Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/APxd6SNQzVgT0neB5WT62mFryks.roa
File: APxd6SNQzVgT0neB5WT62mFryks.roa (raw, json)
Hash identifier: ItCSJV8wq9uDFBRrqGFlNLzOTDNMj9xglJbhAPALwU8=
Subject key identifier: 00:FC:5D:E9:23:50:CD:58:13:D2:77:81:E5:64:FA:DA:61:6B:CA:4B
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 018384A76E9D261972329B647DA7E1F78842
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/APxd6SNQzVgT0neB5WT62mFryks.roa
Signing time: Wed 28 Sep 2022 15:11:48 +0000
ROA not before: Wed 28 Sep 2022 15:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 185.63.34.0/24 maxlen: 24
185.63.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:84:a7:6e:9d:26:19:72:32:9b:64:7d:a7:e1:f7:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Sep 28 15:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00fc5de92350cd5813d27781e564fada616bca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:41:d2:60:da:f3:86:71:56:9e:ab:a7:35:
5a:d9:a1:bd:b4:99:73:6b:08:88:e4:03:a8:d1:a6:
9e:67:83:36:c2:57:f1:6a:40:f8:75:a2:dd:5a:24:
79:2e:1a:ad:77:a4:b6:67:03:d7:9b:30:20:f4:6d:
59:48:9b:56:94:4b:fa:65:d9:92:78:93:da:8e:b6:
1c:15:cc:03:f2:e2:c0:8a:a8:5e:67:26:a9:88:c4:
90:e1:4d:16:48:70:66:9f:ab:d0:52:5d:85:a5:3a:
1e:99:5e:a2:63:87:14:d9:ac:dc:14:e4:be:22:78:
fd:6a:ba:f3:c5:b0:a6:1f:dd:90:e1:a3:1c:38:91:
83:87:1d:4e:87:c6:f0:15:62:0e:6f:20:03:82:69:
35:28:1f:90:0e:de:b0:48:4f:b6:be:69:ec:ef:35:
61:05:4e:2d:7f:d0:c9:84:12:d0:f1:94:53:6f:f5:
94:12:21:68:76:3d:f1:19:35:ad:7c:c7:76:1b:7f:
39:17:72:6e:ff:ab:a1:4c:88:b9:54:61:4a:6d:f2:
f2:7e:a5:95:8a:ba:7d:c0:2e:23:1a:a1:7d:c5:aa:
2e:3f:37:30:ec:25:95:52:93:a1:ec:98:af:a1:7b:
d8:11:23:20:f2:42:62:79:5b:4c:1c:62:5a:41:6a:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FC:5D:E9:23:50:CD:58:13:D2:77:81:E5:64:FA:DA:61:6B:CA:4B
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/APxd6SNQzVgT0neB5WT62mFryks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0-185.63.34.255
Signature Algorithm: sha256WithRSAEncryption
93:eb:6b:8b:f6:71:51:0c:2a:86:fd:01:08:06:a6:33:12:59:
83:2b:17:79:a4:fc:3d:d6:c7:83:3f:b6:1d:53:65:09:cc:fd:
9f:05:2c:2c:17:60:21:d5:d4:58:25:cb:82:06:10:f4:5e:e5:
b5:68:b8:95:27:51:b4:4c:df:02:4e:09:9e:89:e6:63:9a:3f:
99:f9:52:02:23:0e:8a:c0:3c:2c:91:7f:c1:5e:94:15:c6:e6:
2e:e4:00:0d:dd:5a:6f:d6:d4:4c:01:67:b8:77:78:6d:f3:d9:
8b:a8:bb:bb:2b:be:a7:6e:16:97:54:ac:fb:61:b4:e6:59:b3:
64:89:86:1c:ca:50:85:42:a1:c6:4d:01:a8:c2:21:d5:99:ad:
88:f9:e6:82:c9:6e:dd:53:53:63:59:a5:de:24:2c:17:ac:de:
32:1d:86:b8:67:79:e4:10:b5:ce:d7:de:82:7e:a4:cb:41:01:
aa:e8:c9:c9:1c:09:1c:dc:ae:38:4d:17:82:00:8d:38:01:e4:
2e:10:75:ef:25:12:4e:8c:2b:43:63:ea:ec:fd:18:e8:ea:d2:
59:06:d2:20:be:29:e8:78:12:24:b6:63:06:5a:b0:1e:b3:39:
88:1d:86:a6:72:64:0e:87:6b:ae:5d:81:31:52:ed:aa:ac:78:
f7:fb:40:a5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYOEp26dJhlyMptkfafh94hCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjIwOTI4MTUxMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGZjNWRlOTIzNTBjZDU4MTNkMjc3ODFlNTY0ZmFkYTYxNmJjYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGRB0mDa84ZxVp6rpzVa2aG9tJlz
awiI5AOo0aaeZ4M2wlfxakD4daLdWiR5Lhqtd6S2ZwPXmzAg9G1ZSJtWlEv6ZdmS
eJPajrYcFcwD8uLAiqheZyapiMSQ4U0WSHBmn6vQUl2FpToemV6iY4cU2azcFOS+
Inj9arrzxbCmH92Q4aMcOJGDhx1Oh8bwFWIObyADgmk1KB+QDt6wSE+2vmns7zVh
BU4tf9DJhBLQ8ZRTb/WUEiFodj3xGTWtfMd2G385F3Ju/6uhTIi5VGFKbfLyfqWV
irp9wC4jGqF9xaouPzcw7CWVUpOh7JivoXvYESMg8kJieVtMHGJaQWo8nwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAD8XekjUM1YE9J3geVk+tpha8pLMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvQVB4ZDZTTlF6VmdUMG5lQjVXVDYybUZyeWtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5PyED
BAC5PyIwDQYJKoZIhvcNAQELBQADggEBAJPra4v2cVEMKob9AQgGpjMSWYMrF3mk
/D3Wx4M/th1TZQnM/Z8FLCwXYCHV1Fgly4IGEPRe5bVouJUnUbRM3wJOCZ6J5mOa
P5n5UgIjDorAPCyRf8FelBXG5i7kAA3dWm/W1EwBZ7h3eG3z2Yuou7srvqduFpdU
rPthtOZZs2SJhhzKUIVCocZNAajCIdWZrYj55oLJbt1TU2NZpd4kLBes3jIdhrhn
eeQQtc7X3oJ+pMtBAaroyckcCRzcrjhNF4IAjTgB5C4Qde8lEk6MK0Nj6uz9GOjq
0lkG0iC+Keh4EiS2YwZasB6zOYgdhqZyZA6Ha65dgTFS7aqsePf7QKU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:23 2024 by rpki-client on console-ams.rpki-client.org