Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/81URsTxJfn_At3_I9HgL3aEIoKY.roa
File: 81URsTxJfn_At3_I9HgL3aEIoKY.roa (raw, json)
Hash identifier: OtodWHEHA+hWPmCDuAvzDjZwsbOdkNM4ZctGOh5H8Rg=
Subject key identifier: F3:55:11:B1:3C:49:7E:7F:C0:B7:7F:C8:F4:78:0B:DD:A1:08:A0:A6
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 0CFF782C
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/81URsTxJfn_At3_I9HgL3aEIoKY.roa
Signing time: Sat 01 Jan 2022 02:57:19 +0000
ROA not before: Sat 01 Jan 2022 02:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47132
IP address blocks: 185.236.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218069036 (0xcff782c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Jan 1 02:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f35511b13c497e7fc0b77fc8f4780bdda108a0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:69:cc:46:9b:6c:e2:85:03:90:66:ea:93:
89:da:98:ff:0d:01:62:61:37:13:28:d5:81:84:d4:
68:44:10:14:e1:8e:33:5a:dc:4c:91:e6:a7:c3:15:
e2:f7:d0:38:b1:d3:8f:aa:47:10:bb:2c:7d:1a:32:
f8:c0:38:60:f5:e3:d2:e9:82:03:70:de:ca:72:53:
23:9f:e7:ed:60:42:b4:da:68:3f:ff:ae:2f:36:26:
1a:93:aa:5f:83:53:e0:f6:14:36:49:2d:b5:a8:d7:
c4:26:ff:13:6a:bd:1e:27:84:db:a8:63:d3:22:da:
27:e2:fe:fa:99:87:e3:b9:ab:ab:50:b1:01:68:e8:
78:4d:14:7d:4c:80:06:69:32:2b:d5:cf:8e:15:dc:
92:2d:91:35:96:c1:ed:58:d3:fd:c5:2f:d3:fe:63:
7c:f3:2c:f8:2d:0e:d6:31:06:eb:91:86:22:10:4d:
ba:2f:4a:3a:4f:b9:ba:cf:56:42:d9:1e:58:ba:23:
b6:83:5a:16:17:a0:6c:07:b8:1c:aa:30:32:60:6a:
ea:5c:be:62:f5:60:3b:d9:68:61:80:75:ed:5c:22:
b8:69:3b:49:5f:82:9b:e4:59:80:68:8a:d4:f0:e5:
5f:0f:54:39:4c:31:a2:3f:c1:e5:5b:a4:0b:aa:3d:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:11:B1:3C:49:7E:7F:C0:B7:7F:C8:F4:78:0B:DD:A1:08:A0:A6
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/81URsTxJfn_At3_I9HgL3aEIoKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b3:b1:59:f5:4c:ff:bc:f3:50:48:7d:0b:45:d8:85:c3:b0:
ee:c9:ab:22:3a:50:0d:14:f5:f5:08:1c:7e:27:9a:31:16:d5:
71:80:66:53:b5:f2:9f:71:01:89:a2:6a:b6:f3:3e:98:2e:b3:
4a:7c:ba:d0:a3:07:6d:70:80:48:92:4c:3a:2b:6c:3c:42:72:
f5:98:14:ca:af:6e:3b:50:16:a1:1f:07:17:c4:3e:b8:cf:c3:
d4:6e:91:78:f8:00:56:12:a0:7c:ef:8b:4e:93:56:1a:c2:58:
36:78:19:73:c0:26:7b:06:df:61:2b:a9:3c:2c:67:78:59:85:
d5:1e:f4:68:84:46:97:ea:d4:e5:65:4e:64:8f:a7:23:2b:c2:
ba:85:62:7d:c7:96:95:65:32:f7:b2:4e:4b:9a:e5:d3:19:fa:
39:79:42:06:0a:58:4e:95:ed:11:8a:d1:b6:26:f5:6b:51:35:
55:f5:18:7e:a9:89:c8:74:32:02:e2:49:93:b3:8b:45:b0:25:
d6:5e:91:d4:da:72:16:1c:c4:2d:bc:d2:b2:a1:8c:33:5f:0f:
43:b0:9d:0c:ad:9f:1a:1b:c5:a7:54:2d:b2:a9:da:7e:58:19:
4c:aa:bb:1f:fd:a5:dd:8c:8d:73:4b:ad:a5:8b:98:49:83:ac:
89:fa:9e:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDP94LDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YzQ2NGJhOWQyNjM4NWY1NGRmNjI1NGFjMjQ4OTI2ZDM3MDQ0NWIwMB4XDTIyMDEw
MTAyNTcxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjM1NTExYjEzYzQ5
N2U3ZmMwYjc3ZmM4ZjQ3ODBiZGRhMTA4YTBhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM4/acxGm2zihQOQZuqTidqY/w0BYmE3EyjVgYTUaEQQFOGO
M1rcTJHmp8MV4vfQOLHTj6pHELssfRoy+MA4YPXj0umCA3DeynJTI5/n7WBCtNpo
P/+uLzYmGpOqX4NT4PYUNkkttajXxCb/E2q9HieE26hj0yLaJ+L++pmH47mrq1Cx
AWjoeE0UfUyABmkyK9XPjhXcki2RNZbB7VjT/cUv0/5jfPMs+C0O1jEG65GGIhBN
ui9KOk+5us9WQtkeWLojtoNaFhegbAe4HKowMmBq6ly+YvVgO9loYYB17VwiuGk7
SV+Cm+RZgGiK1PDlXw9UOUwxoj/B5VukC6o9i/sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTzVRGxPEl+f8C3f8j0eAvdoQigpjAfBgNVHSMEGDAWgBS8Rkup0mOF9U32
JUrCSJJtNwRFsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZFWkxxZEpqaGZWTjlpVkt3a2lTYlRjRVJiQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvNTAxZjJiLWZkMWYtNDVlYS1iNDk0LWQ3M2RjNGI0MWNlMS8x
LzgxVVJzVHhKZm5fQXQzX0k5SGdMM2FFSW9LWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
NTAxZjJiLWZkMWYtNDVlYS1iNDk0LWQ3M2RjNGI0MWNlMS8xL3ZFWkxxZEpqaGZW
TjlpVkt3a2lTYlRjRVJiQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnspzANBgkqhkiG9w0BAQsFAAOC
AQEAQ7OxWfVM/7zzUEh9C0XYhcOw7smrIjpQDRT19QgcfieaMRbVcYBmU7Xyn3EB
iaJqtvM+mC6zSny60KMHbXCASJJMOitsPEJy9ZgUyq9uO1AWoR8HF8Q+uM/D1G6R
ePgAVhKgfO+LTpNWGsJYNngZc8AmewbfYSupPCxneFmF1R70aIRGl+rU5WVOZI+n
IyvCuoVifceWlWUy97JOS5rl0xn6OXlCBgpYTpXtEYrRtib1a1E1VfUYfqmJyHQy
AuJJk7OLRbAl1l6R1NpyFhzELbzSsqGMM18PQ7CdDK2fGhvFp1QtsqnaflgZTKq7
H/2l3YyNc0utpYuYSYOsifqeAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:16 2024 by rpki-client on console-ams.rpki-client.org