Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/siyXkv_zMDP2_iVuEnFwvwkhMfQ.roa
File: siyXkv_zMDP2_iVuEnFwvwkhMfQ.roa (raw, json)
Hash identifier: dn8ExPn5ENCZlvACdCxJ1vo1bWRoY/oHVsmSXcYt5QE=
Subject key identifier: B2:2C:97:92:FF:F3:30:33:F6:FE:25:6E:12:71:70:BF:09:21:31:F4
Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial: 02DA4A5C
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/siyXkv_zMDP2_iVuEnFwvwkhMfQ.roa
Signing time: Sat 01 Jan 2022 03:59:32 +0000
ROA not before: Sat 01 Jan 2022 03:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60118
IP address blocks: 185.230.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47860316 (0x2da4a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Validity
Not Before: Jan 1 03:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b22c9792fff33033f6fe256e127170bf092131f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:a4:87:90:5f:57:7c:50:d4:4d:cc:6c:30:
96:93:a4:f6:44:86:8b:90:d4:d6:2a:14:81:06:ce:
bd:a1:0d:1b:90:bb:71:19:58:3e:9f:14:2f:48:70:
1f:56:5b:27:53:20:8b:1d:db:09:e5:24:95:25:b3:
c6:fc:20:ab:3b:96:d0:84:41:ee:1f:da:ad:42:ce:
ef:b2:3e:6f:99:3f:cb:c6:cd:22:4e:61:2f:e8:e5:
59:28:72:16:b2:ed:c7:dc:08:a4:6c:fc:30:c3:ed:
83:20:56:76:c3:4b:68:c8:f9:a1:fe:db:83:13:4b:
8a:2c:97:9b:94:1a:a8:2b:e7:09:6d:c8:44:bf:9c:
3a:c7:3b:44:18:a4:44:64:8e:23:48:81:87:71:31:
07:52:c6:0c:c0:1e:ee:ba:a5:84:60:a9:0e:ea:a5:
3f:97:00:80:40:97:7e:61:31:15:74:26:c8:bf:5e:
31:10:82:98:3e:58:c6:a1:e6:40:4a:62:12:f1:31:
d0:2c:36:08:94:36:bb:17:0d:56:6f:cf:ae:b5:f9:
7c:8a:96:bd:ce:99:96:27:b5:83:d3:ba:3f:03:e0:
0e:a6:9d:9b:9d:11:d0:48:02:3b:73:df:47:40:ef:
63:58:a9:57:e4:4f:1b:1f:58:ac:85:03:a1:a3:dd:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:97:92:FF:F3:30:33:F6:FE:25:6E:12:71:70:BF:09:21:31:F4
X509v3 Authority Key Identifier:
keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/siyXkv_zMDP2_iVuEnFwvwkhMfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.18.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ca:e3:49:2c:67:f5:df:4f:6e:ad:c9:c7:44:69:a4:d6:0b:
32:c0:aa:f1:62:8c:90:48:86:b6:e3:a6:cf:c3:0b:95:5c:e1:
a7:b5:13:c5:7e:d0:46:10:b8:56:98:96:7b:67:a7:89:cc:10:
a5:8d:fe:9d:0b:d1:bc:7e:0b:ca:3e:4b:0c:3a:73:c4:af:7e:
18:9c:97:28:ac:c7:ab:2a:87:75:1e:b5:e6:d6:c9:60:a3:4f:
8e:78:81:e5:24:ec:55:e8:c2:b6:89:66:b3:06:59:4b:e5:2b:
e8:8d:23:5c:20:9b:eb:ff:7c:30:67:c2:17:aa:e0:75:83:95:
35:ef:00:37:bc:ae:7f:79:ba:9a:41:f7:37:39:c5:f0:47:94:
0f:4f:57:5d:12:e1:c7:e1:bb:93:05:71:bb:c7:79:0f:4d:0d:
0d:84:65:8d:e0:8e:27:b2:be:1e:8b:81:84:66:e0:7c:03:cf:
da:44:f0:c6:78:fb:2e:2e:d1:2b:e1:bc:5e:5b:c5:c7:ff:8a:
9a:15:73:60:f4:a5:d0:4e:b1:4a:3b:7b:dc:ca:03:63:30:92:
84:41:10:fc:7b:81:16:61:54:4d:b8:64:19:30:ce:f6:cb:7f:
19:a8:6c:29:89:83:12:2d:4c:86:98:8f:bc:11:1d:b8:53:f5:
2d:15:43:80
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAtpKXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MGM2NGIwNGZhOGY1ZmVlNjg2NmY1Yzc5ZjhmN2RjZWE1MDEyNTE1MB4XDTIyMDEw
MTAzNTkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjIyYzk3OTJmZmYz
MzAzM2Y2ZmUyNTZlMTI3MTcwYmYwOTIxMzFmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjypIeQX1d8UNRNzGwwlpOk9kSGi5DU1ioUgQbOvaENG5C7
cRlYPp8UL0hwH1ZbJ1Mgix3bCeUklSWzxvwgqzuW0IRB7h/arULO77I+b5k/y8bN
Ik5hL+jlWShyFrLtx9wIpGz8MMPtgyBWdsNLaMj5of7bgxNLiiyXm5QaqCvnCW3I
RL+cOsc7RBikRGSOI0iBh3ExB1LGDMAe7rqlhGCpDuqlP5cAgECXfmExFXQmyL9e
MRCCmD5YxqHmQEpiEvEx0Cw2CJQ2uxcNVm/PrrX5fIqWvc6Zlie1g9O6PwPgDqad
m50R0EgCO3PfR0DvY1ipV+RPGx9YrIUDoaPdvd8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSyLJeS//MwM/b+JW4ScXC/CSEx9DAfBgNVHSMEGDAWgBRgxksE+o9f7mhm
9cefj33OpQElFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lNWkxCUHFQWC01b1p2WEhuNDk5enFVQkpSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvODI0OTFiLThjYWYtNDgxYi1iMTQ2LTYwMWE1OGY2MzM5My8x
L3NpeVhrdl96TURQMl9pVnVFbkZ3dndraE1mUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ODI0OTFiLThjYWYtNDgxYi1iMTQ2LTYwMWE1OGY2MzM5My8xL1lNWkxCUHFQWC01
b1p2WEhuNDk5enFVQkpSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnmEjANBgkqhkiG9w0BAQsFAAOC
AQEAIsrjSSxn9d9Pbq3Jx0RppNYLMsCq8WKMkEiGtuOmz8MLlVzhp7UTxX7QRhC4
VpiWe2enicwQpY3+nQvRvH4Lyj5LDDpzxK9+GJyXKKzHqyqHdR615tbJYKNPjniB
5STsVejCtolmswZZS+Ur6I0jXCCb6/98MGfCF6rgdYOVNe8AN7yuf3m6mkH3NznF
8EeUD09XXRLhx+G7kwVxu8d5D00NDYRljeCOJ7K+HouBhGbgfAPP2kTwxnj7Li7R
K+G8XlvFx/+KmhVzYPSl0E6xSjt73MoDYzCShEEQ/HuBFmFUTbhkGTDO9st/Gahs
KYmDEi1MhpiPvBEduFP1LRVDgA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-fra.rpki-client.org