Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3vCK4GnpJIawQO9m2uD6UnsfK6k.roa
File: 3vCK4GnpJIawQO9m2uD6UnsfK6k.roa (raw, json)
Hash identifier: QjLzezyJPeU+BY4Qcgie9eqQROJ0DlmME0d/W2BGDiQ=
Subject key identifier: DE:F0:8A:E0:69:E9:24:86:B0:40:EF:66:DA:E0:FA:52:7B:1F:2B:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1D27DF00
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3vCK4GnpJIawQO9m2uD6UnsfK6k.roa
Signing time: Fri 18 Feb 2022 11:01:46 +0000
ROA not before: Fri 18 Feb 2022 11:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 185.252.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489152256 (0x1d27df00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 18 11:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=def08ae069e92486b040ef66dae0fa527b1f2ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:0a:a8:3a:13:75:df:71:e3:f3:29:08:7e:
6f:2a:41:0a:83:dc:91:4f:f1:a7:39:cf:3a:64:d1:
0d:5b:86:b1:f2:e4:94:f8:0d:45:ba:c6:b6:dc:92:
99:50:63:6e:06:b7:12:17:16:9e:d5:64:cb:bb:4e:
29:3a:94:58:79:3f:03:67:d5:e5:38:59:53:47:9b:
7a:35:f7:32:74:2f:87:fe:79:59:5e:fe:a7:4f:74:
30:6c:b9:9f:69:21:2e:50:47:bd:a2:08:0d:22:cd:
e8:3b:f5:94:bc:0b:2d:eb:65:fb:01:f6:5f:32:59:
47:5c:f7:26:1a:f9:f2:a5:ec:49:43:7e:d1:8f:c9:
58:b5:ef:45:02:ea:a0:19:b8:bf:c1:19:d6:1d:d3:
43:18:95:ec:52:87:fe:0a:69:b7:a2:d8:3d:8b:8e:
3d:9e:5b:53:15:f7:9e:93:8d:f3:d8:b8:a0:cd:c2:
1f:76:9f:93:59:c8:1f:62:10:c1:c7:16:bd:ec:50:
93:33:f0:3f:b9:26:11:b5:ae:dc:c5:7e:48:21:4a:
0e:f3:e2:df:ac:54:66:c7:be:b4:d3:a0:70:8e:43:
75:78:3f:5f:45:9f:bf:d6:c3:6a:fe:36:94:f7:a9:
06:b3:b3:94:e3:0e:68:f7:ce:37:b8:9c:38:bc:3f:
7c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F0:8A:E0:69:E9:24:86:B0:40:EF:66:DA:E0:FA:52:7B:1F:2B:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3vCK4GnpJIawQO9m2uD6UnsfK6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:45:3a:ae:c5:a3:a6:7d:d7:c8:5d:08:55:ba:d8:fd:ed:e4:
56:43:66:34:a1:db:9a:99:ab:2b:69:5f:87:d1:fa:e1:13:a3:
46:66:e5:b4:3e:39:5c:2f:cc:7a:a5:6e:42:cc:d4:c6:a0:3f:
3b:61:16:4b:08:26:66:f0:88:0d:df:4a:47:00:aa:8b:c8:a2:
76:28:b9:a3:24:77:1f:a5:0d:9c:8d:e1:a5:ff:f5:7c:61:52:
df:1f:b5:a2:fe:a0:4a:f7:f4:09:4c:b8:87:4b:78:50:63:ea:
c8:9a:e8:a3:81:07:aa:62:18:d5:90:08:37:73:aa:c7:6d:fd:
8c:e5:2b:4e:c4:19:18:47:34:0d:44:1d:ee:5f:da:da:e1:3b:
43:38:92:bc:16:87:70:d7:b4:b4:e6:02:3e:a1:ea:64:2b:6e:
ab:09:0a:9b:01:40:c2:85:cd:39:b9:2e:96:ef:6d:0f:40:6c:
70:eb:47:eb:45:b9:34:af:82:f4:64:47:57:b7:2f:56:8e:57:
99:f1:7c:d2:b9:ed:6a:3e:19:bf:85:e4:55:49:fc:2a:62:a2:
e2:0a:82:e3:07:af:3d:ef:a8:d4:0a:0b:d5:72:b1:88:60:93:
ad:55:af:77:8d:43:e0:c1:ca:1a:ba:8b:f9:1e:de:3c:9b:97:
07:7c:bd:eb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHSffADANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDIx
ODExMDE0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGVmMDhhZTA2OWU5
MjQ4NmIwNDBlZjY2ZGFlMGZhNTI3YjFmMmJhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLtCqg6E3XfcePzKQh+bypBCoPckU/xpznPOmTRDVuGsfLk
lPgNRbrGttySmVBjbga3EhcWntVky7tOKTqUWHk/A2fV5ThZU0ebejX3MnQvh/55
WV7+p090MGy5n2khLlBHvaIIDSLN6Dv1lLwLLetl+wH2XzJZR1z3Jhr58qXsSUN+
0Y/JWLXvRQLqoBm4v8EZ1h3TQxiV7FKH/gppt6LYPYuOPZ5bUxX3npON89i4oM3C
H3afk1nIH2IQwccWvexQkzPwP7kmEbWu3MV+SCFKDvPi36xUZse+tNOgcI5DdXg/
X0Wfv9bDav42lPepBrOzlOMOaPfON7icOLw/fNECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTe8IrgaekkhrBA72ba4PpSex8rqTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
LzN2Q0s0R25wSklhd1FPOW0ydUQ2VW5zZks2ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn8sTANBgkqhkiG9w0BAQsFAAOC
AQEAPUU6rsWjpn3XyF0IVbrY/e3kVkNmNKHbmpmrK2lfh9H64ROjRmbltD45XC/M
eqVuQszUxqA/O2EWSwgmZvCIDd9KRwCqi8iidii5oyR3H6UNnI3hpf/1fGFS3x+1
ov6gSvf0CUy4h0t4UGPqyJroo4EHqmIY1ZAIN3Oqx239jOUrTsQZGEc0DUQd7l/a
2uE7QziSvBaHcNe0tOYCPqHqZCtuqwkKmwFAwoXNObkulu9tD0BscOtH60W5NK+C
9GRHV7cvVo5XmfF80rntaj4Zv4XkVUn8KmKi4gqC4wevPe+o1AoL1XKxiGCTrVWv
d41D4MHKGrqL+R7ePJuXB3y96w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org