Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/sd6Lp3oeCpe1ksRjLMYeNKzu_gI.roa
File: sd6Lp3oeCpe1ksRjLMYeNKzu_gI.roa (raw, json)
Hash identifier: twJXYADNGGrroBX7yFsY+fAai/F7lP4nB4Yc0h9A5zo=
Subject key identifier: B1:DE:8B:A7:7A:1E:0A:97:B5:92:C4:63:2C:C6:1E:34:AC:EE:FE:02
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 04561E59
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/sd6Lp3oeCpe1ksRjLMYeNKzu_gI.roa
Signing time: Sat 01 Jan 2022 00:55:56 +0000
ROA not before: Sat 01 Jan 2022 00:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36131
IP address blocks: 185.155.137.0/24 maxlen: 24
185.155.138.0/24 maxlen: 24
185.155.139.0/24 maxlen: 24
185.155.136.0/22 maxlen: 22
185.155.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72752729 (0x4561e59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 1 00:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1de8ba77a1e0a97b592c4632cc61e34aceefe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:14:2b:6c:67:95:c5:ac:16:2e:03:1d:15:
e2:79:6b:30:99:ae:ef:83:24:c0:20:20:94:78:96:
44:58:53:36:d7:0d:36:e7:b6:3e:fc:27:98:9f:85:
3b:38:76:eb:19:47:10:bd:d3:17:f6:28:d5:85:6b:
9d:b8:d6:7f:1b:29:6d:04:12:3a:f6:ea:da:28:2b:
79:6c:80:b6:15:cc:cb:96:46:59:d4:b8:93:ba:85:
cb:88:47:ff:58:1b:e2:af:40:48:b1:95:55:cf:d6:
30:2a:de:68:b6:f1:06:0f:e5:02:2b:ef:b1:2c:4f:
fd:73:81:4d:01:d8:f1:78:88:31:f4:0a:b3:0f:65:
8b:56:df:d0:43:12:22:e8:f2:cd:d3:00:14:2a:97:
e3:ad:98:a1:ee:c8:92:de:f4:58:d8:cb:44:dc:b4:
e1:f3:95:94:97:0b:d8:7b:e4:94:4b:dd:ec:8f:9a:
28:73:ea:02:e3:e1:34:e7:87:13:01:7f:6b:af:f6:
1f:16:74:82:35:c7:45:c6:98:05:0a:69:16:74:1a:
56:95:c3:15:dc:98:2a:10:14:00:62:14:0a:2a:d2:
99:0a:e5:b2:2b:f5:27:4a:fe:b3:03:11:04:02:5b:
90:68:11:e2:e0:46:7c:04:aa:94:db:48:59:3b:db:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:8B:A7:7A:1E:0A:97:B5:92:C4:63:2C:C6:1E:34:AC:EE:FE:02
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/sd6Lp3oeCpe1ksRjLMYeNKzu_gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/22
Signature Algorithm: sha256WithRSAEncryption
00:14:a8:80:2c:d0:5f:c4:62:5b:99:09:8a:39:c5:a1:0f:0a:
ad:ef:f1:63:a2:a4:c9:fd:b7:a0:29:85:47:a0:87:02:f6:1c:
97:cd:39:4b:f2:47:49:d4:13:fe:66:b1:8f:86:a0:7c:68:d1:
ad:99:9b:aa:17:58:66:20:d4:68:7a:7c:44:ef:e1:1f:f5:90:
f5:83:15:27:e2:bc:f6:9c:1a:b1:01:27:03:6d:c3:0c:ce:dd:
9f:32:de:b0:26:98:18:61:69:77:0a:5a:ea:38:44:22:34:82:
db:b9:d7:3b:f5:a3:68:c3:af:3c:0f:cb:e4:80:db:2c:70:44:
d8:db:de:13:b0:24:bc:eb:5f:09:9d:b4:5d:4c:4c:4d:03:07:
48:66:06:86:c5:41:ef:dd:14:13:bb:22:42:31:dc:21:81:e6:
5f:ec:82:92:97:25:bd:59:5a:01:97:c1:94:04:48:19:6e:cc:
f0:75:b9:96:08:ad:42:85:3c:00:6f:cb:bb:a9:e8:12:e2:9f:
01:60:4d:c1:37:05:89:82:a3:ba:2e:3b:e5:c0:1d:13:73:b5:
62:47:f4:9f:b0:8f:6f:f2:35:24:7a:e8:37:c2:22:02:bc:5c:
72:8f:b9:24:36:fd:cf:f9:3b:7f:a1:ff:73:2b:78:d6:37:57:
13:aa:0d:79
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBFYeWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTFjY2U5MDFlNWZiN2M5MmYwOWE5MTVjZjZlNjU2ZjY5M2JhMTAwMB4XDTIyMDEw
MTAwNTU1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjFkZThiYTc3YTFl
MGE5N2I1OTJjNDYzMmNjNjFlMzRhY2VlZmUwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALK5FCtsZ5XFrBYuAx0V4nlrMJmu74MkwCAglHiWRFhTNtcN
Nue2PvwnmJ+FOzh26xlHEL3TF/Yo1YVrnbjWfxspbQQSOvbq2igreWyAthXMy5ZG
WdS4k7qFy4hH/1gb4q9ASLGVVc/WMCreaLbxBg/lAivvsSxP/XOBTQHY8XiIMfQK
sw9li1bf0EMSIujyzdMAFCqX462Yoe7Ikt70WNjLRNy04fOVlJcL2HvklEvd7I+a
KHPqAuPhNOeHEwF/a6/2HxZ0gjXHRcaYBQppFnQaVpXDFdyYKhAUAGIUCirSmQrl
siv1J0r+swMRBAJbkGgR4uBGfASqlNtIWTvbfaMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSx3ouneh4Kl7WSxGMsxh40rO7+AjAfBgNVHSMEGDAWgBTuHM6QHl+3yS8J
qRXPbmVvaTuhADAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzdoek9rQjVmdDhrdkNha1Z6MjVsYjJrN29RQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmEvMzlkNWYxLTY2ZjctNDlkOC1hZmJhLTE0YTE5MDliMTIzNy8x
L3NkNkxwM29lQ3BlMWtzUmpMTVllTkt6dV9nSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEv
MzlkNWYxLTY2ZjctNDlkOC1hZmJhLTE0YTE5MDliMTIzNy8xLzdoek9rQjVmdDhr
dkNha1Z6MjVsYjJrN29RQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmbiDANBgkqhkiG9w0BAQsFAAOC
AQEAABSogCzQX8RiW5kJijnFoQ8Kre/xY6Kkyf23oCmFR6CHAvYcl805S/JHSdQT
/maxj4agfGjRrZmbqhdYZiDUaHp8RO/hH/WQ9YMVJ+K89pwasQEnA23DDM7dnzLe
sCaYGGFpdwpa6jhEIjSC27nXO/WjaMOvPA/L5IDbLHBE2NveE7AkvOtfCZ20XUxM
TQMHSGYGhsVB790UE7siQjHcIYHmX+yCkpclvVlaAZfBlARIGW7M8HW5lgitQoU8
AG/Lu6noEuKfAWBNwTcFiYKjui475cAdE3O1Ykf0n7CPb/I1JHroN8IiArxcco+5
JDb9z/k7f6H/cyt41jdXE6oNeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:32 2023 by rpki-client on console-ams.rpki-client.org