Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/iZ18vhIUdjaxkzwi5PzO5xYtaZQ.roa
File: iZ18vhIUdjaxkzwi5PzO5xYtaZQ.roa (raw, json)
Hash identifier: ACEg6NcKWNsHtKL1llYNEDN4e3tZIwRu0YMeXdktMH8=
Subject key identifier: 89:9D:7C:BE:12:14:76:36:B1:93:3C:22:E4:FC:CE:E7:16:2D:69:94
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 03008F8D
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/iZ18vhIUdjaxkzwi5PzO5xYtaZQ.roa
Signing time: Sat 01 Jan 2022 15:06:09 +0000
ROA not before: Sat 01 Jan 2022 15:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60056
IP address blocks: 185.57.245.0/24 maxlen: 24
185.57.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50368397 (0x3008f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Jan 1 15:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=899d7cbe12147636b1933c22e4fccee7162d6994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:c2:65:2f:19:f1:ce:7c:f8:b1:3c:b9:44:
21:70:03:ae:b6:bd:5a:77:2f:96:54:39:d8:85:41:
1d:cc:b3:19:c7:26:c6:11:0e:ed:3f:41:0e:a1:e5:
d6:1b:1c:bd:a3:70:3f:d0:85:45:22:e1:48:4f:89:
6a:6f:67:20:90:54:86:b3:a0:b2:f2:fc:ae:ef:95:
4b:9b:ed:b7:cd:b4:fa:47:ba:52:b6:23:1e:04:a5:
71:5d:54:bf:e9:3c:e5:98:4c:ab:5a:2f:34:c9:b5:
50:a4:e5:d1:e5:29:ca:f8:d4:b6:bc:7f:1b:dc:14:
48:a7:2b:5a:07:fe:d2:c9:9f:a3:62:d0:05:f4:4f:
6e:72:31:c3:9c:f4:aa:d7:80:94:c2:79:ab:89:bd:
70:b8:88:95:c7:a5:9e:b9:ca:4b:ec:04:39:0b:33:
c8:46:25:8a:75:7d:ac:17:46:9a:cb:c7:70:ab:4d:
65:42:f5:fe:38:80:e8:22:a4:fb:d5:42:41:41:88:
5a:4b:7a:90:23:91:d9:af:cb:3d:63:b3:7b:54:01:
07:15:93:95:8e:f7:28:9d:f0:59:bd:7b:14:e4:32:
2a:20:7f:f5:e9:80:02:25:e4:2c:33:d5:55:79:71:
11:2c:ec:26:4f:b0:d3:ac:2e:1e:91:b9:91:fe:e8:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:7C:BE:12:14:76:36:B1:93:3C:22:E4:FC:CE:E7:16:2D:69:94
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/iZ18vhIUdjaxkzwi5PzO5xYtaZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.244.0/23
Signature Algorithm: sha256WithRSAEncryption
90:9a:63:b1:23:d7:d9:9b:d1:29:c3:6c:3b:66:77:21:d9:51:
ac:4a:78:f1:29:6a:56:b4:23:0c:e7:36:bb:44:66:4e:3c:f9:
fc:1a:b0:56:47:b8:92:51:84:2d:7b:af:df:87:ec:52:2b:d0:
1b:b6:be:d2:e4:eb:5a:4e:b3:7e:bf:89:8d:0f:c6:70:9c:47:
ce:fc:01:d4:47:45:72:41:cb:6c:c7:a9:5c:07:41:29:25:16:
e4:5e:63:e1:18:f4:ec:da:7f:a6:a6:2c:79:4e:38:95:01:6b:
ea:b7:e8:13:9d:34:84:ef:61:30:63:87:b5:32:86:a0:1b:ce:
11:eb:a7:36:dd:91:f6:bc:8e:91:e3:a1:86:fd:c5:e2:b4:3b:
bf:d0:a3:85:bd:90:c5:76:4c:7a:3c:7c:0f:48:d8:4b:e5:d4:
0e:fd:18:fe:26:45:ab:0c:12:2d:9b:34:5e:7e:82:2a:75:93:
29:a3:71:2c:a8:5f:a9:88:09:a8:42:ea:62:a1:95:fc:18:6b:
3d:26:cb:00:dd:97:24:df:16:16:6d:36:84:05:6b:97:77:e1:
7f:86:69:89:95:35:0c:06:41:ae:69:70:96:bc:02:75:30:93:
b4:ca:5c:ca:79:09:8e:98:65:13:ae:24:0b:12:69:30:ff:95:
03:f4:cf:b5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwCPjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MmU0YWM2MjI0ZmUxOTQ0NDIwZGMzYTk4ZGQ2M2FiYWU0YWY3ZTAwMB4XDTIyMDEw
MTE1MDYwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODk5ZDdjYmUxMjE0
NzYzNmIxOTMzYzIyZTRmY2NlZTcxNjJkNjk5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkgwmUvGfHOfPixPLlEIXADrra9WncvllQ52IVBHcyzGccm
xhEO7T9BDqHl1hscvaNwP9CFRSLhSE+Jam9nIJBUhrOgsvL8ru+VS5vtt820+ke6
UrYjHgSlcV1Uv+k85ZhMq1ovNMm1UKTl0eUpyvjUtrx/G9wUSKcrWgf+0smfo2LQ
BfRPbnIxw5z0qteAlMJ5q4m9cLiIlcelnrnKS+wEOQszyEYlinV9rBdGmsvHcKtN
ZUL1/jiA6CKk+9VCQUGIWkt6kCOR2a/LPWOze1QBBxWTlY73KJ3wWb17FOQyKiB/
9emAAiXkLDPVVXlxESzsJk+w06wuHpG5kf7opHsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSJnXy+EhR2NrGTPCLk/M7nFi1plDAfBgNVHSMEGDAWgBTi5KxiJP4ZREIN
w6mN1jq65K9+ADAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR1U3NZaVQtR1VSQ0RjT3BqZFk2dXVTdmZnQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvZjZiZTAzLTRmNDQtNDM1NC1iOWViLWJhNGQwNmRmMGJlNS8x
L2laMTh2aElVZGpheGt6d2k1UHpPNXhZdGFaUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
ZjZiZTAzLTRmNDQtNDM1NC1iOWViLWJhNGQwNmRmMGJlNS8xLzR1U3NZaVQtR1VS
Q0RjT3BqZFk2dXVTdmZnQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbk59DANBgkqhkiG9w0BAQsFAAOC
AQEAkJpjsSPX2ZvRKcNsO2Z3IdlRrEp48SlqVrQjDOc2u0RmTjz5/BqwVke4klGE
LXuv34fsUivQG7a+0uTrWk6zfr+JjQ/GcJxHzvwB1EdFckHLbMepXAdBKSUW5F5j
4Rj07Np/pqYseU44lQFr6rfoE500hO9hMGOHtTKGoBvOEeunNt2R9ryOkeOhhv3F
4rQ7v9Cjhb2QxXZMejx8D0jYS+XUDv0Y/iZFqwwSLZs0Xn6CKnWTKaNxLKhfqYgJ
qELqYqGV/BhrPSbLAN2XJN8WFm02hAVrl3fhf4ZpiZU1DAZBrmlwlrwCdTCTtMpc
ynkJjphlE64kCxJpMP+VA/TPtQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:10 2024 by rpki-client on console-ams.rpki-client.org