Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/w8A3NOrllt2jwYJOesonEDsypEM.roa
File: w8A3NOrllt2jwYJOesonEDsypEM.roa (raw, json)
Hash identifier: JfUW5Rxd52U8/QABPNsnleyPcTJ4QPF47HJ+5f/gyAM=
Subject key identifier: C3:C0:37:34:EA:E5:96:DD:A3:C1:82:4E:7A:CA:27:10:3B:32:A4:43
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01841410E992DD1034CFD2C53D972ADEFE90
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/w8A3NOrllt2jwYJOesonEDsypEM.roa
Signing time: Wed 26 Oct 2022 11:32:43 +0000
ROA not before: Wed 26 Oct 2022 11:32:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209805
IP address blocks: 185.65.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:10:e9:92:dd:10:34:cf:d2:c5:3d:97:2a:de:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Oct 26 11:32:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3c03734eae596dda3c1824e7aca27103b32a443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:63:1c:62:9a:9b:2c:d2:cf:1e:a1:01:6a:
0d:a7:ce:e5:b7:5a:d2:49:a8:03:5f:09:5e:80:c2:
f5:d4:94:59:e1:e9:27:ff:d7:e0:92:77:69:30:3e:
f4:7d:0a:39:51:46:84:da:6e:fc:14:58:7f:52:3d:
e6:f8:67:10:49:42:88:bc:04:ee:5b:a3:80:2c:f2:
ec:f0:c8:37:59:72:cb:4b:83:cc:f1:cd:9e:4f:46:
c9:97:6b:38:3d:fc:54:8c:6e:75:2f:9a:ad:a2:4b:
b6:c0:60:b2:67:4d:aa:67:57:3a:a9:8f:44:ff:84:
e3:3d:5b:1d:53:e0:f2:e8:42:04:70:3c:af:b8:90:
cd:9c:e7:c4:54:a3:51:e0:8f:a9:fa:84:d2:72:92:
b2:84:b4:84:88:a0:ed:f1:dd:5b:bf:15:b1:61:8b:
5c:1c:56:af:ec:3f:5a:e3:de:5a:07:77:45:5e:7d:
85:ed:44:14:41:1a:fc:2d:fa:4e:fd:e9:9b:28:19:
23:ae:02:bd:0c:04:d0:da:f6:0b:14:4f:49:2f:4c:
23:55:5c:7d:a8:63:3b:c4:48:19:05:3a:9d:24:f2:
21:d4:7b:74:0e:b8:2e:26:c7:10:06:be:3c:fd:f9:
3a:3d:e5:48:8a:61:21:36:ad:6f:4e:53:bb:f4:50:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:37:34:EA:E5:96:DD:A3:C1:82:4E:7A:CA:27:10:3B:32:A4:43
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/w8A3NOrllt2jwYJOesonEDsypEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.200.0/24
Signature Algorithm: sha256WithRSAEncryption
05:73:4e:a4:01:bc:de:c0:7c:12:9d:58:ef:39:b5:62:96:88:
81:fc:a6:82:13:fd:9b:bf:f4:6f:37:07:1c:ae:cb:9d:a3:4d:
76:bf:9b:9d:e7:97:17:fd:8d:71:8a:2f:2b:41:66:34:be:09:
c9:82:01:98:09:bf:31:6d:72:bd:f5:5a:b2:38:1b:6a:44:b7:
5b:5d:82:06:88:3f:18:c3:4c:ec:51:08:cd:28:77:a6:a7:2c:
0f:ea:3f:ee:82:ff:d8:9c:4f:44:f3:8c:aa:4c:24:10:8b:2e:
77:04:84:49:66:33:e0:74:5f:1f:d8:fb:4e:87:b1:d3:35:52:
ef:35:39:d1:de:2a:5c:b7:ff:1d:47:ec:32:f3:ae:05:46:35:
4b:dc:61:27:8e:33:3b:96:b4:1c:0f:45:c8:94:41:1e:57:84:
4f:e1:6e:5a:e8:48:83:be:30:2a:17:f1:5d:ae:81:e7:c9:f3:
d3:f7:71:96:9b:c4:b2:2e:4a:66:55:e7:fa:46:94:78:74:1a:
7d:52:ee:f0:50:30:ee:1a:1d:96:84:88:68:2a:45:11:ba:ae:
3f:c0:1b:21:16:2d:05:54:5e:c5:54:07:6b:c4:19:47:e6:b2:
42:38:b6:59:86:94:f0:c6:00:b0:11:90:1c:08:eb:dc:6b:44:
f8:e0:38:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQUEOmS3RA0z9LFPZcq3v6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjIxMDI2MTEzMjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2MwMzczNGVhZTU5NmRkYTNjMTgyNGU3YWNhMjcxMDNiMzJhNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNpjHGKamyzSzx6hAWoNp87lt1rS
SagDXwlegML11JRZ4ekn/9fgkndpMD70fQo5UUaE2m78FFh/Uj3m+GcQSUKIvATu
W6OALPLs8Mg3WXLLS4PM8c2eT0bJl2s4PfxUjG51L5qtoku2wGCyZ02qZ1c6qY9E
/4TjPVsdU+Dy6EIEcDyvuJDNnOfEVKNR4I+p+oTScpKyhLSEiKDt8d1bvxWxYYtc
HFav7D9a495aB3dFXn2F7UQUQRr8LfpO/embKBkjrgK9DATQ2vYLFE9JL0wjVVx9
qGM7xEgZBTqdJPIh1Ht0DrguJscQBr48/fk6PeVIimEhNq1vTlO79FDk+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPANzTq5Zbdo8GCTnrKJxA7MqRDMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvdzhBM05PcmxsdDJqd1lKT2Vzb25FRHN5cEVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUHIMA0G
CSqGSIb3DQEBCwUAA4IBAQAFc06kAbzewHwSnVjvObViloiB/KaCE/2bv/RvNwcc
rsudo012v5ud55cX/Y1xii8rQWY0vgnJggGYCb8xbXK99VqyOBtqRLdbXYIGiD8Y
w0zsUQjNKHempywP6j/ugv/YnE9E84yqTCQQiy53BIRJZjPgdF8f2PtOh7HTNVLv
NTnR3ipct/8dR+wy864FRjVL3GEnjjM7lrQcD0XIlEEeV4RP4W5a6EiDvjAqF/Fd
roHnyfPT93GWm8SyLkpmVef6RpR4dBp9Uu7wUDDuGh2WhIhoKkURuq4/wBshFi0F
VF7FVAdrxBlH5rJCOLZZhpTwxgCwEZAcCOvca0T44Dh5
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org