Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/Ef4KpNl5IMOfpTCuU8xq6BkGgvo.roa
File: Ef4KpNl5IMOfpTCuU8xq6BkGgvo.roa (raw, json)
Hash identifier: H3YAaa+85QXaa4Ti6a0Yl9raVGJ3JKzosNbmf6RGrNg=
Subject key identifier: 11:FE:0A:A4:D9:79:20:C3:9F:A5:30:AE:53:CC:6A:E8:19:06:82:FA
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0849BB9C
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/Ef4KpNl5IMOfpTCuU8xq6BkGgvo.roa
Signing time: Sat 01 Jan 2022 16:04:05 +0000
ROA not before: Sat 01 Jan 2022 16:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 185.103.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139049884 (0x849bb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jan 1 16:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11fe0aa4d97920c39fa530ae53cc6ae8190682fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:ea:c5:d4:37:8b:a0:7c:b4:34:82:b7:c8:
ad:ce:a5:8d:d3:79:9a:a2:a2:17:75:43:d4:56:c4:
4b:66:36:59:e8:ab:5c:6a:c4:b1:52:2c:30:59:9e:
5b:1c:92:67:58:61:3f:39:24:b3:02:0e:e8:65:35:
61:c2:91:01:a8:6d:ee:eb:80:d9:f9:97:e6:67:04:
90:3f:5d:45:47:71:0a:d2:37:e5:0e:52:70:52:92:
fa:f1:f4:7d:0b:21:9a:f0:b2:28:20:f0:a1:96:2b:
7a:cb:d8:25:b5:43:2c:6c:4a:e4:64:8a:85:df:63:
aa:63:63:3d:24:f2:82:c6:25:c2:b6:08:a4:43:f8:
bd:37:f2:7b:2f:79:9b:8c:07:90:29:10:de:79:58:
58:e9:78:f3:02:a1:9e:61:36:18:91:72:8a:be:98:
e5:a8:20:e5:53:3a:56:e0:b0:b5:6c:c2:84:57:07:
23:e1:04:21:ef:50:30:bb:d2:73:da:74:52:c3:58:
d4:60:ef:66:3e:46:d8:8e:53:cd:b2:21:f1:00:73:
64:0d:71:b7:be:6e:f1:85:fd:fc:0f:63:74:c4:c6:
fd:b4:ba:f1:86:89:50:e5:0f:34:ca:78:25:ba:c2:
0b:50:ad:ee:a4:2c:8d:81:c5:28:ad:23:c0:7d:b2:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:0A:A4:D9:79:20:C3:9F:A5:30:AE:53:CC:6A:E8:19:06:82:FA
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/Ef4KpNl5IMOfpTCuU8xq6BkGgvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:37:58:c7:03:1c:6a:fb:6b:9b:1c:24:cc:cb:6c:8f:4a:95:
2e:03:b6:62:a3:3d:e9:1e:3b:b9:61:bc:b4:d7:83:49:31:fc:
87:fe:dc:ee:ca:f0:c5:8d:f3:ab:02:a5:b5:af:88:b3:c6:01:
4f:f4:da:4e:4d:e2:21:57:7c:55:9f:eb:e3:dd:50:67:e1:97:
92:f1:82:e7:30:fb:f8:8f:ef:61:9b:2c:09:48:18:59:4c:c9:
74:be:fb:13:7e:6f:17:12:59:c5:e7:3c:e7:20:6e:6a:77:2d:
38:76:53:5c:ea:e8:19:0d:e9:45:a8:fd:0f:a4:c1:a9:40:ca:
bc:c2:0e:33:19:a1:d0:de:d1:8e:d6:ee:07:7b:f1:bd:6d:ec:
ff:36:2b:4b:73:06:81:af:a2:1a:96:30:9c:5f:be:d4:62:22:
2c:d2:ea:8f:e0:a9:76:77:89:f6:f6:9c:ce:83:13:36:ea:73:
a3:7b:ee:ed:27:c0:07:70:8f:49:ea:8b:bc:5f:13:8b:12:52:
57:81:ce:cf:ae:bf:78:e5:1c:78:6c:87:66:1f:34:ee:ed:f4:
55:64:18:b1:96:ae:a4:62:5d:49:36:6d:54:9e:c0:21:ba:72:
df:3e:3f:dc:a9:49:78:fe:2e:84:e7:4e:9d:03:95:c8:b6:f9:
6a:ef:e1:ef
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECEm7nDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZmQ1MjRhMDVkNDc3YjgyZmJjYTkzZTdhNTA0YWEzMWEzYWQ2ODYzMB4XDTIyMDEw
MTE2MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFmZTBhYTRkOTc5
MjBjMzlmYTUzMGFlNTNjYzZhZTgxOTA2ODJmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANQZ6sXUN4ugfLQ0grfIrc6ljdN5mqKiF3VD1FbES2Y2Weir
XGrEsVIsMFmeWxySZ1hhPzkkswIO6GU1YcKRAaht7uuA2fmX5mcEkD9dRUdxCtI3
5Q5ScFKS+vH0fQshmvCyKCDwoZYresvYJbVDLGxK5GSKhd9jqmNjPSTygsYlwrYI
pEP4vTfyey95m4wHkCkQ3nlYWOl48wKhnmE2GJFyir6Y5agg5VM6VuCwtWzChFcH
I+EEIe9QMLvSc9p0UsNY1GDvZj5G2I5TzbIh8QBzZA1xt75u8YX9/A9jdMTG/bS6
8YaJUOUPNMp4JbrCC1Ct7qQsjYHFKK0jwH2ylrECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQR/gqk2Xkgw5+lMK5TzGroGQaC+jAfBgNVHSMEGDAWgBTf1SSgXUd7gvvK
k+elBKoxo61oYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzM5VWtvRjFIZTRMN3lwUG5wUVNxTWFPdGFHTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvMjBjMTg3LTAwZmQtNDU5ZS1hYWU0LTQ2N2Y0ZjdmNWRlZC8x
L0VmNEtwTmw1SU1PZnBUQ3VVOHhxNkJrR2d2by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
MjBjMTg3LTAwZmQtNDU5ZS1hYWU0LTQ2N2Y0ZjdmNWRlZC8xLzM5VWtvRjFIZTRM
N3lwUG5wUVNxTWFPdGFHTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlnxzANBgkqhkiG9w0BAQsFAAOC
AQEAtDdYxwMcavtrmxwkzMtsj0qVLgO2YqM96R47uWG8tNeDSTH8h/7c7srwxY3z
qwKlta+Is8YBT/TaTk3iIVd8VZ/r491QZ+GXkvGC5zD7+I/vYZssCUgYWUzJdL77
E35vFxJZxec85yBuanctOHZTXOroGQ3pRaj9D6TBqUDKvMIOMxmh0N7RjtbuB3vx
vW3s/zYrS3MGga+iGpYwnF++1GIiLNLqj+CpdneJ9vaczoMTNupzo3vu7SfAB3CP
SeqLvF8TixJSV4HOz66/eOUceGyHZh807u30VWQYsZaupGJdSTZtVJ7AIbpy3z4/
3KlJeP4uhOdOnQOVyLb5au/h7w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org