Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/tZxs1gjsklaOp4NOCYtzb3W7ci4.roa
File: tZxs1gjsklaOp4NOCYtzb3W7ci4.roa (raw, json)
Hash identifier: gJUDiT5SWMdbixhe73bl3aD6DN0swsBwQTcCB0BJN6Q=
Subject key identifier: B5:9C:6C:D6:08:EC:92:56:8E:A7:83:4E:09:8B:73:6F:75:BB:72:2E
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 018221A1B9CDEE89AE30FBCA307AF4975FF2
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/tZxs1gjsklaOp4NOCYtzb3W7ci4.roa
Signing time: Thu 21 Jul 2022 16:40:23 +0000
ROA not before: Thu 21 Jul 2022 16:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34927
IP address blocks: 185.44.82.0/24 maxlen: 24
185.44.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:a1:b9:cd:ee:89:ae:30:fb:ca:30:7a:f4:97:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jul 21 16:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b59c6cd608ec92568ea7834e098b736f75bb722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:f3:88:1f:4e:d4:c2:29:00:e2:eb:47:39:
47:e4:05:5c:33:a8:5a:d1:50:d8:c1:aa:03:e2:6a:
2e:bc:40:38:93:2f:d9:7f:2f:a4:2f:e2:0b:f1:e7:
2e:56:3d:9b:d8:e7:56:a2:d9:77:27:87:30:86:eb:
b3:4e:bf:47:16:c4:7d:b6:c0:51:61:31:ec:4c:69:
a5:a5:11:ff:27:cc:a9:75:9b:16:db:a4:5f:f4:12:
84:9c:6a:93:ae:c3:d0:4d:45:9e:8e:16:7e:11:ea:
f2:34:5d:38:9d:fb:d1:7a:9b:eb:c5:37:68:aa:39:
c8:f1:a8:9c:58:5d:67:f1:aa:4d:09:d4:02:2d:98:
00:d7:b6:bd:ce:6e:05:46:16:2d:4a:f1:57:bc:fd:
b2:72:1c:a3:b8:bd:12:00:1b:0c:70:92:e9:d5:69:
53:3a:9b:ab:16:ae:fa:4a:da:92:22:2b:57:44:3b:
fb:2c:cd:cf:3f:ba:d0:3f:c0:56:10:f5:d4:10:33:
33:1e:ed:d2:8b:ac:2c:a9:45:bd:cf:8b:25:55:44:
74:57:6b:3b:07:44:70:5a:43:10:5f:2c:3b:9d:73:
e6:09:43:6d:d6:ad:a6:71:64:fc:85:95:2d:0b:95:
06:cc:9f:1c:c1:0f:02:c9:6c:d4:db:38:04:51:63:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:6C:D6:08:EC:92:56:8E:A7:83:4E:09:8B:73:6F:75:BB:72:2E
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/tZxs1gjsklaOp4NOCYtzb3W7ci4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.82.0/23
Signature Algorithm: sha256WithRSAEncryption
72:18:29:a3:19:6e:b6:20:7f:b8:7d:06:c1:b5:b6:32:ec:de:
f0:be:39:50:16:c7:fe:56:9a:32:ec:0f:8f:3d:d3:31:7b:06:
e2:f4:e4:4a:43:aa:39:a3:59:5a:cd:96:e6:4d:b1:e3:cc:3b:
15:7b:f3:95:91:52:c1:c6:ab:79:a9:3b:98:aa:36:9e:e6:e7:
03:11:19:aa:19:9a:37:31:84:14:7a:27:b7:14:cd:59:2d:0c:
8c:92:0e:8f:af:9c:d8:3c:df:98:b6:d5:ef:4e:60:a0:1f:de:
a9:42:28:f8:df:e9:13:63:67:3a:ca:8c:66:1b:60:f4:be:39:
b4:63:fa:b2:3d:14:b0:8b:2b:07:ee:2f:18:66:d9:46:95:16:
27:a3:69:ed:2a:81:03:72:72:60:bf:0a:8e:eb:ed:b2:5f:fe:
31:e1:6b:6e:30:87:ab:35:73:31:28:73:b9:75:a2:d1:48:4f:
b4:3c:ec:49:54:c2:9e:f4:6e:c8:67:2c:76:ae:7f:9e:57:a9:
1b:5f:08:b8:fe:4b:62:e0:18:7c:5e:65:4a:9c:30:d6:1a:b1:
86:d2:bb:62:fb:7b:1f:3f:0d:62:71:f6:04:f2:db:3f:e4:78:
e7:1d:79:9a:0c:6c:60:65:46:41:48:96:7e:9b:97:d3:db:72:
e0:0b:34:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIhobnN7omuMPvKMHr0l1/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjIwNzIxMTY0MDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTljNmNkNjA4ZWM5MjU2OGVhNzgzNGUwOThiNzM2Zjc1YmI3MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+vziB9O1MIpAOLrRzlH5AVcM6ha
0VDYwaoD4mouvEA4ky/Zfy+kL+IL8ecuVj2b2OdWotl3J4cwhuuzTr9HFsR9tsBR
YTHsTGmlpRH/J8ypdZsW26Rf9BKEnGqTrsPQTUWejhZ+EeryNF04nfvRepvrxTdo
qjnI8aicWF1n8apNCdQCLZgA17a9zm4FRhYtSvFXvP2ychyjuL0SABsMcJLp1WlT
OpurFq76StqSIitXRDv7LM3PP7rQP8BWEPXUEDMzHu3Si6wsqUW9z4slVUR0V2s7
B0RwWkMQXyw7nXPmCUNt1q2mcWT8hZUtC5UGzJ8cwQ8CyWzU2zgEUWNIfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLWcbNYI7JJWjqeDTgmLc291u3IuMB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvdFp4czFnanNrbGFPcDROT0NZdHpiM1c3Y2k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSxSMA0G
CSqGSIb3DQEBCwUAA4IBAQByGCmjGW62IH+4fQbBtbYy7N7wvjlQFsf+Vpoy7A+P
PdMxewbi9ORKQ6o5o1lazZbmTbHjzDsVe/OVkVLBxqt5qTuYqjae5ucDERmqGZo3
MYQUeie3FM1ZLQyMkg6Pr5zYPN+YttXvTmCgH96pQij43+kTY2c6yoxmG2D0vjm0
Y/qyPRSwiysH7i8YZtlGlRYno2ntKoEDcnJgvwqO6+2yX/4x4WtuMIerNXMxKHO5
daLRSE+0POxJVMKe9G7IZyx2rn+eV6kbXwi4/kti4Bh8XmVKnDDWGrGG0rti+3sf
Pw1icfYE8ts/5HjnHXmaDGxgZUZBSJZ+m5fT23LgCzTt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:54 2024 by rpki-client on console-fra.rpki-client.org