Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/oHmbfuXuyXMj27oo5Bi8YJ8U1KU.roa
File: oHmbfuXuyXMj27oo5Bi8YJ8U1KU.roa (raw, json)
Hash identifier: fI6/GiOwMbDvYS4Ek+bYhEC9ZBDYx/BdgevamA+SVP8=
Subject key identifier: A0:79:9B:7E:E5:EE:C9:73:23:DB:BA:28:E4:18:BC:60:9F:14:D4:A5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 062EF41C
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/oHmbfuXuyXMj27oo5Bi8YJ8U1KU.roa
Signing time: Sat 01 Jan 2022 12:00:50 +0000
ROA not before: Sat 01 Jan 2022 12:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206874
IP address blocks: 185.164.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103740444 (0x62ef41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Jan 1 12:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0799b7ee5eec97323dbba28e418bc609f14d4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b8:e3:38:20:f1:6c:8d:0f:89:98:cd:f8:32:
5a:c9:00:9d:81:2d:96:c7:95:bc:a2:31:eb:52:48:
e4:bc:7d:8b:fc:05:76:99:11:13:02:45:72:45:b2:
4c:eb:7c:1e:93:bc:55:fd:64:46:ec:fe:36:2e:3e:
fa:c1:14:8a:07:c8:1e:cd:26:b1:fb:71:7d:bd:32:
28:aa:9e:80:78:7f:5e:2f:9d:93:0b:5f:06:3b:4a:
14:70:cd:85:37:6a:bf:fc:23:65:e9:79:5d:3f:06:
2e:4f:5d:c8:2d:1c:d1:17:a2:83:fe:66:84:54:d3:
4b:4f:c0:35:6f:00:3a:8f:18:d1:55:d3:98:0a:3f:
f8:f4:e6:c6:e2:b2:cb:11:d0:87:60:1e:77:bf:94:
45:2c:35:a6:80:23:4a:22:07:aa:81:aa:72:e6:35:
e8:f3:42:9c:4f:7c:bb:c9:00:2c:e5:6c:80:a7:44:
7f:a6:b8:21:02:99:52:c2:ec:fe:7e:a0:15:ce:cb:
a1:e8:be:3e:01:59:6e:8a:25:45:41:94:5a:8c:64:
42:02:39:2d:a9:d8:09:27:d3:c4:34:ce:dc:3d:3f:
1c:79:55:fa:d2:d2:aa:94:5a:03:a4:39:f8:10:b4:
aa:19:9e:5f:78:c7:7c:d9:c0:61:6d:4a:9b:87:26:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:79:9B:7E:E5:EE:C9:73:23:DB:BA:28:E4:18:BC:60:9F:14:D4:A5
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/oHmbfuXuyXMj27oo5Bi8YJ8U1KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:43:49:cc:f2:91:65:1b:29:d5:67:f1:e1:0c:88:d3:5c:a4:
0d:ca:8e:6b:40:6a:13:8c:f8:3a:65:5b:ff:02:be:c0:b2:3c:
1d:26:1c:8e:6e:34:c1:46:81:b5:fa:d4:92:ee:35:fd:f0:39:
29:8e:26:52:a5:f4:bb:02:84:01:31:df:e8:48:a6:bf:b7:82:
14:44:f4:4e:db:60:5a:5e:9a:cc:20:65:38:ab:50:9c:90:bd:
39:8f:d9:03:05:d8:1b:b0:2a:2e:d4:30:b4:d1:48:c4:db:15:
a6:f3:92:5e:89:16:0c:bc:16:7c:c0:aa:7b:68:29:6a:d0:0a:
20:c1:91:b1:f4:dd:b7:1b:1c:55:09:10:85:9e:7d:d5:dd:67:
b4:a9:ec:8a:10:14:8b:a7:25:66:69:14:12:d2:f6:d0:77:72:
6f:9d:87:ac:df:26:71:e0:c1:3a:86:0a:d0:11:84:5a:fd:aa:
2a:21:01:17:2f:30:6a:f5:ac:9c:b8:6c:f5:ae:c4:12:a3:97:
f9:00:a3:c5:be:37:1e:55:d0:d6:e1:00:87:0b:03:cc:72:31:
30:e3:b2:17:f5:f2:2f:ba:e5:e9:b2:2a:e0:4a:76:0f:eb:cc:
f3:a4:19:54:e1:5f:51:b3:95:bc:a7:86:93:23:92:cb:15:82:
e5:13:88:c0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBi70HDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NmM2OTI0NzU4MGE0ODhiZjQ2MWI4NGJmN2I4YjJhYzEzNzRkNWM1MB4XDTIyMDEw
MTEyMDA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTA3OTliN2VlNWVl
Yzk3MzIzZGJiYTI4ZTQxOGJjNjA5ZjE0ZDRhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO644zgg8WyND4mYzfgyWskAnYEtlseVvKIx61JI5Lx9i/wF
dpkREwJFckWyTOt8HpO8Vf1kRuz+Ni4++sEUigfIHs0msftxfb0yKKqegHh/Xi+d
kwtfBjtKFHDNhTdqv/wjZel5XT8GLk9dyC0c0Reig/5mhFTTS0/ANW8AOo8Y0VXT
mAo/+PTmxuKyyxHQh2Aed7+URSw1poAjSiIHqoGqcuY16PNCnE98u8kALOVsgKdE
f6a4IQKZUsLs/n6gFc7Loei+PgFZboolRUGUWoxkQgI5LanYCSfTxDTO3D0/HHlV
+tLSqpRaA6Q5+BC0qhmeX3jHfNnAYW1Km4cmBbMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSgeZt+5e7JcyPbuijkGLxgnxTUpTAfBgNVHSMEGDAWgBTmxpJHWApIi/Rh
uEv3uLKsE3TVxTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVzYVNSMWdLU0l2MFliaEw5N2l5ckJOMDFjVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvMzNiYTZjLWJlZmItNGRlYi04OTk4LTUyN2E5YTRlZTYyNC8x
L29IbWJmdVh1eVhNajI3b281Qmk4WUo4VTFLVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
MzNiYTZjLWJlZmItNGRlYi04OTk4LTUyN2E5YTRlZTYyNC8xLzVzYVNSMWdLU0l2
MFliaEw5N2l5ckJOMDFjVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmkfDANBgkqhkiG9w0BAQsFAAOC
AQEATkNJzPKRZRsp1Wfx4QyI01ykDcqOa0BqE4z4OmVb/wK+wLI8HSYcjm40wUaB
tfrUku41/fA5KY4mUqX0uwKEATHf6Eimv7eCFET0TttgWl6azCBlOKtQnJC9OY/Z
AwXYG7AqLtQwtNFIxNsVpvOSXokWDLwWfMCqe2gpatAKIMGRsfTdtxscVQkQhZ59
1d1ntKnsihAUi6clZmkUEtL20Hdyb52HrN8mceDBOoYK0BGEWv2qKiEBFy8wavWs
nLhs9a7EEqOX+QCjxb43HlXQ1uEAhwsDzHIxMOOyF/XyL7rl6bIq4Ep2D+vM86QZ
VOFfUbOVvKeGkyOSyxWC5ROIwA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org