Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/XRHtIfNTOMd4DmswnAu71sipQ6A.roa
File: XRHtIfNTOMd4DmswnAu71sipQ6A.roa (raw, json)
Hash identifier: AsvsQHHu7AiUFVZPbEHl3KmW8EmWdi6CTXIGybTgn3U=
Subject key identifier: 5D:11:ED:21:F3:53:38:C7:78:0E:6B:30:9C:0B:BB:D6:C8:A9:43:A0
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 0A00FF21
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/XRHtIfNTOMd4DmswnAu71sipQ6A.roa
Signing time: Sat 01 Jan 2022 06:59:36 +0000
ROA not before: Sat 01 Jan 2022 06:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202932
IP address blocks: 185.136.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167837473 (0xa00ff21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Jan 1 06:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d11ed21f35338c7780e6b309c0bbbd6c8a943a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:6f:d7:2d:72:5e:45:9f:19:81:1c:ec:bc:
c4:24:51:95:f8:b6:3a:de:1b:19:55:59:75:cc:cb:
7c:be:a8:77:0b:51:ca:8b:fb:3a:a1:64:01:dd:54:
c0:dc:c1:a1:2a:d6:08:16:74:c2:f4:22:bd:fe:96:
35:3e:41:2d:3d:ad:df:57:37:92:1d:9f:a4:d6:1c:
78:2e:f6:2b:cb:66:bf:0c:1f:62:5c:dc:36:92:61:
f4:d1:c9:da:47:2c:3c:3c:b6:87:f7:c3:b3:0c:b9:
b1:b0:b7:15:c5:84:aa:cb:2b:da:74:af:9b:da:7c:
cf:e3:c6:85:0c:a2:c7:40:fc:bc:9a:19:60:96:c8:
65:58:a0:eb:37:db:89:49:96:e5:eb:4a:82:60:62:
a6:b8:cd:40:a4:87:91:ac:ab:0c:57:0e:07:2c:7f:
57:b1:bf:15:ea:9a:d0:84:00:dc:d2:c0:3a:ac:6b:
a8:4f:c9:60:55:1c:0a:50:5d:48:80:be:20:52:67:
a5:78:e5:24:65:ea:20:97:b4:4c:91:fc:ef:f6:19:
b1:cf:cf:fa:46:b2:10:15:d1:6b:6e:25:01:1e:2e:
ce:5a:a3:b6:27:49:40:0f:01:3e:87:5c:6d:c6:fe:
59:19:15:22:50:e8:d9:08:04:6b:d3:0e:89:4b:3f:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:11:ED:21:F3:53:38:C7:78:0E:6B:30:9C:0B:BB:D6:C8:A9:43:A0
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/XRHtIfNTOMd4DmswnAu71sipQ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.4.0/22
Signature Algorithm: sha256WithRSAEncryption
64:cc:45:54:9d:94:ab:8d:a8:b4:a3:f8:0d:a9:d2:69:52:1a:
29:c2:8b:c4:bc:bd:69:40:8b:e4:b4:9f:0b:c2:04:08:0d:b3:
98:cb:f5:97:51:a0:a8:7a:4d:5f:20:61:a6:53:68:6b:be:31:
71:21:57:d3:b0:db:c3:32:5d:51:9e:ca:3e:d5:61:8d:d4:be:
22:4c:e2:1d:b2:7c:5c:97:09:08:3a:95:e3:35:0d:34:01:93:
6b:18:25:49:e5:85:6b:69:22:99:cd:3f:d3:1c:33:94:0c:3b:
d2:0f:54:1b:b0:20:18:0d:83:75:4a:9f:f9:a1:2b:e4:81:bc:
19:ee:84:8c:c1:43:4f:da:28:b1:18:3c:8d:e6:4b:a9:9b:69:
4d:d2:24:ae:ef:97:a2:c9:80:eb:e8:56:9b:68:9b:9b:16:fa:
f9:6f:c9:cc:3d:c5:e3:51:a8:af:4b:5e:75:5a:60:77:a6:64:
b0:b8:23:09:53:0e:8d:d3:63:62:35:28:1e:db:c2:d2:79:e7:
30:fa:b9:3e:8a:07:1a:0e:97:c5:1e:cc:e0:ca:d7:de:ed:2b:
ac:21:35:7d:87:ea:8c:6d:32:cb:13:c8:97:b2:b1:72:d3:59:
37:00:41:fe:09:39:28:cd:15:29:76:dc:a4:c1:ff:4f:c8:ac:
b7:e7:93:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECgD/ITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
M2ZlZGI1MDA5NTI2ZjBjNmJhZDQyM2YwMGNkYTA4YTA5MzNiNzhiMB4XDTIyMDEw
MTA2NTkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWQxMWVkMjFmMzUz
MzhjNzc4MGU2YjMwOWMwYmJiZDZjOGE5NDNhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI+db9ctcl5FnxmBHOy8xCRRlfi2Ot4bGVVZdczLfL6odwtR
yov7OqFkAd1UwNzBoSrWCBZ0wvQivf6WNT5BLT2t31c3kh2fpNYceC72K8tmvwwf
YlzcNpJh9NHJ2kcsPDy2h/fDswy5sbC3FcWEqssr2nSvm9p8z+PGhQyix0D8vJoZ
YJbIZVig6zfbiUmW5etKgmBiprjNQKSHkayrDFcOByx/V7G/Feqa0IQA3NLAOqxr
qE/JYFUcClBdSIC+IFJnpXjlJGXqIJe0TJH87/YZsc/P+kayEBXRa24lAR4uzlqj
tidJQA8BPodcbcb+WRkVIlDo2QgEa9MOiUs/LAECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRdEe0h81M4x3gOazCcC7vWyKlDoDAfBgNVHSMEGDAWgBSz/ttQCVJvDGut
Qj8AzaCKCTO3izAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NfN2JVQWxTYnd4cnJVSV9BTTJnaWdrenQ0cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvYTVjZWRjLWJmNjEtNGNiYy1hYjM2LWFkMDk1M2Y3ZmQ0OS8x
L1hSSHRJZk5UT01kNERtc3duQXU3MXNpcFE2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
YTVjZWRjLWJmNjEtNGNiYy1hYjM2LWFkMDk1M2Y3ZmQ0OS8xL3NfN2JVQWxTYnd4
cnJVSV9BTTJnaWdrenQ0cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmIBDANBgkqhkiG9w0BAQsFAAOC
AQEAZMxFVJ2Uq42otKP4DanSaVIaKcKLxLy9aUCL5LSfC8IECA2zmMv1l1GgqHpN
XyBhplNoa74xcSFX07DbwzJdUZ7KPtVhjdS+IkziHbJ8XJcJCDqV4zUNNAGTaxgl
SeWFa2kimc0/0xwzlAw70g9UG7AgGA2DdUqf+aEr5IG8Ge6EjMFDT9oosRg8jeZL
qZtpTdIkru+XosmA6+hWm2ibmxb6+W/JzD3F41Gor0tedVpgd6ZksLgjCVMOjdNj
YjUoHtvC0nnnMPq5PooHGg6XxR7M4MrX3u0rrCE1fYfqjG0yyxPIl7KxctNZNwBB
/gk5KM0VKXbcpMH/T8ist+eTmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:35 2024 by rpki-client on console-ams.rpki-client.org