Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/R_bn7zr2L5zDyywpldWZYaVCGQA.roa
File: R_bn7zr2L5zDyywpldWZYaVCGQA.roa (raw, json)
Hash identifier: a+0RhdD7psPh4httl7gPnTlTd7o+OwzNnVWp5gUpwbU=
Subject key identifier: 47:F6:E7:EF:3A:F6:2F:9C:C3:CB:2C:29:95:D5:99:61:A5:42:19:00
Certificate issuer: /CN=eb8e6be2f8da5a6250786fddac0740be89ca6d7c
Certificate serial: 024BBA8E
Authority key identifier: EB:8E:6B:E2:F8:DA:5A:62:50:78:6F:DD:AC:07:40:BE:89:CA:6D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/645r4vjaWmJQeG_drAdAvonKbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/R_bn7zr2L5zDyywpldWZYaVCGQA.roa
Signing time: Sat 01 Jan 2022 14:57:30 +0000
ROA not before: Sat 01 Jan 2022 14:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202074
IP address blocks: 185.235.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38517390 (0x24bba8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb8e6be2f8da5a6250786fddac0740be89ca6d7c
Validity
Not Before: Jan 1 14:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47f6e7ef3af62f9cc3cb2c2995d59961a5421900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0b:56:b2:28:98:9c:9c:53:66:a1:0c:66:3e:
4e:dd:60:c8:b1:88:64:5a:c2:cd:aa:7b:0e:1c:d3:
fb:44:b4:c0:a3:3e:bf:af:fb:4c:7d:86:98:26:10:
8d:79:bc:65:d6:5d:d9:96:ad:2a:bc:22:33:5f:01:
9f:5d:43:d5:60:bb:9e:79:d5:50:f1:a0:79:f2:a0:
65:7c:87:b9:8c:4d:14:d6:cd:cf:63:20:32:c6:01:
cc:6c:61:70:c3:12:74:60:21:61:86:f9:11:d0:f1:
a3:c0:cc:dc:c0:d4:ee:f9:11:bd:0a:b2:d2:5e:90:
26:95:2e:80:45:77:db:a6:4e:45:72:16:17:5e:2f:
8c:d3:f5:26:49:3b:c0:3b:65:6d:b1:8e:7e:c7:89:
3e:ba:ed:54:33:81:76:9b:d7:13:20:85:fd:b6:25:
aa:43:c3:79:54:06:14:99:e3:cb:05:45:95:17:6b:
f6:b7:19:f2:1d:f4:45:f5:cd:8b:c0:10:00:e6:52:
0f:a6:71:8e:ae:d5:75:a9:22:f6:fb:c4:d2:b2:8c:
9f:c5:6e:05:5d:26:d3:0a:ab:45:d5:51:af:13:9c:
54:79:33:a6:88:b3:92:67:01:62:5c:d1:77:51:e8:
ba:25:b1:bc:77:4c:3e:22:48:d8:2f:2a:4f:70:ad:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:E7:EF:3A:F6:2F:9C:C3:CB:2C:29:95:D5:99:61:A5:42:19:00
X509v3 Authority Key Identifier:
keyid:EB:8E:6B:E2:F8:DA:5A:62:50:78:6F:DD:AC:07:40:BE:89:CA:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/645r4vjaWmJQeG_drAdAvonKbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/R_bn7zr2L5zDyywpldWZYaVCGQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/645r4vjaWmJQeG_drAdAvonKbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.204.0/24
Signature Algorithm: sha256WithRSAEncryption
