Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/ry3lM9W7yuS2ugRB4xkrfw8R6XU.roa
File: ry3lM9W7yuS2ugRB4xkrfw8R6XU.roa (raw, json)
Hash identifier: kIQOVrsp+T+GJ0pXfEyjJ4wASBQdvKN0JBNZ00IjhYc=
Subject key identifier: AF:2D:E5:33:D5:BB:CA:E4:B6:BA:04:41:E3:19:2B:7F:0F:11:E9:75
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 34E0546A
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/ry3lM9W7yuS2ugRB4xkrfw8R6XU.roa
Signing time: Sat 01 Jan 2022 13:56:27 +0000
ROA not before: Sat 01 Jan 2022 13:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212638
IP address blocks: 185.214.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887116906 (0x34e0546a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Jan 1 13:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af2de533d5bbcae4b6ba0441e3192b7f0f11e975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:a3:ee:59:76:54:04:dd:39:78:45:f7:db:
8e:2c:60:6d:5b:71:de:e1:3f:d6:36:9e:61:db:cc:
58:23:d2:f1:1c:0c:d4:28:32:d8:6f:bd:86:3c:07:
54:75:4c:16:2c:72:4d:03:9d:06:06:86:9c:3e:4b:
26:2e:f0:b8:56:94:ca:06:94:24:d3:0a:db:ce:d4:
f0:bb:65:95:4a:fb:74:8c:70:f4:1f:5f:b9:2b:e3:
51:2a:fc:8b:a0:b3:99:cc:62:34:36:7d:13:70:8a:
a2:ea:af:b5:55:99:b3:82:f6:ab:18:9e:79:a2:44:
db:0b:09:2e:4c:42:35:c3:38:8f:3b:48:0b:f6:a3:
e9:6b:dc:9a:12:7d:b9:5d:4c:d8:2a:d8:88:fd:7c:
1a:88:97:9d:e9:e6:e3:b1:6a:8b:c5:9c:b3:22:18:
5f:ce:07:1f:8f:6c:ee:50:98:50:b4:ee:14:bc:84:
01:fb:c5:5d:fd:2c:ba:25:2e:52:2e:ab:df:f6:ed:
a6:72:9e:2c:a1:57:f5:15:5a:ab:c4:e5:81:8d:6b:
ab:90:12:30:c1:7c:34:92:c4:e7:72:84:6b:f7:80:
74:da:b0:06:cd:94:32:06:57:d9:dc:3c:d8:49:ce:
e3:7a:00:bd:9d:1c:24:9c:4a:53:16:30:e8:f3:d0:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2D:E5:33:D5:BB:CA:E4:B6:BA:04:41:E3:19:2B:7F:0F:11:E9:75
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/ry3lM9W7yuS2ugRB4xkrfw8R6XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:63:25:5d:08:83:05:2b:39:4a:86:8a:f6:6d:70:37:14:33:
9a:cb:c7:43:0b:e2:69:67:16:71:38:89:ac:ea:e9:a0:c4:1a:
79:94:66:0f:fe:4d:51:c4:e1:c8:d8:3c:d3:f5:bc:06:fc:b7:
33:9b:58:4d:73:58:5a:59:53:fb:b3:3f:d6:9d:47:32:d0:b8:
c4:dc:c2:73:01:d3:29:b9:bc:67:ca:48:17:32:70:e5:74:5f:
a4:9c:0a:fb:c9:cd:4a:2e:a2:1b:f8:a1:3d:54:ce:0c:8c:62:
14:06:36:c3:af:94:66:01:23:f8:68:dc:b4:30:25:07:fb:7d:
7a:b2:6e:09:56:25:9c:4f:b2:db:cf:9e:fd:9a:a2:b2:84:84:
81:0c:e5:11:bf:de:ec:ef:a6:09:f8:d2:4c:f6:02:5f:bc:b0:
ee:bf:2a:87:ea:44:99:c8:3b:cc:f7:a9:0f:5c:42:b7:a3:1f:
09:1d:ff:96:a4:39:18:66:4b:9d:33:4c:0e:0a:a5:89:9d:48:
f9:45:95:2a:55:e6:6f:40:3f:47:06:02:25:1d:56:ff:ca:46:
02:e5:23:d2:79:3b:fa:27:15:66:50:8c:29:e3:ae:d7:5d:e8:
de:f8:3d:1f:0b:8e:b7:f8:3b:06:87:7e:0d:06:fd:c0:27:ba:
9b:50:69:bf
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENOBUajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NTdhMmM3NGFmNWE0NGQ5YWFlNDdhMGI4OTQyNWZhNGY3ZmM3YzE5MB4XDTIyMDEw
MTEzNTYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWYyZGU1MzNkNWJi
Y2FlNGI2YmEwNDQxZTMxOTJiN2YwZjExZTk3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWUo+5ZdlQE3Tl4RffbjixgbVtx3uE/1jaeYdvMWCPS8RwM
1Cgy2G+9hjwHVHVMFixyTQOdBgaGnD5LJi7wuFaUygaUJNMK287U8LtllUr7dIxw
9B9fuSvjUSr8i6CzmcxiNDZ9E3CKouqvtVWZs4L2qxieeaJE2wsJLkxCNcM4jztI
C/aj6WvcmhJ9uV1M2CrYiP18GoiXnenm47Fqi8WcsyIYX84HH49s7lCYULTuFLyE
AfvFXf0suiUuUi6r3/btpnKeLKFX9RVaq8TlgY1rq5ASMMF8NJLE53KEa/eAdNqw
Bs2UMgZX2dw82EnO43oAvZ0cJJxKUxYw6PPQTBsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSvLeUz1bvK5La6BEHjGSt/DxHpdTAfBgNVHSMEGDAWgBSFeix0r1pE2ark
eguJQl+k9/x8GTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hYb3NkSzlhUk5tcTVIb0xpVUpmcFBmOGZCay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvMGE5YTMzLTk5ZGMtNGI5Mi04Y2VkLTgzNmFjOTdjMDFiYi8x
L3J5M2xNOVc3eXVTMnVnUkI0eGtyZnc4UjZYVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
MGE5YTMzLTk5ZGMtNGI5Mi04Y2VkLTgzNmFjOTdjMDFiYi8xL2hYb3NkSzlhUk5t
cTVIb0xpVUpmcFBmOGZCay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnWKzANBgkqhkiG9w0BAQsFAAOC
AQEAPWMlXQiDBSs5SoaK9m1wNxQzmsvHQwviaWcWcTiJrOrpoMQaeZRmD/5NUcTh
yNg80/W8Bvy3M5tYTXNYWllT+7M/1p1HMtC4xNzCcwHTKbm8Z8pIFzJw5XRfpJwK
+8nNSi6iG/ihPVTODIxiFAY2w6+UZgEj+GjctDAlB/t9erJuCVYlnE+y28+e/Zqi
soSEgQzlEb/e7O+mCfjSTPYCX7yw7r8qh+pEmcg7zPepD1xCt6MfCR3/lqQ5GGZL
nTNMDgqliZ1I+UWVKlXmb0A/RwYCJR1W/8pGAuUj0nk7+icVZlCMKeOu113o3vg9
HwuOt/g7Bod+DQb9wCe6m1Bpvw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:14 2024 by rpki-client on console-ams.rpki-client.org