Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/wMOsHA8alHwPXIyoDHFJOzt1_oE.roa
File: wMOsHA8alHwPXIyoDHFJOzt1_oE.roa (raw, json)
Hash identifier: m5AOCKJeGjONCBUiE/xkUbOMEwehM7FwzqIRgCBRQkM=
Subject key identifier: C0:C3:AC:1C:0F:1A:94:7C:0F:5C:8C:A8:0C:71:49:3B:3B:75:FE:81
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 717554
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/wMOsHA8alHwPXIyoDHFJOzt1_oE.roa
Signing time: Sat 01 Jan 2022 00:53:36 +0000
ROA not before: Sat 01 Jan 2022 00:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34032
IP address blocks: 185.98.204.0/24 maxlen: 24
185.98.206.0/24 maxlen: 24
185.98.205.0/24 maxlen: 24
185.98.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7435604 (0x717554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Jan 1 00:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0c3ac1c0f1a947c0f5c8ca80c71493b3b75fe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e8:f4:8d:86:a6:69:28:8a:20:1f:75:55:96:
e1:f4:d2:bd:4e:b4:52:fc:61:28:bd:f0:57:e8:73:
e5:07:ed:0f:95:ce:93:d4:20:40:44:0a:b9:3a:a6:
a7:8c:f3:58:5a:d9:c5:5d:bf:43:cd:aa:fe:25:42:
62:8d:06:43:b5:e8:99:ad:ed:99:de:db:7e:e7:05:
57:c3:3a:73:a1:bc:20:b0:e1:57:02:f1:b5:44:c3:
52:2e:29:ee:66:61:10:66:91:ac:d5:8a:14:1f:be:
19:35:4e:b1:7d:8b:1c:02:82:98:e1:84:8f:c8:73:
40:ca:6f:4e:ae:72:1d:4c:77:92:33:1b:33:7a:84:
04:7b:85:7a:4f:e3:0e:4c:e8:f2:d7:1b:02:e6:94:
5c:5f:86:36:f2:58:59:3d:c7:82:cc:35:6a:22:37:
af:07:1d:86:e6:8d:f0:d0:43:58:1e:92:25:90:34:
f6:28:fc:2a:db:e1:7a:de:ee:52:32:d5:d5:e6:b7:
09:42:f8:47:03:2b:ca:9b:d4:1a:b2:17:00:cf:10:
9e:56:15:fe:70:19:72:ea:cd:1c:00:23:83:1f:1a:
ba:02:be:19:46:1e:25:34:47:05:b5:64:77:1f:9b:
3f:5d:fa:b0:73:61:05:55:de:ec:fd:c6:d9:73:c5:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:AC:1C:0F:1A:94:7C:0F:5C:8C:A8:0C:71:49:3B:3B:75:FE:81
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/wMOsHA8alHwPXIyoDHFJOzt1_oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.204.0/22
Signature Algorithm: sha256WithRSAEncryption
28:c2:82:9c:51:51:25:f6:ec:4e:ed:fb:c4:66:fe:55:a2:2e:
77:40:3f:70:3e:d1:b9:37:12:61:ab:a6:d8:88:59:18:3f:5f:
50:84:a6:0e:f0:94:2f:af:2a:3e:2c:61:d1:c2:cc:7f:d2:9a:
ff:92:1c:73:88:9f:18:70:02:63:00:44:9a:a2:2a:4d:3e:a6:
10:53:06:93:41:04:30:c3:b8:27:72:df:cc:48:e4:fe:28:48:
49:0d:33:75:60:b6:a0:db:00:7c:47:30:b7:6c:48:d5:0b:35:
cb:f9:df:2f:bf:d9:35:31:bf:19:69:53:8a:f8:df:54:37:1c:
f5:63:73:97:81:dd:9e:78:77:e1:d6:bc:70:d0:68:11:02:b9:
f5:6f:74:82:71:67:70:7e:bb:f3:6b:fa:f5:8a:58:3a:d2:b2:
06:1a:b0:c2:1f:2e:e9:2a:c2:3f:fd:83:ea:b3:46:35:fa:ff:
39:13:4a:8f:4f:7d:77:c6:18:16:b5:93:db:e3:b2:71:77:d0:
53:a7:8a:79:52:14:87:43:b9:f5:b8:5f:4e:96:82:51:5e:df:
f3:23:12:6a:95:a8:3e:58:ed:92:69:bf:e2:2d:73:ff:85:6b:
90:81:8c:b9:de:db:d8:45:e7:2c:f6:8c:f8:64:de:c8:fa:0a:
b2:7f:f3:1c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDcXVUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNi
YmJiMWY1ZDk4NjY2OGFiM2JkNDdjZDE4YzVmYjFlZmQyNDliMDQwHhcNMjIwMTAx
MDA1MzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMGMzYWMxYzBmMWE5
NDdjMGY1YzhjYTgwYzcxNDkzYjNiNzVmZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8ej0jYamaSiKIB91VZbh9NK9TrRS/GEovfBX6HPlB+0Plc6T
1CBARAq5OqanjPNYWtnFXb9Dzar+JUJijQZDteiZre2Z3tt+5wVXwzpzobwgsOFX
AvG1RMNSLinuZmEQZpGs1YoUH74ZNU6xfYscAoKY4YSPyHNAym9OrnIdTHeSMxsz
eoQEe4V6T+MOTOjy1xsC5pRcX4Y28lhZPceCzDVqIjevBx2G5o3w0ENYHpIlkDT2
KPwq2+F63u5SMtXV5rcJQvhHAyvKm9QashcAzxCeVhX+cBly6s0cACODHxq6Ar4Z
Rh4lNEcFtWR3H5s/Xfqwc2EFVd7s/cbZc8VMiQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMDDrBwPGpR8D1yMqAxxSTs7df6BMB8GA1UdIwQYMBaAFDu7sfXZhmaKs71H
zRjF+x79JJsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Tzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMwLzEv
d01Pc0hBOGFsSHdQWEl5b0RIRkpPenQxX29FLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9j
ZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMwLzEvTzd1eDlkbUdab3F6
dlVmTkdNWDdIdjBrbXdRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWLMMA0GCSqGSIb3DQEBCwUAA4IB
AQAowoKcUVEl9uxO7fvEZv5Voi53QD9wPtG5NxJhq6bYiFkYP19QhKYO8JQvryo+
LGHRwsx/0pr/khxziJ8YcAJjAESaoipNPqYQUwaTQQQww7gnct/MSOT+KEhJDTN1
YLag2wB8RzC3bEjVCzXL+d8vv9k1Mb8ZaVOK+N9UNxz1Y3OXgd2eeHfh1rxw0GgR
Arn1b3SCcWdwfrvza/r1ilg60rIGGrDCHy7pKsI//YPqs0Y1+v85E0qPT313xhgW
tZPb47Jxd9BTp4p5UhSHQ7n1uF9OloJRXt/zIxJqlag+WO2Sab/iLXP/hWuQgYy5
3tvYRecs9oz4ZN7I+gqyf/Mc
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:15 2023 by rpki-client on console-fra.rpki-client.org