Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/rOb1dv3J02HeditNp1CrrDWrYUI.roa
File: rOb1dv3J02HeditNp1CrrDWrYUI.roa (raw, json)
Hash identifier: iLrJaa0a+Z7wrX8ozDeYx0RkFqlvkrA6q/SRB65U9Yw=
Subject key identifier: AC:E6:F5:76:FD:C9:D3:61:DE:76:2B:4D:A7:50:AB:AC:35:AB:61:42
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 35DBBD67
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/rOb1dv3J02HeditNp1CrrDWrYUI.roa
Signing time: Wed 15 Jun 2022 09:31:44 +0000
ROA not before: Wed 15 Jun 2022 09:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51717
IP address blocks: 185.73.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903593319 (0x35dbbd67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jun 15 09:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ace6f576fdc9d361de762b4da750abac35ab6142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:f3:b5:b0:c6:ef:f2:47:51:d7:b5:af:5c:
43:d6:b0:88:0b:0f:c4:e0:08:04:a3:12:cb:01:12:
a3:11:1f:3c:e5:8d:c9:47:e0:11:a4:d1:d4:8a:b6:
a7:d2:9f:fc:ed:b4:da:95:26:b4:ff:46:b9:4e:27:
16:93:13:ea:97:80:cf:1a:17:2a:d1:b4:45:c4:e6:
5f:22:89:8e:cf:21:b6:e1:fa:52:94:4f:10:af:2d:
ba:fc:3c:ff:d7:f1:54:60:60:b3:7e:a0:33:00:55:
93:d5:37:07:61:09:06:0f:41:66:d4:99:25:d6:f7:
fc:43:d7:8c:58:2c:d2:d3:82:21:7a:9a:c1:1b:0c:
8b:39:b8:b8:5f:33:56:5f:b0:49:40:5c:ee:42:f4:
dd:3a:86:d3:af:19:76:7b:64:db:04:cb:3d:e3:bf:
1d:09:50:df:c8:f9:b4:2b:7d:17:31:c4:20:8e:d2:
44:af:2f:50:3a:a4:1f:dc:0e:d3:36:a9:dd:19:59:
ce:5a:83:fd:bc:79:d3:76:8c:d9:6e:82:ab:5f:ab:
48:ee:b0:89:f5:0e:64:ce:65:85:32:de:53:c8:f0:
6e:ce:4d:07:0e:f2:8b:bf:20:3b:d9:a1:e2:19:d7:
ac:9d:91:36:cb:fd:bb:f7:43:79:c5:5f:f1:b5:8f:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:F5:76:FD:C9:D3:61:DE:76:2B:4D:A7:50:AB:AC:35:AB:61:42
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/rOb1dv3J02HeditNp1CrrDWrYUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c7:7c:c0:0d:bd:fd:9b:4f:2a:61:b9:78:5b:21:5d:58:55:
f8:2f:d2:05:fd:ac:32:8d:ad:a2:5d:7b:81:7a:72:f6:73:10:
b0:b2:22:2f:77:f5:4b:9f:0e:3a:7f:2a:fc:d3:ec:c4:50:4c:
7e:a7:a5:b8:32:33:03:8b:b5:42:6c:22:5d:46:e3:3c:d3:cb:
c7:4f:c0:5c:b0:90:30:45:41:bb:1d:48:d6:79:56:01:0c:70:
6c:6a:f7:af:76:34:03:8a:36:57:5b:aa:38:53:4f:dd:78:6f:
43:4f:ad:b5:6d:fe:e5:a9:87:a2:ec:d4:70:53:67:a4:30:67:
66:82:04:e3:03:f7:c5:c4:9a:2a:86:81:4d:f0:50:38:e4:dd:
e9:a8:bc:ff:12:45:23:3b:08:74:85:d7:e7:fc:91:80:72:c2:
e6:cc:1c:69:7d:a1:a1:50:92:3d:58:7c:58:60:1d:9b:47:a0:
c2:cf:2d:cb:f2:2f:69:b7:cd:71:d0:8b:6a:f6:ea:ab:86:94:
54:28:e1:5f:00:3f:c2:b6:8d:e8:52:c4:e9:a8:26:89:a9:6b:
78:83:b2:df:92:2e:b9:d9:66:2e:00:5f:6f:97:9c:99:6c:b3:
67:f1:62:fc:1d:0b:a5:19:5a:8e:35:6b:6f:a5:80:a2:ee:6d:
aa:d1:a2:78
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENdu9ZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OGUwNmEzNTFhNTE4OWJjZGM0NDg0MDk0OGRiZmI0MGFiZjU4YmU1MB4XDTIyMDYx
NTA5MzE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWNlNmY1NzZmZGM5
ZDM2MWRlNzYyYjRkYTc1MGFiYWMzNWFiNjE0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANAj87Wwxu/yR1HXta9cQ9awiAsPxOAIBKMSywESoxEfPOWN
yUfgEaTR1Iq2p9Kf/O202pUmtP9GuU4nFpMT6peAzxoXKtG0RcTmXyKJjs8htuH6
UpRPEK8tuvw8/9fxVGBgs36gMwBVk9U3B2EJBg9BZtSZJdb3/EPXjFgs0tOCIXqa
wRsMizm4uF8zVl+wSUBc7kL03TqG068Zdntk2wTLPeO/HQlQ38j5tCt9FzHEII7S
RK8vUDqkH9wO0zap3RlZzlqD/bx503aM2W6Cq1+rSO6wifUOZM5lhTLeU8jwbs5N
Bw7yi78gO9mh4hnXrJ2RNsv9u/dDecVf8bWPKrUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSs5vV2/cnTYd52K02nUKusNathQjAfBgNVHSMEGDAWgBRI4Go1GlGJvNxE
hAlI2/tAq/WL5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NPQnFOUnBSaWJ6Y1JJUUpTTnY3UUt2MWktVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvNjAwYWVhLTllYTUtNGM2Ny1hNjAyLWFiMWE4N2VjZGYxYi8x
L3JPYjFkdjNKMDJIZWRpdE5wMUNyckRXcllVSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
NjAwYWVhLTllYTUtNGM2Ny1hNjAyLWFiMWE4N2VjZGYxYi8xL1NPQnFOUnBSaWJ6
Y1JJUUpTTnY3UUt2MWktVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlJ0jANBgkqhkiG9w0BAQsFAAOC
AQEAH8d8wA29/ZtPKmG5eFshXVhV+C/SBf2sMo2tol17gXpy9nMQsLIiL3f1S58O
On8q/NPsxFBMfqeluDIzA4u1QmwiXUbjPNPLx0/AXLCQMEVBux1I1nlWAQxwbGr3
r3Y0A4o2V1uqOFNP3XhvQ0+ttW3+5amHouzUcFNnpDBnZoIE4wP3xcSaKoaBTfBQ
OOTd6ai8/xJFIzsIdIXX5/yRgHLC5swcaX2hoVCSPVh8WGAdm0egws8ty/IvabfN
cdCLavbqq4aUVCjhXwA/wraN6FLE6agmialreIOy35IuudlmLgBfb5ecmWyzZ/Fi
/B0LpRlajjVrb6WAou5tqtGieA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org