Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/XjK8xSXFw7Xcn9ystcSAEkRu4L4.roa
File: XjK8xSXFw7Xcn9ystcSAEkRu4L4.roa (raw, json)
Hash identifier: J5xLjvo1lh9Z9woRkKkINr66FXfdPcIlB3XakvqEBMo=
Subject key identifier: 5E:32:BC:C5:25:C5:C3:B5:DC:9F:DC:AC:B5:C4:80:12:44:6E:E0:BE
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 04E529C0
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/XjK8xSXFw7Xcn9ystcSAEkRu4L4.roa
Signing time: Sat 01 Jan 2022 15:04:24 +0000
ROA not before: Sat 01 Jan 2022 15:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204303
IP address blocks: 185.137.71.0/24 maxlen: 24
185.137.70.0/24 maxlen: 24
185.137.68.0/24 maxlen: 24
185.137.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82127296 (0x4e529c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 1 15:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e32bcc525c5c3b5dc9fdcacb5c48012446ee0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:d3:4d:b6:a5:3e:3b:d2:86:84:7d:a9:0a:
bd:26:84:1d:78:54:ff:8d:f9:a9:ee:fe:6e:f8:61:
6b:d9:4c:35:6a:3f:86:12:59:74:27:d9:8f:be:aa:
c0:82:e7:e3:fd:8d:de:1f:68:dc:f5:c1:f7:5e:97:
e1:89:4d:da:7d:16:84:a5:c3:1f:eb:55:f5:61:8e:
16:89:a1:49:13:13:85:5a:08:47:e5:a5:48:c2:69:
76:5e:d3:7d:02:d0:25:8b:1b:dc:11:d5:23:71:ed:
35:d2:c6:9a:b0:e6:9b:5f:47:d4:b9:00:22:09:dd:
fb:e6:ee:35:06:94:36:ef:34:f2:dd:80:c2:8d:7b:
21:75:e4:4d:6c:23:fd:58:fa:6a:b9:49:7c:11:60:
df:b1:d3:4d:c3:22:0f:9f:7e:c4:bb:a0:07:aa:34:
f1:6b:86:06:e6:8a:2c:38:e5:28:d8:0a:d2:d5:9e:
c1:d3:5d:fc:bb:5b:83:7c:06:0d:9a:3f:24:23:41:
0a:37:df:ab:b4:2d:ca:a7:46:82:4e:9d:21:64:70:
7c:6c:6f:04:87:74:4f:40:9b:aa:bc:18:66:7a:6a:
e7:51:ba:13:78:a4:0d:3b:c6:18:8f:cc:3d:22:56:
aa:b0:8e:fc:14:1e:32:81:e0:c1:94:f9:0a:14:e3:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:BC:C5:25:C5:C3:B5:DC:9F:DC:AC:B5:C4:80:12:44:6E:E0:BE
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/XjK8xSXFw7Xcn9ystcSAEkRu4L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:4c:05:28:ee:9c:7a:2a:0f:8e:4b:cc:29:08:b8:f9:cf:d3:
df:ef:ef:c4:f8:8e:15:b9:5c:5d:f1:c0:0e:3d:69:86:ec:57:
84:26:11:1c:09:fd:bc:93:f1:3b:f6:52:4d:de:ce:3a:37:99:
81:9a:af:df:46:93:85:e3:0e:80:b4:19:36:93:3f:3e:23:1b:
5f:40:f2:49:46:c5:5b:cf:50:07:47:6c:98:4f:ea:ad:84:f2:
17:1d:77:7a:07:a6:4c:cb:39:ad:83:58:bb:03:93:1d:36:fd:
f8:72:1f:ff:62:9a:a3:65:b9:94:d1:74:96:50:c7:18:5a:fb:
e5:28:b7:f5:ca:7c:f2:ab:c0:e0:9e:85:ed:26:a9:de:18:01:
61:6b:f3:e4:92:08:b4:8b:ee:fa:d6:5b:94:5a:f7:fc:e9:91:
5d:62:df:48:6b:5f:12:6e:d4:6a:df:e1:f1:9c:53:0d:04:54:
d7:87:0e:28:84:95:cd:e4:c2:ce:c7:5b:31:2a:34:91:11:06:
d8:a4:0d:aa:15:69:6e:de:10:60:c1:a7:0b:6d:86:f3:79:a3:
e6:05:de:80:ff:b8:28:b1:e0:05:da:65:60:d0:25:1a:4a:45:
9d:40:51:c3:1a:52:9b:c7:02:68:7e:55:f3:09:7b:be:96:86:
a5:fe:6f:c3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOUpwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZTczNmNhZmRkYjZlYmI4ZDdjNzY5NDNmNGEyNzFlMDM4NTEwYWE5MB4XDTIyMDEw
MTE1MDQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWUzMmJjYzUyNWM1
YzNiNWRjOWZkY2FjYjVjNDgwMTI0NDZlZTBiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgV0022pT470oaEfakKvSaEHXhU/435qe7+bvhha9lMNWo/
hhJZdCfZj76qwILn4/2N3h9o3PXB916X4YlN2n0WhKXDH+tV9WGOFomhSRMThVoI
R+WlSMJpdl7TfQLQJYsb3BHVI3HtNdLGmrDmm19H1LkAIgnd++buNQaUNu808t2A
wo17IXXkTWwj/Vj6arlJfBFg37HTTcMiD59+xLugB6o08WuGBuaKLDjlKNgK0tWe
wdNd/Ltbg3wGDZo/JCNBCjffq7QtyqdGgk6dIWRwfGxvBId0T0CbqrwYZnpq51G6
E3ikDTvGGI/MPSJWqrCO/BQeMoHgwZT5ChTjJicCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBReMrzFJcXDtdyf3Ky1xIASRG7gvjAfBgNVHSMEGDAWgBSuc2yv3bbruNfH
aUP0onHgOFEKqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JuTnNyOTIyNjdqWHgybEQ5S0p4NERoUkNxay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvODZlMzJiLWYwNjctNDUwZi1iNjdjLTNhYTE1MGE5MmFiNy8x
L1hqSzh4U1hGdzdYY245eXN0Y1NBRWtSdTRMNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
ODZlMzJiLWYwNjctNDUwZi1iNjdjLTNhYTE1MGE5MmFiNy8xL3JuTnNyOTIyNjdq
WHgybEQ5S0p4NERoUkNxay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmJRDANBgkqhkiG9w0BAQsFAAOC
AQEAn0wFKO6ceioPjkvMKQi4+c/T3+/vxPiOFblcXfHADj1phuxXhCYRHAn9vJPx
O/ZSTd7OOjeZgZqv30aTheMOgLQZNpM/PiMbX0DySUbFW89QB0dsmE/qrYTyFx13
egemTMs5rYNYuwOTHTb9+HIf/2Kao2W5lNF0llDHGFr75Si39cp88qvA4J6F7Sap
3hgBYWvz5JIItIvu+tZblFr3/OmRXWLfSGtfEm7Uat/h8ZxTDQRU14cOKISVzeTC
zsdbMSo0kREG2KQNqhVpbt4QYMGnC22G83mj5gXegP+4KLHgBdplYNAlGkpFnUBR
wxpSm8cCaH5V8wl7vpaGpf5vww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org