Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/VCXdOJ2pF-tY3RgqBGn5ml4NO6s.roa
File: VCXdOJ2pF-tY3RgqBGn5ml4NO6s.roa (raw, json)
Hash identifier: mnrjgWLq2EsOe7PRuOg8HQWZk6uqB2c/f1IZs+hhos4=
Subject key identifier: 54:25:DD:38:9D:A9:17:EB:58:DD:18:2A:04:69:F9:9A:5E:0D:3B:AB
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0182B69C56E4E94986ADE138FBFD884BC847
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/VCXdOJ2pF-tY3RgqBGn5ml4NO6s.roa
Signing time: Fri 19 Aug 2022 14:57:55 +0000
ROA not before: Fri 19 Aug 2022 14:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.155.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:9c:56:e4:e9:49:86:ad:e1:38:fb:fd:88:4b:c8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Aug 19 14:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5425dd389da917eb58dd182a0469f99a5e0d3bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:13:1a:83:e1:fc:f7:41:70:a1:88:81:13:
07:84:5e:b4:55:09:92:1d:b1:6a:3a:ba:ec:ae:01:
71:1e:7b:5b:8f:35:2c:56:08:0f:ed:54:28:a0:67:
99:31:86:bd:c9:30:f8:31:54:a1:f4:30:97:79:c1:
26:c3:b9:56:8b:f7:44:59:1c:7c:6d:ef:0f:af:c1:
1d:4a:38:a5:18:94:75:4f:e3:cc:ba:33:7c:15:ef:
78:b9:9e:c2:40:99:c5:87:b7:12:bf:23:63:18:2c:
56:f6:5d:79:e7:3c:3e:7c:cc:34:14:45:f2:1d:ef:
ed:28:c7:ea:92:9e:5c:ea:3e:39:46:03:03:49:8a:
a8:77:7b:f7:01:0e:3e:0b:84:84:40:40:6c:c4:b1:
0d:db:71:a9:c7:fc:d8:cb:5f:14:70:66:48:5c:5b:
04:b4:4c:6a:6a:1d:2c:82:9b:89:7b:f8:03:4c:fc:
33:2c:85:22:a4:83:e8:b2:c1:15:ab:16:73:9e:65:
44:6d:91:ea:e6:26:dd:28:74:43:b1:1a:38:af:ce:
78:70:a7:a8:19:a3:e6:89:5b:1a:30:e1:be:56:2f:
93:de:e6:77:45:79:1f:34:04:05:95:e6:0c:f2:65:
a9:9f:9b:24:c5:d2:85:75:22:29:81:a8:1e:7a:a2:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:25:DD:38:9D:A9:17:EB:58:DD:18:2A:04:69:F9:9A:5E:0D:3B:AB
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/VCXdOJ2pF-tY3RgqBGn5ml4NO6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.53.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5f:50:07:ca:c5:24:72:07:a9:62:a3:30:c1:c0:17:b0:3a:
a9:84:33:4a:22:72:6c:a0:72:10:e6:47:7f:a2:9b:f7:99:a1:
a4:67:33:65:33:52:22:57:4d:61:c0:39:22:db:eb:96:3f:c2:
6e:da:31:c6:b9:f0:bd:a9:cc:79:7e:02:94:1f:e9:de:2d:02:
62:22:48:f3:73:86:5a:53:3f:0f:60:3e:42:d1:c2:34:b5:e1:
25:93:fc:8f:f5:2d:be:b5:47:85:4b:12:9d:47:d3:65:c5:34:
6e:02:f4:53:76:72:42:10:b3:11:a4:9f:e1:84:75:8c:47:fb:
b3:33:18:9e:fb:46:a7:9a:b5:9d:d2:8a:e5:fa:f7:10:a3:95:
1b:8a:00:ca:0f:69:81:e3:7a:c7:8b:b8:31:a7:0f:64:83:f4:
fb:18:5b:51:cc:bc:12:d0:0d:af:59:5a:ce:5d:f4:6c:1e:0e:
a3:41:32:4e:32:01:0b:bc:ef:a4:86:21:8d:08:79:bc:a7:0f:
54:c5:97:12:5e:ed:b4:b4:e1:4d:06:e3:fd:6b:e3:bc:75:72:
3a:32:af:61:09:cc:0e:57:e7:5b:02:8b:40:27:71:aa:f8:67:
e5:66:b1:e6:a7:fb:91:01:c6:19:2b:14:86:b9:94:97:8b:c3:
5a:47:51:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYK2nFbk6UmGreE4+/2IS8hHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjIwODE5MTQ1NzU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDI1ZGQzODlkYTkxN2ViNThkZDE4MmEwNDY5Zjk5YTVlMGQzYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmATGoPh/PdBcKGIgRMHhF60VQmS
HbFqOrrsrgFxHntbjzUsVggP7VQooGeZMYa9yTD4MVSh9DCXecEmw7lWi/dEWRx8
be8Pr8EdSjilGJR1T+PMujN8Fe94uZ7CQJnFh7cSvyNjGCxW9l155zw+fMw0FEXy
He/tKMfqkp5c6j45RgMDSYqod3v3AQ4+C4SEQEBsxLEN23Gpx/zYy18UcGZIXFsE
tExqah0sgpuJe/gDTPwzLIUipIPossEVqxZznmVEbZHq5ibdKHRDsRo4r854cKeo
GaPmiVsaMOG+Vi+T3uZ3RXkfNAQFleYM8mWpn5skxdKFdSIpgageeqLoKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQl3TidqRfrWN0YKgRp+ZpeDTurMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvVkNYZE9KMnBGLXRZM1JncUJHbjVtbDROTzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZs1MA0G
CSqGSIb3DQEBCwUAA4IBAQAZX1AHysUkcgepYqMwwcAXsDqphDNKInJsoHIQ5kd/
opv3maGkZzNlM1IiV01hwDki2+uWP8Ju2jHGufC9qcx5fgKUH+neLQJiIkjzc4Za
Uz8PYD5C0cI0teElk/yP9S2+tUeFSxKdR9NlxTRuAvRTdnJCELMRpJ/hhHWMR/uz
Mxie+0anmrWd0orl+vcQo5UbigDKD2mB43rHi7gxpw9kg/T7GFtRzLwS0A2vWVrO
XfRsHg6jQTJOMgELvO+khiGNCHm8pw9UxZcSXu20tOFNBuP9a+O8dXI6Mq9hCcwO
V+dbAotAJ3Gq+GflZrHmp/uRAcYZKxSGuZSXi8NaR1F0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org