Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yUxEUo6O9bkDyVHOMH7rvwvCXrY.roa
File: yUxEUo6O9bkDyVHOMH7rvwvCXrY.roa (raw, json)
Hash identifier: sMCRrJgUstC+EPE/bdRNSd4GpybLEGVFOwhk9zroGaY=
Subject key identifier: C9:4C:44:52:8E:8E:F5:B9:03:C9:51:CE:30:7E:EB:BF:0B:C2:5E:B6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181CEA5ED63FCD735C0F27F775E75337771
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yUxEUo6O9bkDyVHOMH7rvwvCXrY.roa
Signing time: Tue 05 Jul 2022 13:56:29 +0000
ROA not before: Tue 05 Jul 2022 13:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.207.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:a5:ed:63:fc:d7:35:c0:f2:7f:77:5e:75:33:77:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 13:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c94c44528e8ef5b903c951ce307eebbf0bc25eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:61:98:90:b9:9c:7f:77:c9:a5:44:45:92:
31:4b:58:1c:28:5e:18:bb:07:1b:02:e6:36:cf:ac:
65:5b:2b:80:0c:52:04:53:cb:63:2b:fc:4c:82:c9:
7b:e8:ce:fa:fb:6c:a0:2b:36:6b:13:1e:4b:81:96:
82:a2:94:1c:78:c9:72:aa:ae:ec:ca:49:e1:70:1f:
e2:e5:4e:4f:09:12:b6:9b:bd:15:4a:50:f6:2f:6a:
cc:70:4e:12:88:c3:18:d9:b5:c6:a2:ec:65:a9:6e:
f6:e4:b8:d8:5d:37:4f:a7:fd:59:65:03:bd:50:46:
cd:db:bc:3d:d3:fe:3b:eb:8f:61:41:f7:38:2d:b3:
1d:58:b6:96:e3:1c:c7:b5:7e:90:9a:b8:b0:14:0d:
e3:c9:2b:99:7e:c8:df:2c:8c:79:53:5e:ff:73:59:
49:c9:06:e1:8c:57:13:8b:77:99:fe:7c:86:6f:23:
bb:9e:cb:99:f5:11:eb:30:23:82:e0:39:78:bd:2c:
9f:fc:0b:bd:eb:68:2f:91:37:c3:c0:dd:24:c7:aa:
93:90:c3:e0:43:39:bd:db:18:6a:58:59:7d:5b:56:
20:31:45:cb:9e:5f:5e:1a:22:1d:c6:65:ac:03:0c:
b2:0d:c5:c1:a9:01:11:7e:19:96:73:ec:6f:66:92:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:44:52:8E:8E:F5:B9:03:C9:51:CE:30:7E:EB:BF:0B:C2:5E:B6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yUxEUo6O9bkDyVHOMH7rvwvCXrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.12.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f6:97:7c:b9:c7:3d:24:ae:6c:67:18:00:2a:4d:91:34:03:
98:86:6f:ce:1f:a8:3c:47:e8:97:d5:dc:47:7d:ed:b0:43:3b:
4b:18:f2:f9:a3:c8:7d:6d:6e:73:2e:e8:7f:82:37:af:f1:87:
d2:93:64:71:ee:95:2f:46:8e:1c:e9:a1:6a:d4:fd:60:7a:02:
34:94:99:da:04:b5:83:98:e1:68:53:85:e6:3a:09:81:83:a6:
ab:d3:37:84:01:e1:59:45:72:9c:ee:0b:3f:a1:b7:26:d0:f4:
a6:f4:1a:5b:82:28:ea:9b:7d:49:68:35:05:31:3e:67:a5:44:
75:1e:a4:3e:25:56:87:bf:ee:84:12:10:ce:f3:72:18:d0:72:
2d:ed:a6:d7:45:0c:82:21:29:04:d1:38:31:17:d4:f7:cb:cc:
22:d8:d9:54:ee:db:82:6f:c4:64:ff:6d:b9:75:f5:cd:3b:67:
a9:1d:58:e2:62:52:61:d5:fc:30:3a:34:cb:43:b8:85:da:a0:
7f:9a:4d:59:8d:2f:ed:a3:99:55:19:15:b5:67:c7:4b:a8:3d:
ef:4d:60:88:6d:26:99:42:9b:72:05:92:60:25:9e:17:e7:7c:
51:55:6b:ea:0f:75:39:d5:63:88:81:8c:0f:98:21:86:25:05:
b5:24:c2:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHOpe1j/Nc1wPJ/d151M3dxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwNzA1MTM1NjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTRjNDQ1MjhlOGVmNWI5MDNjOTUxY2UzMDdlZWJiZjBiYzI1ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgNhmJC5nH93yaVERZIxS1gcKF4Y
uwcbAuY2z6xlWyuADFIEU8tjK/xMgsl76M76+2ygKzZrEx5LgZaCopQceMlyqq7s
yknhcB/i5U5PCRK2m70VSlD2L2rMcE4SiMMY2bXGouxlqW725LjYXTdPp/1ZZQO9
UEbN27w90/47649hQfc4LbMdWLaW4xzHtX6QmriwFA3jySuZfsjfLIx5U17/c1lJ
yQbhjFcTi3eZ/nyGbyO7nsuZ9RHrMCOC4Dl4vSyf/Au962gvkTfDwN0kx6qTkMPg
Qzm92xhqWFl9W1YgMUXLnl9eGiIdxmWsAwyyDcXBqQERfhmWc+xvZpKpPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMlMRFKOjvW5A8lRzjB+678Lwl62MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveVV4RVVvNk85YmtEeVZIT01IN3J2d3ZDWHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc8MMA0G
CSqGSIb3DQEBCwUAA4IBAQBV9pd8ucc9JK5sZxgAKk2RNAOYhm/OH6g8R+iX1dxH
fe2wQztLGPL5o8h9bW5zLuh/gjev8YfSk2Rx7pUvRo4c6aFq1P1gegI0lJnaBLWD
mOFoU4XmOgmBg6ar0zeEAeFZRXKc7gs/obcm0PSm9Bpbgijqm31JaDUFMT5npUR1
HqQ+JVaHv+6EEhDO83IY0HIt7abXRQyCISkE0TgxF9T3y8wi2NlU7tuCb8Rk/225
dfXNO2epHVjiYlJh1fwwOjTLQ7iF2qB/mk1ZjS/to5lVGRW1Z8dLqD3vTWCIbSaZ
QptyBZJgJZ4X53xRVWvqD3U51WOIgYwPmCGGJQW1JMKF
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org