Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/WYUEzj0ax5azsGdnIcpyUhSkPdI.roa
File: WYUEzj0ax5azsGdnIcpyUhSkPdI.roa (raw, json)
Hash identifier: 8QOUmFYaWwawzZ58eDiOB5L69pfC2PRFMRoCGxUZmY8=
Subject key identifier: 59:85:04:CE:3D:1A:C7:96:B3:B0:67:67:21:CA:72:52:14:A4:3D:D2
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 018991CCD394051F81157A1A6FDCA4299073
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/WYUEzj0ax5azsGdnIcpyUhSkPdI.roa
Signing time: Wed 26 Jul 2023 10:44:27 +0000
ROA not before: Wed 26 Jul 2023 10:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1200414
IP address blocks: 185.101.188.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:cc:d3:94:05:1f:81:15:7a:1a:6f:dc:a4:29:90:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jul 26 10:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=598504ce3d1ac796b3b0676721ca725214a43dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:ff:1a:e0:ed:be:ca:03:85:d2:c9:28:a5:
79:c8:1b:97:ce:1f:6a:a5:fb:fe:fb:cf:a7:12:ba:
60:47:6e:cc:8a:32:84:57:ce:2e:73:74:9f:a0:b0:
d8:d3:d4:7d:92:96:0e:b2:bb:84:a5:1b:41:6d:fc:
bd:63:89:9d:28:68:d9:fd:4b:23:99:d0:b1:37:38:
87:3a:b8:48:fd:1f:ad:61:4b:b4:bb:e4:06:9a:18:
ed:27:a3:01:ac:2c:06:6c:f8:3a:b4:ce:4f:1e:96:
aa:7e:ae:34:e8:80:bd:c6:a4:4c:7a:6b:ae:2a:34:
cb:12:2c:2c:20:ad:08:c5:d5:a9:92:9f:47:e8:ad:
12:11:81:4a:cc:99:49:91:1d:89:ab:04:b0:3c:50:
a3:ca:7b:2a:68:2b:ee:0b:dd:2a:07:31:4c:04:11:
ad:76:65:7f:c9:db:d6:55:04:78:b2:60:69:55:e1:
5c:8f:91:65:dc:93:09:b2:83:19:97:bf:b0:6c:91:
fa:7c:35:93:eb:17:74:a7:9b:76:10:18:cb:ae:0e:
52:cd:1e:f6:2c:54:bd:11:8d:1e:80:30:dc:f8:ce:
ba:82:ef:84:3f:6a:0f:9a:46:fc:40:20:c8:15:4a:
5a:49:98:ba:2f:87:21:58:b9:f6:8a:51:44:23:45:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:04:CE:3D:1A:C7:96:B3:B0:67:67:21:CA:72:52:14:A4:3D:D2
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/WYUEzj0ax5azsGdnIcpyUhSkPdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.188.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:d6:33:bd:39:e6:a4:ec:47:e1:0d:c6:0e:8e:ef:98:60:59:
d7:3c:87:fb:62:65:63:7c:05:09:b3:55:c2:00:6d:8f:fd:9d:
64:91:52:0a:13:44:05:3c:a9:30:60:bb:58:e9:99:76:83:06:
98:71:71:1a:c7:5d:64:6a:62:36:c7:5d:54:99:27:6c:94:28:
f0:62:b6:04:67:87:06:ec:f2:22:02:9b:e5:58:61:31:fb:1c:
2b:fc:9b:e4:2f:eb:77:89:08:50:00:b4:48:64:4c:57:2b:73:
17:1c:7d:67:8d:09:07:0b:cd:8d:c1:9b:ef:83:75:96:53:03:
4e:7f:a2:d8:a8:ee:ac:3f:2d:c3:3b:32:6f:48:b2:de:80:3e:
db:d9:27:22:1c:07:f7:e3:3e:a0:3d:cf:b2:cd:c9:78:92:1c:
ae:dc:ba:00:41:c1:e5:31:38:b3:9a:4e:40:76:ce:f8:bc:d6:
78:1c:b7:0c:9d:0f:0c:77:1d:69:bb:d0:40:1b:ed:6c:5f:86:
3e:de:53:04:42:e4:77:e2:f5:c9:22:b1:b2:cf:ce:21:40:a9:
f3:49:9e:fe:d6:7c:dd:c2:eb:8b:94:36:ea:8d:9d:8c:49:bd:
9d:47:7b:83:d1:d8:8e:ab:57:43:03:bb:46:67:0f:3c:a8:ee:
04:fd:5b:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmRzNOUBR+BFXoab9ykKZBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk
MzFmMmUwHhcNMjMwNzI2MTA0NDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTg1MDRjZTNkMWFjNzk2YjNiMDY3NjcyMWNhNzI1MjE0YTQzZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurP/GuDtvsoDhdLJKKV5yBuXzh9q
pfv++8+nErpgR27MijKEV84uc3SfoLDY09R9kpYOsruEpRtBbfy9Y4mdKGjZ/Usj
mdCxNziHOrhI/R+tYUu0u+QGmhjtJ6MBrCwGbPg6tM5PHpaqfq406IC9xqRMemuu
KjTLEiwsIK0IxdWpkp9H6K0SEYFKzJlJkR2JqwSwPFCjynsqaCvuC90qBzFMBBGt
dmV/ydvWVQR4smBpVeFcj5Fl3JMJsoMZl7+wbJH6fDWT6xd0p5t2EBjLrg5SzR72
LFS9EY0egDDc+M66gu+EP2oPmkb8QCDIFUpaSZi6L4chWLn2ilFEI0UeDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFmFBM49GseWs7BnZyHKclIUpD3SMB8GA1UdIwQY
MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt
ZGM4YjUyZTNlYTBhLzEvV1lVRXpqMGF4NWF6c0dkbkljcHlVaFNrUGRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh
LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWW8MA0G
CSqGSIb3DQEBCwUAA4IBAQCy1jO9Oeak7EfhDcYOju+YYFnXPIf7YmVjfAUJs1XC
AG2P/Z1kkVIKE0QFPKkwYLtY6Zl2gwaYcXEax11kamI2x11UmSdslCjwYrYEZ4cG
7PIiApvlWGEx+xwr/JvkL+t3iQhQALRIZExXK3MXHH1njQkHC82NwZvvg3WWUwNO
f6LYqO6sPy3DOzJvSLLegD7b2SciHAf34z6gPc+yzcl4khyu3LoAQcHlMTizmk5A
ds74vNZ4HLcMnQ8Mdx1pu9BAG+1sX4Y+3lMEQuR34vXJIrGyz84hQKnzSZ7+1nzd
wuuLlDbqjZ2MSb2dR3uD0diOq1dDA7tGZw88qO4E/Vt5
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:13 2025 by rpki-client