Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/_p74WR6sLbxjezKVypZiwat-eHk.roa
File: _p74WR6sLbxjezKVypZiwat-eHk.roa (raw, json)
Hash identifier: rnd+JclXaWUUQy9vQAt3193W6lQMo0eDfLunhpjVu/c=
Subject key identifier: FE:9E:F8:59:1E:AC:2D:BC:63:7B:32:95:CA:96:62:C1:AB:7E:78:79
Certificate issuer: /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial: 018571275C42A74075B344431F3032662BEA
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/_p74WR6sLbxjezKVypZiwat-eHk.roa
Signing time: Mon 02 Jan 2023 06:24:42 +0000
ROA not before: Mon 02 Jan 2023 06:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205743
IP address blocks: 185.208.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:5c:42:a7:40:75:b3:44:43:1f:30:32:66:2b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
Validity
Not Before: Jan 2 06:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe9ef8591eac2dbc637b3295ca9662c1ab7e7879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:ec:69:58:6d:19:5a:f5:bb:73:72:53:20:
88:8d:41:f3:2a:f4:7f:fd:17:dd:04:aa:5f:c1:01:
e2:af:6c:4d:0a:c7:d0:42:09:cb:cc:8e:f0:b4:fb:
9c:eb:d9:68:1e:42:6b:c9:f9:49:e6:b3:f9:e1:dd:
0c:29:b8:06:26:45:df:cc:93:60:10:55:97:17:45:
1e:ca:4b:51:34:30:82:fe:03:8e:2a:a6:42:2f:2b:
24:06:77:78:c9:2a:4f:50:bb:17:4f:ea:0e:8b:6a:
36:e2:bc:6e:73:f6:8e:55:60:0e:1b:f3:69:44:df:
57:98:5a:a9:94:3c:cf:f4:12:fb:49:bf:7d:de:77:
05:3a:b5:a2:d8:27:04:e3:cb:17:58:f4:61:81:05:
ee:df:d1:4a:d5:15:dc:ee:ea:36:13:5c:8c:43:a5:
31:f5:07:0a:e7:02:16:0f:b9:40:39:ab:41:32:3b:
e8:92:36:4a:03:b2:16:14:35:fd:f7:fa:1a:f2:f3:
35:5c:1a:4c:0f:b7:19:07:eb:e8:cc:70:cf:00:9f:
f8:35:39:d0:9e:e0:a3:6c:8c:e0:af:05:1c:be:4c:
af:12:88:c5:8f:e9:e6:22:0a:2b:cc:1f:2b:14:fc:
d5:dc:b9:92:0f:a3:b6:06:bb:59:59:08:a9:dc:56:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:F8:59:1E:AC:2D:BC:63:7B:32:95:CA:96:62:C1:AB:7E:78:79
X509v3 Authority Key Identifier:
keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/_p74WR6sLbxjezKVypZiwat-eHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.4.0/22
Signature Algorithm: sha256WithRSAEncryption
30:8f:fa:19:6e:6a:74:78:90:f5:88:2f:d7:f0:7b:95:94:59:
33:c5:03:30:98:dd:42:c7:70:76:b6:9d:5b:b4:b2:4b:38:22:
ba:81:36:d5:d3:50:a0:a8:d5:ff:9a:60:23:c4:22:23:ff:55:
87:4b:60:93:df:86:79:b2:61:0d:d6:7e:5a:fd:98:9d:cb:67:
d6:ee:7b:a4:65:ea:09:3c:91:9e:a5:4b:8f:c2:d1:7c:61:7d:
5a:8f:89:24:a2:d0:cf:b0:42:e3:af:a6:6c:5e:b0:49:b7:24:
2a:ab:3d:02:a1:38:71:dd:ae:a8:00:b4:e1:38:1c:8f:4e:50:
fb:bd:57:6e:d2:d2:75:30:dd:d0:7b:d3:34:3b:d0:3c:ba:1d:
e1:7c:5f:3e:64:46:d9:a1:75:6f:9f:b9:bd:fb:9d:df:a5:ed:
75:cb:53:a0:12:59:17:72:93:f3:28:b6:de:9f:0d:1f:32:ad:
9a:0b:0e:bb:30:5e:a6:c5:f1:14:7d:04:34:71:e9:93:7a:42:
6e:48:e8:66:9f:5a:b6:a3:82:36:c3:30:c3:8f:87:52:dd:59:
5a:2a:67:5f:40:ee:d9:44:52:5b:9e:2a:26:77:b2:dc:ad:85:
5c:7d:5c:90:b4:37:66:30:19:be:4f:42:e7:70:d4:08:c6:c8:
a7:4d:7b:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ1xCp0B1s0RDHzAyZivqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NGY2YjU5YjQzOWQxNzY5OTMyMDU5ZDE5ODQyOGNiODA2
YWU3NTMwHhcNMjMwMTAyMDYyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTllZjg1OTFlYWMyZGJjNjM3YjMyOTVjYTk2NjJjMWFiN2U3ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaTsaVhtGVr1u3NyUyCIjUHzKvR/
/RfdBKpfwQHir2xNCsfQQgnLzI7wtPuc69loHkJryflJ5rP54d0MKbgGJkXfzJNg
EFWXF0UeyktRNDCC/gOOKqZCLyskBnd4ySpPULsXT+oOi2o24rxuc/aOVWAOG/Np
RN9XmFqplDzP9BL7Sb993ncFOrWi2CcE48sXWPRhgQXu39FK1RXc7uo2E1yMQ6Ux
9QcK5wIWD7lAOatBMjvokjZKA7IWFDX99/oa8vM1XBpMD7cZB+vozHDPAJ/4NTnQ
nuCjbIzgrwUcvkyvEojFj+nmIgorzB8rFPzV3LmSD6O2BrtZWQip3FYwKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6e+FkerC28Y3sylcqWYsGrfnh5MB8GA1UdIwQY
MBaAFHlPa1m0OdF2mTIFnRmEKMuAaudTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVU5cldiUTUwWGFaTWdXZEdZUW95NEJxNTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xN2QwYWQtODAxYy00ODE0LWI4OTEt
ZTBhNjUyMDA0ODc4LzEvX3A3NFdSNnNMYnhqZXpLVnlwWml3YXQtZUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xN2QwYWQtODAxYy00ODE0LWI4OTEtZTBhNjUyMDA0ODc4
LzEvZVU5cldiUTUwWGFaTWdXZEdZUW95NEJxNTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudAEMA0G
CSqGSIb3DQEBCwUAA4IBAQAwj/oZbmp0eJD1iC/X8HuVlFkzxQMwmN1Cx3B2tp1b
tLJLOCK6gTbV01CgqNX/mmAjxCIj/1WHS2CT34Z5smEN1n5a/Zidy2fW7nukZeoJ
PJGepUuPwtF8YX1aj4kkotDPsELjr6ZsXrBJtyQqqz0CoThx3a6oALThOByPTlD7
vVdu0tJ1MN3Qe9M0O9A8uh3hfF8+ZEbZoXVvn7m9+53fpe11y1OgElkXcpPzKLbe
nw0fMq2aCw67MF6mxfEUfQQ0cemTekJuSOhmn1q2o4I2wzDDj4dS3VlaKmdfQO7Z
RFJbniomd7LcrYVcfVyQtDdmMBm+T0LncNQIxsinTXu+
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:21 2025 by rpki-client