Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/xNG6rtX7c4WiQOk-9VA2C5_SFBE.roa
File: xNG6rtX7c4WiQOk-9VA2C5_SFBE.roa (raw, json)
Hash identifier: B1SVLhJjgnCHxs7pp4bu0CAxtNGZzlYyCfwdkwdd5gM=
Subject key identifier: C4:D1:BA:AE:D5:FB:73:85:A2:40:E9:3E:F5:50:36:0B:9F:D2:14:11
Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283
Certificate serial: 10CD5C7F
Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/xNG6rtX7c4WiQOk-9VA2C5_SFBE.roa
Signing time: Sat 01 Jan 2022 04:56:58 +0000
ROA not before: Sat 01 Jan 2022 04:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8315
IP address blocks: 185.116.72.0/22 maxlen: 24
2a0d:5040::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281894015 (0x10cd5c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc950098436281cee542a1e74546551e1e55283
Validity
Not Before: Jan 1 04:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4d1baaed5fb7385a240e93ef550360b9fd21411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:6b:0a:bb:02:d2:af:63:42:d2:ce:c0:aa:
8b:df:69:f5:a7:21:ce:92:93:70:c0:5d:f8:88:d3:
72:28:d8:69:2f:f4:bd:b0:c0:59:b0:bd:c4:0c:c0:
99:be:6f:ac:c0:8f:49:dc:a6:95:f3:d3:55:16:e4:
18:7a:43:67:2e:53:a2:4e:f6:1d:79:d9:0b:78:15:
06:e0:99:bc:82:e7:48:fc:74:1e:01:ca:b3:c8:c8:
a3:0c:cc:45:8a:a3:03:5f:fd:25:ba:03:49:36:ed:
a1:d5:9a:5c:cd:e0:05:c0:7c:af:9a:36:e4:d3:6e:
fb:3d:87:22:5e:c1:ed:bd:42:ef:43:65:46:68:23:
71:41:30:b5:b7:7e:4f:92:0c:1f:bb:c9:96:84:85:
9b:b7:ea:36:5e:f9:9c:0c:bb:53:1a:0a:31:f8:28:
37:83:59:99:b1:f1:57:ee:77:43:d1:16:ef:80:14:
d4:35:46:64:b4:c8:9f:12:40:c4:10:66:65:eb:75:
d9:e1:be:ad:f9:60:cd:c9:50:cd:2f:c2:d0:23:19:
df:1e:6d:8b:92:46:e0:10:e0:4a:19:17:26:38:83:
c4:d7:d7:c0:74:a2:42:1f:93:e3:52:5a:59:01:5f:
2b:1a:14:67:5c:ff:f3:b0:df:ea:12:6c:a4:e6:8c:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:BA:AE:D5:FB:73:85:A2:40:E9:3E:F5:50:36:0B:9F:D2:14:11
X509v3 Authority Key Identifier:
keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/xNG6rtX7c4WiQOk-9VA2C5_SFBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.72.0/22
IPv6:
2a0d:5040::/29
Signature Algorithm: sha256WithRSAEncryption
14:85:92:3b:0f:6c:f8:0e:0e:ac:7a:02:9d:4c:93:12:78:1c:
5b:d5:73:19:0a:90:63:b5:25:19:61:9a:ae:46:9e:c7:ec:7d:
c4:43:e7:7a:76:81:b9:43:4e:b1:bc:a3:e0:1e:24:01:1c:dd:
e9:c6:74:20:ce:fa:a4:a1:42:89:1b:a1:ec:4e:4f:a9:23:26:
76:08:57:c2:a5:ab:de:8c:4d:db:a6:ff:b9:00:de:12:c6:0a:
da:c8:b5:b1:b2:de:fa:00:af:4b:a4:df:55:61:39:93:9c:d0:
a0:17:32:3b:61:12:31:b6:c2:a5:14:fd:a9:fb:d9:cb:7f:46:
10:2d:f6:76:3c:cb:1b:3c:86:31:bd:5a:85:38:a3:ce:82:b0:
af:e1:00:93:98:1f:44:d5:1a:0b:21:dc:9a:25:d7:cb:c9:b9:
a4:ef:07:eb:c0:ab:ef:0c:b9:f5:e0:72:55:fe:00:15:48:0e:
98:ac:8c:50:3b:e6:79:af:3d:49:3f:ab:f3:39:f0:4a:b9:ee:
cf:1b:39:cf:52:0e:25:40:82:66:f3:c7:33:fc:dc:ab:4a:06:
72:ae:81:9f:9a:5d:d0:81:e3:4f:df:2a:57:09:8a:ff:52:3f:
39:5c:ae:fa:f8:cc:19:cd:f4:20:8e:db:67:e1:17:10:1a:c7:
8b:30:89:eb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEEM1cfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YmM5NTAwOTg0MzYyODFjZWU1NDJhMWU3NDU0NjU1MWUxZTU1MjgzMB4XDTIyMDEw
MTA0NTY1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzRkMWJhYWVkNWZi
NzM4NWEyNDBlOTNlZjU1MDM2MGI5ZmQyMTQxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpvawq7AtKvY0LSzsCqi99p9achzpKTcMBd+IjTcijYaS/0
vbDAWbC9xAzAmb5vrMCPSdymlfPTVRbkGHpDZy5Tok72HXnZC3gVBuCZvILnSPx0
HgHKs8jIowzMRYqjA1/9JboDSTbtodWaXM3gBcB8r5o25NNu+z2HIl7B7b1C70Nl
RmgjcUEwtbd+T5IMH7vJloSFm7fqNl75nAy7UxoKMfgoN4NZmbHxV+53Q9EW74AU
1DVGZLTInxJAxBBmZet12eG+rflgzclQzS/C0CMZ3x5ti5JG4BDgShkXJjiDxNfX
wHSiQh+T41JaWQFfKxoUZ1z/87Df6hJspOaMts0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTE0bqu1ftzhaJA6T71UDYLn9IUETAfBgNVHSMEGDAWgBTbyVAJhDYoHO5U
Kh50VGVR4eVSgzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzI4bFFDWVEyS0J6dVZDb2VkRlJsVWVIbFVvTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvNWFhNDQ4LTY0M2YtNGFlZS05MGQ5LWY0N2UxNjkyNjZjMi8x
L3hORzZydFg3YzRXaVFPay05VkEyQzVfU0ZCRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
NWFhNDQ4LTY0M2YtNGFlZS05MGQ5LWY0N2UxNjkyNjZjMi8xLzI4bFFDWVEyS0J6
dVZDb2VkRlJsVWVIbFVvTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArl0SDANBAIAAjAHAwUDKg1QQDAN
BgkqhkiG9w0BAQsFAAOCAQEAFIWSOw9s+A4OrHoCnUyTEngcW9VzGQqQY7UlGWGa
rkaex+x9xEPnenaBuUNOsbyj4B4kARzd6cZ0IM76pKFCiRuh7E5PqSMmdghXwqWr
3oxN26b/uQDeEsYK2si1sbLe+gCvS6TfVWE5k5zQoBcyO2ESMbbCpRT9qfvZy39G
EC32djzLGzyGMb1ahTijzoKwr+EAk5gfRNUaCyHcmiXXy8m5pO8H68Cr7wy59eBy
Vf4AFUgOmKyMUDvmea89ST+r8znwSrnuzxs5z1IOJUCCZvPHM/zcq0oGcq6Bn5pd
0IHjT98qVwmK/1I/OVyu+vjMGc30II7bZ+EXEBrHizCJ6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:44 2024 by rpki-client on console-fra.rpki-client.org