Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pBg3PZuJk547_m_k5rTwC3LFCnU.roa
File: pBg3PZuJk547_m_k5rTwC3LFCnU.roa (raw, json)
Hash identifier: UCPxIYvxt/TfCme0OcfiO6txnYyCytyfqXfzHbkP1Ec=
Subject key identifier: A4:18:37:3D:9B:89:93:9E:3B:FE:6F:E4:E6:B4:F0:0B:72:C5:0A:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1F2909E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pBg3PZuJk547_m_k5rTwC3LFCnU.roa
Signing time: Wed 22 Jun 2022 06:58:44 +0000
ROA not before: Wed 22 Jun 2022 06:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 185.246.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522783206 (0x1f2909e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 22 06:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a418373d9b89939e3bfe6fe4e6b4f00b72c50a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:2e:4c:68:a2:47:3e:80:9f:22:48:d8:21:
22:f0:d9:26:58:fc:2c:99:44:09:b3:20:ba:bf:cc:
1e:eb:91:ab:ee:78:18:d2:3d:f8:4c:a7:a6:b1:b1:
25:03:b6:b0:9c:a4:d4:0d:8b:7a:12:d0:41:31:55:
60:4e:8e:9a:2a:41:40:e5:81:86:95:91:f8:91:49:
9f:5d:77:f5:fd:a8:8c:06:54:1a:61:9b:5d:fc:95:
16:8b:42:77:d4:85:3b:d9:8b:72:e9:01:8d:09:b5:
ef:ab:f3:7d:56:88:19:6e:aa:42:99:87:68:f9:cf:
a8:12:f6:c5:37:68:f7:76:bd:c9:9b:51:e6:5f:a0:
7b:e4:06:f3:86:71:0b:67:b3:2c:2d:d0:48:47:b6:
a9:a0:59:f2:be:7f:b3:45:fe:76:b5:3f:79:de:a8:
87:fa:2f:ee:35:70:bf:39:73:37:72:c0:e7:0a:77:
78:e8:c4:fd:ca:a5:ff:26:28:f5:30:6a:b7:88:08:
26:e1:07:2e:19:ec:1a:83:9d:c5:fc:bb:ba:16:71:
77:18:92:96:a6:bd:ab:1d:11:cf:4a:41:27:22:b1:
50:94:1a:07:1e:7c:f1:96:e0:c8:da:9a:74:07:5d:
df:31:4e:46:cc:35:73:6d:98:fb:c6:48:7e:32:3c:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:18:37:3D:9B:89:93:9E:3B:FE:6F:E4:E6:B4:F0:0B:72:C5:0A:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pBg3PZuJk547_m_k5rTwC3LFCnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4a:81:af:1f:9b:2c:5e:62:09:80:bb:b5:31:ed:c0:ed:65:
16:8c:26:7d:43:31:9f:22:d2:16:7b:fd:00:9c:ab:dc:13:bb:
b5:da:9c:86:c2:69:49:59:89:f7:98:40:ce:36:83:c0:99:cd:
3d:ff:0b:e7:19:e2:5f:59:5d:38:37:89:e1:de:42:9d:41:4f:
0a:95:fa:d5:f8:7f:75:fd:1c:14:bf:d8:af:57:55:07:70:76:
e2:a6:73:e6:ec:e4:d3:eb:80:2f:cf:80:d7:f9:9f:c9:49:64:
5b:b9:c0:24:e8:7b:f9:9d:16:48:8b:db:84:40:5f:59:d8:65:
6e:2e:7e:be:06:19:4d:2f:ea:69:5c:8a:5c:5c:9a:35:67:6a:
42:6d:a6:35:cb:2f:28:e8:52:56:3f:40:aa:72:d2:75:92:ec:
c2:63:bd:55:48:fa:6e:6e:d1:00:f8:4f:f7:61:7e:a8:98:41:
67:81:06:4c:c1:ad:b2:fd:ff:e9:2b:6d:88:07:2b:03:14:bd:
2c:74:83:f3:aa:84:e5:04:45:61:35:a5:25:5f:ca:17:61:32:
a4:8a:d0:a3:aa:99:50:3d:68:a8:39:ce:1c:ae:fe:0c:1f:e6:
68:a6:11:6a:bb:15:65:c7:56:93:42:2b:ef:48:5c:d6:31:d7:
4e:f5:b6:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHykJ5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDYy
MjA2NTg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQxODM3M2Q5Yjg5
OTM5ZTNiZmU2ZmU0ZTZiNGYwMGI3MmM1MGE3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrCLkxookc+gJ8iSNghIvDZJlj8LJlECbMgur/MHuuRq+54
GNI9+EynprGxJQO2sJyk1A2LehLQQTFVYE6OmipBQOWBhpWR+JFJn1139f2ojAZU
GmGbXfyVFotCd9SFO9mLcukBjQm176vzfVaIGW6qQpmHaPnPqBL2xTdo93a9yZtR
5l+ge+QG84ZxC2ezLC3QSEe2qaBZ8r5/s0X+drU/ed6oh/ov7jVwvzlzN3LA5wp3
eOjE/cql/yYo9TBqt4gIJuEHLhnsGoOdxfy7uhZxdxiSlqa9qx0Rz0pBJyKxUJQa
Bx588ZbgyNqadAdd3zFORsw1c22Y+8ZIfjI8JTkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSkGDc9m4mTnjv+b+TmtPALcsUKdTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L3BCZzNQWnVKazU0N19tX2s1clR3QzNMRkNuVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn23DANBgkqhkiG9w0BAQsFAAOC
AQEAgkqBrx+bLF5iCYC7tTHtwO1lFowmfUMxnyLSFnv9AJyr3BO7tdqchsJpSVmJ
95hAzjaDwJnNPf8L5xniX1ldODeJ4d5CnUFPCpX61fh/df0cFL/Yr1dVB3B24qZz
5uzk0+uAL8+A1/mfyUlkW7nAJOh7+Z0WSIvbhEBfWdhlbi5+vgYZTS/qaVyKXFya
NWdqQm2mNcsvKOhSVj9AqnLSdZLswmO9VUj6bm7RAPhP92F+qJhBZ4EGTMGtsv3/
6SttiAcrAxS9LHSD86qE5QRFYTWlJV/KF2EypIrQo6qZUD1oqDnOHK7+DB/maKYR
arsVZcdWk0Ir70hc1jHXTvW2XQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org