Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/VchxwzXG0l-oRMViEunzUQ_nLn4.roa
File: VchxwzXG0l-oRMViEunzUQ_nLn4.roa (raw, json)
Hash identifier: ajiisOXn7AkD72//U1VRl4VOXaWmibHcJX7EwM/ROA8=
Subject key identifier: 55:C8:71:C3:35:C6:D2:5F:A8:44:C5:62:12:E9:F3:51:0F:E7:2E:7E
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 0E84449D
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/VchxwzXG0l-oRMViEunzUQ_nLn4.roa
Signing time: Sat 01 Jan 2022 09:53:58 +0000
ROA not before: Sat 01 Jan 2022 09:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198167
IP address blocks: 185.119.218.0/24 maxlen: 24
185.119.216.0/22 maxlen: 23
2a03:78c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243549341 (0xe84449d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jan 1 09:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55c871c335c6d25fa844c56212e9f3510fe72e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:b6:13:42:03:f1:28:07:65:0a:28:fd:10:
73:31:56:94:ba:d3:35:a7:c5:5d:d1:be:b2:5d:96:
51:cd:58:1c:88:39:7b:d6:ab:bc:70:98:f9:07:00:
ae:c3:e7:a8:23:00:10:cd:b2:cd:25:40:ec:da:60:
09:5d:35:1a:70:d7:c3:00:cc:cd:f1:94:2c:69:28:
2f:f7:67:29:e3:c1:32:d5:e5:48:6c:0c:fa:9e:7e:
e5:26:d4:37:db:e4:3c:4b:95:89:67:9a:4b:dc:28:
99:d7:ec:5a:92:dc:f4:05:24:1f:d1:17:af:1e:34:
39:66:2e:1d:d9:2b:15:9e:de:b1:f6:d8:78:a0:42:
37:50:97:60:ce:fc:56:68:be:06:29:49:30:48:bf:
f0:6f:6e:ff:e5:e3:52:2f:62:da:84:8d:0c:d3:eb:
f0:9a:cf:49:af:d9:70:b7:0d:bd:bc:53:8b:3c:c6:
20:e1:57:b0:6a:dc:21:5a:49:6b:3a:01:e8:9e:e2:
4d:4a:ad:1a:20:58:65:ba:cd:99:ba:1a:29:b3:36:
4c:59:f4:57:ff:22:5f:c0:cb:88:a4:2a:16:2a:d8:
0b:d0:68:0d:1c:ff:32:52:45:11:a7:bd:79:c7:2d:
06:05:8f:5d:f4:9d:b2:cb:3a:ad:80:86:b5:58:d2:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:71:C3:35:C6:D2:5F:A8:44:C5:62:12:E9:F3:51:0F:E7:2E:7E
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/VchxwzXG0l-oRMViEunzUQ_nLn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.216.0/22
IPv6:
2a03:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:2a:88:69:f7:1a:59:9e:d3:7f:87:d9:87:c2:90:17:b4:38:
3d:b8:c9:22:85:6c:d0:9d:1c:9f:95:64:2b:ce:1d:f6:5d:72:
44:9e:71:ab:be:2e:c2:0f:5b:6f:6a:b0:ef:3d:87:5e:bc:14:
37:7e:42:6c:b6:01:e7:10:dd:a0:bd:7d:11:b3:a7:18:73:f7:
60:c9:96:0d:4e:8b:68:ad:be:0e:82:60:73:34:df:a0:30:9e:
59:74:c4:24:7e:fd:72:e1:c2:5f:75:89:44:1a:be:d6:82:66:
22:a1:eb:95:23:8f:33:33:ec:53:6b:ee:1a:03:b4:40:84:54:
d5:2d:c8:8b:fc:f8:d7:19:ab:b8:ae:ed:14:71:c7:dc:d9:b2:
4c:b6:54:82:5a:66:e6:e2:30:20:66:df:c5:8c:d6:95:9e:c7:
c6:9c:65:f8:8c:b6:82:72:07:7c:3e:90:c3:bf:82:48:eb:82:
59:ac:7c:69:39:48:91:43:7c:86:91:5c:50:bf:99:45:2e:1d:
de:fc:c2:c9:f4:43:01:c1:d4:1b:9a:69:68:a8:e7:22:7d:59:
70:f2:a2:f2:3a:fa:1f:c2:72:e3:e1:87:64:81:29:35:de:d3:
7f:dd:df:4d:1f:2d:2e:24:bd:6c:af:ac:62:28:dc:a6:1d:82:
69:17:b2:58
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEDoREnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZjAyODlhZmZhYWYwODBlMjUyNzE4ZTNmNDQ4OWRhMjlkOWZhNTVhMB4XDTIyMDEw
MTA5NTM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTVjODcxYzMzNWM2
ZDI1ZmE4NDRjNTYyMTJlOWYzNTEwZmU3MmU3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKW5thNCA/EoB2UKKP0QczFWlLrTNafFXdG+sl2WUc1YHIg5
e9arvHCY+QcArsPnqCMAEM2yzSVA7NpgCV01GnDXwwDMzfGULGkoL/dnKePBMtXl
SGwM+p5+5SbUN9vkPEuViWeaS9womdfsWpLc9AUkH9EXrx40OWYuHdkrFZ7esfbY
eKBCN1CXYM78Vmi+BilJMEi/8G9u/+XjUi9i2oSNDNPr8JrPSa/ZcLcNvbxTizzG
IOFXsGrcIVpJazoB6J7iTUqtGiBYZbrNmboaKbM2TFn0V/8iX8DLiKQqFirYC9Bo
DRz/MlJFEae9ecctBgWPXfSdsss6rYCGtVjSz+kCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRVyHHDNcbSX6hExWIS6fNRD+cufjAfBgNVHSMEGDAWgBQ/Aomv+q8IDiUn
GOP0SJ2inZ+lWjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1B3S0pyX3F2Q0E0bEp4amo5RWlkb3AyZnBWby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvOWZjY2NmLWU3YWEtNGM0NC05NTkwLTFjZjBmZWFhYTNlYS8x
L1ZjaHh3elhHMGwtb1JNVmlFdW56VVFfbkxuNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
OWZjY2NmLWU3YWEtNGM0NC05NTkwLTFjZjBmZWFhYTNlYS8xL1B3S0pyX3F2Q0E0
bEp4amo5RWlkb3AyZnBWby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArl32DANBAIAAjAHAwUAKgN4wDAN
BgkqhkiG9w0BAQsFAAOCAQEAGSqIafcaWZ7Tf4fZh8KQF7Q4PbjJIoVs0J0cn5Vk
K84d9l1yRJ5xq74uwg9bb2qw7z2HXrwUN35CbLYB5xDdoL19EbOnGHP3YMmWDU6L
aK2+DoJgczTfoDCeWXTEJH79cuHCX3WJRBq+1oJmIqHrlSOPMzPsU2vuGgO0QIRU
1S3Ii/z41xmruK7tFHHH3NmyTLZUglpm5uIwIGbfxYzWlZ7Hxpxl+Iy2gnIHfD6Q
w7+CSOuCWax8aTlIkUN8hpFcUL+ZRS4d3vzCyfRDAcHUG5ppaKjnIn1ZcPKi8jr6
H8Jy4+GHZIEpNd7Tf93fTR8tLiS9bK+sYijcph2CaReyWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:28 2024 by rpki-client on console-ams.rpki-client.org