Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/66oetvkotFZog8hR4Tr4-UoX0lY.roa
File: 66oetvkotFZog8hR4Tr4-UoX0lY.roa (raw, json)
Hash identifier: NKzF8rjvPs4ofoc2iujlDqufY0gQKuLPoW4TmdR5Ryc=
Subject key identifier: EB:AA:1E:B6:F9:28:B4:56:68:83:C8:51:E1:3A:F8:F9:4A:17:D2:56
Certificate issuer: /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial: 05B32CBA
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/66oetvkotFZog8hR4Tr4-UoX0lY.roa
Signing time: Sat 01 Jan 2022 04:03:27 +0000
ROA not before: Sat 01 Jan 2022 04:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.118.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95628474 (0x5b32cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
Validity
Not Before: Jan 1 04:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebaa1eb6f928b4566883c851e13af8f94a17d256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:8c:86:8e:cf:39:33:79:ea:59:03:17:bb:
2d:50:7b:f1:7a:48:8b:67:45:8a:66:87:c8:ee:73:
25:ad:e6:b1:4a:84:0c:56:65:1b:75:b7:2c:d0:72:
03:1c:44:91:db:c3:b3:e5:57:02:99:ca:81:e5:86:
7c:a5:f5:be:2b:2e:c0:f9:a9:1e:55:e6:16:96:8c:
5b:93:55:9e:f2:e5:44:c1:40:90:dc:72:6c:17:20:
23:30:04:61:e1:70:c4:cd:0e:df:2c:5d:2a:b2:31:
33:85:45:95:2a:08:07:a9:b1:03:69:7a:d1:0d:59:
c3:ed:e0:5a:f6:ee:88:dc:86:6b:76:93:87:75:61:
51:6e:d1:4c:39:46:09:40:44:bb:77:af:ba:7a:e2:
2c:c4:da:b1:66:64:94:b0:b8:51:0f:f3:69:a2:72:
86:91:50:4a:16:a2:71:9b:43:08:ac:7c:66:b6:f8:
67:34:2c:a5:de:b1:65:81:53:5d:53:b0:68:c6:8c:
e1:47:bf:25:8e:70:51:cb:57:0a:bc:a7:49:27:10:
2d:4f:67:b7:5c:9b:d4:28:ae:26:19:1f:fd:59:68:
57:3d:bf:6e:2b:7c:e7:f4:0f:bf:1d:d5:90:93:fc:
4d:bb:cd:02:d9:14:d6:4c:69:70:d8:46:de:a4:d6:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:1E:B6:F9:28:B4:56:68:83:C8:51:E1:3A:F8:F9:4A:17:D2:56
X509v3 Authority Key Identifier:
keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/66oetvkotFZog8hR4Tr4-UoX0lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2a:f5:7e:b9:27:ad:5c:35:09:4b:c7:6a:bf:77:e3:a4:bc:
03:e3:fa:96:01:ed:4b:a5:83:af:6f:cc:49:bd:f0:6e:1c:52:
bd:1a:db:29:f5:de:45:c1:76:62:43:d1:b4:09:6d:cc:29:e5:
ec:97:8d:38:f3:3f:93:5e:14:9d:89:ee:dd:4f:6f:06:7a:01:
59:98:1a:fb:70:69:f8:30:bc:ea:0f:f6:3d:f1:ea:ee:ba:a2:
7a:b8:31:15:ab:48:26:ca:8c:11:39:f6:ac:56:c7:e9:c4:14:
a1:d2:b1:96:49:92:3b:93:c1:33:b4:96:d6:a1:28:59:4a:91:
56:e7:50:89:a6:26:0f:80:3c:59:47:94:3f:7c:48:fb:c1:ac:
55:bd:76:7b:95:83:fe:35:13:b5:54:95:e6:19:1f:1c:8d:b3:
06:74:af:c2:61:a1:25:e1:0b:bc:bf:1b:93:5c:cc:a8:25:08:
3c:35:4d:71:94:12:e8:8b:dd:f1:6b:35:80:4d:20:2a:50:99:
19:83:67:3f:33:21:15:84:ae:90:3b:3a:0f:7a:86:c5:50:7c:
a0:df:66:cf:d0:4e:24:28:7b:2b:7a:b8:65:f8:39:6d:a0:01:
12:2f:89:31:df:08:71:c3:c9:5b:76:68:40:00:5e:07:2b:ed:
b1:c6:fd:d9
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEBbMsujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YmJlMzNjOGQxOGU1M2JmZDI0ODIyMDk4ZGM3NDg2NDA1NTBjNTA0MB4XDTIyMDEw
MTA0MDMyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWJhYTFlYjZmOTI4
YjQ1NjY4ODNjODUxZTEzYWY4Zjk0YTE3ZDI1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6MjIaOzzkzeepZAxe7LVB78XpIi2dFimaHyO5zJa3msUqE
DFZlG3W3LNByAxxEkdvDs+VXApnKgeWGfKX1visuwPmpHlXmFpaMW5NVnvLlRMFA
kNxybBcgIzAEYeFwxM0O3yxdKrIxM4VFlSoIB6mxA2l60Q1Zw+3gWvbuiNyGa3aT
h3VhUW7RTDlGCUBEu3evunriLMTasWZklLC4UQ/zaaJyhpFQShaicZtDCKx8Zrb4
ZzQspd6xZYFTXVOwaMaM4Ue/JY5wUctXCrynSScQLU9nt1yb1CiuJhkf/VloVz2/
bit85/QPvx3VkJP8TbvNAtkU1kxpcNhG3qTWCZ0CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTrqh62+Si0VmiDyFHhOvj5ShfSVjAfBgNVHSMEGDAWgBT7vjPI0Y5Tv9JI
IgmNx0hkBVDFBDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNzR6eU5HT1U3X1NTQ0lKamNkSVpBVlF4UVEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzcwLzljZmVlOC05NDQ2LTRmNWUtYWQxZS0wNTU0MzExZDg3YjUv
MS82Nm9ldHZrb3RGWm9nOGhSNFRyNC1Vb1gwbFkucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcw
LzljZmVlOC05NDQ2LTRmNWUtYWQxZS0wNTU0MzExZDg3YjUvMS8xLTc0enlOR09V
N19TU0NJSmpjZElaQVZReFFRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXZpMA0GCSqGSIb3DQEBCwUA
A4IBAQAPKvV+uSetXDUJS8dqv3fjpLwD4/qWAe1LpYOvb8xJvfBuHFK9Gtsp9d5F
wXZiQ9G0CW3MKeXsl4048z+TXhSdie7dT28GegFZmBr7cGn4MLzqD/Y98eruuqJ6
uDEVq0gmyowROfasVsfpxBSh0rGWSZI7k8EztJbWoShZSpFW51CJpiYPgDxZR5Q/
fEj7waxVvXZ7lYP+NRO1VJXmGR8cjbMGdK/CYaEl4Qu8vxuTXMyoJQg8NU1xlBLo
i93xazWATSAqUJkZg2c/MyEVhK6QOzoPeobFUHyg32bP0E4kKHsrerhl+DltoAES
L4kx3whxw8lbdmhAAF4HK+2xxv3Z
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:26 2023 by rpki-client on console-ams.rpki-client.org