Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/1qz5NnE3w1Nz3rUnm_BzuV4R4mM.roa
File: 1qz5NnE3w1Nz3rUnm_BzuV4R4mM.roa (raw, json)
Hash identifier: Qfm5aqVE7zC5s8WV71FfOf0WVhvDQqY91PcM0aKO80A=
Subject key identifier: D6:AC:F9:36:71:37:C3:53:73:DE:B5:27:9B:F0:73:B9:5E:11:E2:63
Certificate issuer: /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial: 12D3333E
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/1qz5NnE3w1Nz3rUnm_BzuV4R4mM.roa
Signing time: Sat 01 Jan 2022 03:53:08 +0000
ROA not before: Sat 01 Jan 2022 03:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47264
IP address blocks: 185.144.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315831102 (0x12d3333e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Validity
Not Before: Jan 1 03:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6acf9367137c35373deb5279bf073b95e11e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:35:49:af:88:2b:75:eb:4b:cb:28:19:e8:
b4:7d:2b:37:a0:bf:11:b5:bf:29:dc:28:0a:0d:4f:
63:fe:6c:7a:59:ed:44:9e:15:31:df:9c:c3:ce:4f:
17:33:05:90:57:26:64:cc:02:4a:b3:3b:63:07:7e:
1c:85:9f:cf:f0:d6:95:72:61:29:11:3a:7c:8e:62:
5e:b0:df:35:5b:87:cb:47:84:66:ed:b1:c9:d0:1e:
b2:ec:53:d8:b6:52:dd:6b:24:df:2c:0e:94:aa:3e:
db:e2:70:d4:7f:3b:fd:27:de:b5:1d:9b:b2:42:c5:
79:38:2f:94:71:86:b6:19:9d:f8:2b:de:51:ea:ec:
9a:fb:d7:c1:2c:1f:a4:61:84:b1:cd:ce:48:39:bf:
7a:e2:78:0f:77:b0:ca:89:eb:b6:a3:0d:08:a2:b8:
b1:8a:33:08:fd:52:ff:19:ad:79:bb:68:3d:3f:31:
8e:4a:35:68:0d:b0:3f:8b:60:ce:2c:b2:d4:24:d7:
8c:4c:ae:d4:42:14:49:8b:f6:fd:38:5e:30:e2:b5:
4b:ca:8b:ca:85:3c:d1:ce:23:c2:7b:e9:77:52:86:
89:6e:fe:40:f0:d2:ab:f3:b1:17:1d:97:01:74:42:
79:44:3d:be:56:40:a3:72:b2:9e:c5:3f:11:03:35:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:F9:36:71:37:C3:53:73:DE:B5:27:9B:F0:73:B9:5E:11:E2:63
X509v3 Authority Key Identifier:
keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/1qz5NnE3w1Nz3rUnm_BzuV4R4mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.108.0/24
Signature Algorithm: sha256WithRSAEncryption
97:18:01:80:e9:ac:01:28:48:e1:2e:cb:a2:3c:5e:20:33:41:
81:47:a5:c5:3c:f4:03:b9:3b:44:43:a6:96:92:a2:3e:45:1b:
4b:84:7b:1d:d9:c7:fe:d8:0d:21:da:9a:5e:1e:72:26:95:aa:
df:90:64:94:80:0f:62:77:88:9b:cd:93:a3:d1:db:7e:5c:e2:
00:18:11:e8:8e:3d:cf:96:c9:90:61:f1:a5:23:c1:f3:cc:b4:
10:a7:a4:fa:2f:29:b4:e3:16:f9:88:6c:55:97:09:d2:cb:31:
f4:bc:c2:aa:9e:fc:09:37:8a:95:23:a2:fa:e6:c9:90:73:9d:
ee:01:fc:6e:74:0e:ac:02:8c:34:a5:e4:22:02:e2:20:cf:f1:
89:e2:99:6c:f3:85:70:4f:84:7b:9d:76:a1:28:08:d7:db:87:
9b:7a:65:66:dc:02:c9:a1:74:35:ac:7d:24:cc:b0:a9:c0:fd:
ff:15:04:16:bb:a9:09:ba:10:49:54:df:67:e1:c3:7b:c4:7b:
50:05:56:07:ea:c8:0a:e9:e1:f4:68:3d:8a:c8:32:8b:5a:47:
17:25:2a:3c:2d:bf:e1:42:89:81:a0:51:a2:d0:2e:a8:10:88:
d6:d3:d5:8e:7e:6b:e0:74:e2:92:65:e2:e1:ca:5b:de:c1:d5:
9d:dd:37:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEtMzPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MGQzYWM0ODI1ZGNhN2VlYzk3MDA1ZGJhM2IwYmZmMjc5MDRmNThhMB4XDTIyMDEw
MTAzNTMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDZhY2Y5MzY3MTM3
YzM1MzczZGViNTI3OWJmMDczYjk1ZTExZTI2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKNNUmviCt160vLKBnotH0rN6C/EbW/KdwoCg1PY/5selnt
RJ4VMd+cw85PFzMFkFcmZMwCSrM7Ywd+HIWfz/DWlXJhKRE6fI5iXrDfNVuHy0eE
Zu2xydAesuxT2LZS3Wsk3ywOlKo+2+Jw1H87/SfetR2bskLFeTgvlHGGthmd+Cve
UersmvvXwSwfpGGEsc3OSDm/euJ4D3ewyonrtqMNCKK4sYozCP1S/xmtebtoPT8x
jko1aA2wP4tgziyy1CTXjEyu1EIUSYv2/TheMOK1S8qLyoU80c4jwnvpd1KGiW7+
QPDSq/OxFx2XAXRCeUQ9vlZAo3KynsU/EQM13oECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTWrPk2cTfDU3PetSeb8HO5XhHiYzAfBgNVHSMEGDAWgBRg06xIJdyn7slw
BdujsL/yeQT1ijAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lOT3NTQ1hjcC03SmNBWGJvN0NfOG5rRTlZby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYjQ3NjVmLWE2MGYtNDM1Ni05ODJhLTFhZmQyNjQ5YjI5OS8x
LzFxejVObkUzdzFOejNyVW5tX0J6dVY0UjRtTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
YjQ3NjVmLWE2MGYtNDM1Ni05ODJhLTFhZmQyNjQ5YjI5OS8xL1lOT3NTQ1hjcC03
SmNBWGJvN0NfOG5rRTlZby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmQbDANBgkqhkiG9w0BAQsFAAOC
AQEAlxgBgOmsAShI4S7LojxeIDNBgUelxTz0A7k7REOmlpKiPkUbS4R7HdnH/tgN
IdqaXh5yJpWq35BklIAPYneIm82To9HbflziABgR6I49z5bJkGHxpSPB88y0EKek
+i8ptOMW+YhsVZcJ0ssx9LzCqp78CTeKlSOi+ubJkHOd7gH8bnQOrAKMNKXkIgLi
IM/xieKZbPOFcE+Ee512oSgI19uHm3plZtwCyaF0Nax9JMywqcD9/xUEFrupCboQ
SVTfZ+HDe8R7UAVWB+rICunh9Gg9isgyi1pHFyUqPC2/4UKJgaBRotAuqBCI1tPV
jn5r4HTikmXi4cpb3sHVnd03rQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org