Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4d01z1I3JNP6eBs5ua8HBsEr37Q.roa
File: 4d01z1I3JNP6eBs5ua8HBsEr37Q.roa (raw, json)
Hash identifier: 631MPsI1TEmPEesFpK7ApZIiBneIS7Coxn7j4mZLDsU=
Subject key identifier: E1:DD:35:CF:52:37:24:D3:FA:78:1B:39:B9:AF:07:06:C1:2B:DF:B4
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 018260502C6C51BE7E4CEB986474505B61D4
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4d01z1I3JNP6eBs5ua8HBsEr37Q.roa
Signing time: Tue 02 Aug 2022 20:47:23 +0000
ROA not before: Tue 02 Aug 2022 20:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 185.39.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:60:50:2c:6c:51:be:7e:4c:eb:98:64:74:50:5b:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 2 20:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1dd35cf523724d3fa781b39b9af0706c12bdfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:9a:6e:28:68:ce:e2:ba:d9:82:eb:78:67:
c5:19:cc:b6:ff:89:91:ea:3b:aa:15:d4:38:92:e7:
72:c8:db:9a:6b:e8:00:de:ce:e8:1a:5a:14:1f:9f:
17:e4:2f:c1:0d:c3:85:3c:3b:82:ac:9d:9d:83:af:
a1:b7:48:7b:85:62:ae:cd:6e:cc:1e:2a:d4:22:07:
05:5f:48:5f:34:56:56:de:54:93:8a:bc:8d:4d:31:
fe:75:11:b3:ce:08:61:cd:62:75:04:bb:c7:9a:ba:
fe:3c:54:ee:b3:a9:c6:60:6d:c0:b8:85:93:a9:40:
59:80:95:e7:9a:ae:97:7e:2b:19:c1:66:0c:e7:b4:
0e:6b:49:62:66:38:85:ae:c4:20:21:74:b1:f9:eb:
08:6d:bd:1e:5d:9b:53:73:6b:8b:b9:4b:d8:23:68:
67:26:4e:19:e2:b6:56:6d:00:5f:bb:23:c2:38:83:
36:bc:6b:3d:d6:ae:e1:36:76:b3:42:fe:be:6a:dd:
ee:90:eb:86:8b:5a:6b:a1:d3:70:45:c7:98:63:45:
24:62:d6:45:cd:3f:23:6b:c7:ba:ac:4e:72:14:b8:
d9:9d:33:3d:a9:04:66:0d:de:d5:04:59:c6:8e:a0:
be:6f:59:b7:57:75:9a:68:2d:b8:29:06:fa:49:36:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:35:CF:52:37:24:D3:FA:78:1B:39:B9:AF:07:06:C1:2B:DF:B4
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4d01z1I3JNP6eBs5ua8HBsEr37Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.50.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4c:ff:4e:cc:2f:72:b6:1d:b6:8e:d8:0c:c8:26:10:af:17:
81:42:14:a6:3c:be:71:4b:49:dd:a5:32:1b:84:4d:de:f9:6d:
75:9d:66:08:26:ed:b1:56:eb:2a:7d:1e:fc:a6:46:1d:7e:ca:
7a:2d:17:2b:0c:95:f7:1b:0e:0e:fa:c1:fc:e2:e3:f8:48:4c:
ff:a6:93:95:ad:f2:50:f3:78:70:95:86:f2:a2:86:49:62:a6:
ec:ea:79:d2:cb:99:31:5b:3e:d6:22:d5:c8:c6:b8:17:99:02:
44:e2:f8:8a:bd:3f:ee:40:15:19:52:08:cc:74:61:3e:65:7c:
9a:28:76:f2:79:93:80:33:14:bc:2f:a8:0a:2b:a8:c6:0a:83:
ca:63:da:c3:94:f8:31:35:93:f6:90:e4:97:d2:a9:d9:de:6b:
28:79:fb:ce:ba:06:af:2e:fc:05:70:8e:95:38:1e:01:a6:e1:
71:63:73:0e:e6:a4:76:60:a7:2c:22:23:5f:e0:13:db:76:67:
87:46:4d:33:c4:99:38:a4:ba:6a:11:3b:44:b6:f4:8d:13:fe:
6c:38:39:2f:6f:34:f3:47:df:50:31:58:53:c5:9c:5e:7b:5f:
a8:d8:c9:3c:8b:58:75:73:88:70:e3:e6:51:67:9a:bb:4f:83:
1d:ea:f6:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJgUCxsUb5+TOuYZHRQW2HUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk
MmRkNTIwHhcNMjIwODAyMjA0NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWRkMzVjZjUyMzcyNGQzZmE3ODFiMzliOWFmMDcwNmMxMmJkZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwOabihozuK62YLreGfFGcy2/4mR
6juqFdQ4kudyyNuaa+gA3s7oGloUH58X5C/BDcOFPDuCrJ2dg6+ht0h7hWKuzW7M
HirUIgcFX0hfNFZW3lSTiryNTTH+dRGzzghhzWJ1BLvHmrr+PFTus6nGYG3AuIWT
qUBZgJXnmq6XfisZwWYM57QOa0liZjiFrsQgIXSx+esIbb0eXZtTc2uLuUvYI2hn
Jk4Z4rZWbQBfuyPCOIM2vGs91q7hNnazQv6+at3ukOuGi1prodNwRceYY0UkYtZF
zT8ja8e6rE5yFLjZnTM9qQRmDd7VBFnGjqC+b1m3V3WaaC24KQb6STYHOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHdNc9SNyTT+ngbObmvBwbBK9+0MB8GA1UdIwQY
MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt
YWRlZDFjNDY5ZWFmLzEvNGQwMXoxSTNKTlA2ZUJzNXVhOEhCc0VyMzdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm
LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScyMA0G
CSqGSIb3DQEBCwUAA4IBAQBTTP9OzC9yth22jtgMyCYQrxeBQhSmPL5xS0ndpTIb
hE3e+W11nWYIJu2xVusqfR78pkYdfsp6LRcrDJX3Gw4O+sH84uP4SEz/ppOVrfJQ
83hwlYbyooZJYqbs6nnSy5kxWz7WItXIxrgXmQJE4viKvT/uQBUZUgjMdGE+ZXya
KHbyeZOAMxS8L6gKK6jGCoPKY9rDlPgxNZP2kOSX0qnZ3msoefvOugavLvwFcI6V
OB4BpuFxY3MO5qR2YKcsIiNf4BPbdmeHRk0zxJk4pLpqETtEtvSNE/5sODkvbzTz
R99QMVhTxZxee1+o2Mk8i1h1c4hw4+ZRZ5q7T4Md6vZp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org