Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/Ij-utQ9CG8GIRFUOvMNjGohUrZI.roa
File: Ij-utQ9CG8GIRFUOvMNjGohUrZI.roa (raw, json)
Hash identifier: /iA7ty3zcVjmKT6oyz9Sxtn+Wd47yhgxIVfebbQMMZE=
Subject key identifier: 22:3F:AE:B5:0F:42:1B:C1:88:44:55:0E:BC:C3:63:1A:88:54:AD:92
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 0FE45CA6
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/Ij-utQ9CG8GIRFUOvMNjGohUrZI.roa
Signing time: Sat 01 Jan 2022 06:52:57 +0000
ROA not before: Sat 01 Jan 2022 06:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60750
IP address blocks: 185.26.109.0/24 maxlen: 24
185.26.108.0/22 maxlen: 24
185.26.108.0/24 maxlen: 24
2a00:8760::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266624166 (0xfe45ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jan 1 06:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=223faeb50f421bc18844550ebcc3631a8854ad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:ed:7b:a5:da:a2:db:7f:91:51:71:8a:d8:
5c:eb:8b:84:57:f2:f4:b1:df:01:bc:7c:e7:b0:7c:
6d:14:fa:e0:fc:be:f5:85:8f:b3:ce:97:cf:e4:84:
b4:ef:0b:72:98:5d:24:4c:b2:fe:cc:d0:3c:2d:17:
aa:89:58:80:b5:29:c8:f9:8b:cb:1c:b8:85:fb:fe:
bf:27:35:90:57:73:00:28:83:4e:f2:dd:3f:b8:d1:
e8:7f:ac:ab:2d:86:d3:86:6b:7d:2e:42:c0:95:9f:
70:6e:81:87:c8:ec:00:e4:6a:cf:e5:ad:3f:5f:68:
fb:2d:7c:ea:23:bb:ab:27:6b:29:c4:6d:54:d3:3e:
01:b9:45:4c:e7:ed:a0:6c:5d:53:b5:7c:ee:5b:f3:
5c:be:af:bf:8a:02:55:8c:a5:ad:9b:77:93:0d:ce:
c9:69:08:6b:f2:35:58:59:d6:6d:60:c0:88:ef:41:
58:e3:c5:83:ec:82:71:d3:ed:ea:e5:56:cb:2c:93:
ef:33:03:e7:68:21:85:1a:3e:93:2c:03:7a:35:f5:
3a:ae:05:57:31:c1:6b:7c:95:0b:1d:dc:da:af:9d:
79:5b:a3:e6:f9:1e:e9:f1:94:a1:cc:9a:f9:6c:c1:
7f:d9:eb:a9:53:1e:fa:1d:cf:e2:b9:ea:08:b6:42:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:AE:B5:0F:42:1B:C1:88:44:55:0E:BC:C3:63:1A:88:54:AD:92
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/Ij-utQ9CG8GIRFUOvMNjGohUrZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.108.0/22
IPv6:
2a00:8760::/32
Signature Algorithm: sha256WithRSAEncryption
3a:ce:f2:51:d1:25:f2:d0:e9:3b:4e:d8:6b:c8:c3:28:e8:a1:
6a:f6:83:5e:7c:85:5d:cc:88:10:b0:7d:d9:ac:3a:65:08:6d:
e6:ac:2c:19:46:0d:fe:00:a6:14:b7:0f:7c:0f:a5:96:06:77:
8a:da:36:b0:f9:f2:26:b4:f5:40:37:49:be:0a:f4:b1:11:11:
7b:e1:99:25:b2:cc:34:a0:5f:c7:0d:f2:6d:98:a3:3c:d0:f3:
26:ef:c2:59:86:78:e7:2b:c4:68:75:6b:a7:17:6a:f3:b4:e9:
bd:e3:e9:5d:c1:c9:4e:f4:df:ef:0f:4b:e0:ca:37:9b:1e:a6:
d2:a5:95:5a:96:42:ab:71:60:56:6b:0a:1d:ad:f2:a3:6e:a9:
2a:44:a2:1c:23:cf:df:67:e3:9f:7c:b4:7a:97:19:d2:43:b0:
69:62:d5:80:75:4a:0c:c0:6a:73:35:8c:8b:cf:a7:f9:2f:20:
c5:5d:71:e4:75:bd:74:72:7e:96:33:74:85:1e:55:bb:35:0b:
2b:04:b6:63:8d:62:93:77:6f:85:bc:24:1a:73:57:2f:36:21:
1e:36:ba:3c:1f:cf:07:1c:bc:39:35:b3:b5:20:80:e3:a9:c9:
d3:2f:7d:cd:4b:f6:b9:33:77:cb:7c:81:df:fe:55:65:e4:c6:
91:37:cc:15
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIED+RcpjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjE0YTdlMmE4YzcwMTIzMjVhZTk3M2VkMWEyYmJhMDViMmJiOWMxMB4XDTIyMDEw
MTA2NTI1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjIzZmFlYjUwZjQy
MWJjMTg4NDQ1NTBlYmNjMzYzMWE4ODU0YWQ5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANBb7Xul2qLbf5FRcYrYXOuLhFfy9LHfAbx857B8bRT64Py+
9YWPs86Xz+SEtO8LcphdJEyy/szQPC0XqolYgLUpyPmLyxy4hfv+vyc1kFdzACiD
TvLdP7jR6H+sqy2G04ZrfS5CwJWfcG6Bh8jsAORqz+WtP19o+y186iO7qydrKcRt
VNM+AblFTOftoGxdU7V87lvzXL6vv4oCVYylrZt3kw3OyWkIa/I1WFnWbWDAiO9B
WOPFg+yCcdPt6uVWyyyT7zMD52ghhRo+kywDejX1Oq4FVzHBa3yVCx3c2q+deVuj
5vke6fGUocya+WzBf9nrqVMe+h3P4rnqCLZCvncCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQiP661D0IbwYhEVQ68w2MaiFStkjAfBgNVHSMEGDAWgBQSFKfiqMcBIyWu
lz7RorugWyu5wTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VoU240cWpIQVNNbHJwYy0wYUs3b0ZzcnVjRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvYTY4ZGJjLTNmOTQtNGZlZC04ZDlkLWU5YzM2NDljMTIxOC8x
L0lqLXV0UTlDRzhHSVJGVU92TU5qR29oVXJaSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
YTY4ZGJjLTNmOTQtNGZlZC04ZDlkLWU5YzM2NDljMTIxOC8xL0VoU240cWpIQVNN
bHJwYy0wYUs3b0ZzcnVjRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkabDANBAIAAjAHAwUAKgCHYDAN
BgkqhkiG9w0BAQsFAAOCAQEAOs7yUdEl8tDpO07Ya8jDKOihavaDXnyFXcyIELB9
2aw6ZQht5qwsGUYN/gCmFLcPfA+llgZ3ito2sPnyJrT1QDdJvgr0sRERe+GZJbLM
NKBfxw3ybZijPNDzJu/CWYZ45yvEaHVrpxdq87TpvePpXcHJTvTf7w9L4Mo3mx6m
0qWVWpZCq3FgVmsKHa3yo26pKkSiHCPP32fjn3y0epcZ0kOwaWLVgHVKDMBqczWM
i8+n+S8gxV1x5HW9dHJ+ljN0hR5VuzULKwS2Y41ik3dvhbwkGnNXLzYhHja6PB/P
Bxy8OTWztSCA46nJ0y99zUv2uTN3y3yB3/5VZeTGkTfMFQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-ams.rpki-client.org