Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ZFus1nmJRj0a0-4OVY-JOjg5jgw.roa
File: ZFus1nmJRj0a0-4OVY-JOjg5jgw.roa (raw, json)
Hash identifier: aYVSpSpnqyl0FS/gE3tExkFFlFNAD8Cx855utAy5mRo=
Subject key identifier: 64:5B:AC:D6:79:89:46:3D:1A:D3:EE:0E:55:8F:89:3A:38:39:8E:0C
Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial: 0206E1
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ZFus1nmJRj0a0-4OVY-JOjg5jgw.roa
Signing time: Sat 30 Apr 2022 12:48:27 +0000
ROA not before: Sat 30 Apr 2022 12:48:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204541
IP address blocks: 185.239.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132833 (0x206e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Validity
Not Before: Apr 30 12:48:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=645bacd67989463d1ad3ee0e558f893a38398e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:f5:fb:e1:77:f5:2d:fb:93:28:c0:cc:e7:
23:f1:5a:f0:b7:e3:20:57:b4:61:8d:32:be:41:35:
2f:87:b8:de:d3:75:ac:54:b0:a3:0d:c3:19:c1:da:
28:e6:34:45:11:ab:55:93:f6:33:d1:38:eb:f9:4b:
7a:e4:75:c7:c8:f1:76:77:f5:a8:8c:9f:ea:b5:37:
c4:df:5e:e3:a6:4e:d2:2c:bf:b7:4d:be:04:f3:00:
cd:5b:9f:b4:da:a1:ba:7e:24:94:81:a7:7d:40:29:
03:3e:01:9b:48:03:19:56:9f:c1:18:86:f1:61:94:
06:f3:0f:e6:5f:55:aa:ea:2b:34:71:8f:49:7e:e1:
1e:d4:7b:77:67:14:72:9a:ce:ca:ff:17:51:25:c4:
53:c3:96:b9:63:43:81:92:e5:ef:f8:26:70:e9:0c:
ff:d9:4b:74:8e:4d:33:8e:5d:ae:81:30:de:0c:d1:
ac:c3:b9:30:54:28:62:e0:1c:da:65:69:5c:e9:67:
76:2c:0a:79:e9:4d:89:7f:85:4a:61:3b:9e:3c:3a:
7b:68:78:26:b4:2a:ac:bb:7d:61:9e:19:e5:28:cf:
8e:a5:f2:8c:f3:5b:5a:44:0e:ff:57:7b:f6:c5:a6:
9a:61:c1:7b:d2:e8:83:29:d9:91:52:14:38:b0:22:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:AC:D6:79:89:46:3D:1A:D3:EE:0E:55:8F:89:3A:38:39:8E:0C
X509v3 Authority Key Identifier:
keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ZFus1nmJRj0a0-4OVY-JOjg5jgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.185.0/24
Signature Algorithm: sha256WithRSAEncryption
10:51:2a:53:34:4d:78:ba:80:b1:e4:84:78:8a:4a:b3:51:0b:
7d:4a:27:74:f1:ee:d7:6f:7b:1d:58:9e:92:02:c5:57:3e:a3:
5a:3f:d5:de:86:b8:d2:40:80:5b:50:04:1b:af:6c:89:ff:b5:
5e:27:11:5c:49:a4:77:0f:96:56:57:3b:2e:aa:cf:4b:f8:6f:
2d:d9:79:13:23:1d:61:ff:e1:7b:87:13:df:8e:f1:23:ae:8c:
8b:73:b2:ce:d6:7d:ea:61:f0:ed:79:a7:7a:94:41:44:3c:0a:
3e:2f:b8:b8:f3:a4:cc:d3:b3:21:b2:63:8d:d1:fe:0e:c0:a9:
9c:54:8a:81:51:c3:59:66:df:cc:e7:6d:9b:b4:35:4f:c5:f9:
36:6d:1d:63:7a:30:f2:45:8d:3b:11:c4:3e:25:32:ae:3e:68:
9b:fd:68:78:35:e4:99:b3:b6:7f:ad:18:58:05:f0:28:91:b8:
10:6a:37:a4:40:3a:26:16:1e:7c:e1:44:77:25:b8:63:2a:f1:
0b:fa:a7:5c:ec:3f:73:67:c3:b3:45:21:7c:96:9f:19:02:af:
12:1c:4c:4e:27:78:c9:20:38:9d:74:63:3d:95:d7:f6:5a:9f:
84:05:8b:75:36:de:41:a7:95:07:f4:15:9a:6c:24:3a:46:5c:
e0:ee:85:a7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAgbhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU3
NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0M2ViYzUwHhcNMjIwNDMw
MTI0ODI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2NDViYWNkNjc5ODk0
NjNkMWFkM2VlMGU1NThmODkzYTM4Mzk4ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuRv1++F39S37kyjAzOcj8Vrwt+MgV7RhjTK+QTUvh7je03Ws
VLCjDcMZwdoo5jRFEatVk/Yz0Tjr+Ut65HXHyPF2d/WojJ/qtTfE317jpk7SLL+3
Tb4E8wDNW5+02qG6fiSUgad9QCkDPgGbSAMZVp/BGIbxYZQG8w/mX1Wq6is0cY9J
fuEe1Ht3ZxRyms7K/xdRJcRTw5a5Y0OBkuXv+CZw6Qz/2Ut0jk0zjl2ugTDeDNGs
w7kwVChi4BzaZWlc6Wd2LAp56U2Jf4VKYTuePDp7aHgmtCqsu31hnhnlKM+OpfKM
81taRA7/V3v2xaaaYcF70uiDKdmRUhQ4sCISIwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGRbrNZ5iUY9GtPuDlWPiTo4OY4MMB8GA1UdIwQYMBaAFOd3vI4+wlDOhfuQ
kTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJmLzEv
WkZ1czFubUpSajBhMC00T1ZZLUpPamc1amd3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8z
MTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJmLzEvNTNlOGpqN0NVTTZG
LTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue+5MA0GCSqGSIb3DQEBCwUAA4IB
AQAQUSpTNE14uoCx5IR4ikqzUQt9Sid08e7Xb3sdWJ6SAsVXPqNaP9XehrjSQIBb
UAQbr2yJ/7VeJxFcSaR3D5ZWVzsuqs9L+G8t2XkTIx1h/+F7hxPfjvEjroyLc7LO
1n3qYfDtead6lEFEPAo+L7i486TM07MhsmON0f4OwKmcVIqBUcNZZt/M522btDVP
xfk2bR1jejDyRY07EcQ+JTKuPmib/Wh4NeSZs7Z/rRhYBfAokbgQajekQDomFh58
4UR3JbhjKvEL+qdc7D9zZ8OzRSF8lp8ZAq8SHExOJ3jJIDiddGM9ldf2Wp+EBYt1
Nt5Bp5UH9BWabCQ6Rlzg7oWn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-ams.rpki-client.org