Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/vy1o0mhbooVGbWzDpbMebmAi6FI.roa
File: vy1o0mhbooVGbWzDpbMebmAi6FI.roa (raw, json)
Hash identifier: PmnwuHPDuhPZz5zFywJOJFU2lgvD7sIFQgAIMs1huFw=
Subject key identifier: BF:2D:68:D2:68:5B:A2:85:46:6D:6C:C3:A5:B3:1E:6E:60:22:E8:52
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 04EAC46E
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/vy1o0mhbooVGbWzDpbMebmAi6FI.roa
Signing time: Sat 01 Jan 2022 15:03:40 +0000
ROA not before: Sat 01 Jan 2022 15:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 185.64.24.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82494574 (0x4eac46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jan 1 15:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf2d68d2685ba285466d6cc3a5b31e6e6022e852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:f0:de:fb:61:4e:c3:38:e4:a6:43:d7:30:
bb:49:7d:b7:d7:de:5b:95:3a:fc:b8:3d:13:be:a5:
74:d8:e4:c3:9d:4a:0b:c9:c7:05:91:62:81:a6:34:
5e:76:df:71:d4:b0:cc:b1:47:39:c9:94:f1:c2:a7:
ff:86:c3:4c:ef:33:25:1b:4d:55:ac:00:1e:18:c6:
f6:ba:5d:ca:cb:c3:6e:e1:0f:b5:ab:bf:76:ad:90:
02:62:9d:2d:48:c4:57:f3:cf:33:bd:14:24:2a:50:
ef:16:f5:91:52:ec:53:0d:db:b0:55:28:75:9f:f7:
66:c9:82:97:da:0d:d0:1c:dd:a4:09:a2:3b:2a:18:
1d:f5:d8:dc:81:0c:00:36:7f:32:5b:ed:ed:d0:f4:
95:21:c9:13:8c:36:7f:43:e7:4e:f7:6e:52:7e:ba:
b2:33:ac:2a:05:fb:ed:50:cc:72:27:9d:8f:8d:a3:
a0:14:ac:42:f6:0b:df:bc:7f:ed:43:39:4d:b4:52:
1d:65:36:43:67:16:0b:d1:f7:aa:20:04:6b:7b:90:
5d:a7:c4:06:05:0a:7e:cc:22:5a:01:c3:0c:a3:81:
86:bf:df:a5:f7:83:cd:c5:e0:48:39:20:05:7a:97:
f3:c7:1a:83:9a:c7:13:97:46:73:6c:1b:35:b3:c0:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2D:68:D2:68:5B:A2:85:46:6D:6C:C3:A5:B3:1E:6E:60:22:E8:52
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/vy1o0mhbooVGbWzDpbMebmAi6FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.24.0/22
Signature Algorithm: sha256WithRSAEncryption
57:c2:59:7b:1e:90:a6:56:e1:ba:ca:8d:e9:0b:71:46:ac:7f:
e5:9a:84:a9:d7:7d:21:c7:bd:ac:96:8a:b4:c6:e1:7c:ea:e1:
18:27:6a:53:d7:2a:ae:57:a8:bf:60:2b:3e:ce:f3:a2:fb:71:
69:58:6d:9e:7f:4f:9b:d1:68:27:fa:f3:a3:1d:21:b5:b6:5a:
aa:45:ef:7e:e1:ff:61:14:9b:76:50:b8:70:fb:e2:1c:f5:63:
56:91:15:f7:8d:e9:1a:e3:14:82:7b:1e:7c:ca:98:5f:34:16:
ec:71:e5:5c:ca:b5:71:7b:16:f4:9b:94:88:14:e5:6f:85:ef:
c6:6d:3e:5b:3a:3c:51:fc:fc:f4:04:80:ef:05:39:5b:a7:c5:
cb:f3:1e:73:c8:b7:62:9d:6a:9d:d3:3e:d0:a0:d1:a5:31:ac:
ef:05:da:71:44:ed:27:d6:33:ab:e0:df:8d:d5:d5:69:10:cc:
2f:f4:36:f8:89:b9:2a:cb:94:cf:0a:2e:c6:48:ce:7c:f2:6e:
66:c9:ce:8d:e2:02:17:20:1c:de:63:e7:4c:55:4d:e7:01:eb:
12:b7:f3:7c:0a:5e:a9:b6:9f:1e:65:ef:c8:1a:c7:37:bb:d3:
9c:b3:10:52:55:12:ca:5b:44:46:af:85:11:13:c0:e4:e4:88:
d1:c6:c8:4b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOrEbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGEzMWFiMDMzY2ZkMmRlZTY4NTJmYTlkOGJmNWE0YTBlMzUyNDE0MB4XDTIyMDEw
MTE1MDM0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmYyZDY4ZDI2ODVi
YTI4NTQ2NmQ2Y2MzYTViMzFlNmU2MDIyZTg1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOkR8N77YU7DOOSmQ9cwu0l9t9feW5U6/Lg9E76ldNjkw51K
C8nHBZFigaY0XnbfcdSwzLFHOcmU8cKn/4bDTO8zJRtNVawAHhjG9rpdysvDbuEP
tau/dq2QAmKdLUjEV/PPM70UJCpQ7xb1kVLsUw3bsFUodZ/3ZsmCl9oN0BzdpAmi
OyoYHfXY3IEMADZ/Mlvt7dD0lSHJE4w2f0PnTvduUn66sjOsKgX77VDMciedj42j
oBSsQvYL37x/7UM5TbRSHWU2Q2cWC9H3qiAEa3uQXafEBgUKfswiWgHDDKOBhr/f
pfeDzcXgSDkgBXqX88cag5rHE5dGc2wbNbPACWECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS/LWjSaFuihUZtbMOlsx5uYCLoUjAfBgNVHSMEGDAWgBRUoxqwM8/S3uaF
L6nYv1pKDjUkFDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZLTWFzRFBQMHQ3bWhTLXAyTDlhU2c0MUpCUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvMDgwMzYxLTFiYmUtNDc2My04MDBiLTYxOWMyNjE5NDE2OC8x
L3Z5MW8wbWhib29WR2JXekRwYk1lYm1BaTZGSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
MDgwMzYxLTFiYmUtNDc2My04MDBiLTYxOWMyNjE5NDE2OC8xL1ZLTWFzRFBQMHQ3
bWhTLXAyTDlhU2c0MUpCUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlAGDANBgkqhkiG9w0BAQsFAAOC
AQEAV8JZex6QplbhusqN6QtxRqx/5ZqEqdd9Ice9rJaKtMbhfOrhGCdqU9cqrleo
v2ArPs7zovtxaVhtnn9Pm9FoJ/rzox0htbZaqkXvfuH/YRSbdlC4cPviHPVjVpEV
943pGuMUgnsefMqYXzQW7HHlXMq1cXsW9JuUiBTlb4Xvxm0+Wzo8Ufz89ASA7wU5
W6fFy/Mec8i3Yp1qndM+0KDRpTGs7wXacUTtJ9Yzq+DfjdXVaRDML/Q2+Im5KsuU
zwouxkjOfPJuZsnOjeICFyAc3mPnTFVN5wHrErfzfApeqbafHmXvyBrHN7vTnLMQ
UlUSyltERq+FERPA5OSI0cbISw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org