Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/No3ry5e_15LITCJa7NaiMy3d1DE.roa
File: No3ry5e_15LITCJa7NaiMy3d1DE.roa (raw, json)
Hash identifier: S8iGpQs21RLNMSAGPKsorrGJa7zVwfkBLQ3NREwCEgc=
Subject key identifier: 36:8D:EB:CB:97:BF:D7:92:C8:4C:22:5A:EC:D6:A2:33:2D:DD:D4:31
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 01833193E694EE7B63B0F3B97BAF00B3444C
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/No3ry5e_15LITCJa7NaiMy3d1DE.roa
Signing time: Mon 12 Sep 2022 12:01:59 +0000
ROA not before: Mon 12 Sep 2022 12:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43065
IP address blocks: 185.140.116.0/22 maxlen: 22
2a07:1c80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:93:e6:94:ee:7b:63:b0:f3:b9:7b:af:00:b3:44:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Sep 12 12:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=368debcb97bfd792c84c225aecd6a2332dddd431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dc:93:f2:70:b7:1e:87:82:34:0c:42:ee:ff:
ee:89:3c:8a:a7:3c:cc:6c:df:39:a9:db:e6:8f:e1:
5c:2b:a3:8a:e1:a3:95:d1:65:d8:28:7b:0a:a3:38:
4f:cc:00:fd:40:97:0a:af:1d:7e:38:22:bc:aa:ae:
db:f0:f3:80:54:24:ed:7d:37:7d:99:dd:3d:f9:62:
9a:23:5a:04:27:f3:af:08:95:14:df:24:a3:7a:1f:
46:35:03:1a:a2:4d:92:f3:fc:b0:e6:78:38:a1:00:
51:5d:50:85:8a:e8:c7:47:dd:fb:5e:f8:7f:e1:40:
2c:25:24:81:91:5e:2b:46:76:35:73:68:45:ee:93:
7f:fb:fd:6f:15:66:5f:16:77:54:1c:ea:83:d3:a9:
eb:6f:42:1c:0a:4a:d3:fd:2c:a6:e9:e0:48:df:3c:
a9:94:f9:b9:b3:79:83:48:6f:b1:1e:67:9f:27:d8:
97:ab:45:c2:c6:e3:f8:76:8a:98:73:c3:1d:e3:f6:
31:5b:83:a8:c6:aa:69:5b:29:c7:45:e4:c5:b2:2c:
3a:f6:09:da:b6:d1:b9:ac:04:1a:39:ad:e8:05:92:
2a:72:c5:ae:32:1c:bf:f8:43:99:41:5c:3a:9f:3f:
22:a2:94:a3:70:c1:c7:a6:c6:de:b8:dd:1d:ed:eb:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:EB:CB:97:BF:D7:92:C8:4C:22:5A:EC:D6:A2:33:2D:DD:D4:31
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/No3ry5e_15LITCJa7NaiMy3d1DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.116.0/22
IPv6:
2a07:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:60:eb:b9:eb:6d:18:57:15:60:f1:98:f1:be:3e:4c:7f:8e:
cf:39:42:83:bb:1f:76:1f:7e:35:aa:ed:4d:7b:cf:ea:5c:87:
a0:b3:d4:73:ac:76:70:8f:9e:76:12:45:7a:f3:fc:5a:23:a2:
09:38:ba:34:3b:5f:25:79:cd:e4:d7:fa:7f:d8:40:c7:07:ce:
a5:6e:b1:23:b9:95:97:03:09:d6:05:df:53:f2:a9:79:f3:64:
59:ed:04:15:16:8b:fa:1e:4a:4a:bd:a1:77:1c:cc:19:fe:f1:
94:87:37:32:9a:03:cc:6a:1d:24:05:84:0d:3d:c7:db:a8:bb:
1e:8c:66:eb:15:ea:43:b1:e8:15:a0:fd:c6:e2:20:4e:a7:f5:
d1:35:6e:e8:4c:1f:76:ba:1d:99:ab:3b:47:cf:58:d6:c4:56:
0f:7d:3b:95:7b:9d:1d:91:fd:e0:75:1a:14:ef:a7:64:b1:84:
c2:3e:22:33:54:98:de:26:ea:a5:0d:df:6c:6a:fe:e9:51:4e:
41:c5:8d:80:01:be:2d:1d:c4:39:98:20:7e:3a:63:90:6d:c0:
12:78:aa:3d:bc:29:4f:da:63:cc:66:6e:a5:fd:d7:67:94:30:
76:c5:91:73:bc:0b:4b:14:5a:59:4c:bd:d6:11:b8:1c:44:4c:
1d:82:46:2b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYMxk+aU7ntjsPO5e68As0RMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWI0YzA5NDViNzM4ZWRkYTA1ODNhMjc0YjYzYzFiODY3
M2E2MzAwHhcNMjIwOTEyMTIwMTU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjhkZWJjYjk3YmZkNzkyYzg0YzIyNWFlY2Q2YTIzMzJkZGRkNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNyT8nC3HoeCNAxC7v/uiTyKpzzM
bN85qdvmj+FcK6OK4aOV0WXYKHsKozhPzAD9QJcKrx1+OCK8qq7b8POAVCTtfTd9
md09+WKaI1oEJ/OvCJUU3ySjeh9GNQMaok2S8/yw5ng4oQBRXVCFiujHR937Xvh/
4UAsJSSBkV4rRnY1c2hF7pN/+/1vFWZfFndUHOqD06nrb0IcCkrT/Sym6eBI3zyp
lPm5s3mDSG+xHmefJ9iXq0XCxuP4doqYc8Md4/YxW4OoxqppWynHReTFsiw69gna
ttG5rAQaOa3oBZIqcsWuMhy/+EOZQVw6nz8iopSjcMHHpsbeuN0d7euFDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDaN68uXv9eSyEwiWuzWojMt3dQxMB8GA1UdIwQY
MBaAFICrTAlFtzjt2gWDonS2PBuGc6YwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEt
ZjVmZGEwZWEzMDBkLzEvTm8zcnk1ZV8xNUxJVENKYTdOYWlNeTNkMURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEtZjVmZGEwZWEzMDBk
LzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYx0MA0E
AgACMAcDBQMqBxyAMA0GCSqGSIb3DQEBCwUAA4IBAQBMYOu5620YVxVg8Zjxvj5M
f47POUKDux92H341qu1Ne8/qXIegs9RzrHZwj552EkV68/xaI6IJOLo0O18lec3k
1/p/2EDHB86lbrEjuZWXAwnWBd9T8ql582RZ7QQVFov6HkpKvaF3HMwZ/vGUhzcy
mgPMah0kBYQNPcfbqLsejGbrFepDsegVoP3G4iBOp/XRNW7oTB92uh2ZqztHz1jW
xFYPfTuVe50dkf3gdRoU76dksYTCPiIzVJjeJuqlDd9sav7pUU5BxY2AAb4tHcQ5
mCB+OmOQbcASeKo9vClP2mPMZm6l/ddnlDB2xZFzvAtLFFpZTL3WEbgcREwdgkYr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:08 2024 by rpki-client on console-ams.rpki-client.org