Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/RmhxK7W1-ENYvsWRAnZpRExxhQM.roa
File: RmhxK7W1-ENYvsWRAnZpRExxhQM.roa (raw, json)
Hash identifier: tl0T5wK6vpWnxYiBRCwyHvpJy0LteytuCMRbTNN910Q=
Subject key identifier: 46:68:71:2B:B5:B5:F8:43:58:BE:C5:91:02:76:69:44:4C:71:85:03
Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial: 03174D56
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/RmhxK7W1-ENYvsWRAnZpRExxhQM.roa
Signing time: Sat 01 Jan 2022 03:57:25 +0000
ROA not before: Sat 01 Jan 2022 03:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199477
IP address blocks: 185.11.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51858774 (0x3174d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Validity
Not Before: Jan 1 03:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4668712bb5b5f84358bec591027669444c718503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:8a:34:28:c7:ba:76:8b:7d:cd:30:b4:31:
9b:ee:07:c0:f4:89:b8:12:38:d1:c1:ca:56:ac:57:
1a:72:7b:68:05:9a:e1:c3:49:29:e3:67:bc:b6:22:
84:f6:9a:e8:4c:f5:0b:8e:5f:43:74:c5:47:5d:25:
6a:47:11:d6:16:1a:92:10:c0:19:ef:4c:b2:d1:e1:
a7:0a:74:38:2a:91:04:1f:2c:ad:cb:82:19:ef:df:
72:9b:20:bb:fe:57:b4:95:4e:71:5b:ae:5e:ec:cf:
24:ca:72:6b:78:b4:8b:7b:e8:6b:0d:e0:b4:6e:87:
ba:07:76:86:5c:dc:0d:c4:c9:74:77:e6:b5:07:5a:
3f:0f:75:a0:54:18:8c:b4:90:cf:a3:d7:03:f0:42:
ce:30:e0:16:0e:25:cb:cc:f2:1f:c0:b9:5b:a3:c1:
f0:4a:d4:36:43:a1:82:cb:20:c4:06:cb:92:98:ce:
06:47:a9:51:70:bc:a6:3f:cd:7e:c2:7e:49:04:5f:
f5:60:e3:82:2a:4e:17:1d:c9:ed:43:cd:89:f1:87:
b6:20:18:f4:5d:86:3f:6f:a3:f8:ca:5d:06:24:77:
ac:69:4a:73:a2:d5:99:eb:17:9a:19:b0:6b:31:2f:
df:3a:18:11:32:f9:ed:e8:f8:ec:ea:5a:d0:35:7d:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:71:2B:B5:B5:F8:43:58:BE:C5:91:02:76:69:44:4C:71:85:03
X509v3 Authority Key Identifier:
keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/RmhxK7W1-ENYvsWRAnZpRExxhQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.52.0/22
Signature Algorithm: sha256WithRSAEncryption
13:98:06:89:8a:b7:b0:3c:8e:b2:f5:ad:82:19:17:27:9b:2e:
c5:3b:32:cb:1c:38:7b:7c:f8:da:91:67:9e:fe:06:cc:cf:a9:
29:84:63:ed:d2:de:05:0f:67:34:05:7d:b9:c1:1c:3e:85:2e:
ab:74:be:74:56:b4:95:5e:ac:63:2d:d3:0c:2d:0c:3e:3a:55:
ff:5f:30:19:d9:45:17:82:26:7d:1a:96:ea:c1:a2:e6:4c:47:
23:ee:55:bc:e9:15:d1:86:19:a1:8f:f2:c2:f4:0a:22:ec:f5:
2a:9c:5b:19:99:04:27:1f:51:6f:18:4d:3d:aa:e1:a3:12:8c:
6d:0f:7a:68:50:7c:99:74:2f:bb:94:33:25:13:1c:15:75:0a:
3c:3f:5f:80:db:11:8e:1e:b2:45:e3:8a:c9:bd:4b:1a:cd:9b:
27:06:3f:59:9d:21:1f:34:4c:a2:53:e1:51:a3:f2:bd:67:c9:
1e:70:83:a9:a1:40:8a:ae:98:91:13:7e:6a:35:15:6e:9a:a8:
d0:53:db:3a:da:0f:df:19:59:1a:b5:1e:ac:2f:91:7e:bc:ce:
aa:ec:22:48:41:13:6c:36:1b:4b:e7:cd:af:3f:5d:0d:70:66:
c0:0e:e9:17:99:43:d8:46:8b:fd:27:81:33:70:0f:43:31:1d:
60:2a:0e:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxdNVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjdkYTIyY2I5MDEzOGIwNTA4MzdlZGNmMWVjMzZhNWFiOGM0MmFjMB4XDTIyMDEw
MTAzNTcyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDY2ODcxMmJiNWI1
Zjg0MzU4YmVjNTkxMDI3NjY5NDQ0YzcxODUwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgJijQox7p2i33NMLQxm+4HwPSJuBI40cHKVqxXGnJ7aAWa
4cNJKeNnvLYihPaa6Ez1C45fQ3TFR10lakcR1hYakhDAGe9MstHhpwp0OCqRBB8s
rcuCGe/fcpsgu/5XtJVOcVuuXuzPJMpya3i0i3voaw3gtG6Hugd2hlzcDcTJdHfm
tQdaPw91oFQYjLSQz6PXA/BCzjDgFg4ly8zyH8C5W6PB8ErUNkOhgssgxAbLkpjO
BkepUXC8pj/NfsJ+SQRf9WDjgipOFx3J7UPNifGHtiAY9F2GP2+j+MpdBiR3rGlK
c6LVmesXmhmwazEv3zoYETL57ej47Opa0DV9BtECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRGaHErtbX4Q1i+xZECdmlETHGFAzAfBgNVHSMEGDAWgBQyfaIsuQE4sFCD
ftzx7Dalq4xCrDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01uMmlMTGtCT0xCUWczN2M4ZXcycGF1TVFxdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvNzAwOGZjLWFjYzQtNGVmNS04ZmI5LTkwNzk1ZmIzOTI4Yy8x
L1JtaHhLN1cxLUVOWXZzV1JBblpwUkV4eGhRTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
NzAwOGZjLWFjYzQtNGVmNS04ZmI5LTkwNzk1ZmIzOTI4Yy8xL01uMmlMTGtCT0xC
UWczN2M4ZXcycGF1TVFxdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkLNDANBgkqhkiG9w0BAQsFAAOC
AQEAE5gGiYq3sDyOsvWtghkXJ5suxTsyyxw4e3z42pFnnv4GzM+pKYRj7dLeBQ9n
NAV9ucEcPoUuq3S+dFa0lV6sYy3TDC0MPjpV/18wGdlFF4ImfRqW6sGi5kxHI+5V
vOkV0YYZoY/ywvQKIuz1KpxbGZkEJx9RbxhNParhoxKMbQ96aFB8mXQvu5QzJRMc
FXUKPD9fgNsRjh6yReOKyb1LGs2bJwY/WZ0hHzRMolPhUaPyvWfJHnCDqaFAiq6Y
kRN+ajUVbpqo0FPbOtoP3xlZGrUerC+RfrzOquwiSEETbDYbS+fNrz9dDXBmwA7p
F5lD2EaL/SeBM3APQzEdYCoOsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:29 2024 by rpki-client on console-ams.rpki-client.org