Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/7fYByNgMRy2n_FQ5Z8R-rAnWGQA.roa
File: 7fYByNgMRy2n_FQ5Z8R-rAnWGQA.roa (raw, json)
Hash identifier: wGfouTuEmx61voKnf2zvm2OEewozsnfxzZbS0BfxwJU=
Subject key identifier: ED:F6:01:C8:D8:0C:47:2D:A7:FC:54:39:67:C4:7E:AC:09:D6:19:00
Certificate issuer: /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial: 12D27444
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/7fYByNgMRy2n_FQ5Z8R-rAnWGQA.roa
Signing time: Sat 01 Jan 2022 03:53:08 +0000
ROA not before: Sat 01 Jan 2022 03:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30740
IP address blocks: 185.144.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315782212 (0x12d27444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Validity
Not Before: Jan 1 03:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edf601c8d80c472da7fc543967c47eac09d61900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:1c:7e:f2:2a:d9:19:4a:85:b4:f6:fd:cf:
cd:90:5d:0c:be:6b:56:93:9f:bc:59:81:81:f5:97:
82:57:69:a7:dd:18:d3:62:4f:be:53:a6:73:c2:af:
d1:cf:88:4b:52:c8:e3:70:e8:36:6f:31:5c:d3:05:
49:a6:3c:7e:ea:c9:c9:5f:b2:ba:1f:80:08:3b:11:
cd:b6:ef:6e:43:ac:9f:9a:ff:91:cc:37:51:93:fc:
26:e9:6f:d1:18:26:23:63:64:40:8a:31:aa:1b:a9:
fb:a2:45:44:a0:87:c8:d1:1e:f4:7e:49:a4:c7:f0:
6c:45:25:b9:36:64:af:cf:60:66:dd:97:7e:57:77:
8c:a4:39:58:ca:77:f3:dd:28:28:52:f4:dc:8f:0b:
8d:57:91:97:2f:75:6d:28:00:f9:8f:9f:54:07:f3:
9b:57:79:d9:d7:13:d7:1d:e2:47:68:c4:b5:f0:73:
9b:52:b4:a3:93:42:a3:97:a4:cc:7b:24:fb:31:b8:
e1:08:03:6b:32:d1:9d:1c:b6:03:2f:df:56:4a:40:
49:84:7a:e6:3e:2c:3b:ed:94:2d:9d:15:8e:c8:00:
34:e4:68:1f:79:00:e3:be:82:58:f4:06:a3:b5:91:
44:02:64:54:35:67:42:a7:cc:35:78:0e:ce:26:12:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F6:01:C8:D8:0C:47:2D:A7:FC:54:39:67:C4:7E:AC:09:D6:19:00
X509v3 Authority Key Identifier:
keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/7fYByNgMRy2n_FQ5Z8R-rAnWGQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fc:6b:67:2c:bf:e7:ea:ee:bf:65:cd:88:6a:b9:a1:89:bc:
8e:f0:ac:90:3a:5e:40:29:3c:b8:fe:26:65:c3:25:06:22:d1:
30:59:7e:7f:db:3d:7c:c2:01:33:6d:26:03:c9:13:54:1a:7a:
d2:14:35:64:f5:58:4e:4a:cb:e3:af:2f:e3:d1:af:34:14:68:
92:99:97:2f:fe:68:bf:1f:89:06:b3:0f:0c:34:e9:8b:13:da:
7b:5d:6b:34:d6:30:ef:1b:f9:d3:23:83:fd:fd:5c:e0:be:07:
cc:1a:07:19:14:ef:c4:b8:ed:02:de:aa:34:f3:53:01:be:36:
52:52:5f:a0:db:a3:de:86:0b:aa:2a:16:2c:cd:4f:b0:78:37:
6a:6e:49:fc:28:b6:86:37:95:27:3d:ed:03:91:07:d9:4d:b3:
f1:4c:b2:49:70:67:f1:24:7c:20:76:fa:e3:89:64:4a:2b:a7:
b5:c5:bc:e3:f6:c3:72:ea:d4:b8:5c:a7:60:99:88:0d:52:38:
09:e5:ee:7e:d7:90:99:cf:8f:16:c4:db:da:ae:98:1a:ef:59:
1c:6f:ab:7c:f1:76:f2:49:1d:9e:41:07:51:c2:e9:87:c9:59:
d0:11:87:5d:93:fe:16:36:3e:db:4c:8c:d3:17:5b:9d:28:4c:
a3:fe:36:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEtJ0RDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MGQzYWM0ODI1ZGNhN2VlYzk3MDA1ZGJhM2IwYmZmMjc5MDRmNThhMB4XDTIyMDEw
MTAzNTMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRmNjAxYzhkODBj
NDcyZGE3ZmM1NDM5NjdjNDdlYWMwOWQ2MTkwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIw+HH7yKtkZSoW09v3PzZBdDL5rVpOfvFmBgfWXgldpp90Y
02JPvlOmc8Kv0c+IS1LI43DoNm8xXNMFSaY8furJyV+yuh+ACDsRzbbvbkOsn5r/
kcw3UZP8Julv0RgmI2NkQIoxqhup+6JFRKCHyNEe9H5JpMfwbEUluTZkr89gZt2X
fld3jKQ5WMp3890oKFL03I8LjVeRly91bSgA+Y+fVAfzm1d52dcT1x3iR2jEtfBz
m1K0o5NCo5ekzHsk+zG44QgDazLRnRy2Ay/fVkpASYR65j4sO+2ULZ0VjsgANORo
H3kA476CWPQGo7WRRAJkVDVnQqfMNXgOziYSAbsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTt9gHI2AxHLaf8VDlnxH6sCdYZADAfBgNVHSMEGDAWgBRg06xIJdyn7slw
BdujsL/yeQT1ijAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lOT3NTQ1hjcC03SmNBWGJvN0NfOG5rRTlZby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYjQ3NjVmLWE2MGYtNDM1Ni05ODJhLTFhZmQyNjQ5YjI5OS8x
LzdmWUJ5TmdNUnkybl9GUTVaOFItckFuV0dRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
YjQ3NjVmLWE2MGYtNDM1Ni05ODJhLTFhZmQyNjQ5YjI5OS8xL1lOT3NTQ1hjcC03
SmNBWGJvN0NfOG5rRTlZby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmQbTANBgkqhkiG9w0BAQsFAAOC
AQEAH/xrZyy/5+ruv2XNiGq5oYm8jvCskDpeQCk8uP4mZcMlBiLRMFl+f9s9fMIB
M20mA8kTVBp60hQ1ZPVYTkrL468v49GvNBRokpmXL/5ovx+JBrMPDDTpixPae11r
NNYw7xv50yOD/f1c4L4HzBoHGRTvxLjtAt6qNPNTAb42UlJfoNuj3oYLqioWLM1P
sHg3am5J/Ci2hjeVJz3tA5EH2U2z8UyySXBn8SR8IHb644lkSiuntcW84/bDcurU
uFynYJmIDVI4CeXufteQmc+PFsTb2q6YGu9ZHG+rfPF28kkdnkEHUcLph8lZ0BGH
XZP+FjY+20yM0xdbnShMo/428Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org