Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/CWxk0w5v1ngKldJRahfVagabW-Q.roa
File: CWxk0w5v1ngKldJRahfVagabW-Q.roa (raw, json)
Hash identifier: 7XmU5OsDVtXbOItkjmyjSh9n36TcYJ4HBw/US2R5zVk=
Subject key identifier: 09:6C:64:D3:0E:6F:D6:78:0A:95:D2:51:6A:17:D5:6A:06:9B:5B:E4
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 0D48A17F
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/CWxk0w5v1ngKldJRahfVagabW-Q.roa
Signing time: Sat 01 Jan 2022 06:56:51 +0000
ROA not before: Sat 01 Jan 2022 06:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42473
IP address blocks: 185.93.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222863743 (0xd48a17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jan 1 06:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=096c64d30e6fd6780a95d2516a17d56a069b5be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:c3:fa:da:5d:c0:30:55:88:ee:cb:c1:5a:
20:cf:2f:cf:9a:26:52:f3:b5:7b:bc:eb:e6:08:7d:
f4:18:9c:6e:8d:93:41:48:ef:7e:a7:cc:75:82:05:
36:63:b4:88:9f:d5:02:ff:d1:d4:4f:a7:7a:68:71:
39:de:93:d3:b5:28:47:84:f7:9d:2f:0e:18:75:2e:
d6:3c:ab:42:5d:8a:e5:75:f9:28:eb:fd:1b:86:ce:
df:86:af:e3:dd:88:54:4c:6f:31:02:39:49:b9:be:
f1:22:3a:29:2b:89:96:12:9f:72:ba:1d:4d:63:3f:
b8:1f:06:5d:bf:cc:c7:94:7f:9a:3f:01:08:aa:c4:
ba:75:65:77:b5:cc:40:4d:58:45:73:44:cd:c0:6b:
c8:ae:c6:a5:c4:2f:3f:b9:9b:f9:fa:a9:39:0e:e1:
f3:61:53:5d:bc:4d:ea:fa:20:46:2d:ae:22:ef:e6:
83:11:45:ad:6b:dc:37:d7:f0:b6:f9:36:13:44:54:
fd:4e:c9:7a:d1:99:a8:9c:a8:6a:ab:f9:26:f6:81:
da:2c:2c:a6:08:b3:92:da:28:fa:d4:3f:ba:b7:b6:
8e:2c:da:ef:ba:9a:59:b7:f3:60:cd:de:7c:60:a4:
83:9f:01:f2:8d:62:93:f4:f9:ae:c7:eb:99:e7:42:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:64:D3:0E:6F:D6:78:0A:95:D2:51:6A:17:D5:6A:06:9B:5B:E4
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/CWxk0w5v1ngKldJRahfVagabW-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b8:5c:ae:83:8a:4a:89:28:51:e8:fd:54:77:90:9b:65:d6:
2d:a2:69:ed:eb:3e:9c:b0:4d:cf:d9:08:7d:85:fa:44:9f:ee:
52:78:5a:cc:c9:2d:49:09:c8:ac:12:49:08:cb:61:a1:83:48:
9b:13:9d:f2:e3:02:70:66:23:2c:64:ac:a7:70:3f:61:52:d8:
b7:57:1c:94:ab:95:f8:c0:61:36:8f:e7:46:4a:00:57:d5:5a:
8d:21:10:c8:50:b9:b5:3f:a9:24:d9:7a:7d:59:e3:d0:19:4b:
c9:06:f1:46:d6:06:29:c4:d4:80:39:ac:25:4a:38:d8:6f:ac:
75:96:cb:86:3b:00:07:83:4c:72:63:9c:e7:ec:f9:cc:ca:ae:
1f:66:d4:a6:7b:4f:56:8f:a8:b1:61:eb:d6:83:a8:cc:d4:82:
a8:0f:01:45:f7:d1:47:35:c9:61:b2:f8:be:62:71:5a:02:3d:
92:46:25:24:71:38:b0:b6:76:b9:7f:ac:66:33:e9:ab:fa:6a:
50:43:9a:a9:f7:5f:51:1e:10:5d:35:d7:98:de:6f:14:82:82:
c3:65:05:50:29:d8:a1:67:e0:19:be:87:e4:bd:3e:25:9d:f5:
7f:6a:83:25:1e:8c:2c:ba:81:5a:3c:9f:9c:37:91:67:55:b6:
31:87:04:ab
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDUihfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTdiODE0NzUwM2VhMTlmNTgxY2EwMGQyOGRiZWU1ZTU4Y2I4ZjQ4MB4XDTIyMDEw
MTA2NTY1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDk2YzY0ZDMwZTZm
ZDY3ODBhOTVkMjUxNmExN2Q1NmEwNjliNWJlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJulw/raXcAwVYjuy8FaIM8vz5omUvO1e7zr5gh99Bicbo2T
QUjvfqfMdYIFNmO0iJ/VAv/R1E+nemhxOd6T07UoR4T3nS8OGHUu1jyrQl2K5XX5
KOv9G4bO34av492IVExvMQI5Sbm+8SI6KSuJlhKfcrodTWM/uB8GXb/Mx5R/mj8B
CKrEunVld7XMQE1YRXNEzcBryK7GpcQvP7mb+fqpOQ7h82FTXbxN6vogRi2uIu/m
gxFFrWvcN9fwtvk2E0RU/U7JetGZqJyoaqv5JvaB2iwspgizktoo+tQ/ure2jiza
77qaWbfzYM3efGCkg58B8o1ik/T5rsfrmedCSycCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQJbGTTDm/WeAqV0lFqF9VqBptb5DAfBgNVHSMEGDAWgBQxe4FHUD6hn1gc
oA0o2+5eWMuPSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01YdUJSMUEtb1o5WUhLQU5LTnZ1WGxqTGowZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMmU0ZTU0LTA1NDgtNGQwYy05M2YxLTc1NDYxYWJiYjVhNC8x
L0NXeGswdzV2MW5nS2xkSlJhaGZWYWdhYlctUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MmU0ZTU0LTA1NDgtNGQwYy05M2YxLTc1NDYxYWJiYjVhNC8xL01YdUJSMUEtb1o5
WUhLQU5LTnZ1WGxqTGowZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALld1TANBgkqhkiG9w0BAQsFAAOC
AQEALbhcroOKSokoUej9VHeQm2XWLaJp7es+nLBNz9kIfYX6RJ/uUnhazMktSQnI
rBJJCMthoYNImxOd8uMCcGYjLGSsp3A/YVLYt1cclKuV+MBhNo/nRkoAV9VajSEQ
yFC5tT+pJNl6fVnj0BlLyQbxRtYGKcTUgDmsJUo42G+sdZbLhjsAB4NMcmOc5+z5
zMquH2bUpntPVo+osWHr1oOozNSCqA8BRffRRzXJYbL4vmJxWgI9kkYlJHE4sLZ2
uX+sZjPpq/pqUEOaqfdfUR4QXTXXmN5vFIKCw2UFUCnYoWfgGb6H5L0+JZ31f2qD
JR6MLLqBWjyfnDeRZ1W2MYcEqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org