Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/xugKCIPhNdA-bpTGyuFgt9NCS0M.roa
File: xugKCIPhNdA-bpTGyuFgt9NCS0M.roa (raw, json)
Hash identifier: MKZKtwzWWma4gCtWhdiexZDxaUI0LDApLJR4wSpcx0U=
Subject key identifier: C6:E8:0A:08:83:E1:35:D0:3E:6E:94:C6:CA:E1:60:B7:D3:42:4B:43
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0184F1F16757285A77CC837BE61F31BF01B4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/xugKCIPhNdA-bpTGyuFgt9NCS0M.roa
Signing time: Thu 08 Dec 2022 13:34:00 +0000
ROA not before: Thu 08 Dec 2022 13:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396998
IP address blocks: 185.228.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f1:67:57:28:5a:77:cc:83:7b:e6:1f:31:bf:01:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 8 13:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6e80a0883e135d03e6e94c6cae160b7d3424b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:7c:c6:09:9e:90:d9:36:43:f4:2a:04:8e:
5e:4f:33:06:2b:7f:43:68:aa:53:dc:ff:53:98:bf:
5f:40:b2:c2:f3:3a:04:ab:c7:00:0a:57:c8:1c:5a:
8d:44:06:12:62:81:75:8a:52:be:a6:a5:9d:15:c4:
04:fb:d9:95:d0:43:8e:74:4d:f8:6e:a6:2f:ec:ad:
07:34:f9:28:66:02:0c:a7:0e:cc:7b:79:34:58:94:
37:6a:f4:d9:1b:0c:89:87:cd:50:f7:22:7c:ed:9e:
ce:b0:9d:d2:8c:c8:ed:df:0a:f8:c7:46:25:75:44:
e2:d9:65:c3:f1:e3:28:6b:5c:88:94:47:8f:ab:d6:
fc:7a:ff:d9:cf:fa:fc:73:3a:a6:7e:e5:3f:0b:bc:
3c:49:c3:cb:b6:19:1b:8e:74:6e:85:c9:86:02:0d:
db:79:6e:bf:f6:4c:c9:3d:96:0d:79:0b:8c:cb:ba:
06:7e:5b:f5:39:97:8b:a7:bc:06:18:65:69:4b:54:
98:21:9b:93:b3:a7:96:a5:63:8c:5f:ae:6c:f1:89:
a5:8a:6b:c7:3f:f5:d9:5e:59:3a:d7:76:e8:5f:04:
40:9a:f1:57:7a:0b:1f:76:62:03:65:2a:fb:fa:05:
3c:e2:52:4f:fd:3b:ca:24:5a:a4:30:10:29:a7:6c:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:0A:08:83:E1:35:D0:3E:6E:94:C6:CA:E1:60:B7:D3:42:4B:43
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/xugKCIPhNdA-bpTGyuFgt9NCS0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.81.0/24
Signature Algorithm: sha256WithRSAEncryption
23:20:6f:22:59:e3:fa:57:c7:0b:b2:2c:7e:86:c7:b3:6b:21:
2e:96:14:94:5f:77:93:22:93:3a:61:98:67:b1:d0:7f:88:45:
e8:9a:95:f9:b5:79:a7:2c:38:64:df:99:4d:5f:13:07:20:5b:
ee:e1:95:c3:55:04:8d:fe:aa:81:34:27:f9:ad:a2:ff:89:40:
7c:f2:50:80:3a:6a:0d:fd:a8:65:81:36:5a:e6:da:b4:6e:50:
b3:c0:a3:b1:26:08:7a:9f:74:2f:d7:3b:ea:bf:b8:03:2d:68:
14:57:76:b8:71:be:bf:14:24:dc:f8:69:05:44:e8:8f:91:08:
17:fc:54:e7:25:7a:da:8f:81:07:50:58:11:e5:b3:97:32:13:
4c:53:12:d9:40:76:3c:97:41:41:4f:d4:85:60:ee:fd:aa:50:
04:90:79:fe:29:a0:f6:b0:c7:aa:bb:ef:cc:88:4e:de:6a:1a:
6b:12:a0:fc:20:ac:28:a8:ab:be:e2:7b:b2:94:10:cd:0e:e7:
d4:55:a6:24:c8:50:2c:8c:04:3d:32:59:da:f5:31:fc:dd:5b:
50:c7:e3:04:01:2e:6a:e9:08:d3:40:6a:ca:f6:53:66:7f:06:
b7:e7:4a:89:b7:6a:40:e4:5b:10:c7:9e:14:57:6f:a6:1a:e2:
50:f5:1a:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTx8WdXKFp3zIN75h8xvwG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjIxMjA4MTMzNDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmU4MGEwODgzZTEzNWQwM2U2ZTk0YzZjYWUxNjBiN2QzNDI0YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTZ8xgmekNk2Q/QqBI5eTzMGK39D
aKpT3P9TmL9fQLLC8zoEq8cAClfIHFqNRAYSYoF1ilK+pqWdFcQE+9mV0EOOdE34
bqYv7K0HNPkoZgIMpw7Me3k0WJQ3avTZGwyJh81Q9yJ87Z7OsJ3SjMjt3wr4x0Yl
dUTi2WXD8eMoa1yIlEePq9b8ev/Zz/r8czqmfuU/C7w8ScPLthkbjnRuhcmGAg3b
eW6/9kzJPZYNeQuMy7oGflv1OZeLp7wGGGVpS1SYIZuTs6eWpWOMX65s8YmlimvH
P/XZXlk613boXwRAmvFXegsfdmIDZSr7+gU84lJP/TvKJFqkMBApp2wZOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMboCgiD4TXQPm6UxsrhYLfTQktDMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEveHVnS0NJUGhOZEEtYnBUR3l1Rmd0OU5DUzBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueRRMA0G
CSqGSIb3DQEBCwUAA4IBAQAjIG8iWeP6V8cLsix+hsezayEulhSUX3eTIpM6YZhn
sdB/iEXompX5tXmnLDhk35lNXxMHIFvu4ZXDVQSN/qqBNCf5raL/iUB88lCAOmoN
/ahlgTZa5tq0blCzwKOxJgh6n3Qv1zvqv7gDLWgUV3a4cb6/FCTc+GkFROiPkQgX
/FTnJXraj4EHUFgR5bOXMhNMUxLZQHY8l0FBT9SFYO79qlAEkHn+KaD2sMequ+/M
iE7eahprEqD8IKwoqKu+4nuylBDNDufUVaYkyFAsjAQ9Mlna9TH83VtQx+MEAS5q
6QjTQGrK9lNmfwa350qJt2pA5FsQx54UV2+mGuJQ9RrF
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org