Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ar91t4DOMVOkRpWCqpwGPpWstVk.roa
File: ar91t4DOMVOkRpWCqpwGPpWstVk.roa (raw, json)
Hash identifier: VhneU8sYDZK6utH//GBp7UQPNMCU6ocyhwg1y6/E2UQ=
Subject key identifier: 6A:BF:75:B7:80:CE:31:53:A4:46:95:82:AA:9C:06:3E:95:AC:B5:59
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 0405B671
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ar91t4DOMVOkRpWCqpwGPpWstVk.roa
Signing time: Wed 04 May 2022 01:20:14 +0000
ROA not before: Wed 04 May 2022 01:20:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30762
IP address blocks: 185.236.124.0/24 maxlen: 24
185.236.125.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67483249 (0x405b671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: May 4 01:20:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6abf75b780ce3153a4469582aa9c063e95acb559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:ed:ed:09:38:b3:fb:14:22:60:99:c4:6e:
cf:e2:8a:ab:da:fd:af:4e:47:8c:9d:59:8b:3a:a8:
01:85:44:d6:fe:0f:77:1c:69:a0:b1:43:2e:df:96:
1e:64:40:a5:c0:f3:c3:47:09:11:5b:89:2e:63:6d:
01:78:38:5e:18:d6:f0:6c:f9:d0:59:4e:f0:11:94:
78:0c:f3:8b:2d:f5:a9:dc:8a:3a:12:09:32:66:93:
8e:7d:b5:b5:59:17:48:a6:91:b2:87:7d:f3:5e:f9:
f6:fd:b1:f7:e0:7c:98:ec:60:a7:e3:b5:f9:3c:44:
bc:e8:6a:dc:3f:29:bb:22:e8:d5:c2:74:7c:29:19:
b0:47:19:db:1a:92:da:36:2c:4b:75:e2:20:dd:5d:
5e:1c:22:e6:db:f3:5b:69:29:b4:18:d7:2c:15:ab:
15:40:88:8e:2d:01:88:85:69:15:47:21:eb:59:b0:
93:be:ca:0f:9c:b2:cd:00:2a:68:84:5b:5d:93:80:
34:73:13:32:d3:3e:99:d9:8e:17:ab:0e:95:db:e1:
7c:19:6c:2f:07:10:d0:f1:b7:f7:12:21:33:3a:0d:
c0:a6:be:b4:51:64:3c:2b:be:50:c2:b4:94:3d:83:
be:97:ea:67:1c:39:03:af:ea:64:ea:f4:47:4e:d5:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:75:B7:80:CE:31:53:A4:46:95:82:AA:9C:06:3E:95:AC:B5:59
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ar91t4DOMVOkRpWCqpwGPpWstVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:75:fa:05:2b:9e:7c:34:4a:55:9e:5d:75:d4:ab:59:a4:9b:
61:cf:06:d3:46:b3:0b:a3:ae:e0:74:05:92:be:69:70:9e:64:
0e:94:cc:22:81:02:58:f5:d3:8d:34:3c:aa:8a:9d:5b:b5:8b:
1b:9b:d9:85:ad:5f:de:6b:ac:1a:83:4b:51:a0:b0:bc:82:c1:
10:d3:97:5f:b1:d5:50:57:0c:69:4d:09:fe:e9:ec:f6:af:02:
39:85:1e:7c:dc:df:05:22:9a:dd:f8:f5:57:13:c3:eb:c5:39:
2a:04:65:e1:6b:5e:bd:40:1f:29:d9:0a:d5:24:b4:b2:65:e1:
c3:e1:aa:75:3c:d6:f3:4f:b5:90:1d:07:6a:b1:5a:fc:e8:1f:
9d:f6:4c:3e:31:2f:c6:cb:b0:a8:2d:37:55:12:84:3a:d1:bf:
e7:43:e1:a2:6b:d8:cf:bc:b6:eb:61:a0:63:30:3d:41:fa:e0:
15:bc:33:af:c7:04:89:5c:39:be:b8:58:98:98:d7:4b:89:4d:
f8:36:05:b3:5a:9d:ed:7a:c9:48:f7:f9:02:27:e0:5e:e6:fc:
ab:b6:ef:13:b3:a4:89:ed:56:a3:5c:49:60:45:4c:f9:e9:fb:
4d:56:f6:4a:64:8c:3d:9a:9f:30:50:ea:c9:02:83:3b:e9:63:
f9:c1:bb:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBAW2cTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTQ3OGM1YWEyMjZhMjc4ZThiMTkwNmYzNzFjNjBjZmM3ZDg3ZThlMB4XDTIyMDUw
NDAxMjAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmFiZjc1Yjc4MGNl
MzE1M2E0NDY5NTgyYWE5YzA2M2U5NWFjYjU1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvN7e0JOLP7FCJgmcRuz+KKq9r9r05HjJ1ZizqoAYVE1v4P
dxxpoLFDLt+WHmRApcDzw0cJEVuJLmNtAXg4XhjW8Gz50FlO8BGUeAzziy31qdyK
OhIJMmaTjn21tVkXSKaRsod981759v2x9+B8mOxgp+O1+TxEvOhq3D8puyLo1cJ0
fCkZsEcZ2xqS2jYsS3XiIN1dXhwi5tvzW2kptBjXLBWrFUCIji0BiIVpFUch61mw
k77KD5yyzQAqaIRbXZOANHMTMtM+mdmOF6sOldvhfBlsLwcQ0PG39xIhMzoNwKa+
tFFkPCu+UMK0lD2DvpfqZxw5A6/qZOr0R07VUg8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRqv3W3gM4xU6RGlYKqnAY+lay1WTAfBgNVHSMEGDAWgBR6R4xaoiaieOix
kG83HGDPx9h+jjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VrZU1XcUltb25qb3NaQnZOeHhnejhmWWZvNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvNTFhNTIwLWUwOGQtNDNiMy1hNmIwLWQ3NmVjOWNjMGQyOC8x
L2FyOTF0NERPTVZPa1JwV0NxcHdHUHBXc3RWay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
NTFhNTIwLWUwOGQtNDNiMy1hNmIwLWQ3NmVjOWNjMGQyOC8xL2VrZU1XcUltb25q
b3NaQnZOeHhnejhmWWZvNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnsfDANBgkqhkiG9w0BAQsFAAOC
AQEAs3X6BSuefDRKVZ5dddSrWaSbYc8G00azC6Ou4HQFkr5pcJ5kDpTMIoECWPXT
jTQ8qoqdW7WLG5vZha1f3musGoNLUaCwvILBENOXX7HVUFcMaU0J/uns9q8COYUe
fNzfBSKa3fj1VxPD68U5KgRl4WtevUAfKdkK1SS0smXhw+GqdTzW80+1kB0HarFa
/OgfnfZMPjEvxsuwqC03VRKEOtG/50PhomvYz7y262GgYzA9QfrgFbwzr8cEiVw5
vrhYmJjXS4lN+DYFs1qd7XrJSPf5AifgXub8q7bvE7Okie1Wo1xJYEVM+en7TVb2
SmSMPZqfMFDqyQKDO+lj+cG7LA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-ams.rpki-client.org