Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/ln23Dd5W1H9QiR4gJPMI33v2WX0.roa
File: ln23Dd5W1H9QiR4gJPMI33v2WX0.roa (raw, json)
Hash identifier: smICKQUUhHyG32hPnTSgXXvLEfl/UO+Oiji99Hx9iFo=
Subject key identifier: 96:7D:B7:0D:DE:56:D4:7F:50:89:1E:20:24:F3:08:DF:7B:F6:59:7D
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 06C3BEA6
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/ln23Dd5W1H9QiR4gJPMI33v2WX0.roa
Signing time: Sat 01 Jan 2022 10:57:19 +0000
ROA not before: Sat 01 Jan 2022 10:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200924
IP address blocks: 185.50.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113491622 (0x6c3bea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jan 1 10:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967db70dde56d47f50891e2024f308df7bf6597d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:d8:ef:a5:0a:56:cb:b2:29:b0:e9:ed:4d:
10:0e:9e:c9:1c:fa:f0:3d:af:56:09:d1:9e:69:2d:
49:c5:5f:d9:1f:9c:d6:ff:74:72:dd:32:3d:00:57:
ec:81:2b:e7:42:03:36:11:4d:7a:52:ed:2c:4a:7c:
c6:cd:e1:da:4e:2c:a8:d9:cf:e7:21:d3:8b:fe:d0:
78:21:b2:24:ca:48:37:23:b6:3c:e6:48:41:0c:85:
ca:f8:c2:96:b1:0a:1d:fa:e1:9c:2f:39:2b:b8:83:
31:d5:81:06:28:5d:1c:1a:eb:8d:13:48:5e:f1:28:
b6:74:18:07:04:39:a3:68:97:c2:ee:b0:20:6c:82:
44:01:0b:b5:bf:c9:9a:4e:b0:f7:b3:2b:75:49:27:
6f:23:bc:84:a3:62:c7:0f:34:2d:73:29:4e:69:d6:
16:9f:3c:5a:b4:66:c9:5d:6c:f1:87:40:21:8c:42:
1d:ab:cd:87:37:66:d4:e7:a8:eb:7b:9b:06:73:c6:
d7:55:9b:58:6e:f9:6f:b5:49:5b:f9:0f:24:c0:71:
f8:ae:95:ba:2e:b7:90:3a:84:79:71:19:63:f9:bc:
d0:2b:a7:0c:62:2f:b3:da:68:76:59:2b:e9:af:28:
9b:4c:a7:39:11:49:34:c0:6f:b1:69:b5:52:d0:7b:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:B7:0D:DE:56:D4:7F:50:89:1E:20:24:F3:08:DF:7B:F6:59:7D
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/ln23Dd5W1H9QiR4gJPMI33v2WX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.122.0/23
Signature Algorithm: sha256WithRSAEncryption
28:00:af:c9:8e:30:db:5c:a8:53:c7:6b:81:df:28:1e:47:d8:
f0:20:fa:b8:88:8e:51:93:27:25:ca:e0:49:52:40:4c:01:29:
bf:a3:49:0b:97:5d:1b:ad:88:05:98:ef:85:b2:32:f0:1a:cb:
8f:a1:6e:a1:51:2c:98:7d:2e:d1:7b:ab:b3:42:82:71:19:30:
8d:c7:ba:8f:cd:37:b9:11:dc:40:18:30:81:2a:cd:1e:5b:0b:
81:50:6c:43:37:7b:5f:aa:83:15:b8:d0:9f:3c:c4:ee:42:0d:
e3:7b:3d:b3:7e:fb:d8:14:34:74:d4:02:77:1a:e1:e0:26:ea:
49:fb:d1:ff:9c:83:c1:6d:cf:4f:48:fe:0a:bf:d9:2c:90:0b:
7b:17:d7:8d:d5:4b:ce:18:84:4a:0d:cc:56:f8:4b:66:f1:ae:
0b:5a:5d:59:d2:f3:d4:6a:65:82:ae:af:c6:87:0a:8d:c4:7d:
08:e3:05:37:34:6e:89:7c:75:e5:c5:93:fb:b2:fc:f9:d8:7a:
d6:30:00:7d:8d:58:7d:00:da:ae:a9:2b:a1:3a:11:a2:12:1c:
9d:4c:e7:ed:f3:2d:d2:7a:80:98:18:65:ef:9e:47:22:4b:d3:
c6:c7:d7:bd:ea:1d:02:eb:54:c4:37:c8:ff:51:1c:83:a1:cb:
af:8b:88:5a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBsO+pjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZGEyMTNmMDJhNjcwYjA1MzcwYzU1ZWNjY2U5MGZlMWFkNzBjNDliMB4XDTIyMDEw
MTEwNTcxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTY3ZGI3MGRkZTU2
ZDQ3ZjUwODkxZTIwMjRmMzA4ZGY3YmY2NTk3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+r2O+lClbLsimw6e1NEA6eyRz68D2vVgnRnmktScVf2R+c
1v90ct0yPQBX7IEr50IDNhFNelLtLEp8xs3h2k4sqNnP5yHTi/7QeCGyJMpINyO2
POZIQQyFyvjClrEKHfrhnC85K7iDMdWBBihdHBrrjRNIXvEotnQYBwQ5o2iXwu6w
IGyCRAELtb/Jmk6w97MrdUknbyO8hKNixw80LXMpTmnWFp88WrRmyV1s8YdAIYxC
HavNhzdm1Oeo63ubBnPG11WbWG75b7VJW/kPJMBx+K6Vui63kDqEeXEZY/m80Cun
DGIvs9podlkr6a8om0ynORFJNMBvsWm1UtB7Q10CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSWfbcN3lbUf1CJHiAk8wjfe/ZZfTAfBgNVHSMEGDAWgBQ9ohPwKmcLBTcM
VezM6Q/hrXDEmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BhSVQ4Q3BuQ3dVM0RGWHN6T2tQNGExd3hKcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvZTdmNmFhLTZlZTQtNGI0Yy04NjgxLTdkYjhlYmE3OWVmMS8x
L2xuMjNEZDVXMUg5UWlSNGdKUE1JMzN2MldYMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
ZTdmNmFhLTZlZTQtNGI0Yy04NjgxLTdkYjhlYmE3OWVmMS8xL1BhSVQ4Q3BuQ3dV
M0RGWHN6T2tQNGExd3hKcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkyejANBgkqhkiG9w0BAQsFAAOC
AQEAKACvyY4w21yoU8drgd8oHkfY8CD6uIiOUZMnJcrgSVJATAEpv6NJC5ddG62I
BZjvhbIy8BrLj6FuoVEsmH0u0Xurs0KCcRkwjce6j803uRHcQBgwgSrNHlsLgVBs
Qzd7X6qDFbjQnzzE7kIN43s9s3772BQ0dNQCdxrh4CbqSfvR/5yDwW3PT0j+Cr/Z
LJALexfXjdVLzhiESg3MVvhLZvGuC1pdWdLz1Gplgq6vxocKjcR9COMFNzRuiXx1
5cWT+7L8+dh61jAAfY1YfQDarqkroToRohIcnUzn7fMt0nqAmBhl755HIkvTxsfX
veodAutUxDfI/1Ecg6HLr4uIWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:34 2024 by rpki-client on console-ams.rpki-client.org