Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W5zqpWbT_tFldksHjr1jEGU0mkQ.roa
File: W5zqpWbT_tFldksHjr1jEGU0mkQ.roa (raw, json)
Hash identifier: D/zBPYeXhzNBTY8+36O3WXxstvIFTFI4fENgSn6JZbA=
Subject key identifier: 5B:9C:EA:A5:66:D3:FE:D1:65:76:4B:07:8E:BD:63:10:65:34:9A:44
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018258978D4E79C7EC0ECBCF5DF2FD7A355D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W5zqpWbT_tFldksHjr1jEGU0mkQ.roa
Signing time: Mon 01 Aug 2022 08:48:23 +0000
ROA not before: Mon 01 Aug 2022 08:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.72.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:97:8d:4e:79:c7:ec:0e:cb:cf:5d:f2:fd:7a:35:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 1 08:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b9ceaa566d3fed165764b078ebd631065349a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:a1:21:5c:50:64:b3:76:42:5b:a5:0f:43:
41:37:49:82:e8:3c:b4:f3:15:65:e7:5b:9d:45:8e:
42:2a:69:e6:d3:fa:4f:1d:7e:c7:65:12:91:0a:ea:
5c:de:a7:88:3a:d1:d2:13:72:6c:6c:fc:2b:0d:a3:
26:a7:2c:d0:50:95:4b:1b:49:e3:02:34:ef:1b:2d:
9a:b9:83:e8:70:87:45:9d:04:b0:2f:e8:7b:b9:54:
18:af:fc:14:30:5c:32:e9:85:06:9a:c4:71:63:0d:
58:21:4f:04:28:60:6b:29:63:1c:ca:17:20:56:2f:
ab:d1:66:af:23:8b:f5:69:35:81:f9:84:43:fe:11:
37:9d:6f:5a:16:c2:0a:af:16:87:4d:a1:cf:08:fc:
b8:07:4b:ea:11:88:6e:1f:2f:22:96:d5:f7:29:63:
3e:b3:91:30:35:05:63:b0:ef:15:9f:28:7a:99:de:
9b:99:b2:63:1b:e4:cb:a2:93:67:80:11:f0:8d:98:
71:d6:71:e4:15:64:bf:90:03:00:49:25:23:1c:8e:
48:53:cd:95:6e:28:86:dc:45:90:0c:65:fc:91:50:
ac:6f:17:d5:14:1e:5d:50:dd:34:77:20:3e:34:c0:
e2:d9:d3:b8:30:48:21:cb:9a:9b:14:5e:a5:59:38:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:EA:A5:66:D3:FE:D1:65:76:4B:07:8E:BD:63:10:65:34:9A:44
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W5zqpWbT_tFldksHjr1jEGU0mkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:52:d4:1a:45:e4:16:1c:eb:10:71:1a:ec:14:e9:fc:f7:0d:
b5:31:cf:96:ee:fb:b4:16:7f:3b:f8:6c:b8:c9:70:b3:54:54:
89:37:21:5a:97:50:92:9e:3f:e0:1f:89:b8:1e:4f:26:4c:8b:
3d:1e:b5:2f:9c:94:7e:89:ce:c7:15:e5:50:3f:11:ec:98:31:
88:e6:f5:43:43:6f:2b:13:4e:fc:21:75:06:39:ef:56:1f:0a:
01:38:fc:96:93:11:d1:2f:1b:66:f9:fa:4b:96:10:49:a0:5b:
20:09:ed:a7:d7:6e:fa:bd:7d:f9:e5:9c:ed:43:2f:74:b9:1e:
c3:7f:72:ed:df:f4:17:b0:95:65:bd:b4:d8:41:69:46:2d:c7:
44:e9:18:f4:5f:a2:ae:23:63:6c:a6:10:c7:f1:64:26:54:f6:
10:50:0e:4f:c9:35:b5:8f:a8:43:e5:e7:63:1e:f3:86:75:8d:
27:27:32:33:ab:6b:b7:d0:a8:83:4e:c2:80:b7:37:16:e8:09:
a4:43:9a:17:6e:27:62:0d:ef:26:a7:86:e4:3e:61:d8:6f:18:
2a:8f:c1:d7:8b:f0:36:34:24:d4:13:8a:2a:be:02:da:f4:fb:
7a:70:12:75:87:5b:2d:c0:43:5a:7e:5f:11:be:5d:bf:88:f0:
a3:43:52:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJYl41OecfsDsvPXfL9ejVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwODAxMDg0ODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjljZWFhNTY2ZDNmZWQxNjU3NjRiMDc4ZWJkNjMxMDY1MzQ5YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFahIVxQZLN2QlulD0NBN0mC6Dy0
8xVl51udRY5CKmnm0/pPHX7HZRKRCupc3qeIOtHSE3JsbPwrDaMmpyzQUJVLG0nj
AjTvGy2auYPocIdFnQSwL+h7uVQYr/wUMFwy6YUGmsRxYw1YIU8EKGBrKWMcyhcg
Vi+r0WavI4v1aTWB+YRD/hE3nW9aFsIKrxaHTaHPCPy4B0vqEYhuHy8iltX3KWM+
s5EwNQVjsO8Vnyh6md6bmbJjG+TLopNngBHwjZhx1nHkFWS/kAMASSUjHI5IU82V
biiG3EWQDGX8kVCsbxfVFB5dUN00dyA+NMDi2dO4MEghy5qbFF6lWThLIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuc6qVm0/7RZXZLB469YxBlNJpEMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVzV6cXBXYlRfdEZsZGtzSGpyMWpFR1UwbWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUgKMA0G
CSqGSIb3DQEBCwUAA4IBAQA9UtQaReQWHOsQcRrsFOn89w21Mc+W7vu0Fn87+Gy4
yXCzVFSJNyFal1CSnj/gH4m4Hk8mTIs9HrUvnJR+ic7HFeVQPxHsmDGI5vVDQ28r
E078IXUGOe9WHwoBOPyWkxHRLxtm+fpLlhBJoFsgCe2n1276vX355ZztQy90uR7D
f3Lt3/QXsJVlvbTYQWlGLcdE6Rj0X6KuI2NsphDH8WQmVPYQUA5PyTW1j6hD5edj
HvOGdY0nJzIzq2u30KiDTsKAtzcW6AmkQ5oXbidiDe8mp4bkPmHYbxgqj8HXi/A2
NCTUE4oqvgLa9Pt6cBJ1h1stwENafl8Rvl2/iPCjQ1Iq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org