Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/kV59ThEy8X2kIWl-H4-M-9SRJFE.roa
File: kV59ThEy8X2kIWl-H4-M-9SRJFE.roa (raw, json)
Hash identifier: ax2MzP9HaULH8XXFgwg7g1sGwBjYu7DJpCH/TlsZSOU=
Subject key identifier: 91:5E:7D:4E:11:32:F1:7D:A4:21:69:7E:1F:8F:8C:FB:D4:91:24:51
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 13E8821F
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/kV59ThEy8X2kIWl-H4-M-9SRJFE.roa
Signing time: Sat 01 Jan 2022 13:54:52 +0000
ROA not before: Sat 01 Jan 2022 13:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197654
IP address blocks: 185.130.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334004767 (0x13e8821f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Jan 1 13:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=915e7d4e1132f17da421697e1f8f8cfbd4912451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:55:85:b5:d3:74:23:c3:b1:b3:52:84:a8:
a8:63:92:62:6c:78:a7:45:a3:8e:a7:d2:f9:a1:10:
d0:0c:93:0e:f0:b7:8a:49:8b:a4:4b:b0:5b:46:67:
05:e5:2e:be:67:a5:86:93:9d:ff:ca:e7:82:be:89:
99:c5:63:2a:4a:bd:74:4c:91:00:d4:f0:22:bb:09:
51:57:3e:54:6b:d8:af:88:bd:f1:f2:96:05:49:61:
96:00:35:79:ba:25:78:da:0c:f8:37:ff:6f:14:bd:
3c:1a:f6:c6:5f:12:ae:91:29:c1:b1:7d:1a:67:c8:
ff:da:96:df:c5:01:0b:dd:54:15:99:5f:90:b1:a8:
d5:b1:0e:0a:54:22:38:0e:0f:92:58:5e:31:bc:91:
94:df:7a:68:cb:65:de:47:a8:7f:6f:ce:d9:9d:5e:
94:4c:a0:a9:f2:f5:2d:89:dd:54:dd:1c:55:dc:55:
9e:58:97:4a:28:98:c3:19:59:e6:e8:ff:91:e6:d4:
be:4f:8a:9f:5f:38:0b:cc:d8:29:e0:aa:43:f6:fe:
aa:60:b3:d5:63:7c:35:39:11:53:d7:c6:71:69:6f:
65:59:c3:fa:fb:51:f4:76:5d:d0:ae:fa:19:4a:b1:
65:1e:e1:98:e5:d1:b0:81:e1:b1:af:2c:21:f9:54:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:7D:4E:11:32:F1:7D:A4:21:69:7E:1F:8F:8C:FB:D4:91:24:51
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/kV59ThEy8X2kIWl-H4-M-9SRJFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7e:3c:7a:c1:55:6e:fc:46:42:58:c6:63:bc:b3:fe:51:06:
c5:76:c9:a9:f5:56:e9:77:e1:95:d4:d5:79:69:6a:03:2c:b4:
c9:f6:ed:33:2e:bc:09:3a:f8:47:af:16:a6:dc:4a:0b:0f:b1:
22:46:14:43:2a:c9:5f:a1:5e:f5:00:4e:da:60:7c:36:c2:76:
a1:f5:e1:57:6a:3a:a3:79:71:87:25:76:96:33:49:b6:45:bc:
9b:92:20:ee:b9:fe:fd:9f:18:b7:f9:10:52:34:5c:cf:59:c2:
dd:f3:c4:c1:dc:38:ad:f4:c6:b9:f6:bd:cf:bf:49:60:4c:c7:
1b:02:2c:9f:dd:ad:a1:fe:3a:ad:65:a3:20:31:be:7a:f4:08:
74:ef:f5:ab:85:26:86:a9:bc:d5:92:49:5e:4d:7c:ff:37:2d:
f2:48:1f:00:3e:25:22:45:f9:bc:2c:bd:c7:32:f8:cc:74:ec:
63:3b:8c:8a:7c:cb:cd:65:9e:6a:96:8f:82:41:2f:2b:f0:b6:
c5:dc:fd:2f:c8:be:38:b9:ba:64:8f:70:bd:87:a3:ba:5e:19:
73:52:7a:9d:6a:37:72:a7:01:59:53:eb:ba:15:97:18:c2:e4:
5e:de:e8:3c:30:c0:cb:4a:17:b5:87:ff:b7:12:20:f1:69:e8:
90:b8:72:ac
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEE+iCHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzFiY2UyZWU4MDZlOTM2MjExMTJkYmQ2MTg1MzZmNzc1ZjQ0ZmJhMB4XDTIyMDEw
MTEzNTQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE1ZTdkNGUxMTMy
ZjE3ZGE0MjE2OTdlMWY4ZjhjZmJkNDkxMjQ1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6aVYW103Qjw7GzUoSoqGOSYmx4p0WjjqfS+aEQ0AyTDvC3
ikmLpEuwW0ZnBeUuvmelhpOd/8rngr6JmcVjKkq9dEyRANTwIrsJUVc+VGvYr4i9
8fKWBUlhlgA1eboleNoM+Df/bxS9PBr2xl8SrpEpwbF9GmfI/9qW38UBC91UFZlf
kLGo1bEOClQiOA4PklheMbyRlN96aMtl3keof2/O2Z1elEygqfL1LYndVN0cVdxV
nliXSiiYwxlZ5uj/kebUvk+Kn184C8zYKeCqQ/b+qmCz1WN8NTkRU9fGcWlvZVnD
+vtR9HZd0K76GUqxZR7hmOXRsIHhsa8sIflUqxMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSRXn1OETLxfaQhaX4fj4z71JEkUTAfBgNVHSMEGDAWgBQzG84u6AbpNiER
Lb1hhTb3dfRPujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L014dk9MdWdHNlRZaEVTMjlZWVUyOTNYMFQ3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNGJhM2NhLWQ2ZmQtNDExNi05MTQ2LWFlYWMxNjIyN2MyNS8x
L2tWNTlUaEV5OFgya0lXbC1INC1NLTlTUkpGRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NGJhM2NhLWQ2ZmQtNDExNi05MTQ2LWFlYWMxNjIyN2MyNS8xL014dk9MdWdHNlRZ
aEVTMjlZWVUyOTNYMFQ3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmCODANBgkqhkiG9w0BAQsFAAOC
AQEAjX48esFVbvxGQljGY7yz/lEGxXbJqfVW6XfhldTVeWlqAyy0yfbtMy68CTr4
R68WptxKCw+xIkYUQyrJX6Fe9QBO2mB8NsJ2ofXhV2o6o3lxhyV2ljNJtkW8m5Ig
7rn+/Z8Yt/kQUjRcz1nC3fPEwdw4rfTGufa9z79JYEzHGwIsn92tof46rWWjIDG+
evQIdO/1q4Umhqm81ZJJXk18/zct8kgfAD4lIkX5vCy9xzL4zHTsYzuMinzLzWWe
apaPgkEvK/C2xdz9L8i+OLm6ZI9wvYejul4Zc1J6nWo3cqcBWVPruhWXGMLkXt7o
PDDAy0oXtYf/txIg8WnokLhyrA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:23 2025 by rpki-client