Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/Q0fN4CyIlogwNzA-hKbGgF_aW_I.roa
File: Q0fN4CyIlogwNzA-hKbGgF_aW_I.roa (raw, json)
Hash identifier: FS3rJq/fFVuJCrE3/wCYB+fogrWFI3FmqIWFzL6O6Ew=
Subject key identifier: 43:47:CD:E0:2C:88:96:88:30:37:30:3E:84:A6:C6:80:5F:DA:5B:F2
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 0183187A7A62EF541C8BF914F410591FD9D2
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/Q0fN4CyIlogwNzA-hKbGgF_aW_I.roa
Signing time: Wed 07 Sep 2022 15:03:43 +0000
ROA not before: Wed 07 Sep 2022 15:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34927
IP address blocks: 185.44.83.0/24 maxlen: 24
2a12:f340::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:7a:7a:62:ef:54:1c:8b:f9:14:f4:10:59:1f:d9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Sep 7 15:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4347cde02c8896883037303e84a6c6805fda5bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:a8:81:15:d6:b2:2b:41:2c:3a:19:10:2e:
e4:cb:04:5b:b7:dc:5c:09:a6:e3:2b:97:04:6c:37:
fb:ee:ec:98:c0:10:d4:89:f8:4f:9b:6c:e0:b2:00:
db:1c:ec:ef:2b:1f:fd:47:70:15:86:a8:8e:57:2b:
7b:a6:43:c2:2b:84:75:76:1a:27:a9:80:99:c2:93:
b4:58:2a:38:82:f4:1c:a4:db:e1:54:3e:43:76:d4:
f0:f3:c9:97:60:04:d3:b0:3b:6f:70:59:23:dc:51:
29:04:99:90:62:07:87:e6:d0:ce:92:16:ee:82:6c:
4b:e5:bd:bf:b1:aa:6e:e4:3f:a1:b1:e6:6f:5c:05:
24:d5:5b:5c:94:13:a0:6c:2f:18:b9:34:a6:ec:b0:
bf:44:41:d7:39:28:f1:bb:e1:e5:30:76:46:05:6f:
31:97:2e:44:65:a2:77:b3:48:06:fe:d5:00:66:63:
a3:da:aa:1f:2a:01:b0:5c:7c:ef:83:83:a4:59:67:
46:4b:45:b8:bb:5d:06:12:0c:29:d6:23:5d:1e:21:
e8:38:b8:01:d4:ba:32:52:4f:32:1b:80:7e:a8:da:
6b:34:79:82:0b:b1:e0:96:01:52:a9:6e:68:53:fd:
fc:2f:03:d5:b0:db:df:b6:e7:54:d2:78:29:33:14:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:CD:E0:2C:88:96:88:30:37:30:3E:84:A6:C6:80:5F:DA:5B:F2
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/Q0fN4CyIlogwNzA-hKbGgF_aW_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.83.0/24
IPv6:
2a12:f340::/48
Signature Algorithm: sha256WithRSAEncryption
b7:a5:f0:25:87:17:60:61:27:d2:4a:15:42:d1:f6:d6:9d:a7:
95:f5:a6:50:69:ec:fd:e0:01:34:88:12:25:08:94:5d:1d:69:
90:3f:bf:b6:14:de:ce:6a:9f:97:11:1c:a3:3a:48:fd:d3:3b:
80:f8:82:45:9c:aa:06:09:76:a2:71:c4:fe:bd:f8:5d:8e:db:
f7:09:91:b1:f2:6a:a7:7e:12:d2:79:a3:c4:b8:4c:ef:2a:0d:
05:d8:a0:df:72:e5:e9:33:39:06:46:96:7b:c7:92:9a:fe:87:
80:b2:81:f8:f7:9c:5c:1b:73:12:7b:5b:38:bb:06:c9:47:8b:
3e:02:6d:37:bd:c2:d9:62:7d:23:87:e6:4b:5c:5d:df:45:02:
0d:ab:d8:5b:dd:66:ee:58:90:1e:e4:54:26:17:cf:65:36:53:
8e:4e:af:b0:af:96:6d:b9:53:de:fa:81:e1:5d:19:f9:de:90:
a7:f3:68:79:ca:ce:8e:47:0f:9e:ec:67:ac:ff:33:d6:88:27:
0f:14:67:31:64:3e:4d:03:d9:7b:4d:cf:fe:c4:c5:47:a4:9a:
64:e6:09:13:75:3f:ab:ed:1c:98:19:6c:e3:28:ff:66:45:4b:
0e:e2:80:34:ba:c8:1e:7f:13:f5:f3:fa:77:21:db:0d:c4:47:
3c:72:47:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMYenpi71Qci/kU9BBZH9nSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjIwOTA3MTUwMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzQ3Y2RlMDJjODg5Njg4MzAzNzMwM2U4NGE2YzY4MDVmZGE1YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTaogRXWsitBLDoZEC7kywRbt9xc
CabjK5cEbDf77uyYwBDUifhPm2zgsgDbHOzvKx/9R3AVhqiOVyt7pkPCK4R1dhon
qYCZwpO0WCo4gvQcpNvhVD5DdtTw88mXYATTsDtvcFkj3FEpBJmQYgeH5tDOkhbu
gmxL5b2/sapu5D+hseZvXAUk1VtclBOgbC8YuTSm7LC/REHXOSjxu+HlMHZGBW8x
ly5EZaJ3s0gG/tUAZmOj2qofKgGwXHzvg4OkWWdGS0W4u10GEgwp1iNdHiHoOLgB
1LoyUk8yG4B+qNprNHmCC7HglgFSqW5oU/38LwPVsNvftudU0ngpMxThzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFENHzeAsiJaIMDcwPoSmxoBf2lvyMB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvUTBmTjRDeUlsb2d3TnpBLWhLYkdnRl9hV19JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuSxTMA8E
AgACMAkDBwAqEvNAAAAwDQYJKoZIhvcNAQELBQADggEBALel8CWHF2BhJ9JKFULR
9tadp5X1plBp7P3gATSIEiUIlF0daZA/v7YU3s5qn5cRHKM6SP3TO4D4gkWcqgYJ
dqJxxP69+F2O2/cJkbHyaqd+EtJ5o8S4TO8qDQXYoN9y5ekzOQZGlnvHkpr+h4Cy
gfj3nFwbcxJ7Wzi7BslHiz4CbTe9wtlifSOH5ktcXd9FAg2r2FvdZu5YkB7kVCYX
z2U2U45Or7Cvlm25U976geFdGfnekKfzaHnKzo5HD57sZ6z/M9aIJw8UZzFkPk0D
2XtNz/7ExUekmmTmCRN1P6vtHJgZbOMo/2ZFSw7igDS6yB5/E/Xz+nch2w3ERzxy
R8A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:35 2024 by rpki-client on console-ams.rpki-client.org