Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/r343ogLPjNlWCg7CmCjDIAD6Hhg.roa
File: r343ogLPjNlWCg7CmCjDIAD6Hhg.roa (raw, json)
Hash identifier: sr9DtJUop2fFTaNVSgM3shYwafPrZgaVr8vBH+PU0lE=
Subject key identifier: AF:7E:37:A2:02:CF:8C:D9:56:0A:0E:C2:98:28:C3:20:00:FA:1E:18
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 04715A00
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/r343ogLPjNlWCg7CmCjDIAD6Hhg.roa
Signing time: Mon 20 Jun 2022 10:41:44 +0000
ROA not before: Mon 20 Jun 2022 10:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 185.236.125.0/24 maxlen: 24
185.236.124.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
212.1.222.0/24 maxlen: 24
212.1.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74537472 (0x4715a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jun 20 10:41:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af7e37a202cf8cd9560a0ec29828c32000fa1e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:37:64:02:45:f8:d3:78:d6:5d:b0:25:f6:
e9:9a:1d:0b:83:3d:2d:d4:0c:27:e6:ce:24:8a:4c:
11:d5:74:52:ab:57:8a:f1:36:6c:87:5e:42:a9:fe:
33:fe:e3:31:1d:13:68:64:a9:64:e5:b4:26:a4:03:
7d:a9:3d:41:d5:17:a6:f4:d8:fa:4f:00:83:8b:d6:
d4:83:7f:87:79:07:0b:e3:60:99:e8:5f:50:a7:44:
3c:75:5c:e5:e5:d0:77:c5:c1:18:da:e0:28:e8:f0:
7a:67:e0:49:59:3e:66:12:fd:30:d6:32:5d:c6:1a:
d2:ff:e4:d3:b3:81:ed:81:59:1f:04:47:db:fe:ab:
8e:69:7a:f6:17:82:f9:1b:22:54:58:1a:5e:50:65:
37:57:2e:5d:22:96:2e:a7:21:3b:96:93:06:47:21:
91:cd:21:19:fc:f1:f7:e6:1e:8f:21:b3:c2:0a:44:
89:c7:c3:01:e8:67:ed:05:1b:e6:65:72:c6:9e:4c:
88:38:7f:aa:a9:4d:6f:21:d3:25:51:c2:c6:7f:c4:
f9:16:a0:43:63:aa:3d:be:8c:19:b2:87:ba:4e:f4:
8a:9b:9f:f6:64:21:92:4e:29:7b:4c:6f:02:11:2e:
4a:47:b6:52:bb:c5:b1:33:53:5f:79:86:1f:18:79:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7E:37:A2:02:CF:8C:D9:56:0A:0E:C2:98:28:C3:20:00:FA:1E:18
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/r343ogLPjNlWCg7CmCjDIAD6Hhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.124.0/22
212.1.222.0/23
Signature Algorithm: sha256WithRSAEncryption
79:02:f9:b2:ea:4b:18:42:ef:4f:b3:af:9e:15:3c:df:3d:09:
5a:ee:bd:5c:22:fd:df:68:2c:a0:1e:c4:27:5f:94:57:6f:f5:
2b:74:50:f1:22:bf:44:8b:22:1f:22:7f:5c:9f:36:36:bf:a5:
41:c2:db:98:62:9d:ef:f4:79:58:38:d9:91:60:ea:3d:1c:60:
fa:e5:5e:0c:70:e5:4e:80:9a:b4:11:43:7d:09:19:87:2e:a1:
0e:0e:e1:04:db:15:aa:07:f5:03:08:24:e2:7f:44:e2:f8:b6:
86:0a:c3:26:31:94:d3:28:98:9d:15:ba:ce:a5:ce:e5:15:91:
ab:4b:7d:88:cc:1b:9d:62:7a:6e:34:74:1c:0a:6f:a1:f4:64:
a3:ed:ae:e3:f0:91:97:70:48:be:5e:98:3d:28:bd:25:e4:bb:
24:f9:91:c9:6a:59:d8:11:72:4d:fa:2c:5e:54:4e:74:9e:13:
93:fe:6f:5c:68:07:7c:27:e7:d5:7b:6f:ad:2e:41:6a:e3:36:
50:9a:90:34:c0:c4:c3:09:21:e3:ee:02:9d:93:76:5e:fb:2d:
42:aa:9e:15:a8:5f:73:1e:ba:a3:61:8d:60:b6:22:18:cd:80:
f3:48:aa:dc:56:46:10:05:99:86:51:7d:b7:55:0f:35:89:ac:
b8:ce:ab:2a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBHFaADANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTQ3OGM1YWEyMjZhMjc4ZThiMTkwNmYzNzFjNjBjZmM3ZDg3ZThlMB4XDTIyMDYy
MDEwNDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWY3ZTM3YTIwMmNm
OGNkOTU2MGEwZWMyOTgyOGMzMjAwMGZhMWUxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWXN2QCRfjTeNZdsCX26ZodC4M9LdQMJ+bOJIpMEdV0UqtX
ivE2bIdeQqn+M/7jMR0TaGSpZOW0JqQDfak9QdUXpvTY+k8Ag4vW1IN/h3kHC+Ng
mehfUKdEPHVc5eXQd8XBGNrgKOjwemfgSVk+ZhL9MNYyXcYa0v/k07OB7YFZHwRH
2/6rjml69heC+RsiVFgaXlBlN1cuXSKWLqchO5aTBkchkc0hGfzx9+YejyGzwgpE
icfDAehn7QUb5mVyxp5MiDh/qqlNbyHTJVHCxn/E+RagQ2OqPb6MGbKHuk70ipuf
9mQhkk4pe0xvAhEuSke2UrvFsTNTX3mGHxh53D8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSvfjeiAs+M2VYKDsKYKMMgAPoeGDAfBgNVHSMEGDAWgBR6R4xaoiaieOix
kG83HGDPx9h+jjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VrZU1XcUltb25qb3NaQnZOeHhnejhmWWZvNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvNTFhNTIwLWUwOGQtNDNiMy1hNmIwLWQ3NmVjOWNjMGQyOC8x
L3IzNDNvZ0xQak5sV0NnN0NtQ2pESUFENkhoZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
NTFhNTIwLWUwOGQtNDNiMy1hNmIwLWQ3NmVjOWNjMGQyOC8xL2VrZU1XcUltb25q
b3NaQnZOeHhnejhmWWZvNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArnsfAMEAdQB3jANBgkqhkiG9w0B
AQsFAAOCAQEAeQL5supLGELvT7OvnhU83z0JWu69XCL932gsoB7EJ1+UV2/1K3RQ
8SK/RIsiHyJ/XJ82Nr+lQcLbmGKd7/R5WDjZkWDqPRxg+uVeDHDlToCatBFDfQkZ
hy6hDg7hBNsVqgf1Awgk4n9E4vi2hgrDJjGU0yiYnRW6zqXO5RWRq0t9iMwbnWJ6
bjR0HApvofRko+2u4/CRl3BIvl6YPSi9JeS7JPmRyWpZ2BFyTfosXlROdJ4Tk/5v
XGgHfCfn1XtvrS5BauM2UJqQNMDEwwkh4+4CnZN2XvstQqqeFahfcx66o2GNYLYi
GM2A80iq3FZGEAWZhlF9t1UPNYmsuM6rKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org