Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/9CnkpJm8f9l8RD3EGgUaRqcusuU.roa
File: 9CnkpJm8f9l8RD3EGgUaRqcusuU.roa (raw, json)
Hash identifier: ZH7masVrBZXaXNkYI0Z/Cy7C2DhdKfUvEgDGZt/ChiA=
Subject key identifier: F4:29:E4:A4:99:BC:7F:D9:7C:44:3D:C4:1A:05:1A:46:A7:2E:B2:E5
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 1D95DD80
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/9CnkpJm8f9l8RD3EGgUaRqcusuU.roa
Signing time: Wed 15 Jun 2022 06:54:47 +0000
ROA not before: Wed 15 Jun 2022 06:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199370
IP address blocks: 185.16.164.0/24 maxlen: 24
185.16.164.0/23 maxlen: 23
185.16.164.0/22 maxlen: 24
185.16.165.0/24 maxlen: 24
185.16.166.0/24 maxlen: 24
185.16.166.0/23 maxlen: 23
185.16.167.0/24 maxlen: 24
2a03:d6c0::/32 maxlen: 32
2a03:d6c0:c000::/34 maxlen: 34
2a03:d6c0:8000::/34 maxlen: 34
2a03:d6c0:4000::/34 maxlen: 34
2a03:d6c0::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496360832 (0x1d95dd80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Jun 15 06:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f429e4a499bc7fd97c443dc41a051a46a72eb2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:53:aa:aa:69:8c:12:be:9e:9f:1e:8a:ca:
c6:03:da:da:9c:a7:a1:a9:69:e2:2f:eb:7b:d0:1a:
10:0b:5f:e4:c2:44:c4:04:47:42:94:60:b7:d6:22:
5d:3d:a1:c7:5a:6c:3c:5b:17:68:a4:5a:90:17:84:
a5:fd:4f:ab:15:36:2d:53:40:15:22:af:8a:7a:9d:
aa:5a:d9:3f:39:30:e3:a3:d1:a4:54:dd:b9:86:95:
09:57:b3:9d:76:4b:3b:9a:2e:3b:cb:88:58:e8:c5:
b5:8c:e7:04:5b:e3:be:65:b9:3d:8d:1c:91:1a:01:
cd:f3:49:4d:b6:9b:0f:a6:a5:f8:c8:41:14:28:14:
19:de:d8:67:12:42:58:8d:ef:07:a7:7a:80:23:5e:
d7:2a:4a:8b:28:87:ef:35:27:9c:3b:24:fb:66:15:
0a:20:d1:d9:bb:5e:51:af:d1:68:04:8d:d5:a6:a4:
46:f3:f8:a5:35:79:63:f2:90:f3:10:fe:1d:d1:a9:
3a:2d:33:b6:0e:66:7d:c5:7a:93:87:72:cc:1c:0c:
ad:54:d6:f3:41:08:33:eb:0a:cc:75:6f:60:a1:ae:
6b:4e:91:fa:ee:79:e0:60:a4:13:0d:26:3f:54:3a:
16:36:de:b4:77:85:2c:e0:96:18:cd:30:9d:2e:cf:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:E4:A4:99:BC:7F:D9:7C:44:3D:C4:1A:05:1A:46:A7:2E:B2:E5
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/9CnkpJm8f9l8RD3EGgUaRqcusuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.164.0/22
IPv6:
2a03:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
02:05:99:c8:f5:9a:9c:f0:03:54:7a:85:30:89:ab:d6:7d:a9:
f4:a2:1c:d3:8a:3b:7a:3c:00:2d:d9:82:6d:7a:80:d9:7d:9b:
