Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/x8DAMxoa145yMicgRYdwhRfGGIE.roa
File: x8DAMxoa145yMicgRYdwhRfGGIE.roa (raw, json)
Hash identifier: PD6qnT7ijvwUt1ijEz50igJEBcUg2coFYd4awlUD42Y=
Subject key identifier: C7:C0:C0:33:1A:1A:D7:8E:72:32:27:20:45:87:70:85:17:C6:18:81
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184B49A717EFCE4804085519E723F7F53C8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/x8DAMxoa145yMicgRYdwhRfGGIE.roa
Signing time: Sat 26 Nov 2022 15:42:11 +0000
ROA not before: Sat 26 Nov 2022 15:42:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211617
IP address blocks: 194.56.226.0/24 maxlen: 24
185.186.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b4:9a:71:7e:fc:e4:80:40:85:51:9e:72:3f:7f:53:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 26 15:42:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c0c0331a1ad78e723227204587708517c61881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:56:ec:05:e5:47:3b:5d:8d:f4:a5:90:ba:
03:c8:ae:98:b5:66:e2:85:24:dd:f7:0d:a6:e3:25:
5c:de:a4:ca:28:40:b8:98:2c:05:c9:9c:7c:8c:b5:
cd:6d:9e:8e:e4:1c:04:04:51:10:8e:80:94:74:23:
cd:7e:8f:49:19:88:43:ea:54:7e:8e:64:b7:29:36:
5c:58:8d:69:5b:6e:b1:a3:b1:08:4b:62:80:ab:83:
72:0b:7c:b7:1c:03:7c:b2:8c:61:8e:c3:84:18:fc:
2c:7e:44:9e:ac:9f:e2:d6:95:74:7c:64:51:5b:66:
70:65:f5:83:86:72:d1:d1:06:1a:44:fb:6c:d3:af:
2e:d2:08:b1:42:dd:5d:4a:ef:e1:92:07:75:1f:0d:
64:b6:89:21:37:f3:86:56:b8:74:8e:fb:6a:d9:70:
33:73:2e:81:19:5e:9d:93:4b:83:74:a0:84:f2:f5:
d6:cf:78:0e:b1:41:68:56:e4:58:f3:23:cb:b6:17:
4b:1f:44:eb:96:e9:23:a2:d9:45:3a:a0:1d:73:8f:
79:75:cc:5a:ae:c7:18:04:30:67:d6:6e:cd:18:d9:
8f:ea:0a:3f:9d:01:e3:65:9f:71:84:19:bb:ce:c1:
f2:19:94:d6:f4:b4:12:3c:16:bc:c7:96:f2:10:9d:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:C0:33:1A:1A:D7:8E:72:32:27:20:45:87:70:85:17:C6:18:81
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/x8DAMxoa145yMicgRYdwhRfGGIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.67.0/24
194.56.226.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ff:ca:c1:da:f1:81:8e:93:cd:41:8a:45:3b:be:a0:dd:38:
82:76:7f:b6:85:cb:2d:6e:46:47:9f:f2:65:ef:66:9a:99:63:
e6:89:1a:e1:8c:84:41:24:eb:ad:9f:73:40:a6:ea:7d:57:c9:
69:5b:69:1f:0d:88:ac:f5:aa:3f:47:b6:89:f8:62:32:ed:cc:
29:f6:d7:b5:9b:d0:bd:a3:4d:02:79:3b:9d:f0:09:6e:98:80:
3e:9e:9a:1f:90:81:c2:0a:d2:a8:89:bf:b2:bf:6f:48:00:0b:
9a:fe:fa:c1:55:e2:42:1b:93:6c:d4:c0:ba:be:7e:35:4f:00:
7e:d8:ad:b6:f3:55:12:a5:4e:35:52:0a:63:7b:4b:f8:b3:3b:
8d:b4:85:1b:83:75:3d:77:08:9a:aa:18:2d:e8:e0:fe:28:e9:
73:09:b6:3a:99:77:df:f3:e7:a4:df:b0:4b:b8:5d:61:9c:39:
a3:7a:7d:bf:06:45:c0:a3:d4:d3:c7:8c:25:c4:48:ff:4d:1c:
7b:97:54:4c:57:28:ee:d6:89:b9:6c:4f:d3:d3:62:39:f7:f8:
32:b7:d7:9a:57:1d:5c:97:59:07:34:38:23:8a:df:e4:f5:2e:
ac:61:4f:42:cf:cc:01:6a:27:5c:65:2b:5c:6d:77:9c:5e:af:
b6:c5:ca:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYS0mnF+/OSAQIVRnnI/f1PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjIxMTI2MTU0MjExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2MwYzAzMzFhMWFkNzhlNzIzMjI3MjA0NTg3NzA4NTE3YzYxODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lRW7AXlRztdjfSlkLoDyK6YtWbi
hSTd9w2m4yVc3qTKKEC4mCwFyZx8jLXNbZ6O5BwEBFEQjoCUdCPNfo9JGYhD6lR+
jmS3KTZcWI1pW26xo7EIS2KAq4NyC3y3HAN8soxhjsOEGPwsfkSerJ/i1pV0fGRR
W2ZwZfWDhnLR0QYaRPts068u0gixQt1dSu/hkgd1Hw1ktokhN/OGVrh0jvtq2XAz
cy6BGV6dk0uDdKCE8vXWz3gOsUFoVuRY8yPLthdLH0TrlukjotlFOqAdc495dcxa
rscYBDBn1m7NGNmP6go/nQHjZZ9xhBm7zsHyGZTW9LQSPBa8x5byEJ21oQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMfAwDMaGteOcjInIEWHcIUXxhiBMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEveDhEQU14b2ExNDV5TWljZ1JZZHdoUmZHR0lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubpDAwQA
wjjiMA0GCSqGSIb3DQEBCwUAA4IBAQC9/8rB2vGBjpPNQYpFO76g3TiCdn+2hcst
bkZHn/Jl72aamWPmiRrhjIRBJOutn3NApup9V8lpW2kfDYis9ao/R7aJ+GIy7cwp
9te1m9C9o00CeTud8AlumIA+npofkIHCCtKoib+yv29IAAua/vrBVeJCG5Ns1MC6
vn41TwB+2K2281USpU41Ugpje0v4szuNtIUbg3U9dwiaqhgt6OD+KOlzCbY6mXff
8+ek37BLuF1hnDmjen2/BkXAo9TTx4wlxEj/TRx7l1RMVyju1om5bE/T02I59/gy
t9eaVx1cl1kHNDgjit/k9S6sYU9Cz8wBaidcZStcbXecXq+2xcp5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org