Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/CWo7AW2efDlDo445gBRmiJgkOO8.roa
File: CWo7AW2efDlDo445gBRmiJgkOO8.roa (raw, json)
Hash identifier: FPV6kFQ7k8JU5/3hzOUY0CCkmDy1/Q0QmjF0dA0D4qc=
Subject key identifier: 09:6A:3B:01:6D:9E:7C:39:43:A3:8E:39:80:14:66:88:98:24:38:EF
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 08313F5D
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/CWo7AW2efDlDo445gBRmiJgkOO8.roa
Signing time: Sat 01 Jan 2022 07:56:09 +0000
ROA not before: Sat 01 Jan 2022 07:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42187
IP address blocks: 185.65.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137445213 (0x8313f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=096a3b016d9e7c3943a38e3980146688982438ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:07:da:e3:ae:82:fb:fd:ba:df:d6:d5:0b:
66:1b:9f:f5:9a:39:69:e9:aa:7f:3c:9b:f7:bd:2d:
f4:b7:07:27:4b:19:4e:44:60:0c:f4:e5:10:62:6e:
b3:51:6f:a1:20:10:5d:5b:1e:9c:56:60:c9:f2:a8:
6d:19:5d:ea:6f:3a:ab:75:61:95:d2:68:8f:fb:80:
e5:3b:6b:8e:09:95:10:1e:ce:d2:b5:3a:9b:f0:43:
2f:1a:64:0f:17:59:46:29:6e:07:a5:13:91:af:6f:
f4:69:70:dd:44:84:e7:98:fc:4f:9d:29:50:c1:48:
e6:a4:b9:91:a9:3a:04:b5:43:49:16:c9:9e:c9:f9:
ba:ba:09:f0:47:7d:b4:ef:54:77:55:80:1e:c8:08:
a4:1e:de:51:d2:5d:e3:51:b4:36:7f:13:ad:d5:00:
cd:84:77:05:b1:75:97:d4:1c:8f:a4:8d:ad:85:1b:
c5:ca:a6:34:ce:6d:d4:22:d3:2a:ca:ef:c0:35:46:
0b:ac:9e:61:ef:91:8a:5e:40:1d:21:6b:60:3e:20:
02:3d:37:fa:cc:19:b1:06:09:8a:47:07:41:8c:5a:
a8:a3:48:93:43:e3:31:12:2e:58:0b:f0:a3:e5:90:
6b:62:e9:72:27:87:cc:4a:3f:ab:60:17:b7:e7:ec:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:3B:01:6D:9E:7C:39:43:A3:8E:39:80:14:66:88:98:24:38:EF
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/CWo7AW2efDlDo445gBRmiJgkOO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.203.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9b:87:0a:f6:61:0c:ce:e8:b2:8e:52:ba:ef:5b:3f:59:36:
0e:36:df:32:35:11:9c:70:e0:7f:a2:8d:89:95:d4:14:a9:28:
ca:09:74:68:ba:26:5e:f8:3f:ae:bb:2f:b3:1e:7c:ca:fa:46:
77:84:c1:0e:91:1c:dc:c3:cc:e7:3d:6c:46:64:4c:b0:6f:f1:
6d:4a:e2:3f:0d:ab:ad:67:2f:d3:ca:eb:d0:2b:50:96:6b:ec:
82:84:6d:f8:df:4b:88:df:81:02:d3:ce:12:7b:6e:10:5c:ff:
c1:b2:5a:b6:3a:88:4d:3c:80:12:3c:02:fc:93:ee:58:20:3a:
85:73:1a:47:47:59:d6:a4:41:9b:5a:88:2e:75:cf:5d:34:1f:
86:fc:02:d2:f5:07:01:f3:9f:2c:21:21:c7:83:1f:15:b1:fe:
f5:1e:cd:2f:5c:34:e3:e3:e0:52:fd:7a:e0:4c:a5:5f:8d:54:
83:45:0f:68:8f:37:a2:81:48:34:c2:98:5d:30:df:5b:39:0d:
21:af:64:97:a9:09:0b:61:a3:5f:a6:ca:7c:99:28:4f:c8:83:
0a:22:10:b0:fc:59:06:ef:51:9b:07:86:f7:b1:73:2e:66:d5:
c8:55:ed:72:ab:92:7b:9f:d2:3d:c3:69:08:a5:76:51:05:ff:
83:36:c9:19
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDE/XTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDYzNjUzNTViNjY1NTY0YTIxMGMzNThjNjhhMDExN2I3ZmJlYjlhMB4XDTIyMDEw
MTA3NTYwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDk2YTNiMDE2ZDll
N2MzOTQzYTM4ZTM5ODAxNDY2ODg5ODI0MzhlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKReB9rjroL7/brf1tULZhuf9Zo5aemqfzyb970t9LcHJ0sZ
TkRgDPTlEGJus1FvoSAQXVsenFZgyfKobRld6m86q3VhldJoj/uA5TtrjgmVEB7O
0rU6m/BDLxpkDxdZRiluB6UTka9v9Glw3USE55j8T50pUMFI5qS5kak6BLVDSRbJ
nsn5uroJ8Ed9tO9Ud1WAHsgIpB7eUdJd41G0Nn8TrdUAzYR3BbF1l9Qcj6SNrYUb
xcqmNM5t1CLTKsrvwDVGC6yeYe+Ril5AHSFrYD4gAj03+swZsQYJikcHQYxaqKNI
k0PjMRIuWAvwo+WQa2LpcieHzEo/q2AXt+fsUk8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQJajsBbZ58OUOjjjmAFGaImCQ47zAfBgNVHSMEGDAWgBR0Y2U1W2ZVZKIQ
w1jGigEXt/vrmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RHTmxOVnRtVldTaUVNTll4b29CRjdmNzY1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvYWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8x
L0NXbzdBVzJlZkRsRG80NDVnQlJtaUpna09POC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
YWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8xL2RHTmxOVnRtVldT
aUVNTll4b29CRjdmNzY1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlByzANBgkqhkiG9w0BAQsFAAOC
AQEAGZuHCvZhDM7oso5Suu9bP1k2DjbfMjURnHDgf6KNiZXUFKkoygl0aLomXvg/
rrsvsx58yvpGd4TBDpEc3MPM5z1sRmRMsG/xbUriPw2rrWcv08rr0CtQlmvsgoRt
+N9LiN+BAtPOEntuEFz/wbJatjqITTyAEjwC/JPuWCA6hXMaR0dZ1qRBm1qILnXP
XTQfhvwC0vUHAfOfLCEhx4MfFbH+9R7NL1w04+PgUv164EylX41Ug0UPaI83ooFI
NMKYXTDfWzkNIa9kl6kJC2GjX6bKfJkoT8iDCiIQsPxZBu9RmweG97FzLmbVyFXt
cquSe5/SPcNpCKV2UQX/gzbJGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org