Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/tXoH4KvWSVj8Hv84pmG1Y-Vvjac.roa
File: tXoH4KvWSVj8Hv84pmG1Y-Vvjac.roa (raw, json)
Hash identifier: csANq8QoOe4PMmhVARNBjU3LJ9C8Z2PGmDdMypb/28s=
Subject key identifier: B5:7A:07:E0:AB:D6:49:58:FC:1E:FF:38:A6:61:B5:63:E5:6F:8D:A7
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 01D9F020
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/tXoH4KvWSVj8Hv84pmG1Y-Vvjac.roa
Signing time: Mon 10 Jan 2022 18:45:38 +0000
ROA not before: Mon 10 Jan 2022 18:45:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204300
IP address blocks: 185.21.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31060000 (0x1d9f020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 10 18:45:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b57a07e0abd64958fc1eff38a661b563e56f8da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:f3:68:b1:52:2d:3d:2a:87:a2:ab:5f:cc:
39:9a:15:17:42:51:e5:a1:ee:a5:09:b6:83:16:1b:
7c:25:aa:7a:16:f0:f3:89:a5:2e:5f:8b:76:a0:e0:
7e:dd:34:1a:3c:e5:d3:4b:3a:92:33:37:ae:9e:1b:
6d:cc:0c:6e:b4:e1:1d:f9:28:f7:cb:57:0f:05:6e:
80:61:30:28:4e:56:f7:c3:06:1f:bc:79:58:76:ef:
06:3c:21:e5:c9:ea:b0:f0:c0:be:30:d1:cf:eb:21:
0b:aa:ec:f4:f2:d9:0f:76:53:06:f8:c8:89:59:14:
78:c7:0c:d3:82:25:04:9b:55:39:bc:81:c1:fa:b2:
e6:e3:a8:f8:89:e4:8b:9f:46:ee:cd:06:2a:07:df:
fc:67:8e:9b:3f:22:57:38:7f:4f:1e:50:e9:3d:32:
02:f9:98:5c:74:28:1c:e1:6c:50:cf:c2:61:86:a6:
0e:67:e5:f8:07:65:df:0e:00:28:2a:6d:61:ad:19:
7c:ea:de:f5:92:ba:fc:b6:35:6d:bf:78:81:3d:b8:
4c:a2:db:ca:33:63:19:e1:0e:40:73:8c:6c:9e:41:
ba:f3:90:81:70:f5:31:2b:18:0b:0a:48:e1:9c:dc:
58:a4:28:57:3a:1b:eb:3c:3d:80:ac:ba:5c:6f:9b:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:07:E0:AB:D6:49:58:FC:1E:FF:38:A6:61:B5:63:E5:6F:8D:A7
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/tXoH4KvWSVj8Hv84pmG1Y-Vvjac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.128.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:07:72:c4:bf:bd:39:b2:5c:ba:7a:08:24:df:b4:66:08:a1:
25:0f:1d:54:36:43:47:8e:79:84:3a:70:74:1e:31:ad:e4:49:
eb:0b:93:37:bb:4c:e8:be:1d:94:7b:6e:91:eb:68:75:9c:39:
f0:c2:fc:e4:2f:0c:a4:73:f5:13:73:e5:81:81:63:d7:d9:f8:
11:c4:c1:2f:e6:da:ca:35:08:92:89:21:62:e1:59:42:04:24:
ed:35:31:9d:71:bf:d1:a4:49:9e:b6:c9:74:04:79:d5:51:e1:
bb:c5:fb:31:3f:7b:93:68:07:8e:c2:6c:a7:11:e7:c1:d3:65:
7c:62:b7:d8:93:7d:c6:63:24:17:7c:89:d1:0c:72:39:87:0b:
82:28:81:0c:f0:24:20:4e:7e:0c:ea:a1:be:a3:90:ef:3c:6e:
25:3c:9d:d4:d5:59:bb:fa:eb:df:21:55:67:9a:73:37:63:c2:
3b:dc:d7:ae:13:e9:3e:de:2a:f8:74:6a:a5:c6:8a:f7:19:67:
4a:3c:ea:aa:c6:65:ff:ef:56:bd:f9:b1:66:e9:85:47:b4:61:
d8:7f:82:72:41:6e:ef:ad:3b:e7:72:5e:b9:2f:07:50:52:35:
50:d3:60:02:48:a9:ce:bd:26:9b:28:b3:5f:12:ed:70:25:4e:
e1:b0:9b:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAdnwIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YjdkMWYxZTg3N2MxMjc5ODI3NGUwMTMzNDU1NGY4OTlmMzhlYWMxMB4XDTIyMDEx
MDE4NDUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjU3YTA3ZTBhYmQ2
NDk1OGZjMWVmZjM4YTY2MWI1NjNlNTZmOGRhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXH82ixUi09Koeiq1/MOZoVF0JR5aHupQm2gxYbfCWqehbw
84mlLl+LdqDgft00Gjzl00s6kjM3rp4bbcwMbrThHfko98tXDwVugGEwKE5W98MG
H7x5WHbvBjwh5cnqsPDAvjDRz+shC6rs9PLZD3ZTBvjIiVkUeMcM04IlBJtVObyB
wfqy5uOo+Inki59G7s0GKgff/GeOmz8iVzh/Tx5Q6T0yAvmYXHQoHOFsUM/CYYam
Dmfl+Adl3w4AKCptYa0ZfOre9ZK6/LY1bb94gT24TKLbyjNjGeEOQHOMbJ5BuvOQ
gXD1MSsYCwpI4ZzcWKQoVzob6zw9gKy6XG+boKsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS1egfgq9ZJWPwe/zimYbVj5W+NpzAfBgNVHSMEGDAWgBRrfR8eh3wSeYJ0
4BM0VU+JnzjqwTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2EzMGZIb2Q4RW5tQ2RPQVRORlZQaVo4NDZzRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvYTEzYzQwLWRjNjctNDIzYy05NzllLTJmYWQ5YTJmYzNlZi8x
L3RYb0g0S3ZXU1ZqOEh2ODRwbUcxWS1WdmphYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
YTEzYzQwLWRjNjctNDIzYy05NzllLTJmYWQ5YTJmYzNlZi8xL2EzMGZIb2Q4RW5t
Q2RPQVRORlZQaVo4NDZzRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkVgDANBgkqhkiG9w0BAQsFAAOC
AQEAngdyxL+9ObJcunoIJN+0ZgihJQ8dVDZDR455hDpwdB4xreRJ6wuTN7tM6L4d
lHtuketodZw58ML85C8MpHP1E3PlgYFj19n4EcTBL+bayjUIkokhYuFZQgQk7TUx
nXG/0aRJnrbJdAR51VHhu8X7MT97k2gHjsJspxHnwdNlfGK32JN9xmMkF3yJ0Qxy
OYcLgiiBDPAkIE5+DOqhvqOQ7zxuJTyd1NVZu/rr3yFVZ5pzN2PCO9zXrhPpPt4q
+HRqpcaK9xlnSjzqqsZl/+9WvfmxZumFR7Rh2H+CckFu760753JeuS8HUFI1UNNg
Akipzr0mmyizXxLtcCVO4bCbXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org