Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/IssyzGV80tdVYfIXwJBVQ4bto2Y.roa
File: IssyzGV80tdVYfIXwJBVQ4bto2Y.roa (raw, json)
Hash identifier: 0hJRixuF8vdWJV5AxmzK/Kki3b0jclkTcd2GZEW8gG4=
Subject key identifier: 22:CB:32:CC:65:7C:D2:D7:55:61:F2:17:C0:90:55:43:86:ED:A3:66
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 3886392A
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/IssyzGV80tdVYfIXwJBVQ4bto2Y.roa
Signing time: Fri 11 Mar 2022 23:26:54 +0000
ROA not before: Fri 11 Mar 2022 23:26:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210776
IP address blocks: 185.242.220.0/24 maxlen: 24
185.242.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948320554 (0x3886392a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Mar 11 23:26:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22cb32cc657cd2d75561f217c090554386eda366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:8e:0d:16:1a:e2:67:5b:83:aa:52:1d:2a:
e4:e0:3a:d1:aa:d5:db:e6:68:35:cb:6b:06:e9:4b:
03:17:75:28:7d:46:15:6c:be:16:ef:6c:68:e3:f4:
2a:66:11:79:40:b9:bd:fa:c4:58:3c:46:da:7c:f1:
dd:dc:16:0b:38:36:ef:0f:50:86:00:71:4c:04:1a:
bb:ae:f3:d9:80:7b:84:5d:a3:46:93:1e:8d:8f:45:
46:7c:0c:0e:e1:2c:eb:f8:df:9a:db:78:c6:e2:34:
cd:09:1d:4d:94:d7:90:51:0c:70:8a:63:b0:06:47:
c5:0f:cb:7b:6e:c0:3f:ed:85:55:58:19:a8:6b:b1:
8d:b7:8b:bf:d2:e1:63:fa:d7:68:e0:2c:ce:b5:e8:
6a:62:d8:d9:9c:cf:04:ca:9d:f2:8f:f4:db:10:84:
9b:eb:ea:a3:8c:cc:ff:ca:e6:7d:18:d4:f0:37:af:
c3:e7:3a:4e:e4:dd:c8:c3:72:5c:65:04:4a:4e:dd:
78:72:97:df:83:ac:91:08:a0:80:df:bf:e0:ae:a6:
4b:fb:2b:57:00:7f:bc:47:ae:ba:78:46:fe:3b:c0:
13:ba:fd:e7:53:9e:b7:15:a4:63:9a:01:ff:5d:a1:
7c:fb:1f:eb:0b:37:f5:dd:59:94:e8:f3:3c:d1:1e:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:32:CC:65:7C:D2:D7:55:61:F2:17:C0:90:55:43:86:ED:A3:66
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/IssyzGV80tdVYfIXwJBVQ4bto2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.220.0/23
Signature Algorithm: sha256WithRSAEncryption
68:11:57:74:02:5b:53:c5:61:9f:45:45:ca:3c:01:79:8b:6c:
c4:41:ec:39:7a:50:f4:c9:8b:15:d1:ab:3e:62:25:ea:07:41:
5d:7f:96:0c:37:89:9b:c9:b0:3a:ed:d6:8f:64:1e:38:0b:df:
7f:5c:aa:66:f0:e8:2a:b0:a3:86:d1:6d:1c:2b:db:40:72:ef:
b7:f3:a6:ba:4a:78:88:9a:27:af:ea:c0:be:9c:7b:08:bd:57:
b2:8d:be:12:c5:3b:55:bc:f9:8d:45:22:d3:91:74:5a:fc:fc:
00:24:b0:68:30:8d:35:71:31:67:82:cd:9d:73:1d:9c:32:b3:
4a:60:93:a1:75:59:a6:37:a9:8b:5a:17:9f:ea:d7:1f:49:a9:
57:c0:22:e7:41:9c:aa:56:df:26:af:3b:31:18:9a:85:4c:7b:
34:7b:3c:09:62:e2:95:cb:aa:35:7c:02:7c:72:21:d0:fc:7b:
8c:5a:00:96:d4:2c:e5:1a:ab:91:f3:29:10:6d:2c:a0:5c:ba:
0f:41:72:16:af:8b:85:c9:53:36:d4:bd:32:4b:f1:90:b7:6b:
e9:7c:b5:6f:48:67:9c:99:0f:90:d1:d9:aa:e0:d9:f5:8f:11:
70:56:5f:ac:e1:14:a6:42:1d:fa:45:25:cd:0b:f0:6d:9e:3a:
63:92:17:90
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOIY5KjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Yzk2OTQ2YzUwMWRkZjQ4Njk2ZGEyY2YxMTBmZGNlYjI4NmZhYzk4MB4XDTIyMDMx
MTIzMjY1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJjYjMyY2M2NTdj
ZDJkNzU1NjFmMjE3YzA5MDU1NDM4NmVkYTM2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxdjg0WGuJnW4OqUh0q5OA60arV2+ZoNctrBulLAxd1KH1G
FWy+Fu9saOP0KmYReUC5vfrEWDxG2nzx3dwWCzg27w9QhgBxTAQau67z2YB7hF2j
RpMejY9FRnwMDuEs6/jfmtt4xuI0zQkdTZTXkFEMcIpjsAZHxQ/Le27AP+2FVVgZ
qGuxjbeLv9LhY/rXaOAszrXoamLY2ZzPBMqd8o/02xCEm+vqo4zM/8rmfRjU8Dev
w+c6TuTdyMNyXGUESk7deHKX34OskQiggN+/4K6mS/srVwB/vEeuunhG/jvAE7r9
51OetxWkY5oB/12hfPsf6ws39d1ZlOjzPNEeLikCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQiyzLMZXzS11Vh8hfAkFVDhu2jZjAfBgNVHSMEGDAWgBQslpRsUB3fSGlt
os8RD9zrKG+smDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xKYVViRkFkMzBocGJhTFBFUV9jNnlodnJKZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvMDRmZWY4LWQyZGYtNGY3YS05MmI0LTdmOTcwYTNhZjljZC8x
L0lzc3l6R1Y4MHRkVllmSVh3SkJWUTRidG8yWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
MDRmZWY4LWQyZGYtNGY3YS05MmI0LTdmOTcwYTNhZjljZC8xL0xKYVViRkFkMzBo
cGJhTFBFUV9jNnlodnJKZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbny3DANBgkqhkiG9w0BAQsFAAOC
AQEAaBFXdAJbU8Vhn0VFyjwBeYtsxEHsOXpQ9MmLFdGrPmIl6gdBXX+WDDeJm8mw
Ou3Wj2QeOAvff1yqZvDoKrCjhtFtHCvbQHLvt/Omukp4iJonr+rAvpx7CL1Xso2+
EsU7Vbz5jUUi05F0Wvz8ACSwaDCNNXExZ4LNnXMdnDKzSmCToXVZpjepi1oXn+rX
H0mpV8Ai50GcqlbfJq87MRiahUx7NHs8CWLilcuqNXwCfHIh0Px7jFoAltQs5Rqr
kfMpEG0soFy6D0FyFq+LhclTNtS9MkvxkLdr6Xy1b0hnnJkPkNHZquDZ9Y8RcFZf
rOEUpkId+kUlzQvwbZ46Y5IXkA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:03 2024 by rpki-client on console-ams.rpki-client.org