Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/ySqNWMQl7mDIYUOAWvOBpncl3ZY.roa
File: ySqNWMQl7mDIYUOAWvOBpncl3ZY.roa (raw, json)
Hash identifier: 7V0R2R5t3c3tUJC4AnY7gKpBW5bg05/E7JfWZt9i/G8=
Subject key identifier: C9:2A:8D:58:C4:25:EE:60:C8:61:43:80:5A:F3:81:A6:77:25:DD:96
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01849E793C460BE859880F47BD10CE441198
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/ySqNWMQl7mDIYUOAWvOBpncl3ZY.roa
Signing time: Tue 22 Nov 2022 08:34:16 +0000
ROA not before: Tue 22 Nov 2022 08:34:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205933
IP address blocks: 185.147.64.0/24 maxlen: 24
185.147.66.0/24 maxlen: 24
185.147.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:79:3c:46:0b:e8:59:88:0f:47:bd:10:ce:44:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Nov 22 08:34:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c92a8d58c425ee60c86143805af381a67725dd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:fa:c8:aa:17:a0:47:7f:25:c8:95:82:30:
db:1f:da:5e:57:2b:46:69:c1:83:87:db:ac:a0:9c:
bc:20:67:fd:42:9e:38:05:2c:1f:69:98:5a:cc:7c:
32:0f:77:0a:9e:38:89:ac:d4:01:5e:f1:4a:6e:c0:
0b:00:25:ef:08:ab:26:1d:c6:52:07:da:5e:e7:eb:
e1:fd:26:e7:66:a3:b4:a2:62:39:34:4a:89:4e:3c:
27:da:ce:1e:90:dd:e3:50:8b:5b:7d:79:97:6f:6e:
19:6e:73:89:9d:42:98:7e:06:fd:5e:5f:dd:c1:15:
50:81:c9:a3:54:69:63:59:a7:bc:c8:94:23:12:cb:
3d:c2:08:ea:aa:ab:6b:06:e3:4a:4b:75:c9:07:63:
50:c8:49:42:07:ab:68:ca:e2:ea:16:94:9e:3c:21:
a7:dd:c6:95:79:30:ef:03:1f:01:76:26:f5:51:93:
95:cb:99:ce:b8:57:09:be:e7:96:4b:b0:89:c0:fd:
84:86:94:46:8f:0f:fd:17:fa:a2:f4:9a:6f:c1:69:
29:ac:48:1e:7a:97:cd:07:6c:85:d3:38:75:e6:e9:
dd:ea:ae:b9:31:2c:ed:2f:1c:d7:0d:fa:cb:74:64:
6c:13:f5:7c:33:9c:64:c7:f9:7c:a2:57:2b:1c:b0:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:8D:58:C4:25:EE:60:C8:61:43:80:5A:F3:81:A6:77:25:DD:96
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/ySqNWMQl7mDIYUOAWvOBpncl3ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.64.0-185.147.66.255
Signature Algorithm: sha256WithRSAEncryption
52:d9:89:13:9a:c2:8a:14:91:23:8a:58:b9:d4:57:46:bd:7a:
e8:e5:b8:15:0a:a4:01:3e:26:e2:5e:41:70:68:37:1a:81:b7:
11:08:d1:71:54:33:67:0b:0f:ef:78:57:ab:25:89:08:2e:c8:
e4:51:3a:c0:3f:2a:dd:25:b3:6f:3f:ea:33:c2:a4:a2:d8:a0:
f4:52:32:6a:8b:41:7b:36:3c:7d:6d:37:96:40:b7:dc:0e:c0:
97:db:99:89:1b:b2:ee:26:0b:da:f7:6e:8b:61:7b:ec:df:9d:
c6:3d:b1:fb:6f:92:a9:ec:cb:9b:46:48:f7:b4:33:22:10:52:
c8:42:8a:18:7b:1a:53:4c:81:31:95:ff:1a:ee:16:f2:60:85:
2d:0a:08:94:3f:3c:e9:b4:af:d6:08:2c:4e:42:fd:7f:b0:04:
ee:db:49:70:c6:27:8a:32:5a:88:e9:de:51:ed:dd:9a:46:18:
8f:56:2d:ff:17:c0:08:36:db:6a:28:dc:59:a6:da:1c:cb:87:
ff:70:e6:ab:48:92:71:f0:7a:8c:a8:27:85:46:61:c6:b6:e5:
3c:fb:1f:32:d4:01:97:db:25:e1:e6:ef:bb:60:cc:f4:23:25:
09:7d:e7:41:6a:d6:f1:e7:dc:97:56:e5:88:2d:95:83:02:c1:
17:de:8e:54
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYSeeTxGC+hZiA9HvRDORBGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjIxMTIyMDgzNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTJhOGQ1OGM0MjVlZTYwYzg2MTQzODA1YWYzODFhNjc3MjVkZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfP6yKoXoEd/JciVgjDbH9peVytG
acGDh9usoJy8IGf9Qp44BSwfaZhazHwyD3cKnjiJrNQBXvFKbsALACXvCKsmHcZS
B9pe5+vh/SbnZqO0omI5NEqJTjwn2s4ekN3jUItbfXmXb24ZbnOJnUKYfgb9Xl/d
wRVQgcmjVGljWae8yJQjEss9wgjqqqtrBuNKS3XJB2NQyElCB6toyuLqFpSePCGn
3caVeTDvAx8Bdib1UZOVy5nOuFcJvueWS7CJwP2EhpRGjw/9F/qi9JpvwWkprEge
epfNB2yF0zh15und6q65MSztLxzXDfrLdGRsE/V8M5xkx/l8olcrHLDOCwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMkqjVjEJe5gyGFDgFrzgaZ3Jd2WMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEveVNxTldNUWw3bURJWVVPQVd2T0JwbmNsM1pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAa5k0AD
BAC5k0IwDQYJKoZIhvcNAQELBQADggEBAFLZiROawooUkSOKWLnUV0a9eujluBUK
pAE+JuJeQXBoNxqBtxEI0XFUM2cLD+94V6sliQguyORROsA/Kt0ls28/6jPCpKLY
oPRSMmqLQXs2PH1tN5ZAt9wOwJfbmYkbsu4mC9r3bothe+zfncY9sftvkqnsy5tG
SPe0MyIQUshCihh7GlNMgTGV/xruFvJghS0KCJQ/POm0r9YILE5C/X+wBO7bSXDG
J4oyWojp3lHt3ZpGGI9WLf8XwAg222oo3Fmm2hzLh/9w5qtIknHweoyoJ4VGYca2
5Tz7HzLUAZfbJeHm77tgzPQjJQl950Fq1vHn3JdW5YgtlYMCwRfejlQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org