Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa
File: RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa (raw, json)
Hash identifier: nOnzXaBL/K/KVP6k/nhgFvW0qZO9dEvIfYMapoKVoz8=
Subject key identifier: 45:2A:52:58:73:70:2F:44:82:69:83:7C:D2:4B:49:E8:AA:8D:62:F0
Certificate issuer: /CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
Certificate serial: 0100AD5C
Authority key identifier: 3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa
Signing time: Sat 01 Jan 2022 07:54:07 +0000
ROA not before: Sat 01 Jan 2022 07:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.252.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16821596 (0x100ad5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
Validity
Not Before: Jan 1 07:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=452a525873702f448269837cd24b49e8aa8d62f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:26:5a:6b:16:4f:35:f1:f4:17:bf:b5:40:
35:cb:37:1f:1d:eb:da:af:52:2e:39:f5:27:33:a8:
b1:6b:bb:87:1f:4e:45:cc:ba:4c:ab:dd:1f:c4:9e:
19:ef:94:ca:79:35:24:c8:7b:87:e9:1c:46:15:84:
2b:e4:bc:07:42:b0:96:a4:ee:28:93:fa:e7:07:f8:
66:01:6e:5a:94:23:20:bc:f2:ac:44:45:f9:ba:98:
75:c0:3e:99:8d:95:28:9d:dc:6a:3b:8e:70:6c:aa:
15:74:c2:b6:6b:e0:71:45:51:fe:5b:6d:e8:11:0a:
79:6f:b1:4b:f3:8e:71:56:c0:5f:fd:a2:1e:5a:02:
34:d8:36:46:39:69:9d:6a:2e:d0:c0:fd:2e:29:b4:
4f:a7:45:dd:83:88:1e:c6:31:e2:b6:86:b7:71:49:
49:a1:41:8f:dd:1c:96:27:b8:2b:95:7f:0e:15:25:
10:e2:fd:30:07:51:2e:e8:69:11:fb:f7:5c:e1:cf:
20:11:c8:34:57:9f:c4:ff:69:ce:92:01:e6:97:c9:
61:12:79:48:c6:4e:ee:92:c1:fc:08:b8:d8:db:2d:
3e:36:27:68:68:7b:92:1d:c9:02:35:fe:ae:ca:26:
30:1f:54:0c:ba:31:f2:bf:95:ab:a3:da:70:0f:b9:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:52:58:73:70:2F:44:82:69:83:7C:D2:4B:49:E8:AA:8D:62:F0
X509v3 Authority Key Identifier:
keyid:3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/P-inMgXXZxDnFT_HFG9qYh7nwtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.213.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ba:2f:5a:8b:17:8e:1d:75:28:8a:1a:35:a9:7f:fe:05:a5:
04:a4:ff:e5:46:f2:8e:6e:d8:d0:db:2b:f9:f7:f6:99:2f:bd:
2e:cf:08:33:ba:c8:56:e3:23:bd:db:69:1f:22:85:b5:06:32:
fb:9a:44:1e:0b:0a:35:fe:86:19:11:07:7c:a7:0d:2d:34:d9:
7d:e1:6a:c2:dd:b4:da:df:f2:7e:eb:57:f7:6d:89:d0:c3:80:
7a:f6:99:7b:87:0d:c3:7d:81:31:ce:02:a4:7e:ab:46:b3:b2:
6d:5c:c4:91:5c:08:ad:98:45:df:47:b0:66:eb:fc:98:58:75:
73:01:2a:33:ad:45:62:05:aa:21:81:a4:2b:8f:01:d1:70:8d:
b5:0c:67:c6:28:ae:77:b5:92:4c:db:1b:95:85:97:fe:3e:b2:
01:1f:de:ad:8c:68:a1:92:6c:f8:05:41:69:d5:44:06:fc:ac:
3e:a6:43:0c:15:82:65:32:d7:4c:e4:03:73:38:4a:c7:90:35:
90:44:1e:67:94:35:2f:de:81:26:dc:3b:7b:fc:ce:3a:c0:19:
83:32:5b:fa:3e:9d:22:c1:7a:fb:80:3e:d8:9a:ac:eb:49:05:
e2:ac:81:d2:3a:95:11:8a:26:3b:5b:9f:ed:10:6d:98:69:43:
2d:71:24:e5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQCtXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZmU4YTczMjA1ZDc2NzEwZTcxNTNmYzcxNDZmNmE2MjFlZTdjMmQ1MB4XDTIyMDEw
MTA3NTQwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDUyYTUyNTg3Mzcw
MmY0NDgyNjk4MzdjZDI0YjQ5ZThhYThkNjJmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL//JlprFk818fQXv7VANcs3Hx3r2q9SLjn1JzOosWu7hx9O
Rcy6TKvdH8SeGe+Uynk1JMh7h+kcRhWEK+S8B0KwlqTuKJP65wf4ZgFuWpQjILzy
rERF+bqYdcA+mY2VKJ3cajuOcGyqFXTCtmvgcUVR/ltt6BEKeW+xS/OOcVbAX/2i
HloCNNg2RjlpnWou0MD9Lim0T6dF3YOIHsYx4raGt3FJSaFBj90clie4K5V/DhUl
EOL9MAdRLuhpEfv3XOHPIBHINFefxP9pzpIB5pfJYRJ5SMZO7pLB/Ai42NstPjYn
aGh7kh3JAjX+rsomMB9UDLox8r+Vq6PacA+5Hg8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRFKlJYc3AvRIJpg3zSS0noqo1i8DAfBgNVHSMEGDAWgBQ/6KcyBddnEOcV
P8cUb2piHufC1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1AtaW5NZ1hYWnhEbkZUX0hGRzlxWWg3bnd0VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmMvOWVjYWViLTE2NTgtNDFmMi04M2M2LTRlM2VjMjY1NTI4NC8x
L1JTcFNXSE53TDBTQ2FZTjgwa3RKNktxTll2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMv
OWVjYWViLTE2NTgtNDFmMi04M2M2LTRlM2VjMjY1NTI4NC8xL1AtaW5NZ1hYWnhE
bkZUX0hGRzlxWWg3bnd0VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn81TANBgkqhkiG9w0BAQsFAAOC
AQEAMrovWosXjh11KIoaNal//gWlBKT/5Ubyjm7Y0Nsr+ff2mS+9Ls8IM7rIVuMj
vdtpHyKFtQYy+5pEHgsKNf6GGREHfKcNLTTZfeFqwt202t/yfutX922J0MOAevaZ
e4cNw32BMc4CpH6rRrOybVzEkVwIrZhF30ewZuv8mFh1cwEqM61FYgWqIYGkK48B
0XCNtQxnxiiud7WSTNsblYWX/j6yAR/erYxooZJs+AVBadVEBvysPqZDDBWCZTLX
TOQDczhKx5A1kEQeZ5Q1L96BJtw7e/zOOsAZgzJb+j6dIsF6+4A+2Jqs60kF4qyB
0jqVEYomO1uf7RBtmGlDLXEk5Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:12 2023 by rpki-client on console-ams.rpki-client.org