Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/41eg-TxKblj1X6AaIFiZuU_MwPA.roa
File: 41eg-TxKblj1X6AaIFiZuU_MwPA.roa (raw, json)
Hash identifier: TJqDPeE7qomt0jcZebRhTlWwgpThFbZERfx3e2MuVcw=
Subject key identifier: E3:57:A0:F9:3C:4A:6E:58:F5:5F:A0:1A:20:58:99:B9:4F:CC:C0:F0
Certificate issuer: /CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
Certificate serial: 049423B7
Authority key identifier: EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/41eg-TxKblj1X6AaIFiZuU_MwPA.roa
Signing time: Tue 14 Jun 2022 10:42:44 +0000
ROA not before: Tue 14 Jun 2022 10:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206961
IP address blocks: 185.165.124.0/24 maxlen: 24
185.165.125.0/24 maxlen: 24
185.165.124.0/22 maxlen: 22
185.165.127.0/24 maxlen: 24
185.165.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76817335 (0x49423b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
Validity
Not Before: Jun 14 10:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e357a0f93c4a6e58f55fa01a205899b94fccc0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:01:3a:b5:28:00:f8:57:c8:b9:32:63:e7:
67:ae:33:b4:59:40:c4:89:9f:5d:88:51:e1:d0:67:
29:51:b1:1a:6f:69:02:69:4b:89:f5:08:40:68:2c:
64:38:d9:61:66:e6:45:e3:a8:e8:37:ab:92:24:ea:
a7:ca:cc:28:23:18:e7:73:24:f4:ff:34:85:8e:b3:
89:fa:ae:93:fe:32:a8:2e:a0:59:dd:58:ee:ea:39:
4c:84:41:08:a3:b7:b0:65:fb:18:cc:bd:41:51:ad:
35:33:fd:6d:0f:b3:be:3f:5c:d5:71:b4:e4:f9:2b:
14:75:4e:9b:ac:4d:2e:46:a3:3d:b9:aa:2b:9b:2b:
af:88:9d:de:c5:59:b6:7e:93:a3:21:73:0e:00:19:
ff:b7:7e:81:54:e1:bb:23:1e:16:4a:0f:53:51:2e:
ef:f0:8e:2b:2e:ca:e2:6b:5d:04:08:27:ee:f5:26:
74:49:cb:b0:a9:d1:a5:7d:b4:3c:83:c6:72:0f:70:
1d:32:2c:8f:0d:d3:75:26:84:f0:e9:3c:77:b2:4e:
3e:4c:d7:0c:62:ca:cb:3c:cc:5e:eb:88:2d:8c:b1:
51:d5:8c:67:f8:f5:a1:62:f9:1e:d4:87:d2:8b:25:
d1:20:80:1b:ef:bd:39:23:90:9e:56:f6:6c:06:a6:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:A0:F9:3C:4A:6E:58:F5:5F:A0:1A:20:58:99:B9:4F:CC:C0:F0
X509v3 Authority Key Identifier:
keyid:EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/41eg-TxKblj1X6AaIFiZuU_MwPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6zF-G-e7b4LLnDSgltwIj1-Pkso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.124.0/22
Signature Algorithm: sha256WithRSAEncryption
97:7b:d2:04:bd:75:c7:3c:60:0b:b0:ce:08:94:25:8c:b5:4f:
36:fc:9e:93:02:7e:69:b6:42:bb:0b:1f:fe:41:58:86:b4:9c:
