Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/vMpK7zMeARd79tmb0TuF-smevCs.roa
File: vMpK7zMeARd79tmb0TuF-smevCs.roa (raw, json)
Hash identifier: pcrtyApz7e2bNJkPtjn3SncOe7mjI97zNaGos/7hEfA=
Subject key identifier: BC:CA:4A:EF:33:1E:01:17:7B:F6:D9:9B:D1:3B:85:FA:C9:9E:BC:2B
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 06ADA711
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/vMpK7zMeARd79tmb0TuF-smevCs.roa
Signing time: Sat 01 Jan 2022 16:07:37 +0000
ROA not before: Sat 01 Jan 2022 16:07:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 185.247.32.0/24 maxlen: 24
185.247.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112043793 (0x6ada711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jan 1 16:07:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcca4aef331e01177bf6d99bd13b85fac99ebc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:39:0d:71:8e:70:c9:35:20:f0:fd:c0:73:
0e:ce:48:fb:3d:de:8f:ad:fd:6e:93:24:12:c7:ec:
c5:e5:1e:85:2f:a5:4c:ad:d4:3d:5b:7b:20:7f:16:
83:5e:52:a4:ff:82:ad:6a:41:f7:f3:11:87:6a:9c:
a7:6f:66:54:3d:2f:ac:bc:a5:29:f6:11:7f:f5:c3:
df:ac:2d:71:34:b5:ad:19:2e:d4:c3:98:c3:62:fc:
15:be:33:09:bb:46:2c:70:2d:dd:b3:12:e0:6f:e0:
2c:03:82:5d:8f:f9:b4:0c:9d:47:a5:dc:76:81:e6:
4b:57:a2:65:38:df:cd:33:02:aa:52:8c:d5:50:b3:
02:23:60:95:ab:d3:e4:e1:28:ed:55:4a:bc:89:e5:
f8:72:6a:76:96:c7:a7:94:9c:84:22:4c:6d:2b:96:
43:ff:88:66:ce:a0:80:bc:35:97:d6:ec:93:8b:ea:
dd:45:be:17:63:6f:aa:8a:e3:a7:cf:39:8d:a2:f8:
fe:7a:32:b4:aa:81:73:2f:4c:76:b9:d2:22:23:44:
64:2e:b3:17:ec:b1:ad:7c:00:15:a9:e5:31:a7:4f:
0d:11:ef:b2:cc:0f:31:2b:06:89:b8:53:b4:41:44:
f1:39:00:c0:90:1e:86:f8:0a:8a:40:96:45:93:f7:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:4A:EF:33:1E:01:17:7B:F6:D9:9B:D1:3B:85:FA:C9:9E:BC:2B
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/vMpK7zMeARd79tmb0TuF-smevCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:93:89:9f:77:ca:7f:ac:c2:a7:53:b4:f2:8a:e4:fb:4a:35:
dd:0d:81:da:82:1c:a8:97:80:54:93:c5:0d:fc:ba:4b:b4:ce:
25:99:27:84:c2:22:3c:a7:f6:c1:9e:55:bb:75:b8:e2:72:b6:
93:e1:c0:6e:79:f4:64:32:a1:9e:8e:85:a7:b0:e4:76:4f:f8:
2b:64:e0:bf:f9:c6:e5:87:31:36:e3:2c:d8:40:53:4e:a8:90:
a8:87:c2:91:02:44:1d:1b:a6:99:20:0b:23:f7:c9:e8:1d:8a:
95:82:72:2a:be:31:3b:e1:23:3c:ef:e3:79:40:81:6a:da:6c:
38:74:03:be:28:6c:40:04:13:b2:f3:82:6d:a3:b1:30:32:69:
d0:1f:b7:a5:bf:53:11:a0:d4:99:35:26:e7:48:5f:a9:95:7d:
1a:cb:ce:8f:69:5c:1c:41:7e:0b:d2:4c:f4:fe:0f:86:a1:8a:
db:7b:a4:20:25:98:33:8e:cc:df:8d:ec:80:53:1b:19:85:d5:
db:af:8f:97:7b:cb:51:c0:9f:24:5d:77:fc:eb:55:7a:ce:fe:
af:ec:50:9f:c1:a7:a3:e0:b1:ec:fe:63:3f:1d:17:35:5e:ee:
ee:4b:f4:f4:3c:3b:2c:34:c1:98:e8:95:98:5f:c4:91:99:1a:
78:64:59:8c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBq2nETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZjNmMTMzMmNmZjA1YjIyYTNhNjZhNmQ0YzM0OGZiYzAxZGUxMTVjMB4XDTIyMDEw
MTE2MDczN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmNjYTRhZWYzMzFl
MDExNzdiZjZkOTliZDEzYjg1ZmFjOTllYmMyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKqOOQ1xjnDJNSDw/cBzDs5I+z3ej639bpMkEsfsxeUehS+l
TK3UPVt7IH8Wg15SpP+CrWpB9/MRh2qcp29mVD0vrLylKfYRf/XD36wtcTS1rRku
1MOYw2L8Fb4zCbtGLHAt3bMS4G/gLAOCXY/5tAydR6XcdoHmS1eiZTjfzTMCqlKM
1VCzAiNglavT5OEo7VVKvInl+HJqdpbHp5SchCJMbSuWQ/+IZs6ggLw1l9bsk4vq
3UW+F2Nvqorjp885jaL4/noytKqBcy9MdrnSIiNEZC6zF+yxrXwAFanlMadPDRHv
sswPMSsGibhTtEFE8TkAwJAehvgKikCWRZP3GdcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS8ykrvMx4BF3v22ZvRO4X6yZ68KzAfBgNVHSMEGDAWgBQPPxMyz/BbIqOm
am1MNI+8Ad4RXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0R6OFRNc193V3lLanBtcHRURFNQdkFIZUVWdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2IvNTIzYjk1LTNkZGMtNDgxOC05MjY1LWRhYWYyOTIxMTk0OS8x
L3ZNcEs3ek1lQVJkNzl0bWIwVHVGLXNtZXZDcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Iv
NTIzYjk1LTNkZGMtNDgxOC05MjY1LWRhYWYyOTIxMTk0OS8xL0R6OFRNc193V3lL
anBtcHRURFNQdkFIZUVWdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbn3IDANBgkqhkiG9w0BAQsFAAOC
AQEATZOJn3fKf6zCp1O08ork+0o13Q2B2oIcqJeAVJPFDfy6S7TOJZknhMIiPKf2
wZ5Vu3W44nK2k+HAbnn0ZDKhno6Fp7Dkdk/4K2Tgv/nG5YcxNuMs2EBTTqiQqIfC
kQJEHRummSALI/fJ6B2KlYJyKr4xO+EjPO/jeUCBatpsOHQDvihsQAQTsvOCbaOx
MDJp0B+3pb9TEaDUmTUm50hfqZV9GsvOj2lcHEF+C9JM9P4PhqGK23ukICWYM47M
343sgFMbGYXV26+Pl3vLUcCfJF13/OtVes7+r+xQn8Gno+Cx7P5jPx0XNV7u7kv0
9Dw7LDTBmOiVmF/EkZkaeGRZjA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:33 2023 by rpki-client on console-ams.rpki-client.org