Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/_yGmXaFLcN_JWS_fYpSJ1NIu1Ps.roa
File: _yGmXaFLcN_JWS_fYpSJ1NIu1Ps.roa (raw, json)
Hash identifier: OBsljGgguA0PNxoi/SjpG5/Ig/cteQiCGKUMvt1eMvE=
Subject key identifier: FF:21:A6:5D:A1:4B:70:DF:C9:59:2F:DF:62:94:89:D4:D2:2E:D4:FB
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 03393D29
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/_yGmXaFLcN_JWS_fYpSJ1NIu1Ps.roa
Signing time: Thu 17 Mar 2022 16:48:29 +0000
ROA not before: Thu 17 Mar 2022 16:48:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.125.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54082857 (0x3393d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 17 16:48:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff21a65da14b70dfc9592fdf629489d4d22ed4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:5c:94:23:79:26:0b:09:ca:f8:2b:16:fc:
02:46:09:77:2e:f5:ca:78:96:bd:af:26:d9:36:cc:
f0:7b:b4:46:70:8a:96:de:c5:86:fb:e1:ec:c1:6f:
dc:5c:29:44:d6:e6:8b:df:e0:86:cc:f1:34:8c:44:
55:17:e0:68:34:6a:de:cf:06:26:a4:b5:d6:da:06:
3b:f2:bf:88:94:c5:65:89:ca:33:eb:f0:00:1a:89:
a9:c6:31:13:9c:f9:cc:5d:9a:6c:12:4a:10:e7:a7:
47:a9:94:18:bf:ab:f7:d8:54:ff:04:ac:c9:25:3d:
0c:5c:51:14:bc:88:10:46:4d:4d:62:08:8c:ea:20:
61:01:4e:14:11:cd:18:a4:f4:39:0a:61:89:11:73:
1d:53:cd:f3:a8:c6:0f:d7:4d:02:7f:ba:1d:37:e1:
2c:f8:9b:26:9e:48:62:ba:6b:ed:69:c9:3a:69:09:
f8:4b:b6:ad:6b:d4:e2:34:d4:b1:0d:b5:d4:df:dd:
77:17:6c:0a:fd:5d:6c:67:fa:25:b0:5d:51:d3:51:
b5:25:e5:81:9b:27:b9:4a:ff:64:cf:a0:7d:a2:92:
00:35:98:f4:54:03:cc:2d:3e:5f:84:63:05:fc:31:
d0:10:ed:19:e7:59:7a:21:b6:a8:f9:73:77:09:90:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:A6:5D:A1:4B:70:DF:C9:59:2F:DF:62:94:89:D4:D2:2E:D4:FB
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/_yGmXaFLcN_JWS_fYpSJ1NIu1Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:4f:03:2f:eb:4f:54:29:b1:5c:ac:5a:f8:54:51:c5:58:d3:
15:89:f6:9e:28:77:79:3b:3d:50:ea:aa:ee:1c:0f:33:c7:61:
da:f7:c1:e8:fb:2e:42:c7:4f:70:23:68:23:49:94:6d:7d:48:
2b:a9:40:75:f4:72:9e:d2:89:07:13:5e:34:8e:b3:0c:be:e0:
f7:57:3c:2f:82:38:0a:13:44:1f:61:53:0a:47:f1:bd:25:4f:
75:02:50:ee:b3:af:86:25:05:98:bb:d9:c9:cb:dc:a6:62:da:
b5:62:94:fc:68:c5:8d:37:4d:75:93:d5:fd:46:1e:35:f6:ed:
71:30:b6:96:d4:29:7b:fb:86:08:d7:63:2f:58:de:af:f4:d4:
4f:e2:45:53:40:bd:54:1f:f6:9d:45:cc:c4:d2:42:a8:63:7b:
98:1c:29:07:2c:e1:91:70:ff:fd:93:44:25:f8:1a:ff:9c:7a:
68:a3:bd:57:42:5c:0d:69:4a:3d:3f:cc:46:d6:19:c6:90:30:
21:42:72:a9:e7:fb:c0:83:ef:b8:69:c3:98:f3:96:d1:ec:9e:
63:ba:a9:15:8d:3a:35:ad:99:c1:57:6e:fa:cf:5d:88:45:4f:
66:3f:0f:32:f0:60:96:ea:1e:e6:5f:b1:13:19:60:4a:e7:4d:
ba:4a:9e:36
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAzk9KTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OWVhODkzNmY4ZTUzMDYzYjRiM2JkZjBmM2IxNWIyYWU2NjdlZjEzMB4XDTIyMDMx
NzE2NDgyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmYyMWE2NWRhMTRi
NzBkZmM5NTkyZmRmNjI5NDg5ZDRkMjJlZDRmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4VXJQjeSYLCcr4Kxb8AkYJdy71yniWva8m2TbM8Hu0RnCK
lt7Fhvvh7MFv3FwpRNbmi9/ghszxNIxEVRfgaDRq3s8GJqS11toGO/K/iJTFZYnK
M+vwABqJqcYxE5z5zF2abBJKEOenR6mUGL+r99hU/wSsySU9DFxRFLyIEEZNTWII
jOogYQFOFBHNGKT0OQphiRFzHVPN86jGD9dNAn+6HTfhLPibJp5IYrpr7WnJOmkJ
+Eu2rWvU4jTUsQ211N/ddxdsCv1dbGf6JbBdUdNRtSXlgZsnuUr/ZM+gfaKSADWY
9FQDzC0+X4RjBfwx0BDtGedZeiG2qPlzdwmQBg0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT/IaZdoUtw38lZL99ilInU0i7U+zAfBgNVHSMEGDAWgBS56ok2+OUwY7Sz
vfDzsVsq5mfvEzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VlcUpOdmpsTUdPMHM3M3c4N0ZiS3Vabjd4TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvZWMyOWUyLTM0NDAtNDA5YS05ODZhLWIyNTA5OTdmYzc1ZC8x
L195R21YYUZMY05fSldTX2ZZcFNKMU5JdTFQcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMv
ZWMyOWUyLTM0NDAtNDA5YS05ODZhLWIyNTA5OTdmYzc1ZC8xL3VlcUpOdmpsTUdP
MHM3M3c4N0ZiS3Vabjd4TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl9yDANBgkqhkiG9w0BAQsFAAOC
AQEADU8DL+tPVCmxXKxa+FRRxVjTFYn2nih3eTs9UOqq7hwPM8dh2vfB6PsuQsdP
cCNoI0mUbX1IK6lAdfRyntKJBxNeNI6zