Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/eFq2cBcdJLguTHAnslSxofG9uVg.roa
File: eFq2cBcdJLguTHAnslSxofG9uVg.roa (raw, json)
Hash identifier: 41C3Rn/oJHJb2iBOPILWwY1ImW32JRBwwyoFLCVbqTM=
Subject key identifier: 78:5A:B6:70:17:1D:24:B8:2E:4C:70:27:B2:54:B1:A1:F1:BD:B9:58
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01846207B5C4BDF67B9BB1E09A1F19DFD09C
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/eFq2cBcdJLguTHAnslSxofG9uVg.roa
Signing time: Thu 10 Nov 2022 14:53:03 +0000
ROA not before: Thu 10 Nov 2022 14:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 185.65.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:07:b5:c4:bd:f6:7b:9b:b1:e0:9a:1f:19:df:d0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Nov 10 14:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=785ab670171d24b82e4c7027b254b1a1f1bdb958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:24:75:1b:1f:02:5e:6f:68:f9:f1:76:71:
d9:3d:95:17:12:4d:bd:03:e7:23:78:de:84:62:78:
90:16:56:d8:bc:c5:d2:0a:94:f4:d5:c5:91:de:90:
1c:00:81:cb:7c:8b:54:aa:b9:b4:01:75:a6:35:2d:
85:d0:95:51:90:52:a5:91:6e:93:a3:e4:ac:3c:12:
ba:0d:5e:1f:f7:be:9c:0a:d9:2e:24:94:5c:e0:b8:
3c:6f:96:b3:d5:66:3e:b1:99:e2:a8:cc:89:23:45:
57:02:10:16:fe:5b:6d:db:6f:db:a1:f6:81:7f:bb:
e4:61:6d:9f:2b:11:72:84:2e:46:ee:93:64:96:79:
e4:b7:15:0a:c7:1b:4d:12:a5:ca:68:9c:83:bf:3e:
68:b0:17:64:4b:59:fe:6a:74:b3:42:7b:2f:47:66:
41:7d:11:83:55:b1:6d:aa:2e:bb:3b:94:eb:8c:40:
58:c5:dc:6d:3c:3c:4f:99:e1:d0:af:12:6c:2e:e2:
dd:0f:29:a1:7d:40:11:24:ef:9f:6f:cb:32:1c:c6:
95:36:d2:6b:19:cc:64:5d:02:0e:d3:f1:43:b8:61:
ef:88:2a:85:f3:80:43:cf:0d:26:97:22:e8:3b:14:
7b:a6:f8:34:f5:95:e3:b9:09:99:1c:66:67:a6:61:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:B6:70:17:1D:24:B8:2E:4C:70:27:B2:54:B1:A1:F1:BD:B9:58
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/eFq2cBcdJLguTHAnslSxofG9uVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:7f:99:98:97:21:2e:32:4d:74:33:10:5a:bf:a8:15:55:b1:
e0:af:a5:56:47:78:f8:d3:d0:f0:ac:7a:da:78:2a:a5:20:15:
7c:63:4b:a6:d5:c2:10:55:b4:fd:22:3f:0c:42:d1:bf:11:cb:
28:c7:d4:ab:7a:dd:1d:69:a3:84:64:3c:a6:d9:9b:0c:50:31:
c0:78:10:26:5c:26:4a:63:74:5d:42:f8:af:6a:65:d3:fb:28:
29:39:31:37:99:b0:98:2f:f5:06:40:dc:3b:42:65:24:35:f8:
3d:3b:fa:36:39:80:fa:c4:1a:78:e8:be:6a:b5:af:23:4e:59:
e5:25:37:d5:db:f8:96:a8:2e:5f:2c:a8:8f:68:a9:12:da:2d:
88:b5:e3:ba:24:13:24:7f:37:02:5e:3c:f0:c6:13:cd:c1:6a:
0f:4c:20:4d:47:ac:f0:d9:2a:bd:c8:55:d7:15:2c:a4:d1:c9:
89:ca:64:9e:cf:e4:58:f2:d6:54:78:df:63:ac:cc:10:80:14:
50:46:10:db:9a:e8:85:38:68:ad:6b:0c:4a:94:de:18:d8:39:
79:bb:88:31:b5:92:86:fa:bc:92:6e:62:5e:bc:b1:82:57:d5:
ca:5a:37:bf:88:af:bb:cf:9d:d8:d8:e1:d9:71:34:ad:44:8f:
85:fc:c3:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRiB7XEvfZ7m7Hgmh8Z39CcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjIxMTEwMTQ1MzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODVhYjY3MDE3MWQyNGI4MmU0YzcwMjdiMjU0YjFhMWYxYmRiOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AgkdRsfAl5vaPnxdnHZPZUXEk29
A+cjeN6EYniQFlbYvMXSCpT01cWR3pAcAIHLfItUqrm0AXWmNS2F0JVRkFKlkW6T
o+SsPBK6DV4f976cCtkuJJRc4Lg8b5az1WY+sZniqMyJI0VXAhAW/ltt22/bofaB
f7vkYW2fKxFyhC5G7pNklnnktxUKxxtNEqXKaJyDvz5osBdkS1n+anSzQnsvR2ZB
fRGDVbFtqi67O5TrjEBYxdxtPDxPmeHQrxJsLuLdDymhfUARJO+fb8syHMaVNtJr
GcxkXQIO0/FDuGHviCqF84BDzw0mlyLoOxR7pvg09ZXjuQmZHGZnpmGtHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhatnAXHSS4LkxwJ7JUsaHxvblYMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvZUZxMmNCY2RKTGd1VEhBbnNsU3hvZkc5dVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUHJMA0G
CSqGSIb3DQEBCwUAA4IBAQC3f5mYlyEuMk10MxBav6gVVbHgr6VWR3j409DwrHra
eCqlIBV8Y0um1cIQVbT9Ij8MQtG/Ecsox9Sret0daaOEZDym2ZsMUDHAeBAmXCZK
Y3RdQvivamXT+ygpOTE3mbCYL/UGQNw7QmUkNfg9O/o2OYD6xBp46L5qta8jTlnl
JTfV2/iWqC5fLKiPaKkS2i2IteO6JBMkfzcCXjzwxhPNwWoPTCBNR6zw2Sq9yFXX
FSyk0cmJymSez+RY8tZUeN9jrMwQgBRQRhDbmuiFOGitawxKlN4Y2Dl5u4gxtZKG
+rySbmJevLGCV9XKWje/iK+7z53Y2OHZcTStRI+F/MOK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org