Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ey-cuCSA7AyMmmlqDVY6IcR1bJw.roa
File: ey-cuCSA7AyMmmlqDVY6IcR1bJw.roa (raw, json)
Hash identifier: jIwt5A210TcJJPPOIjqnfthaxw6s2LJ01xlQ+tFLb3g=
Subject key identifier: 7B:2F:9C:B8:24:80:EC:0C:8C:9A:69:6A:0D:56:3A:21:C4:75:6C:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1F5209BF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ey-cuCSA7AyMmmlqDVY6IcR1bJw.roa
Signing time: Tue 28 Jun 2022 10:33:02 +0000
ROA not before: Tue 28 Jun 2022 10:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 194.180.48.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525470143 (0x1f5209bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 28 10:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b2f9cb82480ec0c8c9a696a0d563a21c4756c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:79:b6:ef:ba:ab:a1:c2:07:53:c2:47:01:
50:0a:5d:61:88:03:6a:74:6f:47:a1:cd:a9:52:6a:
f9:12:15:46:80:79:8d:87:25:d7:87:3f:0e:61:c4:
5f:a5:0c:67:59:06:69:da:c1:21:27:e1:cb:ee:01:
4a:cd:7e:81:97:88:ad:a8:18:ae:0b:40:32:d8:97:
e6:bf:78:8d:7c:fc:41:b8:f7:79:57:3b:0d:6e:e1:
e0:dd:5e:f2:55:e9:0b:71:67:8b:a1:05:15:6d:51:
c5:3e:33:b7:31:28:a7:39:9a:bc:70:b0:94:bb:03:
2f:f5:c9:fe:3f:c6:87:32:69:17:29:9e:3b:f8:76:
36:7b:cd:50:be:f2:09:cd:e5:bf:47:f3:47:eb:c0:
b0:b9:dc:ad:4f:a8:a7:3f:28:b1:f4:31:32:99:b5:
45:8a:f1:69:a0:6c:0d:8e:c5:c7:18:39:c6:bf:6d:
e7:5b:ea:97:23:77:75:4b:da:3a:88:cd:c0:a8:b4:
d3:e9:66:70:50:28:a5:02:2c:63:c1:3f:54:a7:a3:
1b:87:48:1f:21:1f:00:8e:4f:ec:c4:83:22:6d:35:
3a:2c:03:c6:f4:f0:eb:61:33:79:62:92:51:93:6f:
6f:7a:7f:73:3a:5a:d9:ab:8e:3d:d9:51:ea:c7:1c:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:9C:B8:24:80:EC:0C:8C:9A:69:6A:0D:56:3A:21:C4:75:6C:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ey-cuCSA7AyMmmlqDVY6IcR1bJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.220.0/24
194.180.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3e:99:5a:3f:67:f0:54:e1:62:62:f1:71:fd:3b:77:ff:b1:
72:63:55:34:a2:48:51:36:6a:78:31:ff:9f:87:64:a0:1d:1f:
33:8e:93:db:9f:a7:82:cb:9c:d8:e9:9d:71:4a:3f:14:e9:39:
ed:48:e3:99:80:f3:25:2a:72:7b:74:7d:3c:40:dd:66:cb:2f:
18:7f:58:fd:25:90:02:a1:92:61:71:24:da:96:95:35:ea:f1:
b8:71:cc:20:e6:50:1d:66:21:62:86:20:2a:97:11:77:8d:cd:
a1:b9:32:09:ce:58:e5:87:37:1c:38:6e:75:3d:a1:c6:bd:45:
6f:1e:ad:ee:d9:0b:0b:43:7b:75:c9:5a:ef:8a:94:27:d0:01:
14:c1:af:df:24:33:00:89:5f:36:61:90:47:6e:cb:78:79:6d:
df:f6:f7:62:06:e3:36:b2:67:6f:f8:cd:9e:e6:59:87:e0:fd:
a0:18:62:50:a7:f6:7f:da:03:2f:8d:ec:38:57:71:b5:be:1f:
e7:03:7d:fe:f7:a6:9b:f3:22:63:2b:75:2c:33:6c:0c:4f:d6:
8a:a7:19:36:a5:4a:90:2c:f7:30:e8:f6:a6:9c:eb:46:ac:9e:
1a:72:69:58:d4:3f:43:af:5f:47:63:18:98:4c:bb:ae:5c:2e:
a8:b2:d7:09
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEH1IJvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDYy
ODEwMzMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2IyZjljYjgyNDgw
ZWMwYzhjOWE2OTZhMGQ1NjNhMjFjNDc1NmM5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALTdebbvuquhwgdTwkcBUApdYYgDanRvR6HNqVJq+RIVRoB5
jYcl14c/DmHEX6UMZ1kGadrBISfhy+4BSs1+gZeIragYrgtAMtiX5r94jXz8Qbj3
eVc7DW7h4N1e8lXpC3Fni6EFFW1RxT4ztzEopzmavHCwlLsDL/XJ/j/GhzJpFyme
O/h2NnvNUL7yCc3lv0fzR+vAsLncrU+opz8osfQxMpm1RYrxaaBsDY7Fxxg5xr9t
51vqlyN3dUvaOojNwKi00+lmcFAopQIsY8E/VKejG4dIHyEfAI5P7MSDIm01OiwD
xvTw62EzeWKSUZNvb3p/czpa2auOPdlR6sccZVMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR7L5y4JIDsDIyaaWoNVjohxHVsnDAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2V5LWN1Q1NBN0F5TW1tbHFEVlk2SWNSMWJKdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALn23AMEAMK0MDANBgkqhkiG9w0B
AQsFAAOCAQEAej6ZWj9n8FThYmLxcf07d/+xcmNVNKJIUTZqeDH/n4dkoB0fM46T
25+ngsuc2OmdcUo/FOk57UjjmYDzJSpye3R9PEDdZssvGH9Y/SWQAqGSYXEk2paV
NerxuHHMIOZQHWYhYoYgKpcRd43NobkyCc5Y5Yc3HDhudT2hxr1Fbx6t7tkLC0N7
dcla74qUJ9ABFMGv3yQzAIlfNmGQR27LeHlt3/b3YgbjNrJnb/jNnuZZh+D9oBhi
UKf2f9oDL43sOFdxtb4f5wN9/vemm/MiYyt1LDNsDE/WiqcZNqVKkCz3MOj2ppzr
RqyeGnJpWNQ/Q69fR2MYmEy7rlwuqLLXCQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org