Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/4EQr-JlnZ1Mv9SFdGYRTI3dCxDo.roa
File: 4EQr-JlnZ1Mv9SFdGYRTI3dCxDo.roa (raw, json)
Hash identifier: qsT15c7vtPazp0UQ2jvh3KoHYUmmcfOaV82cwehaH58=
Subject key identifier: E0:44:2B:F8:99:67:67:53:2F:F5:21:5D:19:84:53:23:77:42:C4:3A
Certificate issuer: /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial: 06C6A14F
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/4EQr-JlnZ1Mv9SFdGYRTI3dCxDo.roa
Signing time: Sat 01 Jan 2022 11:54:33 +0000
ROA not before: Sat 01 Jan 2022 11:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34534
IP address blocks: 185.142.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113680719 (0x6c6a14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
Validity
Not Before: Jan 1 11:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0442bf8996767532ff5215d198453237742c43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:20:91:31:67:97:ca:f4:09:4d:bf:27:cc:
d2:2c:09:5a:2f:a8:2c:00:af:c5:66:ea:ce:5a:56:
70:02:67:d0:94:82:29:f5:c3:18:6b:0f:11:c9:46:
c9:c5:11:b2:f7:1a:96:d9:a0:1c:3f:8d:7b:e0:fe:
d5:f6:dc:a7:7c:fd:bd:65:ab:98:fd:8b:33:a2:f0:
0e:e3:6b:bf:3d:72:a1:77:f6:39:4f:9c:27:b6:02:
56:f6:92:60:42:d8:47:ec:07:a0:7c:ed:60:3c:e5:
f3:8e:c2:57:e1:fd:ea:f3:a3:c5:71:dd:fb:bb:d8:
dc:03:34:e7:57:b4:9c:ba:fb:4e:3c:fe:6c:e7:6a:
46:d1:27:db:28:99:a5:bf:7c:b2:9b:a9:ce:e3:1a:
56:56:1c:d9:75:e0:da:37:4e:e4:15:d9:9f:ee:cc:
7c:a6:22:92:0e:db:0b:26:e4:57:ec:31:4e:e8:75:
ec:bf:92:fd:70:1b:f1:bd:18:84:8e:5c:98:65:81:
f5:7c:df:13:08:07:cf:c5:44:4c:11:d0:8f:0f:f5:
fd:ba:b0:62:9b:ff:6d:11:ac:bf:8c:88:aa:ba:3c:
b5:24:c8:93:55:f3:89:9e:27:f2:8b:e5:c2:c4:d4:
95:50:6a:8e:4e:b9:35:56:1e:bd:8c:35:46:4c:e4:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:2B:F8:99:67:67:53:2F:F5:21:5D:19:84:53:23:77:42:C4:3A
X509v3 Authority Key Identifier:
keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/4EQr-JlnZ1Mv9SFdGYRTI3dCxDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d8:83:81:6a:54:b5:08:d9:6e:15:32:8f:9f:c8:fa:64:ce:
e5:45:3b:0d:f8:94:f7:a2:2b:0a:64:01:60:e0:4c:af:46:c5:
6b:1b:c7:0f:61:ce:1f:c7:13:24:b2:63:d8:8a:9a:6a:df:2d:
43:f3:87:4e:14:93:df:ee:96:d3:b7:1d:3b:b0:73:2d:fb:ee:
cb:dc:76:f7:55:94:60:67:b3:e9:d4:38:02:99:25:ca:91:f1:
9b:36:bc:96:dc:06:fc:05:2a:b0:3b:08:49:11:7d:af:e6:5b:
ac:7a:ce:cb:ff:c6:0c:02:8a:71:14:08:ff:03:2e:a8:27:ca:
cc:91:d1:f6:f1:a4:8a:e0:76:c6:a8:07:aa:48:20:51:00:30:
6a:5d:8d:c2:70:d5:d3:0d:b7:57:4b:39:29:34:53:84:ba:7a:
76:89:19:51:0b:a6:ae:ad:b3:3f:aa:23:b7:bb:b2:ce:84:36:
b6:ef:9e:e8:aa:1a:f0:f2:0b:8a:7a:25:6d:a0:e7:0c:24:d8:
e4:a7:1f:85:b7:6b:80:8a:5e:6e:28:28:df:7c:81:68:d6:5c:
2a:50:48:0e:9e:95:11:cc:1e:90:f2:5d:9b:bb:1e:9f:7d:07:
78:ae:c8:04:7d:3f:8e:05:35:ca:3d:f7:78:50:d9:be:c6:70:
fb:0a:42:c5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBsahTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MTQ2NjMyNjQwNjQzNmUzMTQ3OGI3YmNhMmRkYTE2Yzk2ZDVhOTY0MB4XDTIyMDEw
MTExNTQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTA0NDJiZjg5OTY3
Njc1MzJmZjUyMTVkMTk4NDUzMjM3NzQyYzQzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMcOIJExZ5fK9AlNvyfM0iwJWi+oLACvxWbqzlpWcAJn0JSC
KfXDGGsPEclGycURsvcaltmgHD+Ne+D+1fbcp3z9vWWrmP2LM6LwDuNrvz1yoXf2
OU+cJ7YCVvaSYELYR+wHoHztYDzl847CV+H96vOjxXHd+7vY3AM051e0nLr7Tjz+
bOdqRtEn2yiZpb98spupzuMaVlYc2XXg2jdO5BXZn+7MfKYikg7bCybkV+wxTuh1
7L+S/XAb8b0YhI5cmGWB9XzfEwgHz8VETBHQjw/1/bqwYpv/bRGsv4yIqro8tSTI
k1XziZ4n8ovlwsTUlVBqjk65NVYevYw1RkzkWH8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgRCv4mWdnUy/1IV0ZhFMjd0LEOjAfBgNVHSMEGDAWgBQRRmMmQGQ24xR4
t7yi3aFsltWpZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VVWmpKa0JrTnVNVWVMZThvdDJoYkpiVnFXUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvOWJhNjZjLWJlZTctNDRjOS04MmU1LWQ5NWE1MTU1ZGQwMi8x
LzRFUXItSmxuWjFNdjlTRmRHWVJUSTNkQ3hEby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
OWJhNjZjLWJlZTctNDRjOS04MmU1LWQ5NWE1MTU1ZGQwMi8xL0VVWmpKa0JrTnVN
VWVMZThvdDJoYkpiVnFXUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmONTANBgkqhkiG9w0BAQsFAAOC
AQEAPdiDgWpUtQjZbhUyj5/I+mTO5UU7DfiU96IrCmQBYOBMr0bFaxvHD2HOH8cT
JLJj2Iqaat8tQ/OHThST3+6W07cdO7BzLfvuy9x291WUYGez6dQ4ApklypHxmza8
ltwG/AUqsDsISRF9r+ZbrHrOy//GDAKKcRQI/wMuqCfKzJHR9vGkiuB2xqgHqkgg
UQAwal2NwnDV0w23V0s5KTRThLp6dokZUQumrq2zP6ojt7uyzoQ2tu+e6Koa8PIL
inolbaDnDCTY5KcfhbdrgIpebigo33yBaNZcKlBIDp6VEcwekPJdm7sen30HeK7I
BH0/jgU1yj33eFDZvsZw+wpCxQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:10 2023 by rpki-client on console-ams.rpki-client.org