Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/080D0ozjg_iqrs3RFqv84MCpIVo.roa
File: 080D0ozjg_iqrs3RFqv84MCpIVo.roa (raw, json)
Hash identifier: UmtQ/x4LR6YJWLA6Gt438S0EKO8WsqWTpp7TVUtZTPg=
Subject key identifier: D3:CD:03:D2:8C:E3:83:F8:AA:AE:CD:D1:16:AB:FC:E0:C0:A9:21:5A
Certificate issuer: /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial: 081F6AD1
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/080D0ozjg_iqrs3RFqv84MCpIVo.roa
Signing time: Sat 01 Jan 2022 03:01:21 +0000
ROA not before: Sat 01 Jan 2022 03:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198279
IP address blocks: 185.55.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136276689 (0x81f6ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
Validity
Not Before: Jan 1 03:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3cd03d28ce383f8aaaecdd116abfce0c0a9215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:13:16:2e:41:7a:33:8c:0b:38:18:fb:ce:
80:0b:9b:5c:17:8e:0d:30:55:f3:b5:c9:72:09:1c:
a8:18:2c:3e:1d:46:e1:a3:e0:c1:36:6b:b0:15:7d:
5f:b8:27:d6:c1:42:39:de:3b:54:27:3c:ec:b6:f5:
92:b5:c5:c3:64:44:ce:2a:71:93:ae:be:27:95:55:
8f:16:fe:48:6d:69:04:25:c9:c7:cf:1f:42:cc:30:
a6:cd:7b:e8:e2:e6:97:0a:b9:8c:06:14:b6:3b:b2:
e6:35:f4:1f:df:3e:0e:e8:82:ad:e8:c9:56:c5:bd:
7b:5f:61:d3:a7:2d:ed:8b:b2:e6:f0:7e:12:a9:e7:
a1:e2:bd:c8:2b:18:34:f8:59:bc:43:5e:e4:3e:8c:
49:f6:6a:7b:a9:b8:f0:c8:a9:b2:f9:23:21:ce:b3:
b3:76:36:7f:28:ac:ff:ad:d7:5f:74:c4:34:44:6b:
1d:f9:8c:93:10:cd:d8:15:b0:1f:fe:04:85:d7:a8:
06:15:57:d6:f7:7d:62:0b:25:cb:2d:37:15:e5:4f:
d7:50:b1:30:82:fe:0f:ae:76:05:a5:31:78:0f:f9:
9f:6a:22:43:c9:bd:e8:ba:c4:ee:97:4a:82:75:93:
9d:79:82:55:d6:29:42:27:f7:e8:8b:06:35:fa:80:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:03:D2:8C:E3:83:F8:AA:AE:CD:D1:16:AB:FC:E0:C0:A9:21:5A
X509v3 Authority Key Identifier:
keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/080D0ozjg_iqrs3RFqv84MCpIVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:46:fe:61:cd:b2:81:3c:cc:52:7f:4e:8e:50:72:81:bc:87:
5b:49:1e:b3:55:84:b3:66:22:e9:f6:c4:58:66:04:7c:d1:9d:
ba:01:60:a1:25:8a:b3:b7:eb:51:ad:08:6e:c3:0c:85:da:d7:
99:d3:0c:5c:3e:08:bb:a5:b2:7b:ea:3d:28:36:b9:64:55:29:
7c:80:be:da:a0:3a:06:ed:86:89:57:cc:86:9b:e6:88:0a:ea:
59:fc:54:16:a4:3b:09:76:91:3f:11:ff:62:43:8c:ab:4b:5a:
5e:5e:19:d6:2f:e2:ce:ab:f7:5c:f3:7e:3d:20:6a:65:c1:0a:
03:18:6d:f2:24:a7:85:d7:38:5d:d5:df:77:19:cc:cd:cb:d9:
42:62:73:ce:4d:ba:03:20:d9:f4:e1:b7:49:1d:63:5c:8e:e3:
d1:c7:49:e9:79:fb:01:d3:50:60:f8:45:7d:47:36:3a:be:13:
e1:dd:c7:c4:46:82:cd:9e:af:75:48:4e:2f:c1:26:3e:a0:4e:
c6:3d:7a:a1:17:ca:bf:60:fd:c9:3e:76:fd:8c:09:21:97:cd:
b4:d8:e1:32:b0:4c:14:71:c5:84:ab:5f:60:b6:8d:1f:ae:ca:
fc:e2:69:ad:41:e7:5e:d0:c2:c4:10:7e:04:3f:6d:a8:26:f7:
47:98:1b:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECB9q0TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YWI2ZDdjNDY4ZDA5MmM5MjEzMTRkNjY0NzNjZmE1Mzg1MWNkNjg2MB4XDTIyMDEw
MTAzMDEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDNjZDAzZDI4Y2Uz
ODNmOGFhYWVjZGQxMTZhYmZjZTBjMGE5MjE1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAIExYuQXozjAs4GPvOgAubXBeODTBV87XJcgkcqBgsPh1G
4aPgwTZrsBV9X7gn1sFCOd47VCc87Lb1krXFw2REzipxk66+J5VVjxb+SG1pBCXJ
x88fQswwps176OLmlwq5jAYUtjuy5jX0H98+DuiCrejJVsW9e19h06ct7Yuy5vB+
EqnnoeK9yCsYNPhZvENe5D6MSfZqe6m48MipsvkjIc6zs3Y2fyis/63XX3TENERr
HfmMkxDN2BWwH/4EhdeoBhVX1vd9Ygslyy03FeVP11CxMIL+D652BaUxeA/5n2oi
Q8m96LrE7pdKgnWTnXmCVdYpQif36IsGNfqAA3UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTzQPSjOOD+KquzdEWq/zgwKkhWjAfBgNVHSMEGDAWgBRKttfEaNCSySEx
TWZHPPpThRzWhjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NyYlh4R2pRa3NraE1VMW1Seno2VTRVYzFvWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTMvNTBmMDhmLWY5MDctNDRkZS1iZTk0LTA1NzY0YzdlZGFhNy8x
LzA4MEQwb3pqZ19pcXJzM1JGcXY4NE1DcElWby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMv
NTBmMDhmLWY5MDctNDRkZS1iZTk0LTA1NzY0YzdlZGFhNy8xL1NyYlh4R2pRa3Nr
aE1VMW1Seno2VTRVYzFvWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALk3ljANBgkqhkiG9w0BAQsFAAOC
AQEADkb+Yc2ygTzMUn9OjlBygbyHW0kes1WEs2Yi6fbEWGYEfNGdugFgoSWKs7fr
Ua0IbsMMhdrXmdMMXD4Iu6Wye+o9KDa5ZFUpfIC+2qA6Bu2GiVfMhpvmiArqWfxU
FqQ7CXaRPxH/YkOMq0taXl4Z1i/izqv3XPN+PSBqZcEKAxht8iSnhdc4XdXfdxnM
zcvZQmJzzk26AyDZ9OG3SR1jXI7j0cdJ6Xn7AdNQYPhFfUc2Or4T4d3HxEaCzZ6v
dUhOL8EmPqBOxj16oRfKv2D9yT52/YwJIZfNtNjhMrBMFHHFhKtfYLaNH67K/OJp
rUHnXtDCxBB+BD9tqCb3R5gbjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:17 2024 by rpki-client on console-fra.rpki-client.org