Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/1-y8JXHvn_jMt1ZhYdLlFVKS2txY.roa
File: 1-y8JXHvn_jMt1ZhYdLlFVKS2txY.roa (raw, json)
Hash identifier: tTW1tBSZFdMiUNzVqldY2n8B+BUnaRYGrhipXfp2BTA=
Subject key identifier: FB:2F:09:5C:7B:E7:FE:33:2D:D5:98:58:74:B9:45:54:A4:B6:B7:16
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 0C13C9CE
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/1-y8JXHvn_jMt1ZhYdLlFVKS2txY.roa
Signing time: Sat 01 Jan 2022 08:00:55 +0000
ROA not before: Sat 01 Jan 2022 08:00:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28883
IP address blocks: 185.251.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202623438 (0xc13c9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Jan 1 08:00:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb2f095c7be7fe332dd5985874b94554a4b6b716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:53:fa:78:4d:4f:40:3b:89:e7:ba:35:ff:
4e:ae:16:ef:a0:11:ef:38:01:06:b2:cb:e5:c9:70:
7a:f0:d2:07:0b:78:65:15:4a:1d:96:ae:3d:63:ab:
c4:65:8a:cb:35:7a:31:e6:51:21:89:a4:a2:ca:20:
a4:8b:c6:dd:3d:65:a3:63:d6:1d:44:f4:a7:e8:8d:
d4:76:dc:24:89:c7:e0:f9:22:52:e9:e3:2e:0c:da:
d8:6d:02:a5:4b:04:73:14:e5:0e:c1:0d:d9:d2:5a:
67:62:de:21:9e:69:5f:d6:89:75:34:96:a5:7f:40:
22:a8:6b:4b:e3:fb:f7:f8:b2:4f:0e:da:e5:56:6c:
19:b1:92:f7:3b:92:32:d2:16:77:2e:3e:c7:f8:43:
36:70:11:09:0d:9e:7b:3c:bb:2a:f3:4c:42:7a:ae:
88:4e:33:64:92:e0:e9:4c:7c:85:1a:65:02:cf:b3:
b7:09:e5:b8:5d:9e:80:ac:15:5b:91:de:d8:f5:5f:
f1:99:fb:f9:72:d3:21:fd:23:6e:71:5f:5c:5a:96:
c2:d5:14:97:09:22:3a:94:50:97:cd:d7:10:c2:23:
a1:87:2e:e4:1b:b6:fd:08:7d:cf:d6:39:be:c6:52:
6b:b5:e7:91:e8:f7:ea:ee:13:6f:03:12:c5:94:37:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:09:5C:7B:E7:FE:33:2D:D5:98:58:74:B9:45:54:A4:B6:B7:16
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/1-y8JXHvn_jMt1ZhYdLlFVKS2txY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:22:8f:14:2b:5e:af:34:78:32:7a:47:0e:ea:ae:35:cf:26:
f5:cb:a0:4a:14:44:e8:25:96:56:6d:dd:3a:f3:b0:cc:02:10:
b5:e4:26:67:4f:4a:3c:92:1f:39:64:a6:0e:42:d5:eb:34:b1:
b1:15:3b:29:9f:47:a6:15:77:67:a6:fc:9e:1d:6d:a1:12:e7:
aa:80:f0:c9:ef:2f:20:4a:6d:e1:1c:e8:6a:7d:fa:4a:a3:37:
a0:c4:2f:32:bb:b6:e8:dd:ed:ee:76:b3:08:38:71:97:c2:bc:
a7:53:06:36:3b:b8:13:f7:60:09:ea:78:79:31:2e:2b:5e:35:
4e:e4:17:7a:e4:77:f7:15:30:2f:d9:ac:b6:d9:ca:82:2f:c5:
4b:4c:f8:34:d3:57:f2:a0:9d:81:ee:e7:bf:d3:70:2f:39:3d:
ee:2e:24:82:96:e4:9b:fd:a3:ee:14:21:a2:91:02:06:b4:a8:
76:48:ac:ac:85:ce:94:f8:05:18:7c:b1:ac:bd:2d:9d:af:62:
0b:d4:bf:a2:7e:a6:bf:31:fc:4c:fd:46:e1:48:49:90:3a:ef:
34:7a:d9:e2:dd:e4:0d:fa:a1:b2:a3:25:44:d9:af:1b:59:bb:
c1:41:1c:f5:a3:f1:0a:62:b6:ed:44:31:f7:07:bc:b4:05:c4:
32:62:d1:d4
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEDBPJzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDMzZTMyYWMwYzZmYTczNWE2YzdiZTE0NGNmYTNmYzI5N2MwYjk4MB4XDTIyMDEw
MTA4MDA1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmIyZjA5NWM3YmU3
ZmUzMzJkZDU5ODU4NzRiOTQ1NTRhNGI2YjcxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKcXU/p4TU9AO4nnujX/Tq4W76AR7zgBBrLL5clwevDSBwt4
ZRVKHZauPWOrxGWKyzV6MeZRIYmkosogpIvG3T1lo2PWHUT0p+iN1HbcJInH4Pki
UunjLgza2G0CpUsEcxTlDsEN2dJaZ2LeIZ5pX9aJdTSWpX9AIqhrS+P79/iyTw7a
5VZsGbGS9zuSMtIWdy4+x/hDNnARCQ2eezy7KvNMQnquiE4zZJLg6Ux8hRplAs+z
twnluF2egKwVW5He2PVf8Zn7+XLTIf0jbnFfXFqWwtUUlwkiOpRQl83XEMIjoYcu
5Bu2/Qh9z9Y5vsZSa7Xnkej36u4TbwMSxZQ3D9ECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT7Lwlce+f+My3VmFh0uUVUpLa3FjAfBgNVHSMEGDAWgBSkM+MqwMb6c1ps
e+FEz6P8KXwLmDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BEUGpLc0RHLW5OYWJIdmhSTS1qX0NsOEM1Zy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvODY1OWNmLWY4MjQtNGY5My04NjA0LWI4MTJiZDU5NDczOS8x
LzEteThKWEh2bl9qTXQxWmhZZExsRlZLUzJ0eFkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzli
Lzg2NTljZi1mODI0LTRmOTMtODYwNC1iODEyYmQ1OTQ3MzkvMS9wRFBqS3NERy1u
TmFiSHZoUk0tal9DbDhDNWcuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5+zAwDQYJKoZIhvcNAQELBQAD
ggEBAEwijxQrXq80eDJ6Rw7qrjXPJvXLoEoUROglllZt3TrzsMwCELXkJmdPSjyS
Hzlkpg5C1es0sbEVOymfR6YVd2em/J4dbaES56qA8MnvLyBKbeEc6Gp9+kqjN6DE
LzK7tujd7e52swg4cZfCvKdTBjY7uBP3YAnqeHkxLiteNU7kF3rkd/cVMC/ZrLbZ
yoIvxUtM+DTTV/KgnYHu57/TcC85Pe4uJIKW5Jv9o+4UIaKRAga0qHZIrKyFzpT4
BRh8say9LZ2vYgvUv6J+pr8x/Ez9RuFISZA67zR62eLd5A36obKjJUTZrxtZu8FB
HPWj8Qpitu1EMfcHvLQFxDJi0dQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:45 2024 by rpki-client on console-ams.rpki-client.org