Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/xIrJIcf6bWTEpkXOdYHWFOujs-c.roa
File: xIrJIcf6bWTEpkXOdYHWFOujs-c.roa (raw, json)
Hash identifier: w8+ziA8t/l4E4QrTpfemvvMcycPWj3lMFiFFJpbLCGk=
Subject key identifier: C4:8A:C9:21:C7:FA:6D:64:C4:A6:45:CE:75:81:D6:14:EB:A3:B3:E7
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01832CFF41478ABF150F59D2905E8672419F
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/xIrJIcf6bWTEpkXOdYHWFOujs-c.roa
Signing time: Sun 11 Sep 2022 14:41:09 +0000
ROA not before: Sun 11 Sep 2022 14:41:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 185.143.242.0/24 maxlen: 24
185.200.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2c:ff:41:47:8a:bf:15:0f:59:d2:90:5e:86:72:41:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Sep 11 14:41:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c48ac921c7fa6d64c4a645ce7581d614eba3b3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:40:5c:ff:e4:cd:d0:14:94:e7:37:69:df:
24:ef:be:3f:0b:01:a8:1a:ba:d7:72:32:37:b4:33:
3a:ca:4c:06:9a:ae:1a:e0:c1:ec:62:4f:58:92:11:
35:5b:4e:09:b2:1c:32:b9:3b:71:ae:a5:ee:88:f2:
7b:3a:08:37:8f:5f:9d:ae:c8:be:cb:e6:b3:08:e5:
99:18:fd:52:18:5a:92:ee:95:29:73:b6:71:0a:4b:
d1:fc:6f:96:8b:e7:da:bf:58:2a:a3:af:a5:c7:0d:
f0:ea:55:54:80:c2:75:1f:ca:7d:a9:5c:2e:39:3e:
16:2b:e8:d9:eb:34:88:a3:c6:21:bc:8d:e3:ee:4f:
b7:37:97:45:7b:fc:bb:b6:93:ba:9a:75:23:b5:3d:
0a:1d:e7:c2:e0:d8:35:0d:8d:b3:2a:b2:d2:bc:57:
25:fb:91:a8:3d:b7:8b:2f:5e:51:f7:6a:27:b2:5b:
ea:90:86:8e:0a:28:2d:59:99:d2:bc:60:9c:f8:4c:
19:26:e2:5e:15:29:9d:8e:55:13:cc:83:6d:94:0d:
d4:75:70:a7:1d:ca:58:00:9e:ab:4c:66:bb:34:99:
c4:8a:77:74:eb:81:5e:90:9e:ad:42:e9:6c:cb:cb:
d5:d2:8d:99:26:d4:24:d7:57:f0:23:e5:d7:00:95:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8A:C9:21:C7:FA:6D:64:C4:A6:45:CE:75:81:D6:14:EB:A3:B3:E7
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/xIrJIcf6bWTEpkXOdYHWFOujs-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.242.0/24
185.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1e:d6:45:11:54:f4:04:f4:8f:dc:51:7c:d7:cf:5e:93:d9:
08:41:d4:89:05:23:d3:1c:13:8f:28:98:db:73:18:90:fb:85:
4a:d9:37:4c:cb:e2:af:fd:71:20:ef:05:2c:57:ed:24:33:af:
47:3e:e7:74:29:99:5c:0c:cc:87:79:0f:0a:ef:c5:43:79:fc:
9c:71:c6:33:36:65:60:0e:8d:5f:92:35:39:c5:13:60:4e:61:
71:96:ab:c4:45:35:a1:7e:e9:1d:0a:15:4a:f7:1f:34:2c:00:
6b:69:ce:5b:b3:e8:31:26:86:94:b5:d3:ce:05:2c:d9:8e:61:
3b:49:09:3d:f3:0f:75:54:bf:33:0b:a3:f5:b0:4f:0d:d0:73:
79:c5:77:a7:56:91:16:9a:73:55:eb:6f:a0:0f:a7:53:60:21:
f8:cd:78:e0:75:88:82:bc:98:b0:0b:db:5a:b6:6e:5b:1e:a9:
4e:dc:44:9b:5f:60:2a:b0:76:8a:9b:19:ff:9a:70:95:25:50:
65:3e:d9:bc:38:d5:7d:5d:99:90:bc:79:c4:d0:11:45:eb:d3:
7a:f3:cd:aa:72:de:21:f9:0d:53:c0:a9:56:a1:27:54:da:0f:
7c:a7:bd:22:a2:92:e7:21:bd:b6:21:c3:99:2a:e0:16:e8:37:
6f:74:5c:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMs/0FHir8VD1nSkF6GckGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm
MTZhOWYwHhcNMjIwOTExMTQ0MTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDhhYzkyMWM3ZmE2ZDY0YzRhNjQ1Y2U3NTgxZDYxNGViYTNiM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ5AXP/kzdAUlOc3ad8k774/CwGo
GrrXcjI3tDM6ykwGmq4a4MHsYk9YkhE1W04JshwyuTtxrqXuiPJ7Ogg3j1+drsi+
y+azCOWZGP1SGFqS7pUpc7ZxCkvR/G+Wi+fav1gqo6+lxw3w6lVUgMJ1H8p9qVwu
OT4WK+jZ6zSIo8YhvI3j7k+3N5dFe/y7tpO6mnUjtT0KHefC4Ng1DY2zKrLSvFcl
+5GoPbeLL15R92onslvqkIaOCigtWZnSvGCc+EwZJuJeFSmdjlUTzINtlA3UdXCn
HcpYAJ6rTGa7NJnEind064FekJ6tQulsy8vV0o2ZJtQk11fwI+XXAJWz7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMSKySHH+m1kxKZFznWB1hTro7PnMB8GA1UdIwQY
MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt
ODZhNTUxOGUyZDUyLzEveElySkljZjZiV1RFcGtYT2RZSFdGT3Vqcy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy
LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY/yAwQA
ucj1MA0GCSqGSIb3DQEBCwUAA4IBAQBHHtZFEVT0BPSP3FF8189ek9kIQdSJBSPT
HBOPKJjbcxiQ+4VK2TdMy+Kv/XEg7wUsV+0kM69HPud0KZlcDMyHeQ8K78VDefyc
ccYzNmVgDo1fkjU5xRNgTmFxlqvERTWhfukdChVK9x80LABrac5bs+gxJoaUtdPO
BSzZjmE7SQk98w91VL8zC6P1sE8N0HN5xXenVpEWmnNV62+gD6dTYCH4zXjgdYiC
vJiwC9tatm5bHqlO3ESbX2AqsHaKmxn/mnCVJVBlPtm8ONV9XZmQvHnE0BFF69N6
882qct4h+Q1TwKlWoSdU2g98p70iopLnIb22IcOZKuAW6DdvdFxH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org