Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/CcHtt83GZgzw3Dcjt4N5itirFGM.roa
File: CcHtt83GZgzw3Dcjt4N5itirFGM.roa (raw, json)
Hash identifier: sI9rUtDxZAJdwJtenX06qTEevOTmfy5bu2onlLVD6Wc=
Subject key identifier: 09:C1:ED:B7:CD:C6:66:0C:F0:DC:37:23:B7:83:79:8A:D8:AB:14:63
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 03B58335
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/CcHtt83GZgzw3Dcjt4N5itirFGM.roa
Signing time: Sat 01 Jan 2022 05:56:55 +0000
ROA not before: Sat 01 Jan 2022 05:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50114
IP address blocks: 185.110.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62227253 (0x3b58335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 1 05:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09c1edb7cdc6660cf0dc3723b783798ad8ab1463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:ac:c9:a4:46:90:5c:7f:b1:25:23:b5:55:
14:58:1d:d2:22:eb:a4:df:66:0d:97:ca:f6:eb:c1:
90:42:c8:9f:74:b8:b1:53:84:a6:32:8d:31:25:99:
2c:7b:ed:9f:07:20:85:87:58:e9:ca:a1:59:b4:50:
6e:cf:fd:61:e9:d5:d5:f6:fd:c4:f3:80:55:be:a5:
c1:1f:49:4a:cf:e0:6c:1f:9f:ed:26:b2:33:b8:28:
34:1d:8b:a4:0f:9d:b2:94:49:fa:cd:d3:87:dd:03:
6d:05:b9:90:be:61:a4:1d:98:47:59:59:82:c2:0b:
bf:0a:fd:ab:66:bc:75:6b:a7:7c:46:31:26:19:e0:
06:8a:49:7c:89:6d:df:a2:a0:c5:a0:bf:a6:ea:5d:
4d:0d:82:53:91:5b:08:78:99:29:22:dd:7d:95:68:
2a:5c:9d:4e:b1:e0:78:e5:e5:b1:08:2c:94:86:01:
d2:52:66:6e:de:96:3a:4f:2c:d3:b0:6f:8f:22:55:
a3:6b:2c:ae:03:10:32:03:9e:24:ab:b4:f1:e4:69:
c9:95:b9:72:34:8f:04:f6:06:78:3e:1f:71:74:56:
4c:dc:22:da:d4:85:bd:d8:92:ba:ce:73:9c:97:66:
aa:1a:f6:5f:96:8b:3c:95:dd:de:bd:55:22:8e:79:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:ED:B7:CD:C6:66:0C:F0:DC:37:23:B7:83:79:8A:D8:AB:14:63
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/CcHtt83GZgzw3Dcjt4N5itirFGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.237.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3e:f3:e0:f3:9d:1a:ab:05:02:ff:8f:d6:f6:c9:2f:08:16:
c1:b8:c9:8a:34:c2:4a:7c:53:91:b1:78:13:c6:cb:68:56:25:
af:87:9e:e0:60:1d:bf:7b:dd:29:d6:d7:2e:8e:33:8d:b6:16:
b7:b7:2c:aa:b4:3d:fc:65:bf:df:e3:09:7f:59:8a:79:11:c7:
e2:d1:4a:80:7a:b9:f7:9c:b8:ff:f4:9a:09:65:5b:5a:3f:e0:
0c:3b:ca:33:98:e1:1a:57:e9:72:ea:fe:92:3f:2b:d3:e1:88:
3d:d7:86:61:33:0c:0e:0e:a4:9c:e6:ea:0c:f0:fb:6e:bb:21:
ad:5b:b3:6d:f4:1b:a4:43:17:33:e9:18:63:d8:ad:11:11:11:
e0:58:d2:27:d3:b6:fc:c1:46:bd:c4:af:1e:ee:a7:a0:48:28:
5e:6e:0c:bf:35:a9:57:48:54:b3:e2:28:9c:f2:8e:cb:56:5e:
19:a0:bd:a2:24:79:62:ee:47:7f:00:db:d8:29:8e:32:7f:c8:
9e:a4:87:5a:12:77:25:2c:bf:2d:53:a8:48:01:7d:d4:5b:d1:
64:b9:22:79:95:60:3c:a0:7f:db:d5:09:72:07:a6:12:73:71:
a4:d0:ea:47:23:5b:04:25:3c:51:bb:70:24:1a:99:45:c8:32:
a8:b2:10:38
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA7WDNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWY1ZTQ4NjZiYTA5ODIwMTI0YTZlNTExMTA0ZmM0MWZhNTQxOTk1MB4XDTIyMDEw
MTA1NTY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDljMWVkYjdjZGM2
NjYwY2YwZGMzNzIzYjc4Mzc5OGFkOGFiMTQ2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKMrMmkRpBcf7ElI7VVFFgd0iLrpN9mDZfK9uvBkELIn3S4
sVOEpjKNMSWZLHvtnwcghYdY6cqhWbRQbs/9YenV1fb9xPOAVb6lwR9JSs/gbB+f
7SayM7goNB2LpA+dspRJ+s3Th90DbQW5kL5hpB2YR1lZgsILvwr9q2a8dWunfEYx
JhngBopJfIlt36KgxaC/pupdTQ2CU5FbCHiZKSLdfZVoKlydTrHgeOXlsQgslIYB
0lJmbt6WOk8s07BvjyJVo2ssrgMQMgOeJKu08eRpyZW5cjSPBPYGeD4fcXRWTNwi
2tSFvdiSus5znJdmqhr2X5aLPJXd3r1VIo55IDkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQJwe23zcZmDPDcNyO3g3mK2KsUYzAfBgNVHSMEGDAWgBQq9eSGa6CYIBJK
blERBPxB+lQZlTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0t2WGtobXVnbUNBU1NtNVJFUVQ4UWZwVUdaVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvMjUyNzYxLTAxOWEtNGRlNS05NTdkLWMzMjBlNTBhM2M3OS8x
L0NjSHR0ODNHWmd6dzNEY2p0NE41aXRpckZHTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
MjUyNzYxLTAxOWEtNGRlNS05NTdkLWMzMjBlNTBhM2M3OS8xL0t2WGtobXVnbUNB
U1NtNVJFUVQ4UWZwVUdaVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlu7TANBgkqhkiG9w0BAQsFAAOC
AQEAhT7z4POdGqsFAv+P1vbJLwgWwbjJijTCSnxTkbF4E8bLaFYlr4ee4GAdv3vd
KdbXLo4zjbYWt7csqrQ9/GW/3+MJf1mKeRHH4tFKgHq595y4//SaCWVbWj/gDDvK
M5jhGlfpcur+kj8r0+GIPdeGYTMMDg6knObqDPD7brshrVuzbfQbpEMXM+kYY9it
ERER4FjSJ9O2/MFGvcSvHu6noEgoXm4MvzWpV0hUs+IonPKOy1ZeGaC9oiR5Yu5H
fwDb2CmOMn/InqSHWhJ3JSy/LVOoSAF91FvRZLkieZVgPKB/29UJcgemEnNxpNDq
RyNbBCU8UbtwJBqZRcgyqLIQOA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:05 2025 by rpki-client