Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/cvwNvp3f5p5Lp9yNUaeIijWc3_A.roa
File: cvwNvp3f5p5Lp9yNUaeIijWc3_A.roa (raw, json)
Hash identifier: HkLfNd0AkRoojZXCP3Jmdun4oEGOlUn3zqE84itN5xI=
Subject key identifier: 72:FC:0D:BE:9D:DF:E6:9E:4B:A7:DC:8D:51:A7:88:8A:35:9C:DF:F0
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 012FFE8D
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/cvwNvp3f5p5Lp9yNUaeIijWc3_A.roa
Signing time: Sun 03 Jul 2022 10:06:26 +0000
ROA not before: Sun 03 Jul 2022 10:06:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203214
IP address blocks: 185.118.96.0/24 maxlen: 24
185.118.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19922573 (0x12ffe8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jul 3 10:06:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72fc0dbe9ddfe69e4ba7dc8d51a7888a359cdff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:17:18:e0:4b:ea:3b:4b:d0:d4:31:f7:77:
ff:23:ae:4f:c1:24:4b:cf:36:82:0b:fd:d4:66:6c:
20:42:95:a5:ef:0d:65:63:9a:81:8c:1e:75:ce:21:
e2:ab:2a:50:3e:36:25:7b:78:90:92:a0:65:2c:3b:
92:a6:f5:9b:65:76:cc:0d:ff:00:65:db:b4:38:83:
c1:7f:86:5b:43:18:b6:8c:af:0c:2d:77:a2:70:ee:
26:87:d9:96:1e:6d:ef:55:69:14:a3:f0:ba:89:ee:
6c:92:aa:e0:5c:97:9a:dc:06:38:00:49:14:10:8a:
6e:b5:77:3c:55:c9:65:3f:75:cc:0c:0b:cf:58:9f:
ce:7a:50:c3:7b:02:45:bf:ea:eb:be:46:ff:20:19:
c6:9f:b3:df:52:1f:1d:5d:f5:68:9d:68:bd:d7:bb:
e5:41:1d:f1:4a:37:e2:ad:5c:7b:d6:fe:dc:bd:85:
21:bd:96:61:b9:d3:33:1a:24:01:bf:7c:96:16:88:
91:1c:a5:8c:6d:15:5a:f4:75:3a:b6:9a:16:9a:d8:
8e:20:9f:62:4e:69:39:86:84:f2:52:d4:8e:5e:3a:
d5:b8:7a:a9:ea:84:ca:1c:99:e1:87:05:71:d7:d9:
e4:ee:d9:cc:a4:18:19:c4:d1:2b:7e:9d:1c:06:80:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:0D:BE:9D:DF:E6:9E:4B:A7:DC:8D:51:A7:88:8A:35:9C:DF:F0
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/cvwNvp3f5p5Lp9yNUaeIijWc3_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.96.0/22
Signature Algorithm: sha256WithRSAEncryption
91:ef:42:24:1f:87:b5:e1:05:d7:5d:6c:bb:22:66:ac:40:7c:
a4:38:a5:1e:b9:5a:89:d6:17:6c:67:2d:07:b7:88:af:d0:28:
a6:43:1d:e2:7a:bf:a0:74:a2:b0:b8:59:74:a0:13:dd:af:04:
61:d9:13:c0:f8:fc:7f:d0:74:7e:a8:07:51:73:ad:5a:12:3f:
dc:cd:02:3e:33:8d:2d:67:4a:13:7a:cf:30:75:53:8d:ed:8c:
45:aa:fd:f6:02:1f:e4:96:9c:6e:ba:28:b8:7b:bb:97:0b:0d:
ae:43:88:de:b9:23:ba:93:21:21:ae:7a:56:9e:65:f4:b5:38:
74:28:e2:63:a9:6c:1d:c8:8d:db:98:af:8e:91:4c:38:f5:be:
a1:1a:f8:d4:e3:69:bd:44:c3:81:15:61:fe:d0:aa:41:e9:de:
dc:54:db:db:37:d1:dc:38:c6:1f:2b:93:44:f3:6c:96:38:c1:
6d:c3:80:80:f7:1f:24:96:b5:6b:ac:50:c3:17:76:43:c2:dc:
69:69:27:4f:46:6a:72:5a:fd:50:29:3f:05:89:9a:15:ed:45:
29:50:e4:47:ad:16:f0:f5:d9:9f:0c:98:ab:6d:7b:d5:f2:4a:
75:b6:01:7c:01:c7:4f:dc:ad:2a:41:73:50:14:c7:84:80:d8:
00:2c:1c:73
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAS/+jTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OTZlZDZlNGI1YzdjMTlkYjk4YzU3NDMyYWY0ZGNmNjMwYmY2MGFlMB4XDTIyMDcw
MzEwMDYyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzJmYzBkYmU5ZGRm
ZTY5ZTRiYTdkYzhkNTFhNzg4OGEzNTljZGZmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPuFxjgS+o7S9DUMfd3/yOuT8EkS882ggv91GZsIEKVpe8N
ZWOagYwedc4h4qsqUD42JXt4kJKgZSw7kqb1m2V2zA3/AGXbtDiDwX+GW0MYtoyv
DC13onDuJofZlh5t71VpFKPwuonubJKq4FyXmtwGOABJFBCKbrV3PFXJZT91zAwL
z1ifznpQw3sCRb/q675G/yAZxp+z31IfHV31aJ1ovde75UEd8Uo34q1ce9b+3L2F
Ib2WYbnTMxokAb98lhaIkRyljG0VWvR1OraaFprYjiCfYk5pOYaE8lLUjl461bh6
qeqEyhyZ4YcFcdfZ5O7ZzKQYGcTRK36dHAaA+5cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRy/A2+nd/mnkun3I1Rp4iKNZzf8DAfBgNVHSMEGDAWgBSJbtbktcfBnbmM
V0Mq9Nz2ML9grjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lXN1c1TFhId1oyNWpGZERLdlRjOWpDX1lLNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvOTAwNDQ0LWRkNDAtNGEwNC1hNjE2LWRjMWZmNjc0NmQyZS8x
L2N2d052cDNmNXA1THA5eU5VYWVJaWpXYzNfQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
OTAwNDQ0LWRkNDAtNGEwNC1hNjE2LWRjMWZmNjc0NmQyZS8xL2lXN1c1TFhId1oy
NWpGZERLdlRjOWpDX1lLNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl2YDANBgkqhkiG9w0BAQsFAAOC
AQEAke9CJB+HteEF111suyJmrEB8pDilHrlaidYXbGctB7eIr9AopkMd4nq/oHSi
sLhZdKAT3a8EYdkTwPj8f9B0fqgHUXOtWhI/3M0CPjONLWdKE3rPMHVTje2MRar9
9gIf5JacbroouHu7lwsNrkOI3rkjupMhIa56Vp5l9LU4dCjiY6lsHciN25ivjpFM
OPW+oRr41ONpvUTDgRVh/tCqQene3FTb2zfR3DjGHyuTRPNsljjBbcOAgPcfJJa1
a6xQwxd2Q8LcaWknT0Zqclr9UCk/BYmaFe1FKVDkR60W8PXZnwyYq2171fJKdbYB
fAHHT9ytKkFzUBTHhIDYACwccw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-fra.rpki-client.org