67:60:d9:4d:44:56:6e:e0:01:3d:d2:67:d1:4c:ab:1c:e9:3c:
fe:29:10:95:25:0b:09:54:1c:fa:58:23:57:97:50:1e:9a:25:
ff:79:e8:48:02:d9:85:a2:d7:e6:04:72:49:a0:b9:eb:2e:e8:
cb:00:40:37:2a:51:65:18:11:76:60:3c:ee:3d:f5:c4:80:e9:
0b:14:2b:21:29:bf:d8:3d:5b:4a:eb:45:8a:38:d1:04:b3:80:
fd:ee:99:df:8f:4f:66:04:35:1d:95:a8:1e:a4:3e:00:8a:5e:
cd:77:4d:83:bc:05:0c:6d:6f:81:cc:ad:ec:55:bc:0c:9f:9b:
8e:b4:10:39:82:cf:c3:b3:07:00:fb:2a:c3:0f:83:48:03:4e:
a5:df:6c:9f:c3:79:65:a0:4c:72:ff:c9:3b:91:02:43:48:1e:
86:89:48:a0:2a:21:d0:38:19:aa:1a:09:23:ab:51:33:8b:fd:
d8:21:9c:bd:5a:9f:92:83:16:92:df:5e:e7:2e:21:59:8f:3e:
f9:e5:ce:c2:49:49:95:58:20:21:f3:e0:17:6d:92:58:80:06:
e5:eb:d0:32
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEHZXdgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NGVjZDEzYWUwMjdmMzdmMDM4NjI3NDkzNDcwNDRhMjYyMDI4ZWIwMB4XDTIyMDYx
NTA2NTQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQyOWU0YTQ5OWJj
N2ZkOTdjNDQzZGM0MWEwNTFhNDZhNzJlYjJlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOIlU6qqaYwSvp6fHorKxgPa2pynoalp4i/re9AaEAtf5MJE
xARHQpRgt9YiXT2hx1psPFsXaKRakBeEpf1PqxU2LVNAFSKvinqdqlrZPzkw46PR
pFTduYaVCVeznXZLO5ouO8uIWOjFtYznBFvjvmW5PY0ckRoBzfNJTbabD6al+MhB
FCgUGd7YZxJCWI3vB6d6gCNe1ypKiyiH7zUnnDsk+2YVCiDR2bteUa/RaASN1aak
RvP4pTV5Y/KQ8xD+HdGpOi0ztg5mfcV6k4dyzBwMrVTW80EIM+sKzHVvYKGua06R
+u554GCkEw0mP1Q6FjbetHeFLOCWGM0wnS7PhCsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT0KeSkmbx/2XxEPcQaBRpGpy6y5TAfBgNVHSMEGDAWgBQk7NE64CfzfwOG
J0k0cESiYgKOsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pPelJPdUFuODM4RGhpZEpOSEJFb21JQ2pyQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvZmJjYmY3LWZmYzAtNDM5Mi04MjAzLTljMGE5ZThiNzhlMS8x
LzlDbmtwSm04ZjlsOFJEM0VHZ1VhUnFjdXN1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
ZmJjYmY3LWZmYzAtNDM5Mi04MjAzLTljMGE5ZThiNzhlMS8xL0pPelJPdUFuODM4
RGhpZEpOSEJFb21JQ2pyQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkQpDANBAIAAjAHAwUAKgPWwDAN
BgkqhkiG9w0BAQsFAAOCAQEAAgWZyPWanPADVHqFMImr1n2p9KIc04o7ejwALdmC
bXqA2X2bZ2DZTURWbuABPdJn0UyrHOk8/ikQlSULCVQc+lgjV5dQHpol/3noSALZ
haLX5gRySaC56y7oywBANypRZRgRdmA87j31xIDpCxQrISm/2D1bSutFijjRBLOA
/e6Z349PZgQ1HZWoHqQ+AIpezXdNg7wFDG1vgcyt7FW8DJ+bjrQQOYLPw7MHAPsq
ww+DSANOpd9sn8N5ZaBMcv/JO5ECQ0geholIoCoh0DgZqhoJI6tRM4v92CGcvVqf
koMWkt9e5y4hWY8++eXOwklJlVggIfPgF22SWIAG5evQMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:36 2024 by rpki-client on console-ams.rpki-client.org