Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/d8ZsTLxtBTr5XW6va8VBH6exjd0.roa
File: d8ZsTLxtBTr5XW6va8VBH6exjd0.roa (raw, json)
Hash identifier: dgldfAFKCA3i+HznRYlPFCkwiOteBHW/z2+yYvXaQ4U=
Subject key identifier: 77:C6:6C:4C:BC:6D:05:3A:F9:5D:6E:AF:6B:C5:41:1F:A7:B1:8D:DD
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0FE5B104
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/d8ZsTLxtBTr5XW6va8VBH6exjd0.roa
Signing time: Sat 01 Jan 2022 14:59:44 +0000
ROA not before: Sat 01 Jan 2022 14:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205591
IP address blocks: 185.133.208.0/24 maxlen: 24
2a06:e881:2102::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266711300 (0xfe5b104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 1 14:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77c66c4cbc6d053af95d6eaf6bc5411fa7b18ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:a7:7a:d6:33:83:cb:ae:92:c3:49:1c:e1:
b8:f7:fa:d9:b5:10:02:f0:d1:6d:56:41:15:30:7a:
4b:4d:45:cb:97:f4:b9:b6:da:ae:b3:ed:7b:9f:6e:
72:c5:28:00:7c:a7:86:40:39:90:8b:c5:20:2c:e7:
79:d5:c5:c8:b5:86:07:82:54:c4:ce:55:ab:69:5f:
b8:75:37:ed:d4:70:95:e4:10:67:4e:30:ab:f8:28:
6c:26:26:27:da:ed:ca:56:52:c7:58:65:08:b4:2f:
e9:28:a3:23:13:f2:14:fd:e4:fd:e6:d1:9d:f7:52:
6a:35:8d:46:aa:6d:6a:dd:5b:db:24:1b:09:4b:b2:
1e:30:e6:9d:55:9c:7f:09:42:c8:e3:bb:f3:7a:a4:
5d:2e:c6:73:0e:d7:fd:36:94:21:30:17:6f:89:99:
69:34:03:77:2d:82:02:8f:51:43:66:42:fa:df:7b:
50:57:fe:c2:b6:f0:b7:dd:da:85:eb:87:49:f5:9e:
f0:e4:66:c4:d8:4a:d7:28:16:67:99:82:fd:ce:9c:
bc:32:67:fb:3a:41:8c:36:85:37:fa:cf:7c:0f:f5:
f9:a3:b8:c0:42:aa:36:92:21:16:f7:fd:31:4f:84:
eb:32:08:5a:9f:b0:16:5f:90:25:d4:6c:6e:d9:bb:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:6C:4C:BC:6D:05:3A:F9:5D:6E:AF:6B:C5:41:1F:A7:B1:8D:DD
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/d8ZsTLxtBTr5XW6va8VBH6exjd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.208.0/24
IPv6:
2a06:e881:2102::/48
Signature Algorithm: sha256WithRSAEncryption
ae:43:b6:11:2a:88:44:2a:24:ab:68:e5:54:e7:16:db:7e:e6:
b1:69:e7:5a:7c:11:2f:43:fe:e4:56:0c:79:47:d3:d7:e5:3b:
7e:a8:5b:a6:e7:d1:b1:18:81:8f:56:8d:ef:59:65:e6:aa:56:
20:a9:9a:02:44:b4:82:5b:ca:f9:52:3c:92:75:fe:51:9b:a1:
9f:3b:08:e7:21:cf:d2:c3:2b:e5:c5:18:1d:a8:c6:42:6c:4d:
7a:01:53:c6:0c:64:24:4a:26:ae:28:f9:8e:42:3d:8e:80:64:
0e:25:3e:d7:80:bb:83:61:0f:24:66:58:2b:ae:7d:e9:65:8f:
0b:b9:f5:9c:ee:ab:70:9c:47:06:0a:f1:0d:0a:8b:9a:be:e3:
52:ff:4f:ab:f3:5e:7a:f3:91:a9:86:c1:bb:64:12:e6:7d:1e:
34:ff:8b:8a:ff:c7:0e:29:d5:9a:f5:34:28:9e:cf:8d:1c:9b:
96:f6:57:ff:2c:d0:7f:02:ef:e0:2d:5e:23:7e:4a:37:b6:56:
25:f6:c6:fe:6e:6c:ea:b9:9c:fd:7a:98:fa:9c:fb:e3:52:d2:
4f:7a:34:1b:fe:fe:f0:ef:b8:e3:23:c2:52:c8:4a:28:44:8b:
6e:ec:65:42:11:21:b8:03:c4:91:a2:2d:28:df:e1:8a:73:99:
36:00:4e:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIED+WxBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ODA3NGI0MTllYWQ0Y2VmZWEyZjJhZDJjMjU5ZDk3OGM1ZWQ3OTU0MB4XDTIyMDEw
MTE0NTk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdjNjZjNGNiYzZk
MDUzYWY5NWQ2ZWFmNmJjNTQxMWZhN2IxOGRkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKuJp3rWM4PLrpLDSRzhuPf62bUQAvDRbVZBFTB6S01Fy5f0
ubbarrPte59ucsUoAHynhkA5kIvFICznedXFyLWGB4JUxM5Vq2lfuHU37dRwleQQ
Z04wq/gobCYmJ9rtylZSx1hlCLQv6SijIxPyFP3k/ebRnfdSajWNRqptat1b2yQb
CUuyHjDmnVWcfwlCyOO783qkXS7Gcw7X/TaUITAXb4mZaTQDdy2CAo9RQ2ZC+t97
UFf+wrbwt93aheuHSfWe8ORmxNhK1ygWZ5mC/c6cvDJn+zpBjDaFN/rPfA/1+aO4
wEKqNpIhFvf9MU+E6zIIWp+wFl+QJdRsbtm7IpkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR3xmxMvG0FOvldbq9rxUEfp7GN3TAfBgNVHSMEGDAWgBS4B0tBnq1M7+ov
KtLCWdl4xe15VDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VBZExRWjZ0VE9fcUx5clN3bG5aZU1YdGVWUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvMWU0M2U0LWQwNmUtNGE1NS1iZGI2LTNkOTFlZGU1YjJiMS8x
L2Q4WnNUTHh0QlRyNVhXNnZhOFZCSDZleGpkMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
MWU0M2U0LWQwNmUtNGE1NS1iZGI2LTNkOTFlZGU1YjJiMS8xL3VBZExRWjZ0VE9f
cUx5clN3bG5aZU1YdGVWUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALmF0DAPBAIAAjAJAwcAKgbogSEC
MA0GCSqGSIb3DQEBCwUAA4IBAQCuQ7YRKohEKiSraOVU5xbbfuaxaedafBEvQ/7k
Vgx5R9PX5Tt+qFum59GxGIGPVo3vWWXmqlYgqZoCRLSCW8r5UjySdf5Rm6GfOwjn
Ic/SwyvlxRgdqMZCbE16AVPGDGQkSiauKPmOQj2OgGQOJT7XgLuDYQ8kZlgrrn3p
ZY8LufWc7qtwnEcGCvENCouavuNS/0+r815685GphsG7ZBLmfR40/4uK/8cOKdWa
9TQons+NHJuW9lf/LNB/Au/gLV4jfko3tlYl9sb+bmzquZz9epj6nPvjUtJPejQb
/v7w77jjI8JSyEooRItu7GVCESG4A8SRoi0o3+GKc5k2AE4E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-fra.rpki-client.org