Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/x1evlSjZliu8bNo_8jzvwysXWnQ.roa
File: x1evlSjZliu8bNo_8jzvwysXWnQ.roa (raw, json)
Hash identifier: JCaFMA7LyFjGFdATACaxLgpPa3CKCNj0xPI9qIozEIA=
Subject key identifier: C7:57:AF:95:28:D9:96:2B:BC:6C:DA:3F:F2:3C:EF:C3:2B:17:5A:74
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01835F038AE8D0C4B295B5E61794E5F0234C
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/x1evlSjZliu8bNo_8jzvwysXWnQ.roa
Signing time: Wed 21 Sep 2022 07:46:51 +0000
ROA not before: Wed 21 Sep 2022 07:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 185.104.32.0/24 maxlen: 24
185.104.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:03:8a:e8:d0:c4:b2:95:b5:e6:17:94:e5:f0:23:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Sep 21 07:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c757af9528d9962bbc6cda3ff23cefc32b175a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:18:a5:73:b9:9f:6e:9c:4e:06:d3:f0:d3:
81:9a:e0:62:ac:7d:24:b7:e4:99:ae:45:04:c1:e3:
4d:5e:12:d9:db:47:f6:79:ab:13:17:fc:24:4f:c9:
34:76:a1:53:a2:76:68:0b:68:51:98:58:a9:0d:a3:
ef:89:15:c0:b3:8e:05:fa:43:d9:81:60:1c:4b:92:
b0:25:58:7e:39:78:a6:15:63:46:0c:7e:dc:e3:ec:
7c:ed:cb:2a:d8:33:84:2f:fe:07:8a:ce:5a:6b:d7:
b4:47:2f:2f:a7:fc:0b:3f:78:67:66:60:93:1f:11:
22:39:94:c0:0e:39:78:64:2a:f0:83:c3:ce:be:81:
93:28:cc:c5:13:38:a1:60:3e:ee:b2:a7:85:e9:43:
79:b9:b5:b9:4a:e8:40:4f:7c:15:f4:5e:c5:5d:da:
e9:22:1f:c4:72:b8:44:2b:8a:5b:61:bb:a2:a2:6f:
b0:eb:8f:ee:6c:e2:a5:69:6d:69:33:81:00:62:2b:
23:d1:7d:e5:fe:25:67:77:68:eb:17:d7:cf:16:40:
12:f6:c1:a9:24:e7:2b:e1:d9:34:4d:90:11:58:f2:
71:e7:63:e1:ec:9f:f4:4c:94:0a:09:0d:06:22:1a:
f1:b5:5a:f0:b3:51:bf:f0:b5:cb:cd:86:44:f9:f8:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:AF:95:28:D9:96:2B:BC:6C:DA:3F:F2:3C:EF:C3:2B:17:5A:74
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/x1evlSjZliu8bNo_8jzvwysXWnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.32.0/24
185.104.39.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f9:8e:98:de:48:22:f8:54:90:2a:53:2f:27:81:9f:60:b5:
5b:88:26:be:2c:7a:25:2b:cf:ab:39:ae:91:5f:f5:dd:db:43:
0d:40:b6:23:2f:b7:3d:73:d9:3f:40:ea:4e:8c:76:26:71:08:
da:08:fe:64:47:95:6b:f2:2a:a9:3f:b6:90:8a:e4:d5:f2:ed:
61:06:50:af:f7:30:f0:7f:4c:92:df:00:fa:14:04:c2:cb:b9:
65:56:2b:1e:b2:48:84:84:54:0e:d1:c6:b9:4c:a4:77:02:3f:
75:54:3b:82:63:46:8c:60:2c:8a:b4:91:c1:9e:8a:41:2f:ea:
ae:1a:83:66:f3:45:08:59:bd:2a:e6:e9:40:c3:36:8d:b5:00:
d4:b6:73:56:c3:1c:31:e3:a4:c5:38:f2:f0:f2:83:e9:e3:47:
25:e4:e6:94:45:99:9a:1d:b1:62:d3:ae:a0:e5:84:6a:21:42:
9c:38:24:0d:66:ff:43:65:64:16:7c:13:0d:43:73:ca:68:15:
df:b2:0b:a6:4f:9a:98:2f:29:15:69:53:43:7e:67:9e:ea:5e:
93:86:06:3d:63:20:49:ac:34:98:67:dc:7a:56:d4:9b:98:bb:
26:d7:c5:82:9d:bc:1e:2a:05:8a:c0:15:f1:05:1d:a1:84:47:
16:67:9e:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYNfA4ro0MSylbXmF5Tl8CNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MWZkYzdhMmYxMWE1NzY2ZDNhZDdiZGY2MjVjZTVlMTE5
YThmZGYwHhcNMjIwOTIxMDc0NjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzU3YWY5NTI4ZDk5NjJiYmM2Y2RhM2ZmMjNjZWZjMzJiMTc1YTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqQYpXO5n26cTgbT8NOBmuBirH0k
t+SZrkUEweNNXhLZ20f2easTF/wkT8k0dqFTonZoC2hRmFipDaPviRXAs44F+kPZ
gWAcS5KwJVh+OXimFWNGDH7c4+x87csq2DOEL/4His5aa9e0Ry8vp/wLP3hnZmCT
HxEiOZTADjl4ZCrwg8POvoGTKMzFEzihYD7usqeF6UN5ubW5SuhAT3wV9F7FXdrp
Ih/EcrhEK4pbYbuiom+w64/ubOKlaW1pM4EAYisj0X3l/iVnd2jrF9fPFkAS9sGp
JOcr4dk0TZARWPJx52Ph7J/0TJQKCQ0GIhrxtVrws1G/8LXLzYZE+fiG6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMdXr5Uo2ZYrvGzaP/I878MrF1p0MB8GA1UdIwQY
MBaAFFQf3HovEaV2bTrXvfYlzl4Rmo/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUt
YzkwMGE4OWYyMGYxLzEveDFldmxTalpsaXU4Yk5vXzhqenZ3eXNYV25RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUtYzkwMGE4OWYyMGYx
LzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWggAwQA
uWgnMA0GCSqGSIb3DQEBCwUAA4IBAQAm+Y6Y3kgi+FSQKlMvJ4GfYLVbiCa+LHol
K8+rOa6RX/Xd20MNQLYjL7c9c9k/QOpOjHYmcQjaCP5kR5Vr8iqpP7aQiuTV8u1h
BlCv9zDwf0yS3wD6FATCy7llViseskiEhFQO0ca5TKR3Aj91VDuCY0aMYCyKtJHB
nopBL+quGoNm80UIWb0q5ulAwzaNtQDUtnNWwxwx46TFOPLw8oPp40cl5OaURZma
HbFi066g5YRqIUKcOCQNZv9DZWQWfBMNQ3PKaBXfsgumT5qYLykVaVNDfmee6l6T
hgY9YyBJrDSYZ9x6VtSbmLsm18WCnbweKgWKwBXxBR2hhEcWZ54T
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org