Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/XddDQC2PK9KpK-E8WnEvLj_Aw4w.roa
File: XddDQC2PK9KpK-E8WnEvLj_Aw4w.roa (raw, json)
Hash identifier: bDslqmFMFeHPwNMGpd0Aurvo/iVnH5ujeGsNERNrtQ4=
Subject key identifier: 5D:D7:43:40:2D:8F:2B:D2:A9:2B:E1:3C:5A:71:2F:2E:3F:C0:C3:8C
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 01C1B2
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/XddDQC2PK9KpK-E8WnEvLj_Aw4w.roa
Signing time: Mon 13 Jun 2022 09:02:26 +0000
ROA not before: Mon 13 Jun 2022 09:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.234.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115122 (0x1c1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jun 13 09:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dd743402d8f2bd2a92be13c5a712f2e3fc0c38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1b:81:3e:a3:3d:0f:c6:c5:0a:99:1f:f9:62:
d5:11:cb:1d:92:aa:87:ca:44:c9:9c:5c:26:78:56:
9a:17:70:7a:db:e9:d9:67:99:fa:ef:08:db:37:67:
2c:59:fe:6c:0e:c9:39:ba:8f:2d:90:2c:1d:c0:d9:
55:30:fe:21:4e:f2:02:e6:93:57:87:f3:ea:55:8e:
06:b5:c2:1b:bd:39:44:36:9e:bf:34:ae:d6:f5:e6:
56:be:ee:be:c8:1b:3a:db:d4:f6:e8:88:ad:b5:7e:
93:31:ca:50:3c:f2:ae:7d:5e:e0:be:0e:6a:00:2b:
c0:1b:8e:76:33:4d:bd:ab:1d:bf:21:7b:41:ba:29:
48:07:24:13:1e:f3:fb:34:43:50:9f:9c:64:a0:d6:
8d:f8:b4:fd:38:7b:f0:6b:38:09:ee:c7:b9:e3:ac:
86:be:df:26:8f:0b:0b:8e:13:09:12:32:78:b9:68:
a6:9d:84:d4:dc:f4:da:8f:1e:6a:55:24:ed:09:02:
97:54:fc:81:cb:15:fa:0f:56:1b:86:8f:0a:07:76:
18:a7:2d:91:1c:6f:17:77:7d:fa:96:48:8a:f0:2d:
00:ef:8f:18:3d:5e:3c:da:53:18:59:a8:b1:0d:73:
90:a5:68:c3:20:13:13:a1:99:80:be:a5:42:fb:42:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:43:40:2D:8F:2B:D2:A9:2B:E1:3C:5A:71:2F:2E:3F:C0:C3:8C
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/XddDQC2PK9KpK-E8WnEvLj_Aw4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:26:a0:1f:bd:a9:58:77:1d:f3:e7:be:88:a5:4c:fd:15:b5:
8b:af:e2:ac:5a:3e:f8:dc:6b:fe:40:cf:60:1d:94:e7:87:56:
9f:af:42:1b:ee:7b:e8:10:38:01:1c:9b:45:35:72:0f:33:d9:
42:13:a4:16:b9:0f:82:e1:19:b3:5e:83:0d:20:5a:e7:d7:06:
ec:a2:a8:bd:c9:ec:f9:cc:52:aa:7d:be:38:ec:88:17:bb:61:
8f:4b:fd:3e:0a:81:f1:09:be:bd:9d:1a:1a:a2:22:b5:61:37:
e0:df:1c:66:f3:ec:62:da:b7:77:a2:27:e0:de:fb:1e:6e:61:
a2:44:47:0e:b9:8e:dd:a9:94:57:a6:6d:e7:fb:94:26:9e:fe:
29:5b:7e:4d:d2:d5:ed:5c:b5:20:1f:2d:8e:6b:cd:a0:b0:96:
2e:69:2f:c7:fc:7b:87:f8:b9:a8:e1:c3:84:88:29:11:28:ec:
cb:b8:66:09:a1:13:8e:1b:32:ee:2b:8b:81:0b:10:a6:8a:a2:
82:d1:95:cc:cd:a6:89:99:9e:80:ff:5c:01:1a:87:a8:0c:87:
33:e5:80:6d:53:ef:97:9d:24:3d:6a:7b:81:ca:0f:11:02:fb:
1b:57:fb:b0:bb:28:12:b4:2c:e7:24:7f:08:9d:f3:04:64:55:
a2:d8:df:89
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAcGyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
ZDQ4MTllNjYzYWE5NDg3YjZhMDgyYTc3ZDIyMzdlMWI4ODAyYTEwHhcNMjIwNjEz
MDkwMjI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1ZGQ3NDM0MDJkOGYy
YmQyYTkyYmUxM2M1YTcxMmYyZTNmYzBjMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA+RuBPqM9D8bFCpkf+WLVEcsdkqqHykTJnFwmeFaaF3B62+nZ
Z5n67wjbN2csWf5sDsk5uo8tkCwdwNlVMP4hTvIC5pNXh/PqVY4GtcIbvTlENp6/
NK7W9eZWvu6+yBs629T26IittX6TMcpQPPKufV7gvg5qACvAG452M029qx2/IXtB
uilIByQTHvP7NENQn5xkoNaN+LT9OHvwazgJ7se546yGvt8mjwsLjhMJEjJ4uWim
nYTU3PTajx5qVSTtCQKXVPyByxX6D1Ybho8KB3YYpy2RHG8Xd336lkiK8C0A748Y
PV482lMYWaixDXOQpWjDIBMToZmAvqVC+0IKiQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFF3XQ0AtjyvSqSvhPFpxLy4/wMOMMB8GA1UdIwQYMBaAFPDUgZ5mOqlIe2oI
KnfSI34biAKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OE5TQm5tWTZxVWg3YWdncWQ5SWpmaHVJQXFFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85NC8zNGQzOWEtNjJkMi00MGYyLTg0YWEtOTcyNGNhZDZiYWVlLzEv
WGRkRFFDMlBLOUtwSy1FOFduRXZMal9BdzR3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8z
NGQzOWEtNjJkMi00MGYyLTg0YWEtOTcyNGNhZDZiYWVlLzEvOE5TQm5tWTZxVWg3
YWdncWQ5SWpmaHVJQXFFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuepkMA0GCSqGSIb3DQEBCwUAA4IB
AQAMJqAfvalYdx3z576IpUz9FbWLr+KsWj743Gv+QM9gHZTnh1afr0Ib7nvoEDgB
HJtFNXIPM9lCE6QWuQ+C4RmzXoMNIFrn1wbsoqi9yez5zFKqfb447IgXu2GPS/0+
CoHxCb69nRoaoiK1YTfg3xxm8+xi2rd3oifg3vsebmGiREcOuY7dqZRXpm3n+5Qm
nv4pW35N0tXtXLUgHy2Oa82gsJYuaS/H/HuH+Lmo4cOEiCkRKOzLuGYJoROOGzLu
K4uBCxCmiqKC0ZXMzaaJmZ6A/1wBGoeoDIcz5YBtU++XnSQ9anuByg8RAvsbV/uw
uygStCznJH8InfMEZFWi2N+J
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org