Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/CKEdsjPCKzcnkJ4vl-eqy156lDw.roa
File: CKEdsjPCKzcnkJ4vl-eqy156lDw.roa (raw, json)
Hash identifier: 5s1edLjhMkimKwLnd9oa2zPGGOKQf+uGTaHL0uy/FPY=
Subject key identifier: 08:A1:1D:B2:33:C2:2B:37:27:90:9E:2F:97:E7:AA:CB:5E:7A:94:3C
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 05811AA1
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/CKEdsjPCKzcnkJ4vl-eqy156lDw.roa
Signing time: Fri 25 Mar 2022 15:31:09 +0000
ROA not before: Fri 25 Mar 2022 15:31:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49584
IP address blocks: 185.179.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92347041 (0x5811aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Mar 25 15:31:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08a11db233c22b3727909e2f97e7aacb5e7a943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:5f:52:e5:f7:77:d2:b7:6f:61:1a:c4:ad:
93:04:01:e8:bb:93:62:cc:ef:b5:0c:6c:f9:01:ac:
99:18:b2:a2:e4:6c:37:88:72:7b:10:89:6c:73:d4:
9a:1e:0d:c0:57:f8:bb:0b:bd:e7:b4:82:76:fc:76:
35:73:64:d3:03:1c:ab:3a:34:5a:25:bb:37:d3:68:
f3:80:9e:a7:62:8d:f9:fb:b4:16:c1:f2:a3:8b:f0:
fd:e5:09:75:7e:c7:31:0a:3a:e5:ec:ec:b5:06:55:
f4:28:77:1d:d9:10:1f:4d:d4:f4:50:4e:ce:28:4a:
7d:00:33:c1:f7:21:aa:be:05:6a:51:cc:b4:39:ee:
a8:aa:aa:8d:43:b5:90:ef:1d:41:25:54:c5:0a:8e:
c2:fa:43:90:f6:77:96:13:71:4d:c6:b3:e3:db:01:
25:c4:9c:ee:ff:50:78:3c:f1:55:97:9b:4b:4b:3f:
e1:fb:13:39:5b:4d:90:17:22:f9:f7:ef:fe:bc:35:
05:ed:e0:1f:c0:1a:60:49:e4:f3:ca:c2:42:e4:b1:
20:f1:82:14:ce:89:4b:25:dc:b7:5e:51:f4:5c:91:
37:ce:54:d3:c9:da:01:76:35:30:5e:29:3f:c7:d2:
8b:50:08:04:1e:4b:46:17:e0:a4:32:ce:f7:86:e9:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:1D:B2:33:C2:2B:37:27:90:9E:2F:97:E7:AA:CB:5E:7A:94:3C
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/CKEdsjPCKzcnkJ4vl-eqy156lDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.114.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b8:18:99:69:da:ae:90:e7:a1:dd:af:98:64:b3:19:3d:07:
17:da:3e:e3:b9:2c:3a:81:35:3f:45:a9:1b:fd:38:1b:72:50:
21:df:e8:b8:de:3e:3e:d3:9f:59:6c:ad:8b:19:9a:02:78:90:
c0:d7:a8:ce:2e:2d:42:e5:de:0e:09:ec:96:ac:15:e6:e2:f6:
6c:ff:77:a6:59:81:ae:c7:d6:9c:87:ab:4d:28:91:df:85:62:
d8:22:08:b1:ac:ff:7e:78:91:ef:9b:77:fa:70:65:d7:e2:4f:
72:f3:b3:11:7c:9c:36:05:1c:2c:51:15:a6:61:3f:8f:b4:6a:
64:63:72:30:e3:4e:71:bb:d7:29:07:39:e5:01:d0:a1:01:b7:
85:d7:ec:ee:ab:25:9c:9d:55:99:e1:1d:6b:d4:47:3f:79:47:
1d:43:77:34:3b:9a:37:86:32:7a:43:21:65:d9:41:f5:8b:0b:
23:8a:9b:86:a1:5e:ba:7a:e7:ef:e2:b8:bd:3a:11:59:35:ca:
12:35:7c:b1:09:99:ee:c0:d5:c6:9d:fa:55:bf:b8:4c:e1:87:
0d:0d:61:46:e4:e9:4c:1d:2a:ee:43:03:3d:7e:71:5b:d4:6d:
87:4c:f2:dc:67:a0:43:f7:3b:d7:bd:df:c8:3d:2c:61:14:05:
52:3c:20:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBYEaoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
M2UyM2FiYWUzY2YwYjM1MTI2MGQ2NmYzMjMzOTkyOGZkZGYyZWJiMB4XDTIyMDMy
NTE1MzEwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhhMTFkYjIzM2My
MmIzNzI3OTA5ZTJmOTdlN2FhY2I1ZTdhOTQzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3KX1Ll93fSt29hGsStkwQB6LuTYszvtQxs+QGsmRiyouRs
N4hyexCJbHPUmh4NwFf4uwu957SCdvx2NXNk0wMcqzo0WiW7N9No84Cep2KN+fu0
FsHyo4vw/eUJdX7HMQo65ezstQZV9Ch3HdkQH03U9FBOzihKfQAzwfchqr4FalHM
tDnuqKqqjUO1kO8dQSVUxQqOwvpDkPZ3lhNxTcaz49sBJcSc7v9QeDzxVZebS0s/
4fsTOVtNkBci+ffv/rw1Be3gH8AaYEnk88rCQuSxIPGCFM6JSyXct15R9FyRN85U
08naAXY1MF4pP8fSi1AIBB5LRhfgpDLO94bp2bECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQIoR2yM8IrNyeQni+X56rLXnqUPDAfBgNVHSMEGDAWgBTz4jq6488LNRJg
1m8yM5ko/d8uuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzgtSTZ1dVBQQ3pVU1lOWnZNak9aS1AzZkxycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvMDg2OGFmLWYyZDctNDkwNS04OGQyLTlkYjY2NjU0NDljYi8x
L0NLRWRzalBDS3pjbmtKNHZsLWVxeTE1NmxEdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
MDg2OGFmLWYyZDctNDkwNS04OGQyLTlkYjY2NjU0NDljYi8xLzgtSTZ1dVBQQ3pV
U1lOWnZNak9aS1AzZkxycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmzcjANBgkqhkiG9w0BAQsFAAOC
AQEAXbgYmWnarpDnod2vmGSzGT0HF9o+47ksOoE1P0WpG/04G3JQId/ouN4+PtOf
WWytixmaAniQwNeozi4tQuXeDgnslqwV5uL2bP93plmBrsfWnIerTSiR34Vi2CII
saz/fniR75t3+nBl1+JPcvOzEXycNgUcLFEVpmE/j7RqZGNyMONOcbvXKQc55QHQ
oQG3hdfs7qslnJ1VmeEda9RHP3lHHUN3NDuaN4YyekMhZdlB9YsLI4qbhqFeunrn
7+K4vToRWTXKEjV8sQmZ7sDVxp36Vb+4TOGHDQ1hRuTpTB0q7kMDPX5xW9Rth0zy
3GegQ/c7173fyD0sYRQFUjwgZQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:21 2023 by rpki-client on console-ams.rpki-client.org