Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/F53Ogt8MkO415I8bSnzMYbC3lzo.roa
File: F53Ogt8MkO415I8bSnzMYbC3lzo.roa (raw, json)
Hash identifier: mQAI4eGrueBO6GRqORp65a7VYSf/kFpUZqvwjWekhOE=
Subject key identifier: 17:9D:CE:82:DF:0C:90:EE:35:E4:8F:1B:4A:7C:CC:61:B0:B7:97:3A
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 011048D8
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/F53Ogt8MkO415I8bSnzMYbC3lzo.roa
Signing time: Sat 01 Jan 2022 08:01:59 +0000
ROA not before: Sat 01 Jan 2022 08:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60849
IP address blocks: 185.40.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17844440 (0x11048d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Jan 1 08:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=179dce82df0c90ee35e48f1b4a7ccc61b0b7973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:bd:23:f3:ac:8a:92:79:9d:9d:d9:1c:db:
a2:ce:26:4d:d9:24:00:c2:46:61:02:b9:37:cc:04:
fc:64:26:f7:7a:84:90:25:5c:85:6d:56:29:6b:f8:
c1:08:95:8c:e6:b8:ec:fc:f2:39:3b:ba:36:6a:17:
dc:68:6d:3c:6f:85:3d:84:d2:3e:02:6b:04:78:fb:
68:10:8a:92:9f:4a:1f:9b:1f:57:ed:d5:bc:a8:b3:
ef:7a:51:2b:31:71:d3:7a:b3:0c:23:2f:87:6d:17:
87:91:8d:22:7e:17:7b:02:e2:0c:70:89:4b:bb:c9:
7c:73:e3:80:8a:fd:1e:52:ec:cb:ed:27:48:ef:a8:
48:f3:b5:d2:7b:83:7a:50:d0:38:e0:5c:f4:c2:d4:
c2:38:b8:cb:b3:81:93:b4:fa:33:76:e2:47:77:02:
f2:c0:33:ef:40:63:39:ba:38:6e:f1:bc:bc:91:27:
19:41:1a:3c:90:84:f1:5c:41:bc:23:10:9d:e5:b4:
09:22:02:7a:af:22:65:68:c9:f0:c8:6f:1f:67:e6:
5e:65:56:e7:2b:bf:1d:d3:e4:3a:03:5e:97:82:26:
c8:6a:98:5a:df:20:d9:88:00:ec:0d:64:e0:e0:a5:
87:eb:09:a2:32:d4:7a:f2:17:00:bb:1a:38:13:85:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9D:CE:82:DF:0C:90:EE:35:E4:8F:1B:4A:7C:CC:61:B0:B7:97:3A
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/F53Ogt8MkO415I8bSnzMYbC3lzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.19.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7e:53:a0:8b:00:5a:1d:47:68:b8:e6:bf:c8:cf:4d:15:a1:
1f:45:93:80:cc:b8:51:af:7a:a5:1a:e9:df:d2:80:32:0d:ea:
a3:29:df:8f:e3:57:1f:77:5a:53:31:7d:08:a6:21:ae:04:95:
ca:a9:b7:bb:e3:6d:76:df:a4:72:de:ae:45:7b:29:33:87:78:
d1:74:23:b8:45:7e:de:01:e4:77:15:0a:fb:a3:f2:4d:fb:18:
78:a5:c0:3b:50:de:b1:8f:b7:d4:af:ab:98:97:f6:81:4b:63:
b1:76:6f:54:2c:22:0e:55:ab:f0:a6:7a:1a:7f:7a:47:4c:64:
05:93:b8:bf:33:78:ab:b2:ad:a0:d8:0f:c3:c3:0e:6b:c5:fd:
73:f8:c5:a1:be:b1:96:8b:61:de:c3:63:6a:98:bb:70:b4:bd:
eb:2c:99:9c:cb:d6:f1:88:11:c5:d1:00:78:76:2a:0e:87:e0:
73:b1:64:fb:a3:1b:69:ec:3b:06:eb:96:3a:85:f2:ac:34:0a:
8f:6b:a1:01:65:cb:89:29:8c:2c:b5:46:70:65:1f:73:01:7f:
e9:f2:c8:69:c5:bf:5e:2d:d9:66:b3:4c:cb:f4:d0:84:f2:38:
ac:54:47:7d:a2:16:f2:11:60:7d:90:ac:5e:be:43:3d:8b:d0:
55:71:b8:cf
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARBI2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZWE1NTQwOThjN2E4OGFhMzQyNjRiOTJkOGJmMjI1N2VjMGJjZGE0MB4XDTIyMDEw
MTA4MDE1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc5ZGNlODJkZjBj
OTBlZTM1ZTQ4ZjFiNGE3Y2NjNjFiMGI3OTczYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9AvSPzrIqSeZ2d2Rzbos4mTdkkAMJGYQK5N8wE/GQm93qE
kCVchW1WKWv4wQiVjOa47PzyOTu6NmoX3GhtPG+FPYTSPgJrBHj7aBCKkp9KH5sf
V+3VvKiz73pRKzFx03qzDCMvh20Xh5GNIn4XewLiDHCJS7vJfHPjgIr9HlLsy+0n
SO+oSPO10nuDelDQOOBc9MLUwji4y7OBk7T6M3biR3cC8sAz70BjObo4bvG8vJEn
GUEaPJCE8VxBvCMQneW0CSICeq8iZWjJ8MhvH2fmXmVW5yu/HdPkOgNel4ImyGqY
Wt8g2YgA7A1k4OClh+sJojLUevIXALsaOBOFXlsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXnc6C3wyQ7jXkjxtKfMxhsLeXOjAfBgNVHSMEGDAWgBQ+pVQJjHqIqjQm
S5LYvyJX7AvNpDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BxVlVDWXg2aUtvMEprdVMyTDhpVi13THphUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvNDc2N2NlLTQ0NDgtNDM2Yi1hOTEwLTY2ZGU5ODY1ZGJhYy8x
L0Y1M09ndDhNa080MTVJOGJTbnpNWWJDM2x6by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
NDc2N2NlLTQ0NDgtNDM2Yi1hOTEwLTY2ZGU5ODY1ZGJhYy8xL1BxVlVDWXg2aUtv
MEprdVMyTDhpVi13THphUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkoEzANBgkqhkiG9w0BAQsFAAOC
AQEAkn5ToIsAWh1HaLjmv8jPTRWhH0WTgMy4Ua96pRrp39KAMg3qoynfj+NXH3da
UzF9CKYhrgSVyqm3u+Ntdt+kct6uRXspM4d40XQjuEV+3gHkdxUK+6PyTfsYeKXA
O1DesY+31K+rmJf2gUtjsXZvVCwiDlWr8KZ6Gn96R0xkBZO4vzN4q7KtoNgPw8MO
a8X9c/jFob6xloth3sNjapi7cLS96yyZnMvW8YgRxdEAeHYqDofgc7Fk+6Mbaew7
BuuWOoXyrDQKj2uhAWXLiSmMLLVGcGUfcwF/6fLIacW/Xi3ZZrNMy/TQhPI4rFRH
faIW8hFgfZCsXr5DPYvQVXG4zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:27 2024 by rpki-client on console-ams.rpki-client.org