Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/ikyDVx-Jrsm5ZcNzaL0vhcEmevY.roa
File: ikyDVx-Jrsm5ZcNzaL0vhcEmevY.roa (raw, json)
Hash identifier: 40GFXHY+AJhYri4EdznpciR3mJuJHjfmwAmgVBCz2uE=
Subject key identifier: 8A:4C:83:57:1F:89:AE:C9:B9:65:C3:73:68:BD:2F:85:C1:26:7A:F6
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 17312C07
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/ikyDVx-Jrsm5ZcNzaL0vhcEmevY.roa
Signing time: Sat 01 Jan 2022 12:55:59 +0000
ROA not before: Sat 01 Jan 2022 12:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201598
IP address blocks: 185.69.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389098503 (0x17312c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Jan 1 12:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a4c83571f89aec9b965c37368bd2f85c1267af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:71:74:3f:f9:d5:0c:92:7a:8e:72:7a:07:
fb:99:b1:71:17:34:1f:4f:92:1d:52:e3:e2:fb:b9:
99:9d:3e:06:bb:47:9e:e2:43:a1:1d:dd:b2:9e:20:
20:00:0e:e9:bb:a2:3a:15:21:35:25:ce:6f:31:1c:
14:3a:6a:29:c6:fc:50:71:c9:dc:bb:95:b1:03:40:
45:5b:9d:e9:0f:a8:41:0d:9b:24:b4:d9:ea:86:37:
53:6e:5c:b9:01:e0:5c:b7:6c:86:f7:29:f1:10:79:
de:0c:87:d3:9a:84:37:4b:de:27:1c:fc:42:9f:7e:
fd:5d:10:5a:6d:01:f9:9c:c3:68:7a:30:10:42:25:
71:80:dd:17:a9:4c:c4:03:96:26:24:79:40:0c:53:
41:b3:a8:ad:29:dc:7a:96:aa:38:13:8e:e7:e4:da:
3f:fe:ce:02:07:aa:18:f5:73:05:41:46:9d:b7:f1:
80:e0:b0:3a:16:c9:d6:f2:5e:77:29:d7:28:cb:4a:
3a:81:be:5c:0d:d5:92:61:93:8a:e0:bd:23:05:9c:
79:8e:39:58:c5:bd:c2:66:08:b2:83:2c:71:6f:bf:
75:d9:5c:1f:f3:d8:67:2f:92:7a:c6:35:50:8a:8a:
c4:21:9e:45:08:c0:38:2a:27:f9:a3:f5:c8:00:d5:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4C:83:57:1F:89:AE:C9:B9:65:C3:73:68:BD:2F:85:C1:26:7A:F6
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/ikyDVx-Jrsm5ZcNzaL0vhcEmevY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.172.0/24
Signature Algorithm: sha256WithRSAEncryption
73:02:b6:06:a3:17:fc:43:b7:6f:6a:2f:69:a6:c3:1a:1b:d0:
18:2a:70:3c:a3:50:f7:a3:ca:c4:55:2a:dc:2f:fa:c6:30:f0:
49:c1:5e:e2:f8:5a:f1:76:77:21:ff:15:b7:c7:ab:ef:c4:35:
cc:e3:ff:e9:a2:b4:5a:e3:cd:a5:17:c1:29:3c:af:83:51:c4:
78:36:fc:59:40:09:9e:ae:57:e5:c2:f6:e2:45:1b:8b:be:d7:
d1:55:93:21:3f:0c:18:9c:23:9d:88:a5:cd:17:84:73:3b:6b:
4a:03:2d:34:4f:8c:7e:04:29:76:00:81:af:fc:1e:db:82:08:
4a:49:f5:4c:d8:86:7a:4c:ee:f3:0f:33:83:73:09:bc:c2:63:
00:06:96:74:99:55:c2:e6:4f:83:e6:83:4c:26:1c:df:ed:d1:
b3:c4:f0:f0:dd:2c:f1:bd:7f:17:24:a3:28:1a:e6:28:5f:cf:
7b:46:71:30:41:3e:aa:32:94:8a:d3:37:e4:d1:fe:fa:86:d0:
b7:74:04:8c:eb:bd:3d:57:1e:fd:b2:f4:d2:b1:4b:dd:56:07:
29:05:1a:7f:aa:d6:0c:fa:17:84:7f:4a:83:a6:92:0d:f1:7d:
39:fe:0a:40:8b:12:a0:3b:a4:9c:e9:68:85:59:f0:a3:12:a0:
9a:fa:77:9c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFzEsBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZWRmZmI1MjFlYzczOWVmMTgyNjVjOGNmZTdmZGYyOTVkODdkY2YyMB4XDTIyMDEw
MTEyNTU1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGE0YzgzNTcxZjg5
YWVjOWI5NjVjMzczNjhiZDJmODVjMTI2N2FmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANO0cXQ/+dUMknqOcnoH+5mxcRc0H0+SHVLj4vu5mZ0+BrtH
nuJDoR3dsp4gIAAO6buiOhUhNSXObzEcFDpqKcb8UHHJ3LuVsQNARVud6Q+oQQ2b
JLTZ6oY3U25cuQHgXLdshvcp8RB53gyH05qEN0veJxz8Qp9+/V0QWm0B+ZzDaHow
EEIlcYDdF6lMxAOWJiR5QAxTQbOorSncepaqOBOO5+TaP/7OAgeqGPVzBUFGnbfx
gOCwOhbJ1vJedynXKMtKOoG+XA3VkmGTiuC9IwWceY45WMW9wmYIsoMscW+/ddlc
H/PYZy+SesY1UIqKxCGeRQjAOCon+aP1yADVjd8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKTINXH4muybllw3NovS+FwSZ69jAfBgNVHSMEGDAWgBQu3/tSHsc57xgm
XIz+f98pXYfc8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x0XzdVaDdIT2U4WUpseU1fbl9mS1YySDNQSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvYmIxMGVmLWQyNDAtNGQ2OC04MGMxLTQxODkzYzRkYTA2MS8x
L2lreURWeC1KcnNtNVpjTnphTDB2aGNFbWV2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
YmIxMGVmLWQyNDAtNGQ2OC04MGMxLTQxODkzYzRkYTA2MS8xL0x0XzdVaDdIT2U4
WUpseU1fbl9mS1YySDNQSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlFrDANBgkqhkiG9w0BAQsFAAOC
AQEAcwK2BqMX/EO3b2ovaabDGhvQGCpwPKNQ96PKxFUq3C/6xjDwScFe4vha8XZ3
If8Vt8er78Q1zOP/6aK0WuPNpRfBKTyvg1HEeDb8WUAJnq5X5cL24kUbi77X0VWT
IT8MGJwjnYilzReEcztrSgMtNE+MfgQpdgCBr/we24IISkn1TNiGekzu8w8zg3MJ
vMJjAAaWdJlVwuZPg+aDTCYc3+3Rs8Tw8N0s8b1/FySjKBrmKF/Pe0ZxMEE+qjKU
itM35NH++obQt3QEjOu9PVce/bL00rFL3VYHKQUaf6rWDPoXhH9Kg6aSDfF9Of4K
QIsSoDuknOlohVnwoxKgmvp3nA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org