Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/3D2c3pPJ5yaZyBIyg9ONgmBfYSM.roa
File: 3D2c3pPJ5yaZyBIyg9ONgmBfYSM.roa (raw, json)
Hash identifier: DxpaQMXGOCZDECeqXv7u8hf4/RNXdErC2sURr6KoLvE=
Subject key identifier: DC:3D:9C:DE:93:C9:E7:26:99:C8:12:32:83:D3:8D:82:60:5F:61:23
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0183D122B5F2A74F753B174036421E9FE8D1
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/3D2c3pPJ5yaZyBIyg9ONgmBfYSM.roa
Signing time: Thu 13 Oct 2022 11:37:36 +0000
ROA not before: Thu 13 Oct 2022 11:37:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.81.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:22:b5:f2:a7:4f:75:3b:17:40:36:42:1e:9f:e8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Oct 13 11:37:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc3d9cde93c9e72699c8123283d38d82605f6123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2a:45:b6:bf:80:6d:2b:93:f6:7f:c9:4a:ad:
50:19:42:22:cd:4b:15:ea:2d:a9:b3:19:7f:e2:e7:
d0:fb:6f:3e:b0:32:d3:0d:fd:6e:b6:e9:c4:bc:4c:
3e:60:4f:27:33:14:a0:d0:46:11:a4:e0:10:99:0e:
bc:8e:12:4a:37:a5:29:a1:f9:78:26:99:74:bd:55:
c2:be:3b:58:39:db:1e:da:2d:c3:e4:b0:62:0d:6d:
a7:3f:01:5f:96:c8:9e:20:cb:d5:6f:02:2d:3e:6c:
d3:8e:4f:40:ad:aa:15:35:00:c4:31:c7:5c:25:b6:
72:bc:9d:72:38:c6:d0:26:de:75:b4:61:7c:84:92:
20:c3:ef:21:82:48:be:91:b9:37:d5:3a:e7:c9:5a:
26:1a:28:0e:fc:6a:2c:b1:9c:7b:97:d3:98:33:bb:
b3:77:25:73:f1:5f:2b:d3:e8:d9:bb:4b:b4:4b:8d:
e9:82:36:14:70:29:78:cb:2b:ef:f7:74:ea:c7:da:
91:c7:43:30:62:60:0b:60:a1:72:8d:cd:7c:1c:a3:
68:e3:e4:64:e1:a0:84:cc:4e:16:1e:b6:f6:0f:fb:
ec:dc:1b:3d:06:37:9e:35:52:98:ba:2d:2d:ab:c1:
3d:ba:bc:11:b3:70:ad:c3:8a:44:75:25:c9:39:7c:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3D:9C:DE:93:C9:E7:26:99:C8:12:32:83:D3:8D:82:60:5F:61:23
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/3D2c3pPJ5yaZyBIyg9ONgmBfYSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.126.0/24
Signature Algorithm: sha256WithRSAEncryption
70:40:18:23:3f:d4:f9:86:e1:e1:f9:ad:4a:09:7d:01:ab:c5:
22:37:23:21:5d:74:e1:c6:bf:28:56:3a:b8:04:f7:bc:77:14:
c8:97:d0:db:31:b1:0c:ac:3d:a3:5b:be:08:16:16:28:dc:26:
bc:9e:ad:a0:2b:33:ef:94:b1:23:c6:82:fb:a6:49:05:5f:87:
71:15:fa:8f:43:b3:b2:59:82:38:0c:89:86:cc:3b:7b:c4:75:
21:52:89:b5:f7:ea:00:55:3d:e9:84:cd:a9:a8:3c:bc:d7:e4:
cb:1d:fe:c7:08:b0:a6:b2:ee:71:79:0a:92:96:cd:9d:db:99:
a1:8b:34:5e:35:92:99:35:e1:4a:a1:38:4e:ef:eb:ec:51:f8:
cb:82:95:d0:48:23:e9:9a:b9:ea:3b:bd:aa:4e:f8:cb:be:e1:
0d:ac:5d:34:56:db:29:3f:68:5f:9e:0d:32:67:48:16:75:ea:
43:0f:a1:4d:f7:a3:5a:89:26:aa:80:b5:39:62:fd:bd:dd:26:
8c:20:85:72:39:12:d6:3f:42:7e:97:b8:ac:18:3d:af:59:7f:
e6:a7:3b:4c:dd:c5:3a:61:d7:68:ba:5a:50:e9:57:c2:c0:d1:
29:66:1d:49:fc:77:7c:18:82:18:99:44:59:7a:92:8a:55:1c:
bf:ab:20:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPRIrXyp091OxdANkIen+jRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjIxMDEzMTEzNzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzNkOWNkZTkzYzllNzI2OTljODEyMzI4M2QzOGQ4MjYwNWY2MTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSpFtr+AbSuT9n/JSq1QGUIizUsV
6i2psxl/4ufQ+28+sDLTDf1utunEvEw+YE8nMxSg0EYRpOAQmQ68jhJKN6Upofl4
Jpl0vVXCvjtYOdse2i3D5LBiDW2nPwFflsieIMvVbwItPmzTjk9AraoVNQDEMcdc
JbZyvJ1yOMbQJt51tGF8hJIgw+8hgki+kbk31TrnyVomGigO/GossZx7l9OYM7uz
dyVz8V8r0+jZu0u0S43pgjYUcCl4yyvv93Tqx9qRx0MwYmALYKFyjc18HKNo4+Rk
4aCEzE4WHrb2D/vs3Bs9BjeeNVKYui0tq8E9urwRs3Ctw4pEdSXJOXyJpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNw9nN6TyecmmcgSMoPTjYJgX2EjMB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvM0QyYzNwUEo1eWFaeUJJeWc5T05nbUJmWVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0
LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVF+MA0G
CSqGSIb3DQEBCwUAA4IBAQBwQBgjP9T5huHh+a1KCX0Bq8UiNyMhXXThxr8oVjq4
BPe8dxTIl9DbMbEMrD2jW74IFhYo3Ca8nq2gKzPvlLEjxoL7pkkFX4dxFfqPQ7Oy
WYI4DImGzDt7xHUhUom19+oAVT3phM2pqDy81+TLHf7HCLCmsu5xeQqSls2d25mh
izReNZKZNeFKoThO7+vsUfjLgpXQSCPpmrnqO72qTvjLvuENrF00VtspP2hfng0y
Z0gWdepDD6FN96NaiSaqgLU5Yv293SaMIIVyORLWP0J+l7isGD2vWX/mpztM3cU6
YddoulpQ6VfCwNEpZh1J/Hd8GIIYmURZepKKVRy/qyBA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-fra.rpki-client.org