Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/ClFFCpZouYl16lqQEv_LuFCg4d0.roa
File: ClFFCpZouYl16lqQEv_LuFCg4d0.roa (raw, json)
Hash identifier: /YObobeebGl0DN1XtAe8NY3fw6qw0oBfHklsh897P+Q=
Subject key identifier: 0A:51:45:0A:96:68:B9:89:75:EA:5A:90:12:FF:CB:B8:50:A0:E1:DD
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 0B174C47
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/ClFFCpZouYl16lqQEv_LuFCg4d0.roa
Signing time: Sun 01 May 2022 01:38:36 +0000
ROA not before: Sun 01 May 2022 01:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.226.161.0/24 maxlen: 24
185.226.160.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186076231 (0xb174c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: May 1 01:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a51450a9668b98975ea5a9012ffcbb850a0e1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:c2:6e:2f:6b:4f:b7:0a:b0:16:c5:cc:d6:
0e:4b:81:b2:38:48:08:d1:9b:c9:c3:57:7e:17:ff:
64:da:60:76:5a:d3:28:20:7f:8a:0d:5a:5d:cf:ad:
b9:3b:f2:db:77:38:8d:1b:ca:f0:a8:da:8e:64:9c:
36:4a:b0:8f:80:9e:a0:9e:ae:f2:13:f6:8b:9e:63:
6e:b3:80:16:c6:76:2c:8c:d0:5d:f8:2e:9f:01:96:
4f:7f:97:84:fd:97:7a:c5:06:5c:0b:6b:b6:13:de:
22:44:67:f4:36:9a:f5:ce:bf:08:6b:7e:5f:0a:dd:
b7:a2:0d:17:02:43:b5:e7:3a:48:99:7c:76:03:2a:
9d:33:ea:f0:39:fc:a6:60:8f:8a:49:ed:04:48:2e:
53:00:3c:ed:7f:19:23:ab:e6:bf:19:a6:0a:65:1d:
69:a8:e2:c1:61:88:28:1a:f7:3b:05:8f:5b:4d:86:
0e:6f:e8:c6:4b:f1:ab:a7:e7:56:c0:ee:d0:a3:77:
9f:c5:00:43:c3:29:20:9d:be:24:2f:81:49:3a:3d:
20:5f:f0:4a:32:97:7b:01:2b:4f:a6:51:8b:80:03:
9f:43:21:6d:1d:fd:50:95:80:8a:fa:18:03:53:1c:
36:2b:8e:b4:83:35:22:a4:2c:f9:a4:64:b3:42:c7:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:45:0A:96:68:B9:89:75:EA:5A:90:12:FF:CB:B8:50:A0:E1:DD
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/ClFFCpZouYl16lqQEv_LuFCg4d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
69:59:2d:bf:b8:7b:7e:5b:3e:e0:a9:ee:17:24:af:c0:dc:8d:
f2:b8:45:54:2c:d3:2f:92:02:81:73:b2:97:73:f2:19:da:54:
0f:56:64:6b:54:06:db:0d:15:ea:fd:98:31:df:45:3b:6d:99:
ed:78:b1:45:19:de:32:28:f7:1a:9d:15:35:6c:01:a3:89:aa:
1d:1d:39:bc:95:67:d7:c1:c4:32:ab:8c:b7:14:43:aa:e4:0a:
ba:b8:3a:91:e6:fc:f0:5b:2b:a8:d9:a3:c2:15:f0:3a:df:44:
6a:ca:fd:4c:38:63:a8:5f:e0:d9:84:f0:65:36:12:1e:3d:46:
5e:46:fb:6f:78:00:2a:ed:e9:8d:e9:9c:1c:15:7a:46:bf:91:
22:33:ad:ab:85:e9:36:bb:90:6c:ab:80:11:13:d4:f9:4a:bf:
2e:89:77:80:7d:ea:6c:2b:e2:bb:b3:ec:01:f2:b2:dc:33:74:
af:8c:50:42:c8:b4:b3:d0:3b:ac:5b:76:82:29:dc:ca:d1:c1:
1b:b1:19:9c:39:15:4f:c0:f5:57:aa:87:82:11:65:d7:d7:64:
cb:20:e1:c9:42:71:ad:0a:20:c7:c9:8e:4e:a8:d0:25:cf:3c:
c0:36:36:37:5c:a4:13:41:96:04:2c:59:f2:ee:89:69:f6:e3:
7f:c2:e8:13
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECxdMRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzYwOWYyYjlkMjQ4NmYzNmU4Y2QyOWRmYTJhNzU2YTQ4ZGU3YzUxMB4XDTIyMDUw
MTAxMzgzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE1MTQ1MGE5NjY4
Yjk4OTc1ZWE1YTkwMTJmZmNiYjg1MGEwZTFkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN5mwm4va0+3CrAWxczWDkuBsjhICNGbycNXfhf/ZNpgdlrT
KCB/ig1aXc+tuTvy23c4jRvK8KjajmScNkqwj4CeoJ6u8hP2i55jbrOAFsZ2LIzQ
XfgunwGWT3+XhP2XesUGXAtrthPeIkRn9Daa9c6/CGt+Xwrdt6INFwJDtec6SJl8
dgMqnTPq8Dn8pmCPikntBEguUwA87X8ZI6vmvxmmCmUdaajiwWGIKBr3OwWPW02G
Dm/oxkvxq6fnVsDu0KN3n8UAQ8MpIJ2+JC+BSTo9IF/wSjKXewErT6ZRi4ADn0Mh
bR39UJWAivoYA1McNiuOtIM1IqQs+aRks0LHeYcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKUUUKlmi5iXXqWpAS/8u4UKDh3TAfBgNVHSMEGDAWgBSDYJ8rnSSG826M
0p36KnVqSN58UTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2cyQ2ZLNTBraHZOdWpOS2QtaXAxYWtqZWZGRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvZDZlYzNiLWU3MTctNGMzZC1iMGFlLTVlNjBmNmRhMmIwOS8x
L0NsRkZDcFpvdVlsMTZscVFFdl9MdUZDZzRkMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
ZDZlYzNiLWU3MTctNGMzZC1iMGFlLTVlNjBmNmRhMmIwOS8xL2cyQ2ZLNTBraHZO
dWpOS2QtaXAxYWtqZWZGRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnioDANBgkqhkiG9w0BAQsFAAOC
AQEAaVktv7h7fls+4KnuFySvwNyN8rhFVCzTL5ICgXOyl3PyGdpUD1Zka1QG2w0V
6v2YMd9FO22Z7XixRRneMij3Gp0VNWwBo4mqHR05vJVn18HEMquMtxRDquQKurg6
keb88FsrqNmjwhXwOt9Easr9TDhjqF/g2YTwZTYSHj1GXkb7b3gAKu3pjemcHBV6
Rr+RIjOtq4XpNruQbKuAERPU+Uq/Lol3gH3qbCviu7PsAfKy3DN0r4xQQsi0s9A7
rFt2gincytHBG7EZnDkVT8D1V6qHghFl19dkyyDhyUJxrQogx8mOTqjQJc88wDY2
N1ykE0GWBCxZ8u6Jafbjf8LoEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:08 2024 by rpki-client on console-ams.rpki-client.org