Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/1-w5_blXbYKCYNb5bhYymS_bQHUI.roa
File: 1-w5_blXbYKCYNb5bhYymS_bQHUI.roa (raw, json)
Hash identifier: uUTRvBeRIDQieT5ML5PQkCwEgBqwaYY/D1+MPt11kTQ=
Subject key identifier: FB:0E:7F:6E:55:DB:60:A0:98:35:BE:5B:85:8C:A6:4B:F6:D0:1D:42
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 018463C3BC300DDC705259F2B3FBB1A07D34
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/1-w5_blXbYKCYNb5bhYymS_bQHUI.roa
Signing time: Thu 10 Nov 2022 22:58:02 +0000
ROA not before: Thu 10 Nov 2022 22:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202124
IP address blocks: 185.235.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:63:c3:bc:30:0d:dc:70:52:59:f2:b3:fb:b1:a0:7d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Nov 10 22:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb0e7f6e55db60a09835be5b858ca64bf6d01d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:91:dd:e9:34:98:e5:55:a4:3b:29:fe:17:
6d:28:8c:e9:99:70:f6:bf:f9:be:6d:f9:76:73:65:
61:b7:d1:3a:81:eb:2b:9b:aa:4a:86:19:30:1f:0a:
75:87:33:1d:e3:f3:2b:b2:ca:85:4d:fd:2c:2a:cb:
62:99:aa:de:da:ab:2c:8a:63:40:29:50:a4:32:5f:
c4:32:1c:31:dc:17:b9:e1:f0:7e:35:45:04:f1:de:
71:95:9a:50:c4:96:2f:16:ce:6c:54:d1:62:1c:1e:
e1:98:c4:52:f5:43:79:5e:67:c4:7c:51:c5:46:5f:
65:4f:27:8b:0f:25:0d:5c:65:06:37:98:3a:bd:13:
99:68:f6:47:32:7a:6e:35:66:3b:d1:97:5b:a8:13:
4f:10:05:99:4f:79:fc:2a:0e:63:e5:ed:fd:a6:ad:
11:c3:ee:8c:17:df:8c:f7:ff:2b:29:d8:46:74:a9:
54:98:0c:24:66:38:5f:21:be:9f:91:63:8a:33:e5:
ec:0a:b2:b6:b7:38:a9:37:4d:59:91:8d:ab:68:f6:
0b:5b:49:aa:ba:af:0b:25:4a:8f:b1:7c:a1:eb:e1:
37:bd:ff:e9:86:a4:7e:d4:78:63:4d:87:db:c3:9b:
b0:5f:41:78:71:ed:f7:22:d9:42:d0:70:91:5f:04:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:7F:6E:55:DB:60:A0:98:35:BE:5B:85:8C:A6:4B:F6:D0:1D:42
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/1-w5_blXbYKCYNb5bhYymS_bQHUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.46.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:9c:43:1b:66:4b:e6:73:20:92:4b:bf:b7:1f:e0:8a:bf:0a:
dc:2f:3f:83:06:6a:6d:fc:3d:b5:e4:65:09:97:15:04:5c:3a:
88:56:a0:fe:4d:b1:8b:af:7a:26:da:ab:48:91:9f:5b:99:55:
40:22:f9:b9:88:47:3f:67:a2:3a:75:05:d3:91:61:46:b5:cf:
a5:fb:17:a7:7c:0c:e6:39:ee:8e:28:e1:d6:f5:75:16:54:bb:
e1:ab:de:10:fe:5d:de:98:24:f0:94:1a:b2:0b:ee:2c:5c:c1:
5a:2d:3c:b9:b3:de:c0:85:23:83:00:21:d0:45:34:c9:b4:39:
02:81:97:5e:a7:3d:6d:9a:b6:dd:96:9a:d0:6e:51:c6:b9:ce:
57:f4:ea:ad:e4:66:a8:7b:59:55:4a:0b:ab:39:57:e2:f5:68:
6e:bd:95:b4:13:78:83:8b:79:f0:c9:8d:31:1e:81:73:20:92:
30:ca:bc:1d:70:9d:dd:61:b2:25:ce:0f:77:f9:d6:5d:c8:47:
2b:20:c9:86:3a:a6:ca:74:ff:22:eb:a6:59:67:2f:2b:cd:d8:
ec:e0:0b:ba:fa:66:7b:3e:87:3a:a3:34:0c:19:af:aa:13:7a:
d9:6f:94:b6:bb:e8:ea:c4:92:68:56:4e:51:41:c5:ea:ea:2b:
a6:77:c5:3d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYRjw7wwDdxwUlnys/uxoH00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1
MzM2MTcwHhcNMjIxMTEwMjI1ODAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjBlN2Y2ZTU1ZGI2MGEwOTgzNWJlNWI4NThjYTY0YmY2ZDAxZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmuR3ek0mOVVpDsp/hdtKIzpmXD2
v/m+bfl2c2Vht9E6gesrm6pKhhkwHwp1hzMd4/MrssqFTf0sKstimare2qssimNA
KVCkMl/EMhwx3Be54fB+NUUE8d5xlZpQxJYvFs5sVNFiHB7hmMRS9UN5XmfEfFHF
Rl9lTyeLDyUNXGUGN5g6vROZaPZHMnpuNWY70ZdbqBNPEAWZT3n8Kg5j5e39pq0R
w+6MF9+M9/8rKdhGdKlUmAwkZjhfIb6fkWOKM+XsCrK2tzipN01ZkY2raPYLW0mq
uq8LJUqPsXyh6+E3vf/phqR+1HhjTYfbw5uwX0F4ce33ItlC0HCRXwRF6wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsOf25V22CgmDW+W4WMpkv20B1CMB8GA1UdIwQY
MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt
MGVkMjRlYmM0ZWQ4LzEvMS13NV9ibFhiWUtDWU5iNWJoWXltU19iUUhVSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWMvZTMyZGY4LTNhMWUtNDJmYy1iMzUxLTBlZDI0ZWJjNGVk
OC8xL3gzX2dCZGZsanNBenlwcTZoLUJnWUNGVE5oYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnrLjAN
BgkqhkiG9w0BAQsFAAOCAQEA05xDG2ZL5nMgkku/tx/gir8K3C8/gwZqbfw9teRl
CZcVBFw6iFag/k2xi696JtqrSJGfW5lVQCL5uYhHP2eiOnUF05FhRrXPpfsXp3wM
5jnujijh1vV1FlS74aveEP5d3pgk8JQasgvuLFzBWi08ubPewIUjgwAh0EU0ybQ5
AoGXXqc9bZq23Zaa0G5RxrnOV/TqreRmqHtZVUoLqzlX4vVobr2VtBN4g4t58MmN
MR6BcyCSMMq8HXCd3WGyJc4Pd/nWXchHKyDJhjqmynT/IuumWWcvK83Y7OALuvpm
ez6HOqM0DBmvqhN62W+Utrvo6sSSaFZOUUHF6uorpnfFPQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:47 2023 by rpki-client on console-ams.rpki-client.org