Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/DrbxZQvgO146WkIWjLQT-K059oA.roa
File: DrbxZQvgO146WkIWjLQT-K059oA.roa (raw, json)
Hash identifier: yddj/0KpH4nMo30owhCzVs00QvIjlrDWjM/x1KNyoGw=
Subject key identifier: 0E:B6:F1:65:0B:E0:3B:5E:3A:5A:42:16:8C:B4:13:F8:AD:39:F6:80
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 01A896C4
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/DrbxZQvgO146WkIWjLQT-K059oA.roa
Signing time: Sat 01 Jan 2022 00:58:38 +0000
ROA not before: Sat 01 Jan 2022 00:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59852
IP address blocks: 185.253.10.0/24 maxlen: 24
2a10:b4c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27825860 (0x1a896c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Jan 1 00:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eb6f1650be03b5e3a5a42168cb413f8ad39f680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:9f:1d:5b:55:61:22:1d:5c:5d:fa:a0:7e:
56:79:c4:dc:f1:29:42:08:ce:a2:f9:e5:a9:8c:e5:
7d:f5:52:5a:9e:c7:8f:1f:f5:fe:76:81:41:b7:70:
0d:70:fb:13:78:d6:9d:bb:c4:c6:12:0f:e4:89:1f:
f6:1d:f9:69:5e:95:66:29:7a:38:84:d3:ae:ad:e1:
1b:6c:2a:02:74:f6:8a:9b:39:86:93:a1:3a:10:34:
6d:8e:20:35:c9:c2:b8:d0:62:a8:57:07:e8:3c:47:
65:bd:8a:2c:05:e9:e4:74:d6:75:85:d1:81:57:0f:
30:00:a1:e7:20:54:36:1d:81:a0:1d:e9:f7:b5:64:
68:6d:31:d4:8b:9f:c6:38:45:4c:70:e3:96:1f:77:
85:4b:80:52:47:8c:1f:da:95:9a:88:af:a1:24:82:
41:45:62:6c:33:90:db:cd:b8:39:26:22:09:3b:27:
36:ab:a6:ca:6a:2b:89:67:7b:59:25:86:56:f8:4d:
8e:15:45:8d:9a:c8:04:50:d6:6d:da:26:aa:cd:d3:
ce:6c:d6:ec:d4:72:b6:b5:2a:63:e3:dd:bb:6e:ea:
c6:65:1b:bc:22:e5:bb:69:c6:3b:a2:38:39:41:4e:
da:33:04:ac:ad:e9:fe:d9:6f:f4:76:c3:99:63:61:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B6:F1:65:0B:E0:3B:5E:3A:5A:42:16:8C:B4:13:F8:AD:39:F6:80
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/DrbxZQvgO146WkIWjLQT-K059oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.10.0/24
IPv6:
2a10:b4c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:5b:83:cc:f5:d9:20:e8:f9:ac:90:54:0b:a1:3c:84:fb:93:
33:0c:ca:d7:79:41:17:60:26:bc:9e:b9:ed:42:cc:7c:b9:f0:
76:5b:d1:13:45:85:fb:8f:5c:fc:97:33:3a:0e:7e:94:3a:6b:
e7:80:88:9c:14:3a:24:04:0d:1c:40:84:be:d8:a6:32:09:14:
45:41:b8:15:2f:6a:e8:06:9f:7f:78:f0:80:30:a4:7f:62:42:
25:8f:de:29:50:19:25:37:13:54:3a:62:ad:52:98:65:55:43:
e6:e9:32:01:01:03:31:76:f2:90:c7:31:21:92:77:25:f6:ee:
2f:2c:25:80:b3:5a:ff:62:6e:f9:b1:dd:c2:d3:d7:cd:71:b8:
67:14:f6:9b:ee:42:f3:6a:0c:cb:d0:bd:d1:72:b9:de:5e:15:
a9:9c:6a:00:69:42:64:57:8e:92:2c:01:3a:7b:3e:72:8c:ad:
97:18:a9:2c:51:fc:be:e8:a2:ae:f5:f4:4d:16:82:8c:79:99:
1f:a5:c5:8b:e1:c4:f3:97:e7:80:3b:68:e7:08:f8:51:22:89:
77:58:cc:80:a0:dd:91:f5:7f:49:ec:b1:9f:07:39:9c:5f:26:
86:22:6c:9c:9c:f4:a3:21:74:1f:68:2f:ae:e8:18:e3:42:fe:
0b:3a:97:1e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAaiWxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Mjc4ZWQ4Zjk3ODBmMjlkYWZhMjJmOWZkZjAzMzc0ZGE0OTgwZTk0MB4XDTIyMDEw
MTAwNTgzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGViNmYxNjUwYmUw
M2I1ZTNhNWE0MjE2OGNiNDEzZjhhZDM5ZjY4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANJ/nx1bVWEiHVxd+qB+VnnE3PEpQgjOovnlqYzlffVSWp7H
jx/1/naBQbdwDXD7E3jWnbvExhIP5Ikf9h35aV6VZil6OITTrq3hG2wqAnT2ips5
hpOhOhA0bY4gNcnCuNBiqFcH6DxHZb2KLAXp5HTWdYXRgVcPMACh5yBUNh2BoB3p
97VkaG0x1IufxjhFTHDjlh93hUuAUkeMH9qVmoivoSSCQUVibDOQ2824OSYiCTsn
NqumymoriWd7WSWGVvhNjhVFjZrIBFDWbdomqs3TzmzW7NRytrUqY+Pdu27qxmUb
vCLlu2nGO6I4OUFO2jMErK3p/tlv9HbDmWNhah8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQOtvFlC+A7XjpaQhaMtBP4rTn2gDAfBgNVHSMEGDAWgBSyeO2Pl4Dyna+i
L5/fAzdNpJgOlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NuanRqNWVBOHAydm9pLWYzd00zVGFTWURwUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvMWUyMzE2LTFiNWItNGJhNS05MzdkLTAyODY0YzU4NTE5Yy8x
L0RyYnhaUXZnTzE0NldrSVdqTFFULUswNTlvQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
MWUyMzE2LTFiNWItNGJhNS05MzdkLTAyODY0YzU4NTE5Yy8xL3NuanRqNWVBOHAy
dm9pLWYzd00zVGFTWURwUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALn9CjANBAIAAjAHAwUDKhC0wDAN
BgkqhkiG9w0BAQsFAAOCAQEAiVuDzPXZIOj5rJBUC6E8hPuTMwzK13lBF2AmvJ65
7ULMfLnwdlvRE0WF+49c/JczOg5+lDpr54CInBQ6JAQNHECEvtimMgkURUG4FS9q
6Aaff3jwgDCkf2JCJY/eKVAZJTcTVDpirVKYZVVD5ukyAQEDMXbykMcxIZJ3Jfbu
LywlgLNa/2Ju+bHdwtPXzXG4ZxT2m+5C82oMy9C90XK53l4VqZxqAGlCZFeOkiwB
Ons+coytlxipLFH8vuiirvX0TRaCjHmZH6XFi+HE85fngDto5wj4USKJd1jMgKDd
kfV/Seyxnwc5nF8mhiJsnJz0oyF0H2gvrugY40L+CzqXHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-fra.rpki-client.org