Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/97Dk_jT1pOqn3jksH8SE71JE8ec.roa
File: 97Dk_jT1pOqn3jksH8SE71JE8ec.roa (raw, json)
Hash identifier: rKLCKJcb8NHMMWxdi7WFjOggt6Fal5yR8YBLrcLqzWY=
Subject key identifier: F7:B0:E4:FE:34:F5:A4:EA:A7:DE:39:2C:1F:C4:84:EF:52:44:F1:E7
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 9DEADB
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/97Dk_jT1pOqn3jksH8SE71JE8ec.roa
Signing time: Sat 01 Jan 2022 00:57:37 +0000
ROA not before: Sat 01 Jan 2022 00:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42828
IP address blocks: 185.84.106.0/24 maxlen: 24
185.84.107.0/24 maxlen: 24
185.84.105.0/24 maxlen: 24
185.84.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10349275 (0x9deadb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Jan 1 00:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7b0e4fe34f5a4eaa7de392c1fc484ef5244f1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:f8:ad:c1:e0:18:4f:1e:9d:23:02:16:79:
ef:f8:bd:32:b7:34:b5:93:71:19:0f:8a:10:cf:2e:
1a:90:b0:2b:9c:12:bf:00:8b:4d:a4:82:ee:77:e1:
fe:b0:60:b4:03:3f:b7:1c:d5:ed:2e:ca:8b:10:78:
87:6a:dc:97:f4:c1:1f:e6:87:23:71:0e:09:8d:f7:
56:1b:1a:2f:5a:05:3f:9e:61:95:fe:8c:a6:50:9c:
f8:5e:cb:21:27:eb:c6:01:bc:76:66:69:5d:45:06:
e2:c8:84:1b:8f:de:28:e5:b3:de:eb:ae:45:f3:cd:
77:9c:1a:58:e4:6a:ff:65:b1:31:5b:f1:96:b1:86:
a0:aa:ea:a9:18:cc:69:9c:48:8a:ab:a2:41:b6:10:
8d:76:11:25:5e:32:62:72:4a:4a:a9:d3:e2:29:21:
c6:04:b8:34:f7:79:a0:a8:3f:23:e9:4f:b3:dc:e6:
1c:00:d5:4f:bc:0f:79:43:c7:9c:4f:35:2c:79:b8:
38:5e:95:8b:10:35:2f:3a:db:00:d9:77:9f:6f:a9:
58:04:8f:3f:87:a1:f7:64:8b:15:81:9d:ce:97:2f:
3e:92:aa:87:9b:09:fa:15:2d:d3:cd:dc:7e:42:b1:
9b:e0:28:7d:39:18:c3:71:cd:d4:37:71:f5:65:04:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:E4:FE:34:F5:A4:EA:A7:DE:39:2C:1F:C4:84:EF:52:44:F1:E7
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/97Dk_jT1pOqn3jksH8SE71JE8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.104.0/22
Signature Algorithm: sha256WithRSAEncryption
26:bd:dd:ff:75:0f:cb:0e:8e:4c:1b:4c:f2:2d:48:02:8d:86:
b0:9e:51:79:b6:55:a1:17:65:1b:54:2d:c0:a0:3b:f0:b1:cd:
84:ea:fe:5e:6d:a6:f9:3f:d0:bf:3f:0e:b7:f5:c4:cb:14:2c:
aa:a4:54:ac:2b:92:b5:5b:6a:f2:05:aa:5d:77:22:08:e1:f1:
a2:84:24:51:e0:72:36:ad:a7:43:32:a6:a2:52:3c:29:6b:96:
b5:69:76:0c:17:bb:f9:6a:55:77:17:24:74:de:9f:f7:48:9f:
06:38:70:33:41:63:c0:85:8a:0a:07:2c:b1:2d:61:9a:fc:7d:
e3:c1:d2:55:57:53:95:a1:52:f5:bb:cb:d6:9a:54:00:50:0c:
92:87:f5:b9:c0:bf:a7:e2:79:26:fb:f6:82:a5:e6:71:d1:28:
b9:8e:11:68:4e:5d:1a:2f:db:bd:12:2f:7b:4b:9c:0a:06:b7:
6e:0e:da:f0:b7:4d:85:7b:65:4a:eb:c7:60:c9:fe:c8:9c:21:
ca:75:8a:18:ae:65:8e:2a:74:c6:78:bc:6a:28:08:99:ff:5a:
b3:9a:5d:2b:87:77:c6:a4:3a:fa:ac:80:05:3f:84:76:f1:a7:
07:e9:e8:91:84:60:71:06:33:f1:93:b8:58:bc:74:98:08:2f:
2b:d4:e2:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJ3q2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmM4YzRhMDY2ZTJjMTUwMzEzZWUxYzA4NzQ3MWYzYzhiMGRlMDU0MB4XDTIyMDEw
MTAwNTczN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjdiMGU0ZmUzNGY1
YTRlYWE3ZGUzOTJjMWZjNDg0ZWY1MjQ0ZjFlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONt+K3B4BhPHp0jAhZ57/i9Mrc0tZNxGQ+KEM8uGpCwK5wS
vwCLTaSC7nfh/rBgtAM/txzV7S7KixB4h2rcl/TBH+aHI3EOCY33VhsaL1oFP55h
lf6MplCc+F7LISfrxgG8dmZpXUUG4siEG4/eKOWz3uuuRfPNd5waWORq/2WxMVvx
lrGGoKrqqRjMaZxIiquiQbYQjXYRJV4yYnJKSqnT4ikhxgS4NPd5oKg/I+lPs9zm
HADVT7wPeUPHnE81LHm4OF6VixA1LzrbANl3n2+pWASPP4eh92SLFYGdzpcvPpKq
h5sJ+hUt083cfkKxm+AofTkYw3HN1Ddx9WUEBW8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT3sOT+NPWk6qfeOSwfxITvUkTx5zAfBgNVHSMEGDAWgBTryMSgZuLBUDE+
4cCHRx88iw3gVDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzY4akVvR2Jpd1ZBeFB1SEFoMGNmUElzTjRGUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvOGU0NGUzLTFiNTQtNDc5ZS1hNTRjLTQ3ZWFkNTM3MmJmYi8x
Lzk3RGtfalQxcE9xbjNqa3NIOFNFNzFKRThlYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
OGU0NGUzLTFiNTQtNDc5ZS1hNTRjLTQ3ZWFkNTM3MmJmYi8xLzY4akVvR2Jpd1ZB
eFB1SEFoMGNmUElzTjRGUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlUaDANBgkqhkiG9w0BAQsFAAOC
AQEAJr3d/3UPyw6OTBtM8i1IAo2GsJ5RebZVoRdlG1QtwKA78LHNhOr+Xm2m+T/Q
vz8Ot/XEyxQsqqRUrCuStVtq8gWqXXciCOHxooQkUeByNq2nQzKmolI8KWuWtWl2
DBe7+WpVdxckdN6f90ifBjhwM0FjwIWKCgcssS1hmvx948HSVVdTlaFS9bvL1ppU
AFAMkof1ucC/p+J5Jvv2gqXmcdEouY4RaE5dGi/bvRIve0ucCga3bg7a8LdNhXtl
SuvHYMn+yJwhynWKGK5ljip0xni8aigImf9as5pdK4d3xqQ6+qyABT+EdvGnB+no
kYRgcQYz8ZO4WLx0mAgvK9TiOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:18 2024 by rpki-client on console-fra.rpki-client.org