Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/aQa9P4WZX5346VNVCe1ivA8PNOE.roa
File: aQa9P4WZX5346VNVCe1ivA8PNOE.roa (raw, json)
Hash identifier: 9WnEimTfXZOpRDIaTqJor4mf9xmIajdqiMKGc8b3ECw=
Subject key identifier: 69:06:BD:3F:85:99:5F:9D:F8:E9:53:55:09:ED:62:BC:0F:0F:34:E1
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0182DA0000290D7AE0E7DDDFE7E5631B1FE3
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/aQa9P4WZX5346VNVCe1ivA8PNOE.roa
Signing time: Fri 26 Aug 2022 11:53:29 +0000
ROA not before: Fri 26 Aug 2022 11:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.244.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:00:00:29:0d:7a:e0:e7:dd:df:e7:e5:63:1b:1f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Aug 26 11:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6906bd3f85995f9df8e9535509ed62bc0f0f34e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:3d:59:bc:dd:8e:87:23:c1:19:b1:2b:15:
a8:8e:81:4f:92:69:b9:43:80:9e:c0:6a:fc:03:f0:
70:d9:48:00:0f:f1:2c:b1:dd:4a:5c:5b:18:6d:84:
c9:a3:94:4a:f2:a7:90:61:3b:22:9b:3e:e4:0f:1e:
0c:f9:f5:e2:c7:35:86:e6:b5:1b:a8:9f:74:69:25:
67:50:00:6e:b2:94:3d:a0:48:b6:11:2c:f1:8d:53:
e0:c8:6f:31:35:3f:3f:00:13:3e:bd:63:fe:a2:82:
45:56:92:0c:2a:98:f8:e6:cd:ea:9f:32:02:27:91:
cf:97:51:35:83:26:cf:e7:b2:06:4e:7d:81:5a:15:
00:5c:54:62:fb:2a:cd:c4:29:58:5b:68:d0:40:fa:
9a:16:58:d2:9b:91:2c:c4:00:69:f7:ab:4e:1c:63:
46:ea:63:04:bf:57:cf:7e:cb:69:4a:49:55:34:03:
1c:fb:83:e5:ad:b1:3c:7b:be:96:24:d4:fd:2f:3a:
6a:b6:09:3d:55:c4:dd:14:19:e0:c1:70:ff:55:c7:
29:84:df:61:fb:33:8f:86:b0:5d:39:33:5e:4a:00:
bc:48:6c:7c:74:02:cf:a9:11:97:1a:07:21:c2:29:
09:a5:a6:1a:a2:f6:a6:87:b3:db:31:8a:b1:2a:bd:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:BD:3F:85:99:5F:9D:F8:E9:53:55:09:ED:62:BC:0F:0F:34:E1
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/aQa9P4WZX5346VNVCe1ivA8PNOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8f:e6:98:74:df:b3:8a:ab:5f:a1:2f:b3:9a:c6:1a:30:99:
78:ef:46:d0:43:80:cd:0e:cf:04:6f:72:ab:61:92:51:e2:c1:
26:27:06:d9:0f:b1:d2:b9:d0:15:c0:b5:95:53:2e:cd:9f:ef:
7a:7c:1a:2f:51:f6:6d:90:a4:c7:bb:ae:67:b0:60:87:e8:3a:
39:24:16:f0:b7:95:df:1d:d4:da:16:e5:89:37:e2:5e:52:88:
2f:44:59:a8:ce:a0:eb:8d:5a:da:89:04:39:90:95:17:86:bb:
82:da:98:c3:49:49:de:90:25:49:7e:9d:ec:06:17:4d:77:05:
d4:10:4b:58:a1:6a:c3:7e:71:90:05:d6:e0:f7:26:66:39:88:
93:26:4d:1e:ab:f3:ef:fc:f5:c4:1c:0c:d6:ba:db:f4:21:18:
3b:b5:76:57:72:fd:77:92:e2:2f:06:5a:66:42:b0:77:91:62:
e0:ea:b8:fe:9f:9e:b2:7f:c3:e6:57:93:b8:e3:ee:3d:af:d3:
8e:49:0c:ec:5c:16:ff:93:c3:5b:65:88:55:88:2a:95:c0:1c:
f5:23:af:9d:22:14:18:71:e7:00:06:80:8a:ca:6c:c2:74:4f:
32:56:c4:f1:09:60:a0:0c:d1:d4:bc:59:fe:0f:4b:fe:49:cb:
ce:c6:99:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLaAAApDXrg593f5+VjGx/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjIwODI2MTE1MzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTA2YmQzZjg1OTk1ZjlkZjhlOTUzNTUwOWVkNjJiYzBmMGYzNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+49WbzdjocjwRmxKxWojoFPkmm5
Q4CewGr8A/Bw2UgAD/Essd1KXFsYbYTJo5RK8qeQYTsimz7kDx4M+fXixzWG5rUb
qJ90aSVnUABuspQ9oEi2ESzxjVPgyG8xNT8/ABM+vWP+ooJFVpIMKpj45s3qnzIC
J5HPl1E1gybP57IGTn2BWhUAXFRi+yrNxClYW2jQQPqaFljSm5EsxABp96tOHGNG
6mMEv1fPfstpSklVNAMc+4PlrbE8e76WJNT9Lzpqtgk9VcTdFBngwXD/VccphN9h
+zOPhrBdOTNeSgC8SGx8dALPqRGXGgchwikJpaYaovamh7PbMYqxKr067wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkGvT+FmV+d+OlTVQntYrwPDzThMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvYVFhOVA0V1pYNTM0NlZOVkNlMWl2QThQTk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufRrMA0G
CSqGSIb3DQEBCwUAA4IBAQBSj+aYdN+ziqtfoS+zmsYaMJl470bQQ4DNDs8Eb3Kr
YZJR4sEmJwbZD7HSudAVwLWVUy7Nn+96fBovUfZtkKTHu65nsGCH6Do5JBbwt5Xf
HdTaFuWJN+JeUogvRFmozqDrjVraiQQ5kJUXhruC2pjDSUnekCVJfp3sBhdNdwXU
EEtYoWrDfnGQBdbg9yZmOYiTJk0eq/Pv/PXEHAzWutv0IRg7tXZXcv13kuIvBlpm
QrB3kWLg6rj+n56yf8PmV5O44+49r9OOSQzsXBb/k8NbZYhViCqVwBz1I6+dIhQY
cecABoCKymzCdE8yVsTxCWCgDNHUvFn+D0v+ScvOxpms
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org