Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/E3fMukShCx9V6aFcqr7GdLSlK28.roa
File: E3fMukShCx9V6aFcqr7GdLSlK28.roa (raw, json)
Hash identifier: bxuaMeA8BTEGu8KRVyZmmgTaXojvP7ctTGgUXla9BTk=
Subject key identifier: 13:77:CC:BA:44:A1:0B:1F:55:E9:A1:5C:AA:BE:C6:74:B4:A5:2B:6F
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 09F9B1EF
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/E3fMukShCx9V6aFcqr7GdLSlK28.roa
Signing time: Sat 01 Jan 2022 01:57:29 +0000
ROA not before: Sat 01 Jan 2022 01:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.226.160.0/24 maxlen: 24
185.226.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167358959 (0x9f9b1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 1 01:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1377ccba44a10b1f55e9a15caabec674b4a52b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:04:c0:49:39:fe:43:6a:d9:87:6b:ab:17:
2b:c1:63:96:05:40:3b:a0:b2:26:dc:a8:0a:5f:2f:
e6:fa:8b:95:28:57:fb:b9:42:ca:f2:58:e8:48:03:
33:ad:32:26:39:7d:9d:c6:fe:f9:9f:5a:c1:52:dd:
f3:58:00:8e:34:0a:76:75:09:e0:9e:be:ff:e5:0b:
fc:84:23:27:ad:98:b2:b3:71:83:3b:81:2c:6e:57:
8c:a9:c1:6f:56:37:cb:78:a5:a8:bd:7e:df:d2:5f:
3a:88:d2:42:f7:fb:02:30:ea:eb:46:8a:1e:ad:b8:
6a:de:8c:04:30:c6:c7:39:dc:36:a4:37:94:6c:e4:
85:f3:c8:63:bf:6e:1e:39:c1:ff:7f:91:52:5f:3f:
4f:8d:83:6a:c0:43:cf:cc:32:b3:5d:78:22:2d:07:
55:70:a5:9b:c4:4d:aa:05:4b:cb:0b:b2:cb:42:65:
8b:18:0e:d7:6b:f5:b3:70:15:59:03:7b:34:35:91:
c9:66:ca:1f:0a:c6:bb:cd:e3:bd:7f:84:2f:39:9d:
ef:8e:09:3f:b5:6b:36:45:a7:e0:97:75:59:96:ee:
66:f8:ff:38:3e:e5:fe:eb:f6:6c:55:46:5e:04:43:
b3:04:8f:6b:b0:58:c6:26:b0:76:a6:7a:b6:ed:83:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:77:CC:BA:44:A1:0B:1F:55:E9:A1:5C:AA:BE:C6:74:B4:A5:2B:6F
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/E3fMukShCx9V6aFcqr7GdLSlK28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:5b:78:e6:43:10:2c:81:13:9c:22:de:25:2d:c4:9c:6c:ec:
2e:87:18:c0:01:1f:ef:cd:58:cb:0b:86:7f:54:17:97:7f:4d:
2f:50:0e:2a:56:ae:c4:38:e2:25:49:a1:f4:b4:65:a1:d7:3a:
f0:ec:31:8e:11:b1:7a:49:fd:14:10:d7:57:4e:e5:d4:b2:6a:
85:cb:b3:56:d9:53:ab:b2:22:04:36:5d:54:4a:85:20:07:bf:
4e:ec:fb:36:7d:93:6e:92:f5:14:41:e8:21:a9:32:2b:8c:47:
dd:c6:1c:bd:30:36:be:ed:b6:ae:0c:b1:86:9a:e9:bf:17:2b:
f9:19:67:dc:2a:e2:e0:3c:6b:53:7d:ff:c1:64:7a:1b:5e:5a:
12:bc:63:10:07:55:05:24:20:2e:26:a1:ac:a8:fa:f5:b5:fd:
06:de:27:b2:c4:5e:e6:04:04:87:e6:4e:2f:75:d4:d6:f6:d3:
01:24:95:57:83:65:d7:14:74:07:13:4b:a4:04:c9:fa:cd:2b:
14:2c:7b:37:6d:fb:cd:17:9e:0f:0a:a7:cf:af:ab:1f:81:5c:
1b:00:b0:f8:ea:e4:99:d7:52:38:72:dd:4e:62:6a:9b:29:56:
bb:0c:6c:65:9b:f2:fa:c2:a4:ee:2d:c9:db:58:86:4e:33:10:
b6:2c:a0:78
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECfmx7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzYwOWYyYjlkMjQ4NmYzNmU4Y2QyOWRmYTJhNzU2YTQ4ZGU3YzUxMB4XDTIyMDEw
MTAxNTcyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTM3N2NjYmE0NGEx
MGIxZjU1ZTlhMTVjYWFiZWM2NzRiNGE1MmI2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGKBMBJOf5DatmHa6sXK8FjlgVAO6CyJtyoCl8v5vqLlShX
+7lCyvJY6EgDM60yJjl9ncb++Z9awVLd81gAjjQKdnUJ4J6+/+UL/IQjJ62YsrNx
gzuBLG5XjKnBb1Y3y3ilqL1+39JfOojSQvf7AjDq60aKHq24at6MBDDGxzncNqQ3
lGzkhfPIY79uHjnB/3+RUl8/T42DasBDz8wys114Ii0HVXClm8RNqgVLywuyy0Jl
ixgO12v1s3AVWQN7NDWRyWbKHwrGu83jvX+ELzmd744JP7VrNkWn4Jd1WZbuZvj/
OD7l/uv2bFVGXgRDswSPa7BYxiawdqZ6tu2DqUkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQTd8y6RKELH1XpoVyqvsZ0tKUrbzAfBgNVHSMEGDAWgBSDYJ8rnSSG826M
0p36KnVqSN58UTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2cyQ2ZLNTBraHZOdWpOS2QtaXAxYWtqZWZGRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvZDZlYzNiLWU3MTctNGMzZC1iMGFlLTVlNjBmNmRhMmIwOS8x
L0UzZk11a1NoQ3g5VjZhRmNxcjdHZExTbEsyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
ZDZlYzNiLWU3MTctNGMzZC1iMGFlLTVlNjBmNmRhMmIwOS8xL2cyQ2ZLNTBraHZO
dWpOS2QtaXAxYWtqZWZGRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnioDANBgkqhkiG9w0BAQsFAAOC
AQEAsVt45kMQLIETnCLeJS3EnGzsLocYwAEf781YywuGf1QXl39NL1AOKlauxDji
JUmh9LRlodc68OwxjhGxekn9FBDXV07l1LJqhcuzVtlTq7IiBDZdVEqFIAe/Tuz7
Nn2TbpL1FEHoIakyK4xH3cYcvTA2vu22rgyxhprpvxcr+Rln3Cri4DxrU33/wWR6
G15aErxjEAdVBSQgLiahrKj69bX9Bt4nssRe5gQEh+ZOL3XU1vbTASSVV4Nl1xR0
BxNLpATJ+s0rFCx7N237zReeDwqnz6+rH4FcGwCw+OrkmddSOHLdTmJqmylWuwxs
ZZvy+sKk7i3J21iGTjMQtiygeA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org