Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1SLuxX9n-LnA4HIBI-C0Mb0qUlY.roa
File: 1SLuxX9n-LnA4HIBI-C0Mb0qUlY.roa (raw, json)
Hash identifier: VE1S96pkYOYLb71MZDESxKQbehaj52VnsjInxMILFEo=
Subject key identifier: D5:22:EE:C5:7F:67:F8:B9:C0:E0:72:01:23:E0:B4:31:BD:2A:52:56
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1CC25E4A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1SLuxX9n-LnA4HIBI-C0Mb0qUlY.roa
Signing time: Mon 17 Jan 2022 13:12:57 +0000
ROA not before: Mon 17 Jan 2022 13:12:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211129
IP address blocks: 85.217.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482500170 (0x1cc25e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 13:12:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d522eec57f67f8b9c0e0720123e0b431bd2a5256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:cc:f3:55:37:b8:42:f1:2d:ff:77:d3:70:
0d:a2:40:c1:9f:f9:32:95:25:d3:51:de:4f:9f:47:
ee:e5:a0:f4:ce:e0:47:97:d0:06:ae:3d:79:90:a5:
f0:fa:76:c0:a6:0e:32:92:56:8a:70:7f:b2:c6:47:
c0:ad:30:ca:99:b1:b7:f7:87:d2:94:da:aa:81:10:
1e:4c:45:a3:7b:c4:6f:da:45:94:9a:93:68:7f:eb:
1c:c6:9f:5e:79:4d:6d:ee:e9:9f:73:42:dd:0d:cb:
19:c2:8e:f1:7e:ac:c8:db:5d:70:14:68:7a:2c:7f:
2b:15:4f:0d:21:f9:4c:31:ca:6b:db:b3:c7:ea:ab:
c6:b9:2c:36:bf:36:66:e0:dd:c7:e4:dd:9b:9c:ca:
9a:d8:04:70:79:a4:87:92:19:fb:cc:79:49:8d:d1:
15:bf:e3:02:d5:a3:35:e2:c7:20:9d:6f:89:e3:2b:
3f:3c:0a:d3:21:56:26:8f:79:94:ae:bd:23:af:91:
3e:05:fd:b4:39:48:b5:6c:cd:f7:78:3e:bc:fe:e3:
5b:f3:35:63:73:88:d4:3e:97:7e:d3:64:04:b3:ff:
b9:dc:46:76:6f:3c:7e:13:95:13:cc:fe:3a:18:06:
68:1c:23:40:7b:7d:98:64:9a:74:83:70:ae:a4:43:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:EE:C5:7F:67:F8:B9:C0:E0:72:01:23:E0:B4:31:BD:2A:52:56
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1SLuxX9n-LnA4HIBI-C0Mb0qUlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.144.0/24
Signature Algorithm: sha256WithRSAEncryption
36:01:92:b1:6c:b0:c5:90:a5:61:75:aa:ae:2f:f0:66:06:4b:
be:7a:7e:67:d6:73:d6:80:1a:f3:bb:bb:ab:7e:e1:1d:31:f8:
1d:42:c3:53:16:65:cb:31:d4:4d:6e:75:0d:bd:ac:40:3d:1e:
5e:45:be:64:92:f6:34:6b:99:32:87:e9:78:4e:f4:ee:d1:b9:
44:32:2a:89:df:1c:28:86:fb:75:b6:24:86:19:19:c7:99:7c:
3b:39:23:dc:44:6a:4e:24:74:3d:7f:82:ff:26:f3:a9:d3:4e:
52:29:b1:4a:2b:a0:08:d1:0a:f1:1b:ce:42:19:41:f3:53:35:
34:a7:d4:a7:70:f9:ae:94:3e:cb:c5:42:58:be:eb:d8:fc:6f:
30:ad:c7:b1:83:a2:b7:c8:fc:c9:3b:12:70:94:f2:37:3b:6d:
56:be:c9:6c:bb:49:a3:31:0b:e5:43:54:b9:dd:ce:34:32:9d:
52:b3:ed:21:2d:81:46:81:28:9f:5e:3e:d9:00:4e:5c:dc:ee:
b0:30:6a:29:1e:aa:87:62:dd:48:b7:a8:65:05:01:f3:d5:b6:
d6:66:33:b8:92:57:80:ee:3f:25:72:c4:46:de:75:74:b3:7c:
9a:c8:1a:8a:a0:f8:50:16:70:d7:8a:89:46:93:05:a8:fc:40:
b7:8d:be:4f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHMJeSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEx
NzEzMTI1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDUyMmVlYzU3ZjY3
ZjhiOWMwZTA3MjAxMjNlMGI0MzFiZDJhNTI1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALafzPNVN7hC8S3/d9NwDaJAwZ/5MpUl01HeT59H7uWg9M7g
R5fQBq49eZCl8Pp2wKYOMpJWinB/ssZHwK0wypmxt/eH0pTaqoEQHkxFo3vEb9pF
lJqTaH/rHMafXnlNbe7pn3NC3Q3LGcKO8X6syNtdcBRoeix/KxVPDSH5TDHKa9uz
x+qrxrksNr82ZuDdx+Tdm5zKmtgEcHmkh5IZ+8x5SY3RFb/jAtWjNeLHIJ1vieMr
PzwK0yFWJo95lK69I6+RPgX9tDlItWzN93g+vP7jW/M1Y3OI1D6XftNkBLP/udxG
dm88fhOVE8z+OhgGaBwjQHt9mGSadINwrqRDgoMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTVIu7Ff2f4ucDgcgEj4LQxvSpSVjAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
LzFTTHV4WDluLUxuQTRISUJJLUMwTWIwcVVsWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXZkDANBgkqhkiG9w0BAQsFAAOC
AQEANgGSsWywxZClYXWqri/wZgZLvnp+Z9Zz1oAa87u7q37hHTH4HULDUxZlyzHU
TW51Db2sQD0eXkW+ZJL2NGuZMofpeE707tG5RDIqid8cKIb7dbYkhhkZx5l8Ozkj
3ERqTiR0PX+C/ybzqdNOUimxSiugCNEK8RvOQhlB81M1NKfUp3D5rpQ+y8VCWL7r
2PxvMK3HsYOit8j8yTsScJTyNzttVr7JbLtJozEL5UNUud3ONDKdUrPtIS2BRoEo
n14+2QBOXNzusDBqKR6qh2LdSLeoZQUB89W21mYzuJJXgO4/JXLERt51dLN8msga
iqD4UBZw14qJRpMFqPxAt42+Tw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org