Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/z293TNkc50zYIRqkO4N28adAo5w.roa
File: z293TNkc50zYIRqkO4N28adAo5w.roa (raw, json)
Hash identifier: HRgQrVbck7PDn/nYnZnVrTjV7+wQfMwmLYk26HSIuj8=
Subject key identifier: CF:6F:77:4C:D9:1C:E7:4C:D8:21:1A:A4:3B:83:76:F1:A7:40:A3:9C
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 06C5B997
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/z293TNkc50zYIRqkO4N28adAo5w.roa
Signing time: Sat 01 Jan 2022 08:02:48 +0000
ROA not before: Sat 01 Jan 2022 08:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34680
IP address blocks: 185.243.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113621399 (0x6c5b997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Jan 1 08:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf6f774cd91ce74cd8211aa43b8376f1a740a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:6a:e6:14:27:ff:c9:4a:f2:82:32:10:91:
99:d6:de:f1:69:90:ea:17:1f:8c:44:36:a3:68:11:
cc:77:57:b4:cb:03:2a:ed:2b:b7:02:48:db:30:68:
cb:82:f1:c7:c4:a8:df:43:0a:df:0f:c0:8e:93:ee:
dd:da:e5:25:38:17:db:2b:16:54:35:bc:e8:d5:96:
45:44:13:31:1f:68:d5:37:c5:7f:31:92:09:9a:aa:
07:17:0f:01:99:14:d0:f9:7a:c8:7b:85:57:12:8e:
c5:97:a5:9e:e8:eb:dd:60:46:17:17:a4:a0:3d:b2:
be:80:67:c6:b8:2d:ab:0c:11:a7:c3:cb:a2:a0:26:
0e:20:21:f0:fc:fb:00:b4:4f:d9:33:2a:a2:e0:12:
fd:90:5a:36:1e:84:d5:32:a9:24:03:53:72:26:65:
25:3b:95:4a:eb:77:0b:21:db:ed:a1:5b:53:7d:b9:
40:2d:5b:24:18:ee:81:e3:83:a2:ef:d4:ae:45:f3:
9a:68:19:ce:d3:b6:a7:93:a7:09:de:64:c4:ba:95:
d2:66:53:50:ca:47:a0:53:ca:1b:22:54:69:3b:64:
c0:8c:03:38:5c:6a:b2:19:e1:9c:34:7a:7d:31:81:
6a:58:69:67:f2:ce:da:90:b6:49:8c:52:95:b1:59:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:77:4C:D9:1C:E7:4C:D8:21:1A:A4:3B:83:76:F1:A7:40:A3:9C
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/z293TNkc50zYIRqkO4N28adAo5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.36.0/22
Signature Algorithm: sha256WithRSAEncryption
10:45:af:65:08:2d:9a:e4:6f:df:80:4b:7f:ff:70:ed:f5:01:
86:bf:3f:e4:4b:64:61:3b:59:a7:15:7e:ad:3a:40:00:a2:92:
1e:af:bb:5a:71:d7:fc:66:5d:2d:03:f8:da:76:c5:5f:54:41:
8a:d6:9c:6a:80:c1:fb:73:c3:15:b5:37:ac:7f:14:c8:eb:05:
91:e4:f6:e6:ac:28:1a:45:21:4d:d8:62:b4:b2:2f:bc:df:fe:
56:27:17:27:02:4e:71:69:82:54:02:22:e3:26:01:b5:a7:91:
76:a9:31:d2:7b:9c:f4:48:19:04:30:81:c7:66:f9:4e:cb:5b:
12:04:12:88:5c:73:b2:6a:59:9a:76:2f:17:54:31:ab:d8:6b:
ff:87:28:2d:de:74:97:69:8c:c8:fe:e4:50:6c:33:3d:84:16:
a6:af:0f:c8:a7:8b:6c:42:da:10:74:90:88:ba:51:1e:63:8c:
af:67:2c:21:02:e0:3f:ea:99:b5:a0:d3:4e:c7:9a:4f:3d:28:
52:6e:75:65:9e:e8:91:9f:f3:95:57:73:23:6f:9c:1f:44:54:
a7:33:a9:e5:48:e6:23:35:f8:1c:bd:ef:b6:8e:80:6d:8b:3b:
a1:41:e1:fc:16:26:ee:7d:43:f1:81:79:ec:f2:fd:d0:3a:c6:
9f:00:45:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBsW5lzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NTZjOWViYzdmZjg3NTlkOGExMDZmZmZhZjMzNWVhMzQ2ZmFlYTU3MB4XDTIyMDEw
MTA4MDI0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2Y2Zjc3NGNkOTFj
ZTc0Y2Q4MjExYWE0M2I4Mzc2ZjFhNzQwYTM5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANfiauYUJ//JSvKCMhCRmdbe8WmQ6hcfjEQ2o2gRzHdXtMsD
Ku0rtwJI2zBoy4Lxx8So30MK3w/AjpPu3drlJTgX2ysWVDW86NWWRUQTMR9o1TfF
fzGSCZqqBxcPAZkU0Pl6yHuFVxKOxZelnujr3WBGFxekoD2yvoBnxrgtqwwRp8PL
oqAmDiAh8Pz7ALRP2TMqouAS/ZBaNh6E1TKpJANTciZlJTuVSut3CyHb7aFbU325
QC1bJBjugeODou/UrkXzmmgZztO2p5OnCd5kxLqV0mZTUMpHoFPKGyJUaTtkwIwD
OFxqshnhnDR6fTGBalhpZ/LO2pC2SYxSlbFZfMkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTPb3dM2RznTNghGqQ7g3bxp0CjnDAfBgNVHSMEGDAWgBR1bJ68f/h1nYoQ
b/+vM16jRvrqVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RXeWV2SF80ZFoyS0VHX19yek5lbzBiNjZsYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvNWY2NTMwLTExNjYtNGI5ZC05ZGZkLWNhYWUwZWRmNjlmMS8x
L3oyOTNUTmtjNTB6WUlScWtPNE4yOGFkQW81dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
NWY2NTMwLTExNjYtNGI5ZC05ZGZkLWNhYWUwZWRmNjlmMS8xL2RXeWV2SF80ZFoy
S0VHX19yek5lbzBiNjZsYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnzJDANBgkqhkiG9w0BAQsFAAOC
AQEAEEWvZQgtmuRv34BLf/9w7fUBhr8/5EtkYTtZpxV+rTpAAKKSHq+7WnHX/GZd
LQP42nbFX1RBitacaoDB+3PDFbU3rH8UyOsFkeT25qwoGkUhTdhitLIvvN/+VicX
JwJOcWmCVAIi4yYBtaeRdqkx0nuc9EgZBDCBx2b5TstbEgQSiFxzsmpZmnYvF1Qx
q9hr/4coLd50l2mMyP7kUGwzPYQWpq8PyKeLbELaEHSQiLpRHmOMr2csIQLgP+qZ
taDTTseaTz0oUm51ZZ7okZ/zlVdzI2+cH0RUpzOp5UjmIzX4HL3vto6AbYs7oUHh
/BYm7n1D8YF57PL90DrGnwBFMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:29 2024 by rpki-client on console-ams.rpki-client.org