Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/k60XgyPBJ11xbhtRiG9qD48bBgM.roa
File: k60XgyPBJ11xbhtRiG9qD48bBgM.roa (raw, json)
Hash identifier: K5x41oqFlFJ7BGDpFtwNoQ6G6LHu7R1QInAogjpCFvQ=
Subject key identifier: 93:AD:17:83:23:C1:27:5D:71:6E:1B:51:88:6F:6A:0F:8F:1B:06:03
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 0E5C860F
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/k60XgyPBJ11xbhtRiG9qD48bBgM.roa
Signing time: Sun 10 Apr 2022 13:54:50 +0000
ROA not before: Sun 10 Apr 2022 13:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42083
IP address blocks: 185.208.100.0/24 maxlen: 24
185.208.101.0/24 maxlen: 24
185.208.102.0/24 maxlen: 24
185.208.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240944655 (0xe5c860f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Apr 10 13:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93ad178323c1275d716e1b51886f6a0f8f1b0603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:7d:65:e3:aa:93:5c:06:7f:02:cc:28:37:
5b:81:19:90:be:35:88:d2:a1:9b:1b:f0:d5:cd:a4:
cc:5a:f0:66:b5:67:c5:d6:15:7a:51:0d:32:7c:6e:
92:b2:fc:ec:fc:09:24:3a:ce:32:b4:63:bd:ba:53:
3b:5c:9e:32:5b:ca:f2:5e:4d:a2:90:f3:c3:7b:d0:
21:a6:06:e7:bc:c9:77:83:37:2c:9b:da:9b:3a:72:
9b:4b:bb:1e:4c:d0:b3:54:86:94:b1:95:e9:c0:51:
0f:d3:af:5d:b6:b1:f0:53:2b:db:80:ba:c9:c4:6a:
3a:34:96:70:58:2d:cc:11:29:b7:d4:52:f7:b2:bd:
a8:60:d9:0c:d6:20:17:df:e9:70:45:b7:bd:18:3d:
a2:77:0c:2e:ca:b4:b6:de:90:0f:df:a8:b5:91:39:
ef:ca:7a:26:61:17:1a:ed:b9:f0:e6:47:df:70:86:
31:2d:53:39:5b:f4:ef:27:5d:5e:08:59:71:7a:d2:
69:b0:0c:e2:f9:e4:53:84:4d:d2:b3:b2:56:db:76:
bc:e3:dc:dc:ca:00:5f:b2:ad:00:d2:ab:51:70:db:
37:28:93:07:45:35:c8:c8:83:92:63:30:19:b7:ed:
6f:77:3b:1a:8d:98:62:8d:74:58:93:8d:c5:5c:ec:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AD:17:83:23:C1:27:5D:71:6E:1B:51:88:6F:6A:0F:8F:1B:06:03
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/k60XgyPBJ11xbhtRiG9qD48bBgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.100.0/22
Signature Algorithm: sha256WithRSAEncryption
92:b3:9f:a8:68:00:89:6a:f7:6e:5d:8d:8f:03:55:cc:ad:2f:
09:f1:4e:af:08:47:ff:65:6e:7a:50:d9:49:d6:96:b5:00:9f:
c8:d2:98:17:f4:18:d3:84:b9:3c:31:a8:ae:47:53:f5:fc:f1:
5f:1a:06:4c:94:f5:fe:d9:17:20:29:bb:e8:fd:ad:31:03:f1:
73:1e:97:99:50:9d:48:08:41:80:7a:ff:7e:80:9a:65:38:2f:
e0:86:f3:6c:bd:f7:2b:ec:b5:e7:a3:dc:5a:35:bd:a2:4a:d7:
69:49:a6:0a:a7:8f:09:f3:1a:10:b9:07:f2:3c:ab:6e:f7:27:
29:06:73:0c:ca:4b:5b:9f:ed:33:4c:87:55:69:72:4b:04:dc:
c8:91:89:87:e2:d1:b8:81:d6:e7:76:c4:ac:da:ed:f5:ff:1d:
48:9d:e1:3b:f5:d3:2f:cd:41:f6:f9:bf:4c:8e:fb:cf:9a:1b:
3b:f6:1a:cf:51:f3:ad:66:17:04:82:95:37:1a:cc:a2:59:1b:
1e:e8:36:eb:9c:4c:45:b2:c2:05:03:29:b8:5f:c3:29:93:70:
33:a9:29:91:bc:28:14:90:dc:35:94:13:24:b2:b3:6e:c4:59:
32:89:ae:8c:55:66:2f:40:16:9b:b9:70:43:5e:23:b6:43:cf:
a6:2a:ff:e5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDlyGDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NTg4YTA3OWU0Y2ViNmJiMjRjMjNjNTI3MWU0NTgzZTFjZjJmOWE5MB4XDTIyMDQx
MDEzNTQ1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTNhZDE3ODMyM2Mx
Mjc1ZDcxNmUxYjUxODg2ZjZhMGY4ZjFiMDYwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALazfWXjqpNcBn8CzCg3W4EZkL41iNKhmxvw1c2kzFrwZrVn
xdYVelENMnxukrL87PwJJDrOMrRjvbpTO1yeMlvK8l5NopDzw3vQIaYG57zJd4M3
LJvamzpym0u7HkzQs1SGlLGV6cBRD9OvXbax8FMr24C6ycRqOjSWcFgtzBEpt9RS
97K9qGDZDNYgF9/pcEW3vRg9oncMLsq0tt6QD9+otZE578p6JmEXGu258OZH33CG
MS1TOVv07yddXghZcXrSabAM4vnkU4RN0rOyVtt2vOPc3MoAX7KtANKrUXDbNyiT
B0U1yMiDkmMwGbftb3c7Go2YYo10WJONxVzsdn8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSTrReDI8EnXXFuG1GIb2oPjxsGAzAfBgNVHSMEGDAWgBTFiKB55M62uyTC
PFJx5Fg+HPL5qTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hZaWdlZVRPdHJza3dqeFNjZVJZUGh6eS1hay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTIvYmI0YjhmLWI2YTItNGQwMC05NjEyLTE3ZWRiOThiYmIwOC8x
L2s2MFhneVBCSjExeGJodFJpRzlxRDQ4YkJnTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIv
YmI0YjhmLWI2YTItNGQwMC05NjEyLTE3ZWRiOThiYmIwOC8xL3hZaWdlZVRPdHJz
a3dqeFNjZVJZUGh6eS1hay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnQZDANBgkqhkiG9w0BAQsFAAOC
AQEAkrOfqGgAiWr3bl2NjwNVzK0vCfFOrwhH/2VuelDZSdaWtQCfyNKYF/QY04S5
PDGorkdT9fzxXxoGTJT1/tkXICm76P2tMQPxcx6XmVCdSAhBgHr/foCaZTgv4Ibz
bL33K+y156PcWjW9okrXaUmmCqePCfMaELkH8jyrbvcnKQZzDMpLW5/tM0yHVWly
SwTcyJGJh+LRuIHW53bErNrt9f8dSJ3hO/XTL81B9vm/TI77z5obO/Yaz1HzrWYX
BIKVNxrMolkbHug265xMRbLCBQMpuF/DKZNwM6kpkbwoFJDcNZQTJLKzbsRZMomu
jFVmL0AWm7lwQ14jtkPPpir/5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:52 2024 by rpki-client on console-fra.rpki-client.org