Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/S_wnT5iG6shDvRBhXCLAG3aUA74.roa
File: S_wnT5iG6shDvRBhXCLAG3aUA74.roa (raw, json)
Hash identifier: X2+9TbbsJErjint5CnOipsl73ukwrPN0xzvKsFbpZi8=
Subject key identifier: 4B:FC:27:4F:98:86:EA:C8:43:BD:10:61:5C:22:C0:1B:76:94:03:BE
Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial: 32656D4F
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/S_wnT5iG6shDvRBhXCLAG3aUA74.roa
Signing time: Sat 01 Jan 2022 00:57:28 +0000
ROA not before: Sat 01 Jan 2022 00:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199588
IP address blocks: 185.7.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845507919 (0x32656d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Validity
Not Before: Jan 1 00:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bfc274f9886eac843bd10615c22c01b769403be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:de:3c:6e:dd:bb:5a:11:f4:0b:fe:c8:91:
75:6a:d8:11:be:15:50:ef:5c:83:9b:82:12:48:9e:
93:2a:1f:be:2a:70:0e:47:f7:e3:05:ef:6a:e6:c6:
ae:be:5c:ac:e1:9b:cc:f6:a0:c9:f4:e0:c5:15:33:
c0:7b:04:54:d0:ba:1a:12:e4:e4:34:03:a8:0c:8a:
62:8c:01:7e:ce:48:31:e3:38:15:d4:65:da:30:0c:
50:02:61:65:e4:35:03:c8:cf:48:e9:42:90:dc:0a:
51:cc:6e:b3:ca:4b:bd:21:b1:c3:e2:18:12:f9:9d:
5f:09:e2:2b:36:48:d0:eb:b4:33:89:fe:74:9a:7f:
be:7b:e1:bf:52:ee:d0:50:70:a7:8b:8b:9e:f3:51:
21:11:c9:f0:66:e2:81:ae:36:ff:9c:31:89:50:0d:
68:4d:85:b3:63:af:d3:56:0e:39:ea:c5:8d:1b:9e:
30:45:b2:43:ed:39:a4:34:19:94:ff:9d:ba:ad:5b:
ad:9e:e6:0e:9b:e7:09:75:e3:0e:47:61:68:5b:b1:
99:1f:1e:ef:45:b1:47:81:a5:3c:80:20:01:ac:05:
8b:09:28:5c:4e:c5:5d:c0:7f:cc:bb:4a:18:f7:ab:
f5:c8:ac:a4:19:2a:b3:3b:a9:af:00:3a:d7:3b:ac:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FC:27:4F:98:86:EA:C8:43:BD:10:61:5C:22:C0:1B:76:94:03:BE
X509v3 Authority Key Identifier:
keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/S_wnT5iG6shDvRBhXCLAG3aUA74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.184.0/22
Signature Algorithm: sha256WithRSAEncryption
23:9d:cb:2a:88:73:3b:e4:38:5c:93:59:14:6c:95:0a:36:3f:
2d:2f:82:1d:6d:5a:c6:a4:1a:6e:f7:90:33:dd:8f:f0:6a:d4:
b8:6e:e0:86:53:40:d5:7f:d8:02:52:27:26:f3:50:bd:56:b0:
66:25:23:cb:d0:8d:53:68:d6:a7:d6:2a:33:a1:ba:e0:51:cf:
ae:e5:91:72:03:1d:62:ea:9f:c1:e7:0b:fa:59:52:9e:36:2c:
e6:59:4c:87:fe:47:79:38:4c:73:57:59:70:47:ff:08:41:ec:
3b:ea:69:00:39:95:96:67:d4:10:ed:ee:eb:7e:5d:77:88:17:
de:e6:7b:ac:43:5a:09:9a:94:98:83:64:fc:a8:58:98:f7:53:
c7:66:c6:92:d1:e5:84:fd:e5:ad:32:24:82:d1:ce:5e:e4:8b:
84:e5:bf:b0:70:2e:a0:9e:33:cd:3e:fe:99:00:e3:d1:7d:5e:
b0:f1:e7:cb:f1:1f:6d:50:be:25:af:61:b3:22:7b:a6:6d:51:
c9:9b:40:cf:fe:23:c8:c8:c9:86:80:a5:50:6e:14:b0:cf:c1:
07:e3:bc:57:45:70:5d:7b:aa:85:6e:2b:d1:00:55:3c:ea:53:
03:8c:73:d6:e6:11:11:8f:9c:9a:0c:ab:de:6d:28:0a:51:54:
2a:5e:96:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMmVtTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MWQ5YmFhMDIyMTk0MmVkZmU0YjNhOWE1NzA4Mjk1YzA0NDE2ZTgwMB4XDTIyMDEw
MTAwNTcyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGJmYzI3NGY5ODg2
ZWFjODQzYmQxMDYxNWMyMmMwMWI3Njk0MDNiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIU3jxu3btaEfQL/siRdWrYEb4VUO9cg5uCEkiekyofvipw
Dkf34wXvaubGrr5crOGbzPagyfTgxRUzwHsEVNC6GhLk5DQDqAyKYowBfs5IMeM4
FdRl2jAMUAJhZeQ1A8jPSOlCkNwKUcxus8pLvSGxw+IYEvmdXwniKzZI0Ou0M4n+
dJp/vnvhv1Lu0FBwp4uLnvNRIRHJ8Gbiga42/5wxiVANaE2Fs2Ov01YOOerFjRue
MEWyQ+05pDQZlP+duq1brZ7mDpvnCXXjDkdhaFuxmR8e70WxR4GlPIAgAawFiwko
XE7FXcB/zLtKGPer9cispBkqszuprwA61zusdUkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRL/CdPmIbqyEO9EGFcIsAbdpQDvjAfBgNVHSMEGDAWgBRx2bqgIhlC7f5L
OppXCClcBEFugDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NkbTZvQ0laUXUzLVN6cWFWd2dwWEFSQmJvQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvOGMzZmI4LTQwZGYtNGQ1ZC05MzYzLTUwNDcyN2E1MGI4ZS8x
L1Nfd25UNWlHNnNoRHZSQmhYQ0xBRzNhVUE3NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
OGMzZmI4LTQwZGYtNGQ1ZC05MzYzLTUwNDcyN2E1MGI4ZS8xL2NkbTZvQ0laUXUz
LVN6cWFWd2dwWEFSQmJvQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkHuDANBgkqhkiG9w0BAQsFAAOC
AQEAI53LKohzO+Q4XJNZFGyVCjY/LS+CHW1axqQabveQM92P8GrUuG7ghlNA1X/Y
AlInJvNQvVawZiUjy9CNU2jWp9YqM6G64FHPruWRcgMdYuqfwecL+llSnjYs5llM
h/5HeThMc1dZcEf/CEHsO+ppADmVlmfUEO3u635dd4gX3uZ7rENaCZqUmINk/KhY
mPdTx2bGktHlhP3lrTIkgtHOXuSLhOW/sHAuoJ4zzT7+mQDj0X1esPHny/EfbVC+
Ja9hsyJ7pm1RyZtAz/4jyMjJhoClUG4UsM/BB+O8V0VwXXuqhW4r0QBVPOpTA4xz
1uYREY+cmgyr3m0oClFUKl6Weg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:55 2024 by rpki-client on console-fra.rpki-client.org