Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/COqhbVsd9vSfca8hJZhK43wNEm4.roa
File: COqhbVsd9vSfca8hJZhK43wNEm4.roa (raw, json)
Hash identifier: JQ2FNOK9a90ywa+n242pve+IvchtcJmAPGII+eA1QGY=
Subject key identifier: 08:EA:A1:6D:5B:1D:F6:F4:9F:71:AF:21:25:98:4A:E3:7C:0D:12:6E
Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial: 085A92A9
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/COqhbVsd9vSfca8hJZhK43wNEm4.roa
Signing time: Sat 01 Jan 2022 14:04:05 +0000
ROA not before: Sat 01 Jan 2022 14:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206602
IP address blocks: 185.181.238.0/24 maxlen: 24
185.181.236.0/22 maxlen: 22
185.181.239.0/24 maxlen: 24
185.181.236.0/24 maxlen: 24
185.181.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140153513 (0x85a92a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Validity
Not Before: Jan 1 14:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08eaa16d5b1df6f49f71af2125984ae37c0d126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:9a:d1:d2:11:36:9a:37:50:e7:7a:37:4b:
15:8b:f0:a7:d2:d6:f4:0d:4f:90:e3:da:3a:1a:29:
f0:98:0a:58:ba:eb:43:ec:ed:54:df:ca:d0:86:ab:
e8:f2:67:c6:9c:17:4b:cd:a0:85:72:c9:4b:b9:89:
c8:86:f0:73:0a:93:ef:d4:e5:fb:0c:16:c8:ec:df:
7d:23:24:6c:39:08:69:a1:69:63:5e:1f:8f:82:4c:
f9:36:90:a2:b3:4d:16:52:a4:d7:1c:03:48:85:68:
2d:e8:cc:1d:40:ea:96:e3:c9:47:19:bf:54:57:99:
0e:41:56:0f:da:93:89:5d:28:a0:0f:9e:83:ce:f3:
63:25:05:25:fc:db:d6:06:20:41:dc:c4:e7:44:ac:
ff:a1:38:cc:24:8a:0b:64:3b:32:30:09:da:c1:9f:
33:e7:53:d4:bc:98:b9:ea:2a:6d:03:5e:d6:ee:76:
03:8f:ad:cb:58:36:15:d8:de:fb:2d:2b:77:95:8c:
3f:ea:6e:26:f3:93:df:34:a5:85:86:6e:1c:6f:eb:
de:f5:3c:63:14:03:2c:03:4e:2d:bc:17:70:ff:de:
84:83:29:1e:3f:32:04:5a:99:05:ce:c1:cf:76:1e:
45:0e:d4:ed:09:44:b1:02:ae:58:ef:0e:16:49:67:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:A1:6D:5B:1D:F6:F4:9F:71:AF:21:25:98:4A:E3:7C:0D:12:6E
X509v3 Authority Key Identifier:
keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/COqhbVsd9vSfca8hJZhK43wNEm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:be:4d:a3:81:cf:ac:be:39:24:f7:e6:42:fd:b1:3b:6a:23:
48:4b:1d:2e:d9:d2:d6:33:a2:19:e9:72:85:d0:97:00:a0:6a:
4f:60:c5:71:d5:28:4e:aa:9a:1d:e6:6c:67:cb:90:06:a8:be:
66:32:06:99:96:19:74:84:2f:c6:88:40:3d:90:28:65:e9:b8:
69:18:1d:ae:d3:22:92:17:42:61:c2:c3:a3:3c:4a:f3:1e:5f:
9a:48:74:8b:b8:e6:b9:16:bd:be:f4:e1:44:86:f3:3a:c7:3d:
ef:bc:18:be:e6:89:35:69:0b:2c:e6:15:87:14:13:f6:05:12:
87:b3:89:80:59:a3:65:d8:7d:2b:09:d9:94:c0:4e:ae:d1:bd:
d8:bb:aa:17:5f:e9:44:4e:5b:81:68:e0:56:59:67:5a:55:a1:
ec:c2:fd:93:90:6e:ac:3f:4c:0a:01:bd:3d:2d:9e:89:c8:ad:
d7:0d:3e:99:f7:c0:f7:88:e1:1e:4a:ec:9c:12:03:d6:ff:f6:
b4:2d:2c:e9:39:53:5e:5c:29:43:ea:20:ba:e3:7a:e5:7f:fc:
9f:86:56:18:99:8e:fc:95:43:2e:c6:8b:fb:6e:4a:b8:18:39:
a3:2e:e4:b1:37:d0:01:ab:a2:f4:e6:4d:44:5a:05:94:b9:15:
89:6d:8a:cd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECFqSqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mzg1MjAxYTMzYjUyN2M2NDRhYWQ1YWVjZDM3ODJjNmE4YzJmNTFmMB4XDTIyMDEw
MTE0MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhlYWExNmQ1YjFk
ZjZmNDlmNzFhZjIxMjU5ODRhZTM3YzBkMTI2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8BmtHSETaaN1DnejdLFYvwp9LW9A1PkOPaOhop8JgKWLrr
Q+ztVN/K0Iar6PJnxpwXS82ghXLJS7mJyIbwcwqT79Tl+wwWyOzffSMkbDkIaaFp
Y14fj4JM+TaQorNNFlKk1xwDSIVoLejMHUDqluPJRxm/VFeZDkFWD9qTiV0ooA+e
g87zYyUFJfzb1gYgQdzE50Ss/6E4zCSKC2Q7MjAJ2sGfM+dT1LyYueoqbQNe1u52
A4+ty1g2Fdje+y0rd5WMP+puJvOT3zSlhYZuHG/r3vU8YxQDLANOLbwXcP/ehIMp
Hj8yBFqZBc7Bz3YeRQ7U7QlEsQKuWO8OFklnnSkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQI6qFtWx329J9xryElmErjfA0SbjAfBgNVHSMEGDAWgBTDhSAaM7UnxkSq
1a7NN4LGqML1HzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3c0VWdHak8xSjhaRXF0V3V6VGVDeHFqQzlSOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvNmQ2NjNhLTQ1MzgtNGNiZi1hZDFmLTg1NzU4MGZjNjE2Ny8x
L0NPcWhiVnNkOXZTZmNhOGhKWmhLNDN3TkVtNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
NmQ2NjNhLTQ1MzgtNGNiZi1hZDFmLTg1NzU4MGZjNjE2Ny8xL3c0VWdHak8xSjha
RXF0V3V6VGVDeHFqQzlSOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm17DANBgkqhkiG9w0BAQsFAAOC
AQEAO75No4HPrL45JPfmQv2xO2ojSEsdLtnS1jOiGelyhdCXAKBqT2DFcdUoTqqa
HeZsZ8uQBqi+ZjIGmZYZdIQvxohAPZAoZem4aRgdrtMikhdCYcLDozxK8x5fmkh0
i7jmuRa9vvThRIbzOsc977wYvuaJNWkLLOYVhxQT9gUSh7OJgFmjZdh9KwnZlMBO
rtG92LuqF1/pRE5bgWjgVllnWlWh7ML9k5BurD9MCgG9PS2eicit1w0+mffA94jh
HkrsnBID1v/2tC0s6TlTXlwpQ+oguuN65X/8n4ZWGJmO/JVDLsaL+25KuBg5oy7k
sTfQAaui9OZNRFoFlLkViW2KzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:46 2024 by rpki-client on console-fra.rpki-client.org