Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/7U4kdFh8pqK1LvUWP8Sai36c_5I.roa
File: 7U4kdFh8pqK1LvUWP8Sai36c_5I.roa (raw, json)
Hash identifier: EehYJ5Q+P/ZYWj788S3nOsBnSJ2VmZEHa3cic1lku0A=
Subject key identifier: ED:4E:24:74:58:7C:A6:A2:B5:2E:F5:16:3F:C4:9A:8B:7E:9C:FF:92
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 07BBF929
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/7U4kdFh8pqK1LvUWP8Sai36c_5I.roa
Signing time: Sat 01 Jan 2022 08:59:51 +0000
ROA not before: Sat 01 Jan 2022 08:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20836
IP address blocks: 185.112.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129759529 (0x7bbf929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Jan 1 08:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed4e2474587ca6a2b52ef5163fc49a8b7e9cff92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:64:13:0e:5a:b9:f3:40:bf:68:f5:ae:5a:
6d:07:c1:3a:dd:e1:3e:50:60:e8:e2:b1:14:ca:2a:
ab:0b:6b:b4:bc:50:2e:f4:27:7f:64:71:cd:93:06:
b3:d1:4f:3c:7f:30:fb:12:b6:4b:a7:56:63:3d:d3:
a4:5e:b8:42:91:ab:aa:86:01:92:7d:fe:04:f9:3e:
d0:68:85:12:cc:aa:c6:7e:6f:4f:f5:6f:74:ff:8c:
71:19:b5:a5:dd:d2:a8:0a:e6:77:9c:e5:b3:2f:c8:
8e:81:68:93:5e:11:f9:35:84:ef:c0:d8:da:3f:48:
5a:9b:18:bc:27:59:29:00:9b:79:23:a2:76:ee:0a:
5b:6d:8f:c0:92:ed:de:4c:84:f9:df:7a:12:fc:3f:
7d:d3:60:be:8e:35:a8:ea:62:89:e8:d4:79:a3:d0:
76:bb:0e:64:f2:44:6f:54:55:92:5f:1b:8d:e6:95:
6f:e4:c0:c5:d4:0b:9d:26:63:0c:cf:ea:8a:9a:fd:
f6:6f:a7:42:1e:d0:c3:04:1b:e3:da:11:3a:b0:86:
29:2f:0e:b2:b5:18:66:ef:81:29:df:93:cd:15:5a:
76:6c:80:f5:77:98:5c:7b:2a:08:ac:c4:6a:d1:01:
f0:02:d8:c0:b1:23:68:5c:2b:17:94:43:5c:5a:43:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:24:74:58:7C:A6:A2:B5:2E:F5:16:3F:C4:9A:8B:7E:9C:FF:92
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/7U4kdFh8pqK1LvUWP8Sai36c_5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.90.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9c:85:0c:aa:ef:a6:0a:20:54:90:8b:24:8f:d4:6e:db:d8:
a4:4f:50:26:e8:de:af:85:6a:ba:cc:62:bc:0c:40:a1:86:9a:
87:c5:f9:87:ef:48:c5:06:ba:28:3e:ec:4c:fd:2f:96:01:c2:
22:e8:aa:1a:8f:37:17:59:10:b9:be:12:e0:5a:39:01:ec:18:
fb:c0:6c:3a:91:3e:fa:ac:44:60:b5:3d:f8:6e:52:65:74:18:
51:b1:c4:86:e3:d6:e6:93:b0:d4:81:ae:c4:be:b7:bd:11:67:
b4:8d:7c:64:13:fa:51:fd:6c:1a:ed:6c:7a:62:35:79:22:a4:
fe:98:6e:ff:40:32:77:bc:07:91:e2:5e:91:a8:8b:5a:4c:99:
97:cd:87:60:ce:16:69:38:f7:df:c5:14:cc:e0:65:d6:99:18:
a2:d5:9e:e0:8f:dc:f9:95:a7:4a:33:bb:66:d0:2d:37:5e:37:
db:20:47:ea:46:00:5a:11:bc:b3:50:0e:c4:a9:f0:15:85:42:
fe:32:38:a4:c8:fc:9f:28:e0:d8:a7:83:3e:b5:bd:7e:4a:0c:
b1:a7:7e:a5:9b:be:08:cb:a3:a6:95:2b:53:08:7a:9b:12:6b:
fe:73:ad:37:7a:c4:70:fe:98:cb:40:e2:c1:9f:6c:c2:25:aa:
a0:46:b8:84
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB7v5KTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTViMWE0ZjE5NDJlNGIxZDg5NGNiYzhjZjA5MDczZDAyODkwMTcwMB4XDTIyMDEw
MTA4NTk1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQ0ZTI0NzQ1ODdj
YTZhMmI1MmVmNTE2M2ZjNDlhOGI3ZTljZmY5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKlCZBMOWrnzQL9o9a5abQfBOt3hPlBg6OKxFMoqqwtrtLxQ
LvQnf2RxzZMGs9FPPH8w+xK2S6dWYz3TpF64QpGrqoYBkn3+BPk+0GiFEsyqxn5v
T/VvdP+McRm1pd3SqArmd5zlsy/IjoFok14R+TWE78DY2j9IWpsYvCdZKQCbeSOi
du4KW22PwJLt3kyE+d96Evw/fdNgvo41qOpiiejUeaPQdrsOZPJEb1RVkl8bjeaV
b+TAxdQLnSZjDM/qipr99m+nQh7QwwQb49oROrCGKS8OsrUYZu+BKd+TzRVadmyA
9XeYXHsqCKzEatEB8ALYwLEjaFwrF5RDXFpDcJECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTtTiR0WHymorUu9RY/xJqLfpz/kjAfBgNVHSMEGDAWgBTlWxpPGULksdiU
y8jPCQc9AokBcDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVWc2FUeGxDNUxIWWxNdkl6d2tIUFFLSkFYQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTYvYzY2YTFmLTc3MDctNGY4ZC1hMjc0LTRkZjY1YWJhNmE2Mi8x
LzdVNGtkRmg4cHFLMUx2VVdQOFNhaTM2Y181SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYv
YzY2YTFmLTc3MDctNGY4ZC1hMjc0LTRkZjY1YWJhNmE2Mi8xLzVWc2FUeGxDNUxI
WWxNdkl6d2tIUFFLSkFYQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlwWjANBgkqhkiG9w0BAQsFAAOC
AQEAJZyFDKrvpgogVJCLJI/UbtvYpE9QJujer4VqusxivAxAoYaah8X5h+9IxQa6
KD7sTP0vlgHCIuiqGo83F1kQub4S4Fo5AewY+8BsOpE++qxEYLU9+G5SZXQYUbHE
huPW5pOw1IGuxL63vRFntI18ZBP6Uf1sGu1semI1eSKk/phu/0Ayd7wHkeJekaiL
WkyZl82HYM4WaTj338UUzOBl1pkYotWe4I/c+ZWnSjO7ZtAtN1432yBH6kYAWhG8
s1AOxKnwFYVC/jI4pMj8nyjg2KeDPrW9fkoMsad+pZu+CMujppUrUwh6mxJr/nOt
N3rEcP6Yy0DiwZ9swiWqoEa4hA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:42 2023 by rpki-client on console-fra.rpki-client.org