Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/7IfKcBZ7ohSS-gNcdt70YIkVIoY.roa
File: 7IfKcBZ7ohSS-gNcdt70YIkVIoY.roa (raw, json)
Hash identifier: NVHjl13UDDaaCPr16xDE2VcCIjNNAUA4vS/FJVlOGes=
Subject key identifier: EC:87:CA:70:16:7B:A2:14:92:FA:03:5C:76:DE:F4:60:89:15:22:86
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01838928FF16DFA28C4B049440404F87002F
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/7IfKcBZ7ohSS-gNcdt70YIkVIoY.roa
Signing time: Thu 29 Sep 2022 12:11:48 +0000
ROA not before: Thu 29 Sep 2022 12:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202861
IP address blocks: 185.107.226.0/23 maxlen: 23
2a05:1500:300::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:28:ff:16:df:a2:8c:4b:04:94:40:40:4f:87:00:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Sep 29 12:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec87ca70167ba21492fa035c76def46089152286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:8d:50:e7:af:c9:46:a1:73:ad:c0:20:12:
77:53:b0:0d:36:c9:c4:81:3a:9a:97:da:dc:6b:60:
59:ad:a1:19:25:f6:5b:e5:61:08:96:aa:74:68:15:
13:be:47:99:82:a2:c4:b4:aa:cc:ef:80:1b:50:b9:
c4:9c:15:f8:fd:20:20:aa:22:d8:ef:42:f7:bb:06:
1f:a9:d3:14:9b:a5:b2:f3:cd:7e:e7:cd:1b:60:1e:
1b:d4:83:b8:b8:1e:de:b8:36:9b:08:7e:11:70:fc:
50:f6:47:e7:07:30:a4:fb:71:9b:0e:cd:dc:d0:a3:
86:4b:73:c0:52:49:e1:01:ef:9f:57:02:b9:4c:58:
0a:81:b8:ee:c9:03:bf:31:c7:28:e3:9d:a0:b1:57:
55:d8:d6:0c:fe:0e:cf:fe:98:4c:7a:1a:38:c6:fe:
63:80:ae:6b:4a:72:f2:b7:9b:e3:b1:c0:77:00:86:
1e:ee:b0:29:f9:6a:1b:94:73:ad:55:10:b3:c8:3e:
76:c1:db:a8:c9:48:4c:a0:ec:32:0c:58:47:03:09:
83:19:32:2c:ad:1b:67:6f:27:12:45:dc:1e:5d:ed:
11:fb:d8:fb:0d:bb:79:11:a5:f3:10:4e:f1:e0:58:
c2:61:02:6d:6b:c7:ad:f9:03:73:36:8d:f0:d6:f9:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:CA:70:16:7B:A2:14:92:FA:03:5C:76:DE:F4:60:89:15:22:86
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/7IfKcBZ7ohSS-gNcdt70YIkVIoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.226.0/23
IPv6:
2a05:1500:300::/40
Signature Algorithm: sha256WithRSAEncryption
0b:b7:af:a5:62:24:16:83:8b:07:d4:19:dd:cb:e7:cc:6d:7a:
e3:cc:97:bc:ec:f7:f7:3b:62:55:3e:a5:18:8d:1f:75:67:47:
97:a8:6c:3b:d1:d9:0b:7f:1f:43:68:87:07:5a:60:68:38:ac:
6a:f6:8e:4a:32:28:7a:3b:74:fd:b7:3e:e5:53:9a:1f:22:60:
34:ca:2a:b5:d1:ec:48:bc:7f:47:da:76:2d:12:89:87:11:89:
98:d7:eb:f3:ed:f7:57:06:84:76:37:38:68:eb:a8:ff:2e:10:
96:9c:c2:90:aa:0f:be:34:ac:08:4c:30:e7:87:e7:3f:79:55:
18:c2:4e:6f:50:95:31:aa:5d:a3:09:6d:5d:97:53:c5:bd:dd:
78:29:e2:aa:01:80:0e:b5:4d:be:f7:ff:89:27:5d:e0:8e:0d:
01:e6:7d:f5:bd:64:c9:e1:e6:1d:98:be:dd:73:0e:e7:7e:26:
ff:5b:b6:5c:1a:97:8d:6a:31:45:f7:59:6c:f5:a3:b0:bb:8a:
b8:26:61:02:e3:d7:f2:cb:ce:23:9a:e7:e4:1f:e4:bf:e3:a3:
1d:68:5a:f5:4c:02:a7:63:e1:10:b3:d3:d0:1e:fd:c2:59:56:
6f:2d:8d:8b:27:e4:16:bc:84:49:ec:3b:c0:89:2b:5c:ed:9d:
a6:52:db:64
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYOJKP8W36KMSwSUQEBPhwAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1
ZjBmZTQwHhcNMjIwOTI5MTIxMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzg3Y2E3MDE2N2JhMjE0OTJmYTAzNWM3NmRlZjQ2MDg5MTUyMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrCNUOevyUahc63AIBJ3U7ANNsnE
gTqal9rca2BZraEZJfZb5WEIlqp0aBUTvkeZgqLEtKrM74AbULnEnBX4/SAgqiLY
70L3uwYfqdMUm6Wy881+580bYB4b1IO4uB7euDabCH4RcPxQ9kfnBzCk+3GbDs3c
0KOGS3PAUknhAe+fVwK5TFgKgbjuyQO/Mcco452gsVdV2NYM/g7P/phMeho4xv5j
gK5rSnLyt5vjscB3AIYe7rAp+WoblHOtVRCzyD52wduoyUhMoOwyDFhHAwmDGTIs
rRtnbycSRdweXe0R+9j7Dbt5EaXzEE7x4FjCYQJta8et+QNzNo3w1vl9yQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFOyHynAWe6IUkvoDXHbe9GCJFSKGMB8GA1UdIwQY
MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt
ZjJhZTdiYzdlY2M1LzEvN0lmS2NCWjdvaFNTLWdOY2R0NzBZSWtWSW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1
LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuWviMA4E
AgACMAgDBgAqBRUAAzANBgkqhkiG9w0BAQsFAAOCAQEAC7evpWIkFoOLB9QZ3cvn
zG1648yXvOz39ztiVT6lGI0fdWdHl6hsO9HZC38fQ2iHB1pgaDisavaOSjIoejt0
/bc+5VOaHyJgNMoqtdHsSLx/R9p2LRKJhxGJmNfr8+33VwaEdjc4aOuo/y4QlpzC
kKoPvjSsCEww54fnP3lVGMJOb1CVMapdowltXZdTxb3deCniqgGADrVNvvf/iSdd
4I4NAeZ99b1kyeHmHZi+3XMO534m/1u2XBqXjWoxRfdZbPWjsLuKuCZhAuPX8svO
I5rn5B/kv+OjHWha9UwCp2PhELPT0B79wllWby2NiyfkFryESew7wIkrXO2dplLb
ZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org