Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/lV7LTb3WgP4FnxYWFWQAs8ZvgOo.roa
File: lV7LTb3WgP4FnxYWFWQAs8ZvgOo.roa (raw, json)
Hash identifier: z/Nch+E38JjMa1AvsmC19V9X9v+rZUOPftcbtRuXX84=
Subject key identifier: 95:5E:CB:4D:BD:D6:80:FE:05:9F:16:16:15:64:00:B3:C6:6F:80:EA
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 37EBAF4B
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/lV7LTb3WgP4FnxYWFWQAs8ZvgOo.roa
Signing time: Sat 01 Jan 2022 00:54:57 +0000
ROA not before: Sat 01 Jan 2022 00:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198730
IP address blocks: 185.223.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938192715 (0x37ebaf4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 1 00:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=955ecb4dbdd680fe059f1616156400b3c66f80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:ed:7f:38:cc:c3:f3:67:d5:a3:d7:cc:07:
6e:45:6c:fc:d5:5b:2f:57:04:f4:8f:53:bb:94:c1:
dd:ee:6e:c5:d0:86:1a:41:d3:7a:37:7b:86:36:9e:
f3:da:fd:ad:39:dd:9c:5e:3c:22:bc:da:5c:e2:05:
7d:c0:e9:b8:e6:59:50:9d:5b:50:d9:0a:d3:b0:c2:
98:64:4b:45:16:af:6d:ad:a4:34:2e:51:be:81:be:
a9:86:df:5f:a0:58:a7:d4:d7:5b:bb:49:00:d1:9c:
14:2f:de:c7:e6:eb:8b:d9:6e:07:de:f8:ec:ef:95:
21:fd:ab:15:0f:1f:62:75:87:25:01:56:c2:bf:ba:
57:8f:07:45:ac:ee:c0:e3:ff:f9:55:b7:65:56:f7:
b6:91:c3:ca:45:b0:dc:ec:65:b2:ae:20:78:c9:29:
36:02:3a:13:13:64:88:3c:1f:87:21:f6:50:be:9c:
24:a5:4a:a2:d2:3a:9d:9d:fb:3e:ae:a9:f3:d4:0f:
60:0e:55:0b:8e:10:4c:bd:1a:84:5d:c3:0e:81:d6:
9a:d2:a0:c5:fd:b2:39:d5:66:2d:02:61:93:9d:bb:
e8:2c:87:37:03:47:02:5c:33:4d:01:5c:f4:6b:d7:
6c:1b:5f:5d:89:c6:be:31:b6:5e:a9:77:13:0b:59:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:CB:4D:BD:D6:80:FE:05:9F:16:16:15:64:00:B3:C6:6F:80:EA
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/lV7LTb3WgP4FnxYWFWQAs8ZvgOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bf:fa:28:99:8c:69:20:5a:a2:a7:48:13:a2:9b:8e:9d:5d:
ce:ae:2c:cc:47:dd:75:69:d8:3d:c8:07:df:71:cc:c2:a2:30:
eb:98:19:ca:49:44:de:4e:ed:16:43:cc:56:7c:c5:22:30:6d:
60:b7:fe:a4:e6:0e:5c:f4:1c:b6:e1:12:6d:ff:75:d9:2e:3c:
bc:3f:d9:27:0a:6a:03:2c:f9:0d:27:cb:87:0b:23:16:43:2d:
db:ed:45:b6:bf:27:cc:45:6d:b1:26:a1:64:a8:2b:cb:bd:dc:
b6:0a:1b:bb:13:64:de:62:12:68:9f:1a:90:ea:79:67:ac:eb:
ff:b0:58:31:a2:b6:6f:56:19:25:a9:c7:53:92:24:49:74:4b:
08:e9:04:8a:a4:d5:63:39:37:5a:15:d6:24:2c:c6:f5:92:ef:
17:c4:8a:4d:bb:99:bc:da:61:1e:26:31:73:8d:e2:bf:9e:4a:
4c:1e:2b:89:00:d9:25:26:af:50:66:b1:93:84:26:6b:69:4c:
91:5f:81:e1:29:94:6a:1e:04:0f:8d:d1:5e:9f:7b:83:d7:91:
c5:3b:f4:c7:c4:07:f5:97:b7:dd:ed:4c:31:62:d3:cb:ae:c4:
4f:97:9f:b9:15:9c:5c:7f:6c:63:85:af:75:e8:39:16:41:4f:
a7:94:d7:ce
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN+uvSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Yzk2OTQ2YzUwMWRkZjQ4Njk2ZGEyY2YxMTBmZGNlYjI4NmZhYzk4MB4XDTIyMDEw
MTAwNTQ1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU1ZWNiNGRiZGQ2
ODBmZTA1OWYxNjE2MTU2NDAwYjNjNjZmODBlYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOBt7X84zMPzZ9Wj18wHbkVs/NVbL1cE9I9Tu5TB3e5uxdCG
GkHTejd7hjae89r9rTndnF48IrzaXOIFfcDpuOZZUJ1bUNkK07DCmGRLRRavba2k
NC5RvoG+qYbfX6BYp9TXW7tJANGcFC/ex+bri9luB9747O+VIf2rFQ8fYnWHJQFW
wr+6V48HRazuwOP/+VW3ZVb3tpHDykWw3Oxlsq4geMkpNgI6ExNkiDwfhyH2UL6c
JKVKotI6nZ37Pq6p89QPYA5VC44QTL0ahF3DDoHWmtKgxf2yOdVmLQJhk5276CyH
NwNHAlwzTQFc9GvXbBtfXYnGvjG2Xql3EwtZL10CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVXstNvdaA/gWfFhYVZACzxm+A6jAfBgNVHSMEGDAWgBQslpRsUB3fSGlt
os8RD9zrKG+smDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xKYVViRkFkMzBocGJhTFBFUV9jNnlodnJKZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvMDRmZWY4LWQyZGYtNGY3YS05MmI0LTdmOTcwYTNhZjljZC8x
L2xWN0xUYjNXZ1A0Rm54WVdGV1FBczhadmdPby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
MDRmZWY4LWQyZGYtNGY3YS05MmI0LTdmOTcwYTNhZjljZC8xL0xKYVViRkFkMzBo
cGJhTFBFUV9jNnlodnJKZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnfVDANBgkqhkiG9w0BAQsFAAOC
AQEAO7/6KJmMaSBaoqdIE6Kbjp1dzq4szEfddWnYPcgH33HMwqIw65gZyklE3k7t
FkPMVnzFIjBtYLf+pOYOXPQctuESbf912S48vD/ZJwpqAyz5DSfLhwsjFkMt2+1F
tr8nzEVtsSahZKgry73ctgobuxNk3mISaJ8akOp5Z6zr/7BYMaK2b1YZJanHU5Ik
SXRLCOkEiqTVYzk3WhXWJCzG9ZLvF8SKTbuZvNphHiYxc43iv55KTB4riQDZJSav
UGaxk4Qma2lMkV+B4SmUah4ED43RXp97g9eRxTv0x8QH9Ze33e1MMWLTy67ET5ef
uRWcXH9sY4Wvdeg5FkFPp5TXzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:03 2024 by rpki-client on console-ams.rpki-client.org