKSg7q8egqXAvinQaC3biL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org