Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/mjddBHm39bxEbC95HXEn1gtesZQ.roa
File: mjddBHm39bxEbC95HXEn1gtesZQ.roa (raw, json)
Hash identifier: jhWLPYajfOBSzY+K28oxxSddGZoD4QdBN6qwgAMsKUs=
Subject key identifier: 9A:37:5D:04:79:B7:F5:BC:44:6C:2F:79:1D:71:27:D6:0B:5E:B1:94
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 01847BE87D97BBA589C10D10363E14457793
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/mjddBHm39bxEbC95HXEn1gtesZQ.roa
Signing time: Tue 15 Nov 2022 15:29:04 +0000
ROA not before: Tue 15 Nov 2022 15:29:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 185.3.168.0/24 maxlen: 24
185.3.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:e8:7d:97:bb:a5:89:c1:0d:10:36:3e:14:45:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Nov 15 15:29:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a375d0479b7f5bc446c2f791d7127d60b5eb194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:d8:bc:28:e9:5e:49:b0:1b:5f:5a:33:5e:
fd:ad:e0:f0:08:d2:b7:1b:56:59:79:f6:b4:e2:24:
10:49:8c:14:36:3d:0f:e3:69:95:2b:a9:1c:f2:63:
dc:00:9e:98:82:f7:92:bc:ca:83:4b:d2:d5:ea:ea:
89:4c:fa:59:fa:e0:71:96:36:81:7f:e2:22:ba:fc:
c1:b5:17:3f:b0:54:d8:d3:95:eb:a5:95:15:4e:cf:
e4:08:54:e3:f2:45:03:44:35:1a:08:05:ee:8c:ad:
20:7f:40:ec:dd:bc:b3:58:29:d9:a7:fc:cc:7c:ca:
c9:e3:1c:cd:99:af:30:6b:4b:2d:11:5f:96:8b:d5:
06:87:0d:fe:2f:e0:a8:d2:b3:b9:cc:0b:ae:8a:f2:
3d:f6:db:38:2a:22:8b:e6:1a:41:68:80:35:d0:97:
b9:a0:4e:f9:34:9e:1e:6c:97:52:39:56:07:9e:f8:
c3:01:de:43:fa:33:0a:b7:63:04:61:36:e0:5f:9f:
bd:4d:42:9f:da:48:cc:d0:1d:2d:cf:06:26:8f:b5:
ad:83:e9:18:e3:59:a5:03:a1:f4:d6:1a:55:e9:d8:
9b:44:01:03:88:c0:3f:15:85:3c:04:b2:34:a8:09:
89:6c:45:b0:d5:17:62:40:80:3a:46:f9:d9:74:08:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:37:5D:04:79:B7:F5:BC:44:6C:2F:79:1D:71:27:D6:0B:5E:B1:94
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/mjddBHm39bxEbC95HXEn1gtesZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.168.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:de:15:92:ef:fb:bc:95:03:4f:16:63:ab:8b:ad:25:2a:50:
d2:3f:ce:75:d5:af:f6:83:34:01:d0:67:d6:95:e6:06:b9:64:
69:89:55:97:c8:4a:88:9a:69:91:d4:c5:66:50:fb:1e:68:ca:
5e:da:09:51:7a:8c:6e:d8:25:a1:be:52:35:6d:49:fb:c6:03:
18:cc:fa:3f:60:e2:81:b8:80:7a:ad:4f:e6:a6:5a:56:d3:59:
d8:da:47:04:96:f8:2d:b7:13:b9:64:4d:5f:21:c6:47:4a:13:
92:52:25:76:f4:ac:e7:15:d1:88:59:42:88:68:55:bc:ae:35:
54:68:ca:12:18:69:a3:40:6d:5d:c9:69:a5:25:c0:f5:60:ca:
ec:57:f3:07:31:42:a6:78:70:01:94:bf:96:77:28:b2:a8:77:
24:94:1f:f5:99:71:37:55:3d:8e:10:fe:ca:9e:4a:28:1c:e1:
35:ec:bf:b4:74:ad:a3:64:57:35:62:35:6d:79:54:2c:4f:e6:
06:06:6a:2b:63:44:70:23:b8:7a:e1:5e:b0:e0:f8:b7:e5:dd:
f1:c8:2c:b1:2c:d0:27:a3:6f:81:d1:10:64:bb:57:70:48:c2:
b2:0f:a7:e3:87:b5:69:ce:d9:04:d5:30:6d:12:67:fb:6c:2c:
ad:7d:2f:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR76H2Xu6WJwQ0QNj4URXeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTRhNGM0ODQwZmM5YTVmZDIxNGE2MTlhYTg4N2I1Yjc2
MjRiZjUwHhcNMjIxMTE1MTUyOTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTM3NWQwNDc5YjdmNWJjNDQ2YzJmNzkxZDcxMjdkNjBiNWViMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4fYvCjpXkmwG19aM179reDwCNK3
G1ZZefa04iQQSYwUNj0P42mVK6kc8mPcAJ6YgveSvMqDS9LV6uqJTPpZ+uBxljaB
f+IiuvzBtRc/sFTY05XrpZUVTs/kCFTj8kUDRDUaCAXujK0gf0Ds3byzWCnZp/zM
fMrJ4xzNma8wa0stEV+Wi9UGhw3+L+Co0rO5zAuuivI99ts4KiKL5hpBaIA10Je5
oE75NJ4ebJdSOVYHnvjDAd5D+jMKt2MEYTbgX5+9TUKf2kjM0B0tzwYmj7Wtg+kY
41mlA6H01hpV6dibRAEDiMA/FYU8BLI0qAmJbEWw1RdiQIA6RvnZdAgTDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJo3XQR5t/W8RGwveR1xJ9YLXrGUMB8GA1UdIwQY
MBaAFNzkpMSED8ml/SFKYZqoh7W3Ykv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEt
MmI3YWU3MjIwMTFmLzEvbWpkZEJIbTM5YnhFYkM5NUhYRW4xZ3Rlc1pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEtMmI3YWU3MjIwMTFm
LzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQOoMA0G
CSqGSIb3DQEBCwUAA4IBAQAq3hWS7/u8lQNPFmOri60lKlDSP8511a/2gzQB0GfW
leYGuWRpiVWXyEqImmmR1MVmUPseaMpe2glReoxu2CWhvlI1bUn7xgMYzPo/YOKB
uIB6rU/mplpW01nY2kcElvgttxO5ZE1fIcZHShOSUiV29KznFdGIWUKIaFW8rjVU
aMoSGGmjQG1dyWmlJcD1YMrsV/MHMUKmeHABlL+WdyiyqHcklB/1mXE3VT2OEP7K
nkooHOE17L+0dK2jZFc1YjVteVQsT+YGBmorY0RwI7h64V6w4Pi35d3xyCyxLNAn
o2+B0RBku1dwSMKyD6fjh7VpztkE1TBtEmf7bCytfS8Y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:06 2023 by rpki-client on console-fra.rpki-client.org