Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/xHUikR2DepOl7hMTyYdlJx-TdE0.roa
File: xHUikR2DepOl7hMTyYdlJx-TdE0.roa (raw, json)
Hash identifier: Ahgyk6sEf8+s1r56lElKMzqg7nZxl8C9Kek3TmzjKk8=
Subject key identifier: C4:75:22:91:1D:83:7A:93:A5:EE:13:13:C9:87:65:27:1F:93:74:4D
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: B807AA
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/xHUikR2DepOl7hMTyYdlJx-TdE0.roa
Signing time: Thu 14 Apr 2022 11:49:13 +0000
ROA not before: Thu 14 Apr 2022 11:49:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.63.35.0/24 maxlen: 24
185.63.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12060586 (0xb807aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Apr 14 11:49:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c47522911d837a93a5ee1313c98765271f93744d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:d1:9b:d6:37:08:b6:ab:0e:ac:95:c9:44:
db:32:64:49:f4:bc:f7:3e:cd:56:25:ac:f8:4a:c1:
ce:29:29:fe:ad:59:c3:92:49:1b:87:1d:56:90:0b:
33:ac:c6:15:6d:5a:e6:2f:41:56:63:80:2a:3e:22:
f5:cb:f2:96:2c:e3:91:a2:bb:c5:36:52:62:4e:6f:
7e:3d:54:c8:59:f0:d8:9a:f2:da:5f:c5:59:f3:4d:
c9:f1:f5:17:98:91:d3:93:05:cb:6e:c0:fe:ea:1c:
4a:ac:07:28:65:0a:eb:c0:3d:30:c5:87:14:62:3f:
42:a0:31:92:4f:ed:df:31:e2:f2:8a:01:78:85:1b:
05:13:09:04:4a:0c:e7:f7:02:87:a6:2a:00:b9:22:
36:a3:0e:18:18:5d:a2:45:4c:23:51:9e:c3:a4:7f:
73:a4:7f:89:41:b4:7c:c2:4b:dd:c0:2e:20:85:8d:
95:d0:1d:3d:00:f0:c9:a5:5c:1f:57:df:52:d7:9d:
2a:45:63:94:2a:93:19:67:e5:e4:65:f0:74:2e:39:
55:b9:86:bd:d2:6f:b1:be:1a:e7:46:44:58:37:44:
fb:9a:72:e5:a3:13:af:cf:1d:98:bc:5b:5c:6d:e4:
78:bf:9a:f2:3d:48:5c:a5:69:3b:ce:4a:00:46:ad:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:75:22:91:1D:83:7A:93:A5:EE:13:13:C9:87:65:27:1F:93:74:4D
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/xHUikR2DepOl7hMTyYdlJx-TdE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0/24
185.63.35.0/24
Signature Algorithm: sha256WithRSAEncryption
06:83:02:21:d3:18:cf:8a:bb:43:6e:5b:8a:90:cb:98:76:2e:
73:a0:79:87:0d:8e:8e:d0:91:2a:ad:38:21:bb:b7:c2:9b:8a:
4e:d8:36:7c:d7:d5:b6:da:82:98:dc:27:8a:63:b5:35:6f:58:
2a:58:d5:fc:09:61:66:3d:77:3b:24:2c:e4:a4:ae:b0:bb:23:
7b:b6:b0:7c:a9:1f:f7:b4:e5:bc:e9:34:74:32:4f:c9:0d:21:
d3:a5:f9:c4:6e:33:c4:cd:49:ae:f3:91:41:d4:ac:76:ee:1a:
f3:6b:95:80:bd:71:4e:cd:32:fb:43:d2:6b:39:6c:27:03:87:
ea:dc:27:d4:0e:aa:46:95:03:e4:55:42:ec:d4:d7:24:85:2f:
96:4e:19:57:4a:cd:87:95:3d:61:62:56:57:52:f8:b8:14:2d:
eb:2e:fb:ee:7e:2b:43:3e:6c:04:ca:a1:fa:4e:c4:79:98:01:
9f:a1:d2:34:47:85:40:08:1a:9e:20:4e:ce:b6:16:bb:b7:33:
93:ac:db:99:a7:fd:bd:0a:8d:d6:b1:30:4c:fe:6a:11:47:d1:
13:c4:52:3b:b4:40:73:7e:47:98:e8:06:f3:20:f9:ac:bd:4a:
d0:72:a0:75:4c:5e:50:31:1e:f5:78:b9:4e:03:bc:cf:3e:33:
6c:f6:32:0a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEALgHqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
M2RkMTFkMzQ2YjYzYmIxZWIyMmEwN2MyNmNjMTI5MWEyYTA2ODk1MB4XDTIyMDQx
NDExNDkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQ3NTIyOTExZDgz
N2E5M2E1ZWUxMzEzYzk4NzY1MjcxZjkzNzQ0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTI0ZvWNwi2qw6slclE2zJkSfS89z7NViWs+ErBzikp/q1Z
w5JJG4cdVpALM6zGFW1a5i9BVmOAKj4i9cvylizjkaK7xTZSYk5vfj1UyFnw2Jry
2l/FWfNNyfH1F5iR05MFy27A/uocSqwHKGUK68A9MMWHFGI/QqAxkk/t3zHi8ooB
eIUbBRMJBEoM5/cCh6YqALkiNqMOGBhdokVMI1Gew6R/c6R/iUG0fMJL3cAuIIWN
ldAdPQDwyaVcH1ffUtedKkVjlCqTGWfl5GXwdC45VbmGvdJvsb4a50ZEWDdE+5py
5aMTr88dmLxbXG3keL+a8j1IXKVpO85KAEatbV8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTEdSKRHYN6k6XuExPJh2UnH5N0TTAfBgNVHSMEGDAWgBSz3RHTRrY7sesi
oHwmzBKRoqBolTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3M5MFIwMGEyTzdIcklxQjhKc3dTa2FLZ2FKVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvYTQxODk4LWRhMDgtNDY5ZC1iZTFhLThiYmMyMjZlNmM0NS8x
L3hIVWlrUjJEZXBPbDdoTVR5WWRsSngtVGRFMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
YTQxODk4LWRhMDgtNDY5ZC1iZTFhLThiYmMyMjZlNmM0NS8xL3M5MFIwMGEyTzdI
cklxQjhKc3dTa2FLZ2FKVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALk/IQMEALk/IzANBgkqhkiG9w0B
AQsFAAOCAQEABoMCIdMYz4q7Q25bipDLmHYuc6B5hw2OjtCRKq04Ibu3wpuKTtg2
fNfVttqCmNwnimO1NW9YKljV/AlhZj13OyQs5KSusLsje7awfKkf97TlvOk0dDJP
yQ0h06X5xG4zxM1JrvORQdSsdu4a82uVgL1xTs0y+0PSazlsJwOH6twn1A6qRpUD
5FVC7NTXJIUvlk4ZV0rNh5U9YWJWV1L4uBQt6y777n4rQz5sBMqh+k7EeZgBn6HS
NEeFQAganiBOzrYWu7czk6zbmaf9vQqN1rEwTP5qEUfRE8RSO7RAc35HmOgG8yD5
rL1K0HKgdUxeUDEe9Xi5TgO8zz4zbPYyCg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:23 2024 by rpki-client on console-ams.rpki-client.org