Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/zOK1VIKV269_EycJOcEUluPKieQ.roa
File: zOK1VIKV269_EycJOcEUluPKieQ.roa (raw, json)
Hash identifier: h+98kkGZn60nxJL2paxa2365WzFJPcRLUhVaPw4M1G4=
Subject key identifier: CC:E2:B5:54:82:95:DB:AF:7F:13:27:09:39:C1:14:96:E3:CA:89:E4
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 100707CA
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/zOK1VIKV269_EycJOcEUluPKieQ.roa
Signing time: Sat 01 Jan 2022 00:52:56 +0000
ROA not before: Sat 01 Jan 2022 00:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206391
IP address blocks: 185.187.204.0/24 maxlen: 24
185.187.206.0/24 maxlen: 24
185.187.205.0/24 maxlen: 24
185.187.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268896202 (0x100707ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Jan 1 00:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cce2b5548295dbaf7f13270939c11496e3ca89e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:fc:b6:a7:bf:34:9d:dd:8b:76:06:7a:e7:
0e:76:7b:b0:89:3c:7e:ce:4b:e5:5f:a9:0d:1a:78:
3e:ac:ed:d0:0e:12:88:94:45:bf:dc:23:2a:30:29:
b0:56:a2:67:23:6b:c6:f4:33:44:f1:ee:18:ac:99:
ba:df:87:32:a1:cb:3e:e1:83:56:e2:cb:5b:46:93:
f7:fe:b4:4d:eb:31:f5:29:a0:be:b7:0d:69:26:86:
56:52:26:e6:5f:91:10:ba:83:e3:cb:43:cc:77:b2:
f6:c4:a3:9e:f1:6b:eb:e2:48:0f:4d:14:81:5d:f6:
c4:0e:2a:e1:3b:12:29:f5:11:f9:78:75:75:7a:95:
dd:d1:54:af:41:a8:46:27:f0:b4:c6:9e:a7:75:f6:
dc:23:7d:6c:17:8c:19:e1:72:4f:c5:80:98:0d:54:
cb:3b:40:84:7a:88:a9:df:7a:7c:6f:dd:18:6b:c1:
5b:ec:80:5d:23:1c:9e:17:f6:ce:8b:b8:38:0b:b4:
8d:a7:fa:51:5c:f6:a3:69:5f:dc:ec:49:47:37:59:
0d:b4:b7:4f:51:f3:e4:12:50:fb:bd:e0:3f:ef:f5:
b4:91:59:89:76:2e:36:41:d2:3e:15:f9:64:74:3a:
6b:c1:3c:c6:1b:3f:07:45:61:b2:16:e2:98:06:4f:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:B5:54:82:95:DB:AF:7F:13:27:09:39:C1:14:96:E3:CA:89:E4
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/zOK1VIKV269_EycJOcEUluPKieQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.204.0/22
Signature Algorithm: sha256WithRSAEncryption
11:aa:49:44:f7:2c:59:63:a5:01:79:c2:93:b8:f0:3c:49:22:
8e:45:60:05:41:41:c1:56:44:21:30:56:52:46:e4:99:a2:fe:
7b:a0:f4:61:60:a4:1c:5a:d9:dd:7a:3c:24:cc:cb:74:ea:d8:
db:eb:9e:0a:94:8a:9e:b4:f0:67:49:2c:88:da:cd:43:a9:23:
51:5f:02:16:fa:1a:63:a6:3d:8f:23:06:26:6a:e1:2d:40:d0:
a3:88:55:d6:4d:b5:60:35:2a:4e:23:8c:91:b6:f2:f3:45:88:
ef:f9:6e:6f:5a:fa:c0:79:f8:39:c2:cd:52:ef:20:d7:79:a3:
71:8f:c8:3d:55:a7:9f:7b:28:95:16:b9:e8:dd:88:62:08:7f:
1f:ca:82:e9:00:a4:8f:e1:9b:7c:78:51:4d:50:52:e3:fa:2f:
90:a0:f6:55:56:4f:69:0a:4f:f8:7a:b0:9a:c1:aa:5d:49:10:
e4:b0:92:ae:8e:96:2e:44:a0:b0:86:c5:44:a3:a9:86:76:2d:
98:ce:fc:77:aa:1c:a7:1d:12:11:e4:86:0c:28:f9:c6:e0:b4:
8b:83:c6:34:13:84:7f:0d:9e:b0:5e:ad:8c:71:76:58:59:ef:
44:b8:d1:60:96:44:be:4d:c5:d3:51:3c:c0:e6:ef:30:56:e8:
39:33:47:e9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEAcHyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MWY4M2QyMTczNGUwNTU1YzdhMTNjNDg1NjFjYTBiNzc1N2E2YTBhMB4XDTIyMDEw
MTAwNTI1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NlMmI1NTQ4Mjk1
ZGJhZjdmMTMyNzA5MzljMTE0OTZlM2NhODllNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJ5/LanvzSd3Yt2BnrnDnZ7sIk8fs5L5V+pDRp4Pqzt0A4S
iJRFv9wjKjApsFaiZyNrxvQzRPHuGKyZut+HMqHLPuGDVuLLW0aT9/60Tesx9Smg
vrcNaSaGVlIm5l+RELqD48tDzHey9sSjnvFr6+JID00UgV32xA4q4TsSKfUR+Xh1
dXqV3dFUr0GoRifwtMaep3X23CN9bBeMGeFyT8WAmA1UyztAhHqIqd96fG/dGGvB
W+yAXSMcnhf2zou4OAu0jaf6UVz2o2lf3OxJRzdZDbS3T1Hz5BJQ+73gP+/1tJFZ
iXYuNkHSPhX5ZHQ6a8E8xhs/B0VhshbimAZPxXsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTM4rVUgpXbr38TJwk5wRSW48qJ5DAfBgNVHSMEGDAWgBRB+D0hc04FVceh
PEhWHKC3dXpqCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FmZzlJWE5PQlZYSG9UeElWaHlndDNWNmFnby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNzM3NDY5LWFhNjYtNDNkZi05ZTk0LTcwMzkzZjlmOGFlMy8x
L3pPSzFWSUtWMjY5X0V5Y0pPY0VVbHVQS2llUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NzM3NDY5LWFhNjYtNDNkZi05ZTk0LTcwMzkzZjlmOGFlMy8xL1FmZzlJWE5PQlZY
SG9UeElWaHlndDNWNmFnby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm7zDANBgkqhkiG9w0BAQsFAAOC
AQEAEapJRPcsWWOlAXnCk7jwPEkijkVgBUFBwVZEITBWUkbkmaL+e6D0YWCkHFrZ
3Xo8JMzLdOrY2+ueCpSKnrTwZ0ksiNrNQ6kjUV8CFvoaY6Y9jyMGJmrhLUDQo4hV
1k21YDUqTiOMkbby80WI7/lub1r6wHn4OcLNUu8g13mjcY/IPVWnn3solRa56N2I
Ygh/H8qC6QCkj+GbfHhRTVBS4/ovkKD2VVZPaQpP+HqwmsGqXUkQ5LCSro6WLkSg
sIbFRKOphnYtmM78d6ocpx0SEeSGDCj5xuC0i4PGNBOEfw2esF6tjHF2WFnvRLjR
YJZEvk3F01E8wObvMFboOTNH6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:20 2024 by rpki-client on console-ams.rpki-client.org