Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SlTzH5mr22H5HBRJvvYWU3nNlBg.roa
File: SlTzH5mr22H5HBRJvvYWU3nNlBg.roa (raw, json)
Hash identifier: VGwH1PFYuuXtCpjHM8rpP0c13KyjwqEk3brz0UZ8jy4=
Subject key identifier: 4A:54:F3:1F:99:AB:DB:61:F9:1C:14:49:BE:F6:16:53:79:CD:94:18
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16EAD0A9
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SlTzH5mr22H5HBRJvvYWU3nNlBg.roa
Signing time: Sat 01 Jan 2022 12:01:44 +0000
ROA not before: Sat 01 Jan 2022 12:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208388
IP address blocks: 37.230.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384487593 (0x16ead0a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a54f31f99abdb61f91c1449bef6165379cd9418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:3a:c5:68:1e:50:26:69:f0:b8:96:07:cd:
18:3e:df:33:22:ae:58:4f:e0:2a:47:cb:cc:d9:50:
57:ae:b1:17:86:d2:bf:64:92:e1:aa:25:5a:5a:a6:
a2:ef:8a:f7:7f:e2:f3:6a:27:de:53:14:78:c8:00:
39:ad:e0:5b:97:02:99:e7:2d:f4:43:55:fd:c6:54:
a5:26:b9:34:e8:1f:bc:5e:8c:83:58:77:3a:d0:be:
ca:c6:d0:86:fe:cf:02:50:98:ca:92:f7:fb:41:54:
f9:2b:27:59:40:b8:76:22:44:0b:64:5f:17:96:3f:
39:0b:80:9d:07:4e:94:58:68:39:8d:9f:3e:5b:02:
57:61:ec:59:a7:b7:b3:5a:92:31:1c:0e:8a:de:63:
58:e5:82:8d:0f:8e:2d:2c:0a:e6:d7:44:de:fe:ba:
0f:9c:25:70:ab:7e:b7:7c:a7:d2:ff:f2:7d:e2:c5:
2f:2b:38:e8:57:30:f6:b5:9a:e1:45:fc:ba:58:ee:
9f:65:a3:88:b7:c2:6e:05:a2:fd:13:9e:55:1b:5f:
1c:fb:65:e2:af:92:2d:f0:0e:fb:8a:ed:41:17:04:
99:07:47:f6:12:6e:9a:a4:97:74:79:2a:9e:9b:04:
d1:42:24:f8:89:e4:36:0b:e9:fe:51:21:58:ce:5c:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:F3:1F:99:AB:DB:61:F9:1C:14:49:BE:F6:16:53:79:CD:94:18
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SlTzH5mr22H5HBRJvvYWU3nNlBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:85:96:b5:1e:57:5d:a3:55:6e:06:0f:f1:36:f4:b1:27:72:
ae:55:2f:48:1f:0c:50:0b:c0:72:ee:e4:59:87:78:d2:56:7b:
d6:17:11:b8:91:d7:3e:94:c2:13:21:84:65:79:ba:40:ac:d5:
7e:6f:04:54:cb:9f:83:b3:52:53:ae:7c:9a:e1:0a:1b:08:3b:
9a:08:d2:f8:fa:ca:5f:c5:04:ea:f4:97:34:8e:a9:33:7a:7a:
3f:c1:f9:a3:ce:73:d7:38:17:fc:3d:26:c9:46:be:26:6e:ee:
9d:fc:58:5d:41:c4:05:3a:4b:76:88:89:57:3c:45:77:7d:b4:
8d:26:31:8d:1e:d6:cf:51:77:87:4b:a6:58:e4:20:ff:32:4c:
29:2c:cb:f4:8a:4e:d2:3a:fa:27:85:65:cb:c5:23:b7:f8:ef:
0a:31:24:f0:b0:02:77:ac:57:de:33:a3:f4:57:b6:f3:da:44:
d2:a2:e3:f8:7e:54:19:85:8b:6c:56:22:96:7b:d7:f4:6f:7c:
0a:0a:0b:70:df:37:b1:b6:ad:92:95:e6:8c:c0:3c:3d:45:b8:
69:16:68:02:5a:a9:ee:77:9a:32:ba:d2:56:bf:72:0b:31:10:
1d:d7:53:73:de:b7:dd:7d:27:a0:cc:72:ae:f9:0e:91:05:0f:
da:42:b8:36
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFurQqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE1NGYzMWY5OWFi
ZGI2MWY5MWMxNDQ5YmVmNjE2NTM3OWNkOTQxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANR3OsVoHlAmafC4lgfNGD7fMyKuWE/gKkfLzNlQV66xF4bS
v2SS4aolWlqmou+K93/i82on3lMUeMgAOa3gW5cCmect9ENV/cZUpSa5NOgfvF6M
g1h3OtC+ysbQhv7PAlCYypL3+0FU+SsnWUC4diJEC2RfF5Y/OQuAnQdOlFhoOY2f
PlsCV2HsWae3s1qSMRwOit5jWOWCjQ+OLSwK5tdE3v66D5wlcKt+t3yn0v/yfeLF
Lys46Fcw9rWa4UX8uljun2WjiLfCbgWi/ROeVRtfHPtl4q+SLfAO+4rtQRcEmQdH
9hJumqSXdHkqnpsE0UIk+InkNgvp/lEhWM5c4ncCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRKVPMfmavbYfkcFEm+9hZTec2UGDAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L1NsVHpINW1yMjJINUhCUkp2dllXVTNuTmxCZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmzDANBgkqhkiG9w0BAQsFAAOC
AQEAtYWWtR5XXaNVbgYP8Tb0sSdyrlUvSB8MUAvAcu7kWYd40lZ71hcRuJHXPpTC
EyGEZXm6QKzVfm8EVMufg7NSU658muEKGwg7mgjS+PrKX8UE6vSXNI6pM3p6P8H5
o85z1zgX/D0myUa+Jm7unfxYXUHEBTpLdoiJVzxFd320jSYxjR7Wz1F3h0umWOQg
/zJMKSzL9IpO0jr6J4Vly8Ujt/jvCjEk8LACd6xX3jOj9Fe289pE0qLj+H5UGYWL
bFYilnvX9G98CgoLcN83sbatkpXmjMA8PUW4aRZoAlqp7neaMrrSVr9yCzEQHddT
c9633X0noMxyrvkOkQUP2kK4Ng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org