Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/F52HGcsN8m3a7dfpUbu1eoYRalg.roa
File: F52HGcsN8m3a7dfpUbu1eoYRalg.roa (raw, json)
Hash identifier: epe8okqhwJ7lhuphT0Uf27AD+1sC/t/F07DVwZ4OJas=
Subject key identifier: 17:9D:87:19:CB:0D:F2:6D:DA:ED:D7:E9:51:BB:B5:7A:86:11:6A:58
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 0361A6B1
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/F52HGcsN8m3a7dfpUbu1eoYRalg.roa
Signing time: Fri 22 Apr 2022 15:01:29 +0000
ROA not before: Fri 22 Apr 2022 15:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.195.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56731313 (0x361a6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Apr 22 15:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=179d8719cb0df26ddaedd7e951bbb57a86116a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:2b:38:bc:97:77:3d:2f:d0:37:de:48:62:
65:48:26:4b:27:be:df:a5:c7:b7:37:d9:c4:1a:df:
52:87:bb:16:bd:dc:05:11:68:0f:bb:76:f4:f9:91:
17:25:58:18:b8:82:db:4c:c1:f7:45:e2:8d:14:1e:
7e:ef:5c:3e:cb:1f:2b:50:b2:ba:06:f8:70:ce:88:
c4:79:73:33:3a:4b:37:f4:0c:d4:f9:86:a2:32:a7:
88:9f:7c:b1:3f:fb:46:fc:de:90:6b:ba:eb:f7:81:
72:db:72:6b:73:55:ef:ad:ee:87:e2:bc:d6:9e:d2:
d9:0f:a7:87:93:32:b6:df:b3:e3:ec:a2:d2:2a:b1:
af:84:4d:d5:2a:96:c2:bd:ba:2b:3f:65:b0:01:02:
33:0b:37:a3:3e:56:40:e0:eb:91:a8:14:02:16:f4:
44:1d:d9:9d:1b:09:de:bc:b9:df:ac:90:01:f4:24:
2f:7a:7b:89:20:1b:cf:80:d1:27:34:71:67:57:29:
70:1c:d0:e3:2d:f5:c8:57:c5:f7:92:db:fb:c5:ab:
4c:d3:12:fa:07:d2:3b:d3:fd:13:45:50:fa:fb:3f:
91:8a:02:ac:a9:e4:bb:71:67:fd:f8:76:11:42:21:
41:92:a6:df:55:69:98:b7:4d:7f:75:42:5d:f8:f4:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9D:87:19:CB:0D:F2:6D:DA:ED:D7:E9:51:BB:B5:7A:86:11:6A:58
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/F52HGcsN8m3a7dfpUbu1eoYRalg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.252.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1f:57:8d:ae:49:c3:c2:47:dd:40:8a:b1:a5:be:ce:20:35:
6b:c7:86:da:c4:82:59:d9:b0:dc:21:52:e8:b9:d6:73:ac:81:
15:90:41:64:57:81:b3:f4:b2:e0:39:54:ad:f5:2b:bb:a0:0a:
0e:af:29:43:8a:a7:32:45:31:7c:bd:25:d1:b6:5f:7a:3a:c3:
b7:b2:f7:b3:27:51:90:b0:6f:d3:4e:37:31:63:7d:ca:a1:a4:
6b:89:88:8a:20:6b:e3:34:56:fa:03:8a:d7:75:91:8f:12:a4:
2c:b3:84:9f:4d:2f:53:59:a2:06:99:da:39:94:08:02:b9:c2:
f8:af:c6:b0:bb:13:89:b2:25:cf:f9:97:60:d3:4a:88:5d:15:
6b:5f:28:8c:1f:3c:0c:f1:f5:5e:17:f3:a3:87:61:0c:b6:20:
a4:c5:a2:7d:d9:b8:d8:5d:6a:e0:c1:38:2f:5d:0e:18:d8:e4:
ba:47:74:aa:05:7b:ed:82:a2:e7:c7:09:34:a8:15:3e:0c:44:
9b:7c:76:f1:62:4c:7e:91:31:3f:d5:9c:e7:dc:13:05:0f:7c:
7e:1e:96:08:65:44:72:8e:4d:61:78:73:c3:07:cd:96:05:f1:
c8:83:99:6e:97:37:38:c8:5b:68:67:92:21:ec:1f:7b:10:10:
42:73:fd:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA2GmsTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTNlMWQ1MGQ1MjI4OGJlZTgwZWVhNDM1NTc3MDE4NzEyNDA5YmJlMB4XDTIyMDQy
MjE1MDEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc5ZDg3MTljYjBk
ZjI2ZGRhZWRkN2U5NTFiYmI1N2E4NjExNmE1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9zKzi8l3c9L9A33khiZUgmSye+36XHtzfZxBrfUoe7Fr3c
BRFoD7t29PmRFyVYGLiC20zB90XijRQefu9cPssfK1Cyugb4cM6IxHlzMzpLN/QM
1PmGojKniJ98sT/7RvzekGu66/eBcttya3NV763uh+K81p7S2Q+nh5Mytt+z4+yi
0iqxr4RN1SqWwr26Kz9lsAECMws3oz5WQODrkagUAhb0RB3ZnRsJ3ry536yQAfQk
L3p7iSAbz4DRJzRxZ1cpcBzQ4y31yFfF95Lb+8WrTNMS+gfSO9P9E0VQ+vs/kYoC
rKnku3Fn/fh2EUIhQZKm31VpmLdNf3VCXfj0neMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXnYcZyw3ybdrt1+lRu7V6hhFqWDAfBgNVHSMEGDAWgBQhPh1Q1SKIvugO
6kNVdwGHEkCbvjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUNGRVTlVpaUw3b0R1cERWWGNCaHhKQW03NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzcvMmExY2U5LWZiNGMtNDFlZS05ZmY2LTMxNmVmMjYxZjRhNS8x
L0Y1MkhHY3NOOG0zYTdkZnBVYnUxZW9ZUmFsZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcv
MmExY2U5LWZiNGMtNDFlZS05ZmY2LTMxNmVmMjYxZjRhNS8xL0lUNGRVTlVpaUw3
b0R1cERWWGNCaHhKQW03NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnD/DANBgkqhkiG9w0BAQsFAAOC
AQEAUB9Xja5Jw8JH3UCKsaW+ziA1a8eG2sSCWdmw3CFS6LnWc6yBFZBBZFeBs/Sy
4DlUrfUru6AKDq8pQ4qnMkUxfL0l0bZfejrDt7L3sydRkLBv0043MWN9yqGka4mI
iiBr4zRW+gOK13WRjxKkLLOEn00vU1miBpnaOZQIArnC+K/GsLsTibIlz/mXYNNK
iF0Va18ojB88DPH1Xhfzo4dhDLYgpMWifdm42F1q4ME4L10OGNjkukd0qgV77YKi
58cJNKgVPgxEm3x28WJMfpExP9Wc59wTBQ98fh6WCGVEco5NYXhzwwfNlgXxyIOZ
bpc3OMhbaGeSIewfexAQQnP9cQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org