Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/pOEonS3WH8i-WJqcAPxGdo8TAvQ.roa
File: pOEonS3WH8i-WJqcAPxGdo8TAvQ.roa (raw, json)
Hash identifier: rMYVqPDUQ9dzTsb86fUBGYt4W2GB29ur17d72MzP4hg=
Subject key identifier: A4:E1:28:9D:2D:D6:1F:C8:BE:58:9A:9C:00:FC:46:76:8F:13:02:F4
Certificate issuer: /CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Certificate serial: C94366
Authority key identifier: 45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/pOEonS3WH8i-WJqcAPxGdo8TAvQ.roa
Signing time: Sat 01 Jan 2022 07:57:46 +0000
ROA not before: Sat 01 Jan 2022 07:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.253.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13189990 (0xc94366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Validity
Not Before: Jan 1 07:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4e1289d2dd61fc8be589a9c00fc46768f1302f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:56:ae:e9:3e:79:db:ee:39:c8:6f:e8:2f:
d7:0d:e1:64:04:1a:c0:35:b6:27:7b:2e:e2:4d:40:
97:c5:5d:8a:b0:07:40:b2:90:a1:f5:e3:30:66:18:
4b:cb:99:d2:05:a5:99:be:05:2f:cb:a5:b9:ee:d5:
78:30:72:71:c2:b3:51:75:b6:6f:12:41:57:84:bf:
91:7e:e6:7d:06:59:3f:cb:8b:a0:88:ad:f0:d0:9d:
f7:c1:3e:8f:7a:d0:b9:29:3b:40:2b:55:00:c6:78:
10:e7:65:46:0f:51:04:02:ac:d4:1c:60:39:f4:3d:
ab:32:f3:99:66:51:7a:69:bc:c4:2b:05:97:75:9c:
2d:ac:c8:33:3e:82:81:ca:49:b0:f9:69:bf:c9:2f:
54:54:e0:d7:65:64:45:17:33:25:ee:cd:8d:5a:17:
5d:b6:a6:cb:79:97:54:b4:f2:84:17:68:68:4f:15:
66:ed:de:e4:3a:75:8b:96:7f:f5:ff:96:2e:29:94:
c7:85:60:57:31:2d:df:c0:db:05:bc:c1:4a:94:d9:
5b:69:5f:7a:b4:0b:2e:6d:8c:0f:a4:83:51:d2:c4:
f0:bc:cc:40:be:23:68:40:3a:b5:86:ff:66:8b:7f:
9c:e0:4d:43:fc:8e:9c:33:b4:8e:2b:1c:19:7f:30:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:28:9D:2D:D6:1F:C8:BE:58:9A:9C:00:FC:46:76:8F:13:02:F4
X509v3 Authority Key Identifier:
keyid:45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/pOEonS3WH8i-WJqcAPxGdo8TAvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:48:9a:21:dd:2b:a8:3a:c3:09:24:bd:4e:6a:fa:99:50:bf:
a7:a8:8f:d9:2c:04:a0:87:5d:33:2a:d6:0b:e3:f9:30:aa:17:
12:8b:6d:12:d0:89:2a:af:37:ea:c9:4d:18:bb:a7:66:b4:6b:
c8:42:89:bd:a1:5c:f4:18:cc:17:5d:16:2f:d6:e9:78:d9:62:
54:e3:31:10:1f:a4:8d:f6:a9:64:4d:c8:13:53:f7:e5:70:66:
09:2a:c3:9f:ea:52:d1:c6:ea:1a:ff:0e:9a:9e:43:78:19:fe:
30:c2:9f:67:ed:43:3f:87:3a:dc:c4:99:38:40:e4:72:3a:2f:
41:a5:93:14:a2:50:2d:14:08:22:91:36:91:6b:ca:75:2a:84:
53:96:e9:78:39:97:f3:45:4f:85:89:8c:ef:d0:35:60:85:09:
61:42:55:b8:1b:0e:15:1e:0a:75:ed:39:18:c2:63:e1:df:b5:
a6:83:38:f7:3f:7f:7a:11:91:35:ec:30:ac:96:c4:3b:f2:15:
06:7f:47:b6:e4:8b:24:3e:fe:ee:79:39:c1:54:f6:d9:19:3c:
46:fb:c5:ee:78:1c:bf:93:c7:76:a6:33:67:b1:ba:5d:0e:b6:
90:da:e1:aa:0c:aa:4a:8d:88:e6:27:a0:19:5c:7f:73:05:1b:
74:ea:aa:13
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMlDZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NTRiZWY3M2M1YTQ3Njg3YjJiNWM1Mjc2YjBkYmMwNzBiYjljYjUwMB4XDTIyMDEw
MTA3NTc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTRlMTI4OWQyZGQ2
MWZjOGJlNTg5YTljMDBmYzQ2NzY4ZjEzMDJmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJffVq7pPnnb7jnIb+gv1w3hZAQawDW2J3su4k1Al8VdirAH
QLKQofXjMGYYS8uZ0gWlmb4FL8ulue7VeDByccKzUXW2bxJBV4S/kX7mfQZZP8uL
oIit8NCd98E+j3rQuSk7QCtVAMZ4EOdlRg9RBAKs1BxgOfQ9qzLzmWZRemm8xCsF
l3WcLazIMz6CgcpJsPlpv8kvVFTg12VkRRczJe7NjVoXXbamy3mXVLTyhBdoaE8V
Zu3e5Dp1i5Z/9f+WLimUx4VgVzEt38DbBbzBSpTZW2lferQLLm2MD6SDUdLE8LzM
QL4jaEA6tYb/Zot/nOBNQ/yOnDO0jiscGX8w9b0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSk4SidLdYfyL5YmpwA/EZ2jxMC9DAfBgNVHSMEGDAWgBRFS+9zxaR2h7K1
xSdrDbwHC7nLUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JVdnZjOFdrZG9leXRjVW5hdzI4Qnd1NXkxQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvYzQyNWZkLTk4MGEtNDY0Ni1hMTYyLTljMjkxNGVmODc1My8x
L3BPRW9uUzNXSDhpLVdKcWNBUHhHZG84VEF2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQv
YzQyNWZkLTk4MGEtNDY0Ni1hMTYyLTljMjkxNGVmODc1My8xL1JVdnZjOFdrZG9l
eXRjVW5hdzI4Qnd1NXkxQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn9AzANBgkqhkiG9w0BAQsFAAOC
AQEAKkiaId0rqDrDCSS9Tmr6mVC/p6iP2SwEoIddMyrWC+P5MKoXEottEtCJKq83
6slNGLunZrRryEKJvaFc9BjMF10WL9bpeNliVOMxEB+kjfapZE3IE1P35XBmCSrD
n+pS0cbqGv8Omp5DeBn+MMKfZ+1DP4c63MSZOEDkcjovQaWTFKJQLRQIIpE2kWvK
dSqEU5bpeDmX80VPhYmM79A1YIUJYUJVuBsOFR4Kde05GMJj4d+1poM49z9/ehGR
NewwrJbEO/IVBn9HtuSLJD7+7nk5wVT22Rk8RvvF7ngcv5PHdqYzZ7G6XQ62kNrh
qgyqSo2I5iegGVx/cwUbdOqqEw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:56 2023 by rpki-client on console-fra.rpki-client.org