Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/Wsa9llsleYyJqar2nnlyq9SRbYc.roa
File: Wsa9llsleYyJqar2nnlyq9SRbYc.roa (raw, json)
Hash identifier: hgT0WLFyMiPX39VQyXj3V6LTxu4jeqb97sxhrxAi+k4=
Subject key identifier: 5A:C6:BD:96:5B:25:79:8C:89:A9:AA:F6:9E:79:72:AB:D4:91:6D:87
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 04889271
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/Wsa9llsleYyJqar2nnlyq9SRbYc.roa
Signing time: Fri 15 Apr 2022 19:11:11 +0000
ROA not before: Fri 15 Apr 2022 19:11:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 185.42.26.0/24 maxlen: 24
185.42.25.0/24 maxlen: 24
185.42.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76059249 (0x4889271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Apr 15 19:11:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ac6bd965b25798c89a9aaf69e7972abd4916d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:84:37:6b:35:f8:69:d6:8f:67:f3:c6:a5:
55:f8:5d:f1:40:39:66:03:1e:be:c0:19:7f:e3:3f:
00:c2:99:a7:48:f7:99:40:ad:ac:f6:57:5a:0a:bc:
5f:dd:21:5b:ef:1c:5a:d2:41:08:16:21:c4:38:17:
ac:c5:8e:e8:1d:8a:a5:ad:40:43:53:66:5b:53:35:
c9:1b:84:37:a6:d1:f9:2d:97:29:7e:9e:62:48:8d:
8e:a3:a4:69:9e:4e:29:49:35:30:ce:44:c5:bc:db:
fe:1c:f2:a7:36:9f:0c:0f:47:93:56:66:50:bd:e8:
a9:1a:04:45:5b:29:ff:67:05:7c:85:e9:0a:07:96:
c9:df:cb:bd:24:1a:3c:9e:80:7c:05:94:0e:dc:32:
e1:78:dc:a4:59:d9:52:57:27:9d:77:d7:42:ea:f3:
83:05:2e:5f:fe:33:10:84:d2:f8:45:28:00:de:84:
83:6d:94:f8:6e:55:b7:8a:43:1d:d8:13:b8:45:27:
71:91:dd:f1:1e:55:fd:ad:01:22:5e:0d:49:61:47:
1a:61:0f:15:5e:0b:d0:41:ed:0a:02:d9:66:79:b1:
66:91:6c:07:1a:f3:d6:56:80:a1:49:cd:02:9c:7f:
10:fa:06:73:4a:2c:4d:56:ed:1e:05:8a:aa:7f:6d:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C6:BD:96:5B:25:79:8C:89:A9:AA:F6:9E:79:72:AB:D4:91:6D:87
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/Wsa9llsleYyJqar2nnlyq9SRbYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0-185.42.27.255
Signature Algorithm: sha256WithRSAEncryption
6f:00:f1:08:d5:52:c4:d6:be:00:fa:50:96:0c:45:bd:bb:24:
42:80:53:21:17:bc:d4:26:e4:8d:eb:55:5c:3d:7a:69:58:f7:
15:47:9b:09:df:e3:70:83:74:9d:2b:e2:3b:f7:95:ee:84:f5:
21:cf:ea:2f:47:bd:51:9f:f5:ef:02:9a:e2:fe:cd:10:5e:eb:
ab:28:bb:a4:c2:f6:63:52:17:d8:d0:8b:7f:b7:b0:d0:24:03:
ba:30:da:0e:09:9d:19:b5:2e:9b:7a:fb:47:12:bd:a5:81:5e:
a9:d6:78:01:45:cd:3e:c5:89:62:b3:9b:e1:38:7e:ac:18:74:
a1:4f:e4:47:1c:0b:4c:07:13:cb:36:19:f5:38:07:6e:cf:27:
20:4d:0a:1b:71:c5:7d:3d:4b:39:9a:b0:4d:f1:65:18:65:67:
e9:a0:e6:a0:ae:ef:66:a8:78:6e:a8:9a:a5:10:a0:0f:3f:6d:
84:ce:51:e5:cd:74:1f:c6:35:94:26:2f:2e:b0:8f:46:b1:93:
39:8b:fd:90:2b:ba:8a:6f:df:37:ec:84:0a:44:c5:d9:ca:1c:
a0:e0:b2:f9:b9:bd:0a:a5:99:cd:86:97:dc:49:15:11:e7:48:
80:87:92:12:cb:08:1d:cc:40:92:f1:ac:3d:88:4b:cc:f8:7a:
7d:aa:6c:ce
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBIiScTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZTAxYzQ0MzgzMWNmOTMwYjc0Nzg3MDhkNzZhM2NmNDRkODlhMTYyMB4XDTIyMDQx
NTE5MTExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWFjNmJkOTY1YjI1
Nzk4Yzg5YTlhYWY2OWU3OTcyYWJkNDkxNmQ4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALalhDdrNfhp1o9n88alVfhd8UA5ZgMevsAZf+M/AMKZp0j3
mUCtrPZXWgq8X90hW+8cWtJBCBYhxDgXrMWO6B2Kpa1AQ1NmW1M1yRuEN6bR+S2X
KX6eYkiNjqOkaZ5OKUk1MM5Exbzb/hzypzafDA9Hk1ZmUL3oqRoERVsp/2cFfIXp
CgeWyd/LvSQaPJ6AfAWUDtwy4XjcpFnZUlcnnXfXQurzgwUuX/4zEITS+EUoAN6E
g22U+G5Vt4pDHdgTuEUncZHd8R5V/a0BIl4NSWFHGmEPFV4L0EHtCgLZZnmxZpFs
Bxrz1laAoUnNApx/EPoGc0osTVbtHgWKqn9tx1ECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRaxr2WWyV5jImpqvaeeXKr1JFthzAfBgNVHSMEGDAWgBTeAcRDgxz5MLdH
hwjXajz0TYmhYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNnSEVRNE1jLVRDM1I0Y0kxMm84OUUySm9XSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvMWNiOGNhLTU5OTMtNGQxNy1hNjFlLWVlNzMyOGFkY2M3Yy8x
L1dzYTlsbHNsZVl5SnFhcjJubmx5cTlTUmJZYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
MWNiOGNhLTU5OTMtNGQxNy1hNjFlLWVlNzMyOGFkY2M3Yy8xLzNnSEVRNE1jLVRD
M1I0Y0kxMm84OUUySm9XSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAuSoZAwQCuSoYMA0GCSqGSIb3
DQEBCwUAA4IBAQBvAPEI1VLE1r4A+lCWDEW9uyRCgFMhF7zUJuSN61VcPXppWPcV
R5sJ3+Nwg3SdK+I795XuhPUhz+ovR71Rn/XvApri/s0QXuurKLukwvZjUhfY0It/
t7DQJAO6MNoOCZ0ZtS6bevtHEr2lgV6p1ngBRc0+xYlis5vhOH6sGHShT+RHHAtM
BxPLNhn1OAduzycgTQobccV9PUs5mrBN8WUYZWfpoOagru9mqHhuqJqlEKAPP22E
zlHlzXQfxjWUJi8usI9GsZM5i/2QK7qKb9837IQKRMXZyhyg4LL5ub0KpZnNhpfc
SRUR50iAh5ISywgdzECS8aw9iEvM+Hp9qmzO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org