Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XYeb3PebOEbumtnugZnc3LfzP9Q.roa
File: XYeb3PebOEbumtnugZnc3LfzP9Q.roa (raw, json)
Hash identifier: +TK4CEKzTesCAuZAvyS2qWsKu7DllsSO5xv/IR2IHUs=
Subject key identifier: 5D:87:9B:DC:F7:9B:38:46:EE:9A:D9:EE:81:99:DC:DC:B7:F3:3F:D4
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 043E6868
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XYeb3PebOEbumtnugZnc3LfzP9Q.roa
Signing time: Mon 16 May 2022 10:13:47 +0000
ROA not before: Mon 16 May 2022 10:13:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.199.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71198824 (0x43e6868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 16 10:13:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d879bdcf79b3846ee9ad9ee8199dcdcb7f33fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a0:88:69:09:4f:12:5e:44:95:37:a3:68:28:
41:05:40:27:53:f8:2a:73:8e:03:f2:df:c9:8f:aa:
80:e1:a6:64:ab:5a:e2:28:f4:c5:7c:fb:83:07:65:
11:4c:59:e0:6e:1f:7b:13:c7:e6:5f:70:77:68:18:
a2:6a:16:9f:96:24:e7:71:ae:c0:cc:c0:1d:be:85:
43:03:c2:8b:a3:77:ac:ee:e1:bb:6c:0c:1c:8f:ac:
b7:47:70:c1:0e:3a:c9:6f:af:d7:7d:12:17:df:77:
75:16:82:86:d5:f8:dc:49:4c:1d:4b:44:13:a7:cf:
02:8f:b3:0d:c9:d9:88:74:08:5b:4e:ac:46:36:54:
6c:c1:ec:e5:19:2d:bf:9e:6b:c8:f1:61:1e:6b:50:
0c:a3:a5:ca:96:1e:6a:75:8f:ed:9e:74:ec:ad:9b:
8c:53:fe:a5:03:f1:a3:36:a1:a2:59:85:3d:8b:da:
b7:58:d0:2f:a8:fb:7e:0c:8f:f7:97:58:cc:8c:a8:
4d:14:0c:19:a8:1c:b3:1b:6d:79:02:af:f3:b5:84:
a9:0a:58:ce:2f:c9:6d:e4:e7:74:bb:a8:ea:b0:50:
19:d2:06:58:30:d7:6b:2c:70:2a:66:dd:6f:66:41:
c3:5d:ab:b6:13:a8:ad:17:08:9c:b3:69:81:87:ae:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:87:9B:DC:F7:9B:38:46:EE:9A:D9:EE:81:99:DC:DC:B7:F3:3F:D4
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XYeb3PebOEbumtnugZnc3LfzP9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.150.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:9c:db:e1:bf:33:6f:53:fd:fd:3f:52:cb:ad:75:20:85:37:
df:6e:c0:bf:c4:6b:02:ee:3d:a0:0f:4c:98:d3:e2:36:82:d5:
c5:b6:96:14:65:c8:a2:0c:d8:77:88:05:16:26:02:46:25:16:
37:63:5b:0d:cc:e7:a3:8c:8f:d8:1f:3b:3f:5b:3e:41:5e:fb:
08:52:ba:01:ba:1d:8c:d2:e3:61:2e:67:11:9a:5e:1a:31:d5:
bb:ad:5a:ac:21:8b:ef:13:ae:51:b1:99:9d:88:ae:b8:3e:45:
60:34:72:1e:6f:04:f0:04:85:c9:ac:5e:b8:dd:f3:83:73:e7:
68:ba:32:02:5e:33:b8:92:da:88:a3:51:28:fd:a6:06:4d:6e:
a0:86:51:04:3d:6a:98:11:61:50:77:d8:55:b3:20:e2:66:93:
dc:ca:c0:b8:50:8a:4d:72:4d:4c:84:82:fb:46:23:b2:bd:8c:
5f:8d:5d:21:cc:86:ad:ac:e5:f8:3a:cd:b6:5a:24:9b:0e:cf:
af:6c:6a:cb:d0:b8:9c:05:02:29:6b:e1:02:8d:4a:31:cb:c4:
10:ca:bb:1e:9c:bf:34:aa:51:c1:8a:8b:2b:07:ca:dc:c9:17:
1f:eb:d9:5c:3f:bc:a5:a3:a9:a7:0b:45:73:31:d9:16:37:e3:
a5:04:04:41
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBD5oaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjhiZmI4YTVlZWU0OTA4MmVhNjI4ZGYyNWE0YTVkNTBmM2FhOWIzMB4XDTIyMDUx
NjEwMTM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWQ4NzliZGNmNzli
Mzg0NmVlOWFkOWVlODE5OWRjZGNiN2YzM2ZkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIWgiGkJTxJeRJU3o2goQQVAJ1P4KnOOA/LfyY+qgOGmZKta
4ij0xXz7gwdlEUxZ4G4fexPH5l9wd2gYomoWn5Yk53GuwMzAHb6FQwPCi6N3rO7h
u2wMHI+st0dwwQ46yW+v130SF993dRaChtX43ElMHUtEE6fPAo+zDcnZiHQIW06s
RjZUbMHs5Rktv55ryPFhHmtQDKOlypYeanWP7Z507K2bjFP+pQPxozaholmFPYva
t1jQL6j7fgyP95dYzIyoTRQMGagcsxtteQKv87WEqQpYzi/JbeTndLuo6rBQGdIG
WDDXayxwKmbdb2ZBw12rthOorRcInLNpgYeuPi0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRdh5vc95s4Ru6a2e6Bmdzct/M/1DAfBgNVHSMEGDAWgBQ2i/uKXu5JCC6m
KN8lpKXVDzqpszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05vdjdpbDd1U1FndXBpamZKYVNsMVE4NnFiTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8x
L1hZZWIzUGViT0VidW10bnVnWm5jM0xmelA5US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8xL05vdjdpbDd1U1Fn
dXBpamZKYVNsMVE4NnFiTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnHljANBgkqhkiG9w0BAQsFAAOC
AQEA05zb4b8zb1P9/T9Sy611IIU3327Av8RrAu49oA9MmNPiNoLVxbaWFGXIogzY
d4gFFiYCRiUWN2NbDczno4yP2B87P1s+QV77CFK6AbodjNLjYS5nEZpeGjHVu61a
rCGL7xOuUbGZnYiuuD5FYDRyHm8E8ASFyaxeuN3zg3PnaLoyAl4zuJLaiKNRKP2m
Bk1uoIZRBD1qmBFhUHfYVbMg4maT3MrAuFCKTXJNTISC+0Yjsr2MX41dIcyGrazl
+DrNtlokmw7Pr2xqy9C4nAUCKWvhAo1KMcvEEMq7Hpy/NKpRwYqLKwfK3MkXH+vZ
XD+8paOppwtFczHZFjfjpQQEQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org