Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/AQKlhlNsLSKNwpS7CFArJ7wpSho.roa
File: AQKlhlNsLSKNwpS7CFArJ7wpSho.roa (raw, json)
Hash identifier: xJd10e9i5U+yn+smWUq52smYmqZ4p29hfUmBrnpga1U=
Subject key identifier: 01:02:A5:86:53:6C:2D:22:8D:C2:94:BB:08:50:2B:27:BC:29:4A:1A
Certificate issuer: /CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Certificate serial: 01041203
Authority key identifier: D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/AQKlhlNsLSKNwpS7CFArJ7wpSho.roa
Signing time: Sat 01 Jan 2022 00:56:46 +0000
ROA not before: Sat 01 Jan 2022 00:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.234.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17043971 (0x1041203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Validity
Not Before: Jan 1 00:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0102a586536c2d228dc294bb08502b27bc294a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:5f:83:43:91:2e:68:ab:1f:c1:b6:3a:f8:
74:d5:7e:d0:85:ad:40:98:b8:3f:54:4e:93:b2:dc:
b3:f0:45:e7:2c:11:6b:3a:2c:c0:78:d0:2b:1e:55:
4a:16:47:a6:36:43:f6:24:21:ba:53:d7:64:02:20:
d6:39:f3:41:de:78:3b:51:25:dc:92:35:a7:55:4f:
d2:2b:aa:2a:94:32:c3:fe:ff:ad:43:2d:5e:40:03:
84:d2:70:04:b3:4e:61:74:6c:83:26:02:d8:ae:b9:
a1:f4:46:dc:4c:65:1b:fb:f3:61:bf:7f:22:89:3d:
ed:ee:94:08:6a:18:42:50:55:22:31:50:0f:73:b5:
46:8a:f7:99:03:cb:ee:72:dc:52:ef:7a:78:51:b9:
a4:a4:25:c6:ef:ce:80:34:35:f0:5f:5a:47:69:bc:
7b:3e:0e:e8:96:47:7f:e0:eb:f2:d1:e1:ec:b5:e2:
58:26:a9:1b:8f:fa:68:ba:6c:4b:f5:60:28:da:5e:
1a:26:1f:3a:9d:1b:0a:3e:1d:4a:25:d7:74:23:d8:
f7:1d:0b:1a:4b:2e:4a:a3:8d:ce:08:32:69:f4:42:
06:5b:bb:f7:53:90:d0:1f:40:98:1b:7c:49:52:7c:
96:a2:31:45:9b:ae:57:4d:12:d5:84:60:da:d5:24:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:A5:86:53:6C:2D:22:8D:C2:94:BB:08:50:2B:27:BC:29:4A:1A
X509v3 Authority Key Identifier:
keyid:D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/AQKlhlNsLSKNwpS7CFArJ7wpSho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.12.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bc:66:d5:e2:e6:d2:4b:fc:3c:2f:d3:f4:40:28:7a:e9:6a:
6e:19:56:1a:b8:ac:ed:77:65:a6:dc:26:a3:28:f1:b7:5f:c5:
bc:f9:6c:0d:92:95:fa:93:27:03:ab:3c:dd:df:ff:50:27:07:
0d:33:95:a7:61:a7:e1:94:b0:08:ad:89:f3:45:42:da:5f:0e:
a6:f5:b9:45:bb:f0:5b:1b:dd:22:d1:a0:56:61:27:93:23:f1:
b0:4e:5d:d6:a8:4b:f8:0f:3c:7e:a4:8f:93:77:9e:18:12:a8:
02:e5:71:6c:3c:84:5d:af:a5:a2:a9:07:17:4f:4f:9f:24:db:
1f:0c:4c:ea:f3:ce:9d:cb:e3:00:46:bf:64:4d:ca:61:01:08:
51:17:bd:db:a1:84:53:d5:ed:68:b3:6a:81:a7:56:1b:86:c8:
02:71:a1:29:72:88:f6:79:89:53:09:c9:c7:e3:e1:08:38:8c:
6a:01:6b:c8:60:b8:ae:f7:4a:e6:b1:34:d8:c0:c1:96:a7:f2:
66:2e:29:ff:60:ab:07:a3:31:c5:d4:4d:6a:d3:59:b9:85:98:
dc:6a:3c:d6:24:24:f7:01:64:4b:cd:5a:84:63:98:eb:9d:b5:
4b:0c:ac:70:95:90:6f:57:6d:c2:eb:19:ba:23:a3:bc:a1:e3:
8b:57:07:0b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQQSAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ODYwZjZmMmMzMTg1NTllNjU5NTljZDVmMjhkMTU5YTA4NDJkNzJhMB4XDTIyMDEw
MTAwNTY0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDEwMmE1ODY1MzZj
MmQyMjhkYzI5NGJiMDg1MDJiMjdiYzI5NGExYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNZX4NDkS5oqx/Btjr4dNV+0IWtQJi4P1ROk7Lcs/BF5ywR
azoswHjQKx5VShZHpjZD9iQhulPXZAIg1jnzQd54O1El3JI1p1VP0iuqKpQyw/7/
rUMtXkADhNJwBLNOYXRsgyYC2K65ofRG3ExlG/vzYb9/Iok97e6UCGoYQlBVIjFQ
D3O1Ror3mQPL7nLcUu96eFG5pKQlxu/OgDQ18F9aR2m8ez4O6JZHf+Dr8tHh7LXi
WCapG4/6aLpsS/VgKNpeGiYfOp0bCj4dSiXXdCPY9x0LGksuSqONzggyafRCBlu7
91OQ0B9AmBt8SVJ8lqIxRZuuV00S1YRg2tUklfsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQBAqWGU2wtIo3ClLsIUCsnvClKGjAfBgNVHSMEGDAWgBTYYPbywxhVnmWV
nNXyjRWaCELXKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJHRDI4c01ZVlo1bGxaelY4bzBWbWdoQzF5by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzIvNzY2MDJjLWMxYWMtNDZhMy04MWJjLWRlZWZmM2IyYWU4YS8x
L0FRS2xobE5zTFNLTndwUzdDRkFySjd3cFNoby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIv
NzY2MDJjLWMxYWMtNDZhMy04MWJjLWRlZWZmM2IyYWU4YS8xLzJHRDI4c01ZVlo1
bGxaelY4bzBWbWdoQzF5by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnqDDANBgkqhkiG9w0BAQsFAAOC
AQEAFbxm1eLm0kv8PC/T9EAoeulqbhlWGris7Xdlptwmoyjxt1/FvPlsDZKV+pMn
A6s83d//UCcHDTOVp2Gn4ZSwCK2J80VC2l8OpvW5RbvwWxvdItGgVmEnkyPxsE5d
1qhL+A88fqSPk3eeGBKoAuVxbDyEXa+loqkHF09PnyTbHwxM6vPOncvjAEa/ZE3K
YQEIURe926GEU9XtaLNqgadWG4bIAnGhKXKI9nmJUwnJx+PhCDiMagFryGC4rvdK
5rE02MDBlqfyZi4p/2CrB6MxxdRNatNZuYWY3Go81iQk9wFkS81ahGOY6521Swys
cJWQb1dtwusZuiOjvKHji1cHCw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:52 2023 by rpki-client on console-fra.rpki-client.org