Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/VB0_CuRop1utODBeCQQABMOm99E.roa
File: VB0_CuRop1utODBeCQQABMOm99E.roa (raw, json)
Hash identifier: r09vO/h85ohAcQfT5lGMXDcJbT7OiKpHhNGId53+fJE=
Subject key identifier: 54:1D:3F:0A:E4:68:A7:5B:AD:38:30:5E:09:04:00:04:C3:A6:F7:D1
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 0A353AB9
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/VB0_CuRop1utODBeCQQABMOm99E.roa
Signing time: Sat 01 Jan 2022 10:59:24 +0000
ROA not before: Sat 01 Jan 2022 10:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49740
IP address blocks: 85.187.160.0/20 maxlen: 20
85.187.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171260601 (0xa353ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 1 10:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=541d3f0ae468a75bad38305e09040004c3a6f7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:10:a3:7e:3b:1a:f5:71:72:86:de:07:83:
19:85:f9:21:20:56:03:c6:99:b6:a5:f9:26:e4:92:
89:08:27:83:f2:de:83:f9:74:6d:85:fb:65:d5:29:
e1:6b:a5:71:60:ac:11:ee:06:c9:e9:69:92:42:f3:
5e:80:29:7d:8a:50:0b:e6:23:e2:40:e1:a7:35:84:
39:6d:5f:87:14:55:3b:32:bf:6e:37:7b:73:b1:c2:
96:b3:c9:c7:01:f1:9d:83:29:86:96:64:df:61:59:
a1:3d:cb:8c:77:92:0b:4a:77:3b:f9:2a:70:ed:bf:
1b:80:85:67:7a:69:d9:90:26:b9:98:4d:bb:9c:73:
1c:5d:d8:93:3f:8c:86:f9:e5:27:23:46:ac:18:c4:
7d:d3:5a:0e:f9:de:b3:1c:c2:01:5a:9c:39:4d:32:
3b:42:9c:b6:ca:4a:1e:a6:69:82:21:c7:df:bc:58:
43:fe:c5:4a:80:2b:50:35:68:c2:f4:3f:37:6c:ed:
fa:92:c1:a5:5a:aa:c6:a8:5c:43:e3:eb:f9:30:4a:
90:76:20:a4:5f:ea:6c:76:45:65:40:78:cf:33:44:
f6:b5:7a:c1:05:aa:c9:2a:15:12:da:9e:a1:4c:4a:
25:0a:8c:45:eb:81:bb:57:73:04:70:11:d9:56:37:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:3F:0A:E4:68:A7:5B:AD:38:30:5E:09:04:00:04:C3:A6:F7:D1
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/VB0_CuRop1utODBeCQQABMOm99E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.160.0-85.187.179.255
Signature Algorithm: sha256WithRSAEncryption
82:5c:da:29:ef:b4:81:d4:ce:a4:ef:03:42:36:06:0b:8c:dd:
c5:3a:3e:0d:b4:e6:ae:57:f7:aa:4b:e0:55:9b:3e:c9:64:d4:
35:2a:be:45:df:f6:a5:6b:69:d4:be:69:44:91:a5:0e:ff:98:
c4:fd:6c:54:90:94:c3:32:2b:2d:56:05:c9:c1:07:ea:ef:9c:
c0:d4:75:d2:e1:b1:7e:97:6e:51:e9:6a:5e:17:fc:e9:0c:2b:
3d:00:d0:0d:44:f0:d2:f2:d9:e2:79:f6:31:11:7f:46:ce:6c:
70:84:ca:22:bc:78:6a:50:44:f6:4b:01:d9:68:fc:7a:92:89:
a4:1e:7c:b6:0e:6d:c7:06:0b:20:74:0e:67:61:06:da:cc:aa:
d8:84:9f:06:43:db:f8:a8:d1:60:79:f3:93:ac:00:30:13:6e:
d3:a2:c6:8b:81:2a:cb:06:3d:ca:f1:6e:85:7f:30:fa:f1:1f:
d6:7b:0e:e3:f7:7d:93:42:e6:e8:34:3a:01:14:8b:83:6b:27:
ff:6c:c5:78:28:73:60:2e:09:87:37:fc:87:2c:56:6d:a4:53:
0e:d4:0e:4a:6f:4f:ab:3d:51:68:e0:ba:1a:5d:18:22:2b:be:
f9:dd:56:95:e5:75:03:7e:14:9a:e2:3c:8c:8a:af:1b:f1:e2:
f5:6f:64:8a
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECjU6uTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MjYyMmZkZWM4ZmFkZmNhNThlNzU3NWMyOWYxMGU3M2FlNzc1NzE1MB4XDTIyMDEw
MTEwNTkyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTQxZDNmMGFlNDY4
YTc1YmFkMzgzMDVlMDkwNDAwMDRjM2E2ZjdkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKeEKN+Oxr1cXKG3geDGYX5ISBWA8aZtqX5JuSSiQgng/Le
g/l0bYX7ZdUp4WulcWCsEe4GyelpkkLzXoApfYpQC+Yj4kDhpzWEOW1fhxRVOzK/
bjd7c7HClrPJxwHxnYMphpZk32FZoT3LjHeSC0p3O/kqcO2/G4CFZ3pp2ZAmuZhN
u5xzHF3Ykz+MhvnlJyNGrBjEfdNaDvnesxzCAVqcOU0yO0KctspKHqZpgiHH37xY
Q/7FSoArUDVowvQ/N2zt+pLBpVqqxqhcQ+Pr+TBKkHYgpF/qbHZFZUB4zzNE9rV6
wQWqySoVEtqeoUxKJQqMReuBu1dzBHAR2VY3E5sCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRUHT8K5GinW604MF4JBAAEw6b30TAfBgNVHSMEGDAWgBTSYi/eyPrfyljn
V1wp8Q5zrndXFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBtSXYzc2o2MzhwWTUxZGNLZkVPYzY1M1Z4VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvODVmMDJlLWYxYWMtNDRmYi05MmViLWYwNWFhMjI5ZDYzOC8x
L1ZCMF9DdVJvcDF1dE9EQmVDUVFBQk1PbTk5RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
ODVmMDJlLWYxYWMtNDRmYi05MmViLWYwNWFhMjI5ZDYzOC8xLzBtSXYzc2o2Mzhw
WTUxZGNLZkVPYzY1M1Z4VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQFVbugAwQCVbuwMA0GCSqGSIb3
DQEBCwUAA4IBAQCCXNop77SB1M6k7wNCNgYLjN3FOj4NtOauV/eqS+BVmz7JZNQ1
Kr5F3/ala2nUvmlEkaUO/5jE/WxUkJTDMistVgXJwQfq75zA1HXS4bF+l25R6Wpe
F/zpDCs9ANANRPDS8tniefYxEX9GzmxwhMoivHhqUET2SwHZaPx6komkHny2Dm3H
BgsgdA5nYQbazKrYhJ8GQ9v4qNFgefOTrAAwE27TosaLgSrLBj3K8W6FfzD68R/W
ew7j932TQuboNDoBFIuDayf/bMV4KHNgLgmHN/yHLFZtpFMO1A5Kb0+rPVFo4Loa
XRgiK7753VaV5XUDfhSa4jyMiq8b8eL1b2SK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:46 2023 by rpki-client on console-fra.rpki-client.org