Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/8XD01F0TdxC-nh5O5HaTnedsaO8.roa
File: 8XD01F0TdxC-nh5O5HaTnedsaO8.roa (raw, json)
Hash identifier: Q6DOX8zWJV/2tKcaXC121comSy3qem3a2B7+d6OUAxc=
Subject key identifier: F1:70:F4:D4:5D:13:77:10:BE:9E:1E:4E:E4:76:93:9D:E7:6C:68:EF
Certificate issuer: /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial: 01833AA5E916E29F65C8EBCFFF88063F2DE7
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/8XD01F0TdxC-nh5O5HaTnedsaO8.roa
Signing time: Wed 14 Sep 2022 06:18:15 +0000
ROA not before: Wed 14 Sep 2022 06:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.128.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:a5:e9:16:e2:9f:65:c8:eb:cf:ff:88:06:3f:2d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Validity
Not Before: Sep 14 06:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f170f4d45d137710be9e1e4ee476939de76c68ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:67:ce:21:9a:00:73:78:92:25:cb:91:89:
30:12:d0:50:31:b9:e9:b9:44:ed:75:8f:c8:21:21:
7d:fa:5a:9d:2e:5b:a1:53:73:ab:51:42:c8:6f:92:
ef:c7:3f:d5:ed:1f:a8:d0:62:9f:9b:6a:05:ff:f4:
25:0d:f9:3b:42:7c:97:6b:84:c4:b3:44:46:6d:e3:
59:5c:51:92:be:5a:db:39:6a:4e:aa:86:fb:85:cf:
b3:2f:50:a2:9b:16:be:32:70:f5:72:b1:34:16:22:
69:12:a2:7a:d5:9a:c0:80:5e:2f:4b:54:f5:46:f5:
73:db:6e:82:f2:fa:1c:76:75:82:5b:d0:cb:1d:d0:
62:8e:e8:36:8b:40:ed:67:99:47:d8:64:ac:64:45:
7b:a1:14:d5:0b:9d:f5:e0:67:cb:b9:f8:81:24:4a:
64:79:2d:8f:1f:91:ed:67:10:84:90:24:1d:4f:31:
26:cb:f6:5b:82:ea:12:7f:d9:79:b7:9d:4f:70:70:
a9:57:3c:ee:44:8d:c7:97:9f:30:6e:5b:09:af:5a:
38:a8:4f:42:1a:09:5a:66:f6:99:53:3e:f6:69:99:
68:8e:eb:74:c5:d0:44:8b:32:0a:f6:dd:e6:e7:f0:
62:26:f4:ae:9d:5a:17:79:0a:60:c4:f6:d6:81:9a:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:F4:D4:5D:13:77:10:BE:9E:1E:4E:E4:76:93:9D:E7:6C:68:EF
X509v3 Authority Key Identifier:
keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/8XD01F0TdxC-nh5O5HaTnedsaO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.227.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7a:48:d0:f2:c9:aa:e0:76:06:ba:62:6f:59:86:71:1b:cf:
e9:73:fa:ad:1f:14:3b:9f:67:0e:77:f0:46:52:81:41:82:aa:
35:93:ee:5a:c3:88:57:29:17:a0:7e:03:a0:3c:a8:bd:95:29:
a2:ea:91:a7:b5:3b:ee:fd:4f:e9:01:d3:e2:52:ae:d2:e0:07:
d5:ad:50:d1:15:1e:c9:a4:8e:d0:b2:50:98:10:f7:dc:3d:94:
60:73:32:3c:c9:fb:c4:00:20:92:43:1f:30:80:43:2c:0b:52:
22:e4:75:ff:97:b8:3a:00:d5:e0:fd:d4:08:14:9e:f0:5b:f2:
62:de:52:9d:c6:46:b8:b0:94:92:d0:67:39:0b:ce:a6:e5:c0:
ed:9b:15:d1:dd:04:01:be:13:3d:85:93:86:35:4a:43:08:0f:
c9:8a:3e:d4:7e:d5:b3:57:fd:1f:5a:8c:ed:4a:68:c5:57:93:
89:df:5c:99:5e:79:a4:35:5c:32:0b:46:7a:07:e7:1d:06:34:
42:15:a2:74:58:28:e8:6b:68:bc:82:91:de:95:89:78:cd:d6:
3d:92:37:11:19:6f:98:83:18:17:f2:54:ef:1e:8b:45:a8:12:
88:93:d4:45:f5:f7:7c:36:70:34:58:84:6b:6b:f7:72:02:e8:
2e:1c:98:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYM6pekW4p9lyOvP/4gGPy3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NWRlZDY4ZTIyNjAzMjFiY2EzOWU4NDY1YjQ5YzI1ZDU4
YTU2ZTYwHhcNMjIwOTE0MDYxODE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTcwZjRkNDVkMTM3NzEwYmU5ZTFlNGVlNDc2OTM5ZGU3NmM2OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkhnziGaAHN4kiXLkYkwEtBQMbnp
uUTtdY/IISF9+lqdLluhU3OrUULIb5Lvxz/V7R+o0GKfm2oF//QlDfk7QnyXa4TE
s0RGbeNZXFGSvlrbOWpOqob7hc+zL1Cimxa+MnD1crE0FiJpEqJ61ZrAgF4vS1T1
RvVz226C8vocdnWCW9DLHdBijug2i0DtZ5lH2GSsZEV7oRTVC5314GfLufiBJEpk
eS2PH5HtZxCEkCQdTzEmy/ZbguoSf9l5t51PcHCpVzzuRI3Hl58wblsJr1o4qE9C
GglaZvaZUz72aZlojut0xdBEizIK9t3m5/BiJvSunVoXeQpgxPbWgZplmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFw9NRdE3cQvp4eTuR2k53nbGjvMB8GA1UdIwQY
MBaAFKRd7WjiJgMhvKOehGW0nCXVilbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEYzdGFPSW1BeUc4bzU2RVpiU2NKZFdLVnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lNGFmMGEtYTE3MC00Y2EzLWFiNTct
NTQ4NTNjNDc2NjFmLzEvOFhEMDFGMFRkeEMtbmg1TzVIYVRuZWRzYU84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lNGFmMGEtYTE3MC00Y2EzLWFiNTctNTQ4NTNjNDc2NjFm
LzEvcEYzdGFPSW1BeUc4bzU2RVpiU2NKZFdLVnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYDjMA0G
CSqGSIb3DQEBCwUAA4IBAQA3ekjQ8smq4HYGumJvWYZxG8/pc/qtHxQ7n2cOd/BG
UoFBgqo1k+5aw4hXKRegfgOgPKi9lSmi6pGntTvu/U/pAdPiUq7S4AfVrVDRFR7J
pI7QslCYEPfcPZRgczI8yfvEACCSQx8wgEMsC1Ii5HX/l7g6ANXg/dQIFJ7wW/Ji
3lKdxka4sJSS0Gc5C86m5cDtmxXR3QQBvhM9hZOGNUpDCA/Jij7UftWzV/0fWozt
SmjFV5OJ31yZXnmkNVwyC0Z6B+cdBjRCFaJ0WCjoa2i8gpHelYl4zdY9kjcRGW+Y
gxgX8lTvHotFqBKIk9RF9fd8NnA0WIRra/dyAuguHJhC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org