Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/I8Vi55akWJzEkx_Nasa3JP6FrdY.roa
File: I8Vi55akWJzEkx_Nasa3JP6FrdY.roa (raw, json)
Hash identifier: vJEq2YxZVW8GLX2LXQEipaIlXceozJKbBe78A0BvmMg=
Subject key identifier: 23:C5:62:E7:96:A4:58:9C:C4:93:1F:CD:6A:C6:B7:24:FE:85:AD:D6
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0930DE14
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/I8Vi55akWJzEkx_Nasa3JP6FrdY.roa
Signing time: Sat 01 Jan 2022 15:02:06 +0000
ROA not before: Sat 01 Jan 2022 15:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206804
IP address blocks: 185.51.134.0/24 maxlen: 24
2001:1548:206::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154197524 (0x930de14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jan 1 15:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23c562e796a4589cc4931fcd6ac6b724fe85add6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:41:c1:4f:db:1d:f8:3e:c6:ed:f2:12:d4:
e5:89:13:14:43:a1:fb:32:4b:a3:64:ac:97:82:22:
93:19:ed:b8:d3:96:e9:00:21:a9:2b:71:69:78:a8:
db:a5:c7:22:cf:7b:ea:59:67:df:89:be:3e:ec:ad:
79:86:f0:1a:b4:64:83:7c:fc:a3:a3:d1:b8:f9:2c:
8c:3c:42:c8:b4:5f:a7:97:a3:2c:dc:08:87:a5:3f:
f3:1a:90:c0:83:17:6f:00:c0:91:3b:18:06:90:f4:
ce:a5:31:3e:e0:f5:95:3c:37:bd:72:88:de:0e:ea:
ad:e1:23:9f:93:38:03:fe:25:76:c0:7f:1d:f9:99:
3c:b3:54:67:d8:22:f4:d1:04:67:5d:24:d9:50:5f:
4b:ff:e7:9e:f4:78:6d:7c:e6:45:dd:0f:44:8a:54:
79:da:ef:7f:cd:d5:15:26:ad:28:12:bd:c5:a5:fd:
93:45:dd:3a:3c:84:d2:21:49:02:38:4b:30:d7:12:
97:f7:58:60:f6:c3:8a:72:95:19:0b:a8:b1:61:be:
43:e2:8c:0f:5a:94:e8:98:61:81:b0:4a:83:1d:fd:
34:4f:d4:4f:0f:0b:15:15:cf:d5:8f:47:a6:15:98:
05:60:88:e1:ea:c0:73:90:6a:6d:40:cf:bf:55:f4:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:62:E7:96:A4:58:9C:C4:93:1F:CD:6A:C6:B7:24:FE:85:AD:D6
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/I8Vi55akWJzEkx_Nasa3JP6FrdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.134.0/24
IPv6:
2001:1548:206::/48
Signature Algorithm: sha256WithRSAEncryption
0b:cf:23:5e:40:c5:a2:47:86:23:50:ab:bd:e4:4f:83:80:6e:
d0:a3:bb:ef:28:62:fd:86:e5:cc:46:d9:9c:4d:a6:37:e4:cc:
4f:57:97:5a:24:5e:1c:83:2f:3f:26:79:1f:ab:6c:f8:d9:9f:
6d:37:71:e7:d1:79:3d:3f:22:81:89:ec:6e:f7:d8:7d:0f:94:
13:75:b1:57:e4:be:b2:fe:e7:d1:11:4e:ce:2c:79:24:b4:6c:
e5:76:f1:f6:ab:68:26:76:7c:9d:6e:d2:3c:65:37:4e:e4:4e:
ec:41:a2:22:1e:2d:eb:02:0e:60:3d:16:ea:80:2d:cc:35:22:
c2:f8:d5:99:d7:84:2a:18:11:55:36:a4:2d:03:d9:84:a8:78:
bc:7f:4a:e2:68:d4:ec:d1:9f:a6:43:bd:52:13:5a:da:fb:d6:
13:6a:ac:0b:e7:65:dd:4b:41:07:4b:58:a3:ce:13:99:a7:b0:
1f:c1:cb:ca:ea:7e:0f:55:f7:e9:a1:80:cb:b0:8b:65:7b:1e:
c5:46:6f:14:6c:67:30:5e:7b:7b:dc:63:13:f1:a4:fc:67:82:
ae:6e:45:fc:ce:42:5a:8b:3c:97:94:d1:b0:a0:0e:ee:29:5c:
c1:2e:03:8f:0a:4f:b8:a4:d6:dc:66:fe:08:be:0f:ee:aa:1c:
ef:14:b4:96
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECTDeFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZjQwZmRkODJhMGZkZjNiNzBiZTE4MjIxZWViYTYwZDgwMWVkN2JmMB4XDTIyMDEw
MTE1MDIwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjNjNTYyZTc5NmE0
NTg5Y2M0OTMxZmNkNmFjNmI3MjRmZTg1YWRkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANzFQcFP2x34Psbt8hLU5YkTFEOh+zJLo2Ssl4IikxntuNOW
6QAhqStxaXio26XHIs976lln34m+PuyteYbwGrRkg3z8o6PRuPksjDxCyLRfp5ej
LNwIh6U/8xqQwIMXbwDAkTsYBpD0zqUxPuD1lTw3vXKI3g7qreEjn5M4A/4ldsB/
HfmZPLNUZ9gi9NEEZ10k2VBfS//nnvR4bXzmRd0PRIpUedrvf83VFSatKBK9xaX9
k0XdOjyE0iFJAjhLMNcSl/dYYPbDinKVGQuosWG+Q+KMD1qU6JhhgbBKgx39NE/U
Tw8LFRXP1Y9HphWYBWCI4erAc5BqbUDPv1X02z0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQjxWLnlqRYnMSTH81qxrck/oWt1jAfBgNVHSMEGDAWgBTPQP3YKg/fO3C+
GCIe66YNgB7XvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3owRDkyQ29QM3p0d3ZoZ2lIdXVtRFlBZTE3OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNzkyNzM3LTZhMDItNDI0Yi04MmNiLWEyOWNlN2RhMTBmZC8x
L0k4Vmk1NWFrV0p6RWt4X05hc2EzSlA2RnJkWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NzkyNzM3LTZhMDItNDI0Yi04MmNiLWEyOWNlN2RhMTBmZC8xL3owRDkyQ29QM3p0
d3ZoZ2lIdXVtRFlBZTE3OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALkzhjAPBAIAAjAJAwcAIAEVSAIG
MA0GCSqGSIb3DQEBCwUAA4IBAQALzyNeQMWiR4YjUKu95E+DgG7Qo7vvKGL9huXM
RtmcTaY35MxPV5daJF4cgy8/Jnkfq2z42Z9tN3Hn0Xk9PyKBiexu99h9D5QTdbFX
5L6y/ufREU7OLHkktGzldvH2q2gmdnydbtI8ZTdO5E7sQaIiHi3rAg5gPRbqgC3M
NSLC+NWZ14QqGBFVNqQtA9mEqHi8f0riaNTs0Z+mQ71SE1ra+9YTaqwL52XdS0EH
S1ijzhOZp7AfwcvK6n4PVffpoYDLsItlex7FRm8UbGcwXnt73GMT8aT8Z4KubkX8
zkJaizyXlNGwoA7uKVzBLgOPCk+4pNbcZv4Ivg/uqhzvFLSW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org