70:e3:df:76:a8:58:0d:09:3e:e2:31:7e:79:52:3a:c5:71:e9:
3e:89:ee:92:7e:76:ac:78:84:ea:c6:4b:4b:04:f9:81:cf:ac:
2a:63:4d:ff:80:a2:93:41:da:c0:fb:79:6c:44:f7:e2:e8:b8:
f2:85:61:66:df:1c:4b:df:74:ed:20:4f:be:5a:03:d9:86:ad:
ff:32:37:f8:9d:36:c0:41:fc:97:77:ca:28:d9:eb:2f:12:d4:
e4:5c:80:bb:64:b0:2d:28:45:25:48:0e:d6:68:6e:15:3a:89:
12:7d:6a:b8:79:2e:55:54:fb:9c:4a:5b:1a:e4:a0:1b:d1:9c:
df:f3:eb:1b:43:1b:74:e5:6a:80:d9:12:cb:f0:9c:7c:c8:83:
0b:04:09:dc:72:99:08:45:e9:4d:ea:10:c5:76:60:2b:ef:2e:
7b:24:73:2d:22:70:d7:fe:29:67:3e:20:f2:cd:7b:6a:d8:9b:
f8:1f:34:1f:94:dd:82:aa:c6:e4:cb:8d:10:30:32:23:36:03:
43:e5:b4:1d:2e:16:6b:a4:93:14:d4:79:c3:6b:aa:c6:e3:80:
00:e7:b4:a8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBJQjtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YjMxN2UxYmU3YmI2ZjgyY2I5YzM0YTA5NmRjMDg4ZjVmOGY5MmNhMB4XDTIyMDYx
NDEwNDI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM1N2EwZjkzYzRh
NmU1OGY1NWZhMDFhMjA1ODk5Yjk0ZmNjYzBmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOJiATq1KAD4V8i5MmPnZ64ztFlAxImfXYhR4dBnKVGxGm9p
AmlLifUIQGgsZDjZYWbmReOo6DerkiTqp8rMKCMY53Mk9P80hY6zifquk/4yqC6g
Wd1Y7uo5TIRBCKO3sGX7GMy9QVGtNTP9bQ+zvj9c1XG05PkrFHVOm6xNLkajPbmq
K5srr4id3sVZtn6ToyFzDgAZ/7d+gVThuyMeFkoPU1Eu7/COKy7K4mtdBAgn7vUm
dEnLsKnRpX20PIPGcg9wHTIsjw3TdSaE8Ok8d7JOPkzXDGLKyzzMXuuILYyxUdWM
Z/j1oWL5HtSH0osl0SCAG++9OSOQnlb2bAam8M8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjV6D5PEpuWPVfoBogWJm5T8zA8DAfBgNVHSMEGDAWgBTrMX4b57tvgsuc
NKCW3AiPX4+SyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZ6Ri1HLWU3YjRMTG5EU2dsdHdJajEtUGtzby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvYjRmYWI1LWFhMDEtNGE3MC04OGQwLWZiZDliZjYyMmY0NC8x
LzQxZWctVHhLYmxqMVg2QWFJRmladVVfTXdQQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
YjRmYWI1LWFhMDEtNGE3MC04OGQwLWZiZDliZjYyMmY0NC8xLzZ6Ri1HLWU3YjRM
TG5EU2dsdHdJajEtUGtzby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmlfDANBgkqhkiG9w0BAQsFAAOC
AQEAl3vSBL11xzxgC7DOCJQljLVPNvyekwJ+abZCuwsf/kFYhrSccOPfdqhYDQk+
4jF+eVI6xXHpPonukn52rHiE6sZLSwT5gc+sKmNN/4Cik0HawPt5bET34ui48oVh
Zt8cS9907SBPvloD2Yat/zI3+J02wEH8l3fKKNnrLxLU5FyAu2SwLShFJUgO1mhu
FTqJEn1quHkuVVT7nEpbGuSgG9Gc3/PrG0MbdOVqgNkSy/CcfMiDCwQJ3HKZCEXp
TeoQxXZgK+8ueyRzLSJw1/4pZz4g8s17atib+B80H5TdgqrG5MuNEDAyIzYDQ+W0
HS4Wa6STFNR5w2uqxuOAAOe0qA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:03 2023 by rpki-client on console-ams.rpki-client.org