Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/cyX-c7gtDsK0Iyyn_iXyQx5vFMo.roa
File: cyX-c7gtDsK0Iyyn_iXyQx5vFMo.roa (raw, json)
Hash identifier: RBHTA4zCYatUODwrgKJ5pw1hIZRGZibr6B54pXZaEos=
Subject key identifier: 73:25:FE:73:B8:2D:0E:C2:B4:23:2C:A7:FE:25:F2:43:1E:6F:14:CA
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 0182FCF7027E81209E3A3A14350C4B24D705
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/cyX-c7gtDsK0Iyyn_iXyQx5vFMo.roa
Signing time: Fri 02 Sep 2022 06:50:22 +0000
ROA not before: Fri 02 Sep 2022 06:50:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59659
IP address blocks: 185.220.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fc:f7:02:7e:81:20:9e:3a:3a:14:35:0c:4b:24:d7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Sep 2 06:50:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7325fe73b82d0ec2b4232ca7fe25f2431e6f14ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:1b:81:96:80:37:84:20:94:33:a7:d0:ca:
8a:f0:6c:34:53:e7:43:1a:13:ae:ae:3d:06:eb:8b:
b3:56:3e:e2:5a:ed:fc:74:03:76:49:07:29:aa:82:
8e:ee:6e:ab:2e:68:36:af:e7:ed:9b:e7:13:7e:0f:
a8:f5:c4:63:1f:35:5e:86:65:89:13:42:9b:ad:00:
f7:c2:9e:d0:5f:86:a4:c5:36:5c:49:7e:8e:03:0c:
7c:08:c7:32:f5:83:15:fe:62:69:27:6c:4f:72:dc:
ac:e4:b1:0f:ee:74:67:5e:b9:d3:c8:c1:44:ec:03:
33:ea:44:83:53:2c:e4:72:1a:2a:1f:1a:1f:ba:79:
64:57:b0:d7:fe:5b:a1:1b:95:1d:f1:27:74:59:fc:
5c:b3:3c:37:2e:83:fc:1e:e9:f4:7c:99:94:c6:cc:
13:a1:39:55:5f:8e:80:66:0e:a4:99:a4:f0:24:1a:
52:a7:6c:45:e6:5f:a6:d4:63:ec:9f:d7:16:11:3e:
f1:a8:a7:16:62:c2:f0:a6:16:eb:38:f3:f0:64:7d:
89:6d:04:1d:83:54:30:46:3b:05:6e:58:2f:6f:b5:
f3:22:55:12:9d:86:f8:be:aa:5a:de:ec:81:97:af:
55:ee:71:1d:5b:08:a0:c2:d0:e6:75:98:60:74:82:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:25:FE:73:B8:2D:0E:C2:B4:23:2C:A7:FE:25:F2:43:1E:6F:14:CA
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/cyX-c7gtDsK0Iyyn_iXyQx5vFMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:23:34:11:79:4e:b3:9e:ab:1e:2d:c0:8c:71:30:ee:31:2f:
6d:90:8b:b8:2e:a7:d1:81:97:50:11:86:79:2b:37:8a:9d:d8:
5a:50:c3:58:9e:30:c5:d7:14:50:31:a1:8c:79:46:b3:14:6c:
5d:96:1d:9a:43:ec:a0:12:4b:cd:4e:b1:eb:8b:93:fc:57:02:
50:c7:78:45:24:df:de:d8:4e:2e:b6:e9:69:29:1d:ff:17:9a:
6a:06:3b:73:ae:03:6d:91:fa:8b:33:e7:fb:73:39:e4:97:d9:
d2:93:2a:68:58:39:09:a3:43:fb:68:b6:ab:10:21:8a:39:23:
63:dd:c7:5f:88:89:e5:61:ad:7c:5b:df:57:49:44:c2:7f:1d:
4e:d2:97:08:61:05:86:3b:36:19:bb:0e:21:23:2b:19:40:9d:
14:9e:94:a6:b2:5b:84:1c:40:68:8d:42:c7:68:98:19:99:5f:
8b:3c:17:df:39:5a:ac:1d:6b:88:ba:02:00:03:15:d1:2e:02:
47:42:4b:a4:3d:d8:b8:69:b6:08:30:68:7b:52:13:60:74:0f:
db:83:5a:f5:0a:e6:84:64:58:82:e5:a6:f9:d6:b4:87:25:5e:
a6:63:97:f7:11:66:1f:f8:33:69:6f:f2:82:1c:17:85:da:34:
2c:18:a9:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL89wJ+gSCeOjoUNQxLJNcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWNiYjg4ZDJiMWE4OTY2NTg1MDY3Nzg2NjJlNzVjNzMy
YTY3ZTcwHhcNMjIwOTAyMDY1MDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzI1ZmU3M2I4MmQwZWMyYjQyMzJjYTdmZTI1ZjI0MzFlNmYxNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5obgZaAN4QglDOn0MqK8Gw0U+dD
GhOurj0G64uzVj7iWu38dAN2SQcpqoKO7m6rLmg2r+ftm+cTfg+o9cRjHzVehmWJ
E0KbrQD3wp7QX4akxTZcSX6OAwx8CMcy9YMV/mJpJ2xPctys5LEP7nRnXrnTyMFE
7AMz6kSDUyzkchoqHxofunlkV7DX/luhG5Ud8Sd0Wfxcszw3LoP8Hun0fJmUxswT
oTlVX46AZg6kmaTwJBpSp2xF5l+m1GPsn9cWET7xqKcWYsLwphbrOPPwZH2JbQQd
g1QwRjsFblgvb7XzIlUSnYb4vqpa3uyBl69V7nEdWwigwtDmdZhgdIKb9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMl/nO4LQ7CtCMsp/4l8kMebxTKMB8GA1UdIwQY
MBaAFOGcu4jSsaiWZYUGd4Zi51xzKmfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYt
ZWZlYTYzZDA2ZjgwLzEvY3lYLWM3Z3REc0swSXl5bl9pWHlReDV2Rk1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYtZWZlYTYzZDA2Zjgw
LzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudxYMA0G
CSqGSIb3DQEBCwUAA4IBAQB6IzQReU6znqseLcCMcTDuMS9tkIu4LqfRgZdQEYZ5
KzeKndhaUMNYnjDF1xRQMaGMeUazFGxdlh2aQ+ygEkvNTrHri5P8VwJQx3hFJN/e
2E4utulpKR3/F5pqBjtzrgNtkfqLM+f7cznkl9nSkypoWDkJo0P7aLarECGKOSNj
3cdfiInlYa18W99XSUTCfx1O0pcIYQWGOzYZuw4hIysZQJ0UnpSmsluEHEBojULH
aJgZmV+LPBffOVqsHWuIugIAAxXRLgJHQkukPdi4abYIMGh7UhNgdA/bg1r1CuaE
ZFiC5ab51rSHJV6mY5f3EWYf+DNpb/KCHBeF2jQsGKnt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org