23:56:ce:a6:a0:63:65:36:c5:94:36:44:09:e8:98:bc:39:28:
e4:32:ad:28:56:86:22:38:cb:80:41:e6:06:e0:d1:af:c4:88:
e8:a7:41:11:39:32:2f:40:60:03:c6:ee:af:3b:93:0b:62:01:
58:64:bd:f8:98:7c:c9:97:76:5c:29:ba:55:2c:c9:01:13:87:
e5:98:d1:48:cc:f2:d9:0b:e0:5b:06:2b:de:86:3e:61:e6:ba:
02:78:88:c3:71:5f:73:11:b9:06:bc:07:a2:15:27:da:aa:ca:
9a:2f:40:24:17:4c:77:30:c3:5b:66:5b:18:d9:17:85:f2:34:
49:00:8a:0b:c5:2a:9e:33:79:24:db:ab:50:91:dc:dd:0a:e6:
05:87:70:d6:a1:6a:d2:27:de:8f:5e:32:8a:a2:3b:dd:04:e5:
3b:a1:b1:9d:fa:28:94:7c:22:63:0e:85:cf:00:93:56:ee:3a:
32:fb:8f:2a:ed:61:a5:90:ac:11:18:33:e9:8d:e7:c2:fc:cb:
82:73:83:7f:a8:dc:b2:38:24:19:4a:ec:fe:a3:22:86:8b:16:
49:38:10:31:ae:99:57:32:17:80:22:fc:06:44:d9:f4:35:a3:
d9:b7:f1:c4:9a:b2:f6:2c:c1:f7:dc:53:bf:1e:a6:d1:7d:21:
0a:44:3c:27
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAku6jjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YjhlNmJlMmY4ZGE1YTYyNTA3ODZmZGRhYzA3NDBiZTg5Y2E2ZDdjMB4XDTIyMDEw
MTE0NTczMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDdmNmU3ZWYzYWY2
MmY5Y2MzY2IyYzI5OTVkNTk5NjFhNTQyMTkwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIoLVrIomJycU2ahDGY+Tt1gyLGIZFrCzap7DhzT+0S0wKM+
v6/7TH2GmCYQjXm8ZdZd2ZatKrwiM18Bn11D1WC7nnnVUPGgefKgZXyHuYxNFNbN
z2MgMsYBzGxhcMMSdGAhYYb5EdDxo8DM3MDU7vkRvQqy0l6QJpUugEV326ZORXIW
F14vjNP1Jkk7wDtlbbGOfseJPrrtVDOBdpvXEyCF/bYlqkPDeVQGFJnjywVFlRdr
9rcZ8h30RfXNi8AQAOZSD6Zxjq7Vdaki9vvE0rKMn8VuBV0m0wqrRdVRrxOcVHkz
poizkmcBYlzRd1HouiWxvHdMPiJI2C8qT3Ct55sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRH9ufvOvYvnMPLLCmV1ZlhpUIZADAfBgNVHSMEGDAWgBTrjmvi+NpaYlB4
b92sB0C+icptfDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzY0NXI0dmphV21KUWVHX2RyQWRBdm9uS2JYdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvNDJlZGJkLWNlZWItNDEwYS04ZmVmLWVjYzViMDgyY2EwMi8x
L1JfYm43enIyTDV6RHl5d3BsZFdaWWFWQ0dRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
NDJlZGJkLWNlZWItNDEwYS04ZmVmLWVjYzViMDgyY2EwMi8xLzY0NXI0dmphV21K
UWVHX2RyQWRBdm9uS2JYdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnrzDANBgkqhkiG9w0BAQsFAAOC
AQEAI1bOpqBjZTbFlDZECeiYvDko5DKtKFaGIjjLgEHmBuDRr8SI6KdBETkyL0Bg
A8burzuTC2IBWGS9+Jh8yZd2XCm6VSzJAROH5ZjRSMzy2QvgWwYr3oY+Yea6AniI
w3FfcxG5BrwHohUn2qrKmi9AJBdMdzDDW2ZbGNkXhfI0SQCKC8UqnjN5JNurUJHc
3QrmBYdw1qFq0ifej14yiqI73QTlO6GxnfoolHwiYw6FzwCTVu46MvuPKu1hpZCs
ERgz6Y3nwvzLgnODf6jcsjgkGUrs/qMihosWSTgQMa6ZVzIXgCL8BkTZ9DWj2bfx
xJqy9izB99xTvx6m0X0hCkQ8Jw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:26 2023 by rpki-client on console-ams.rpki-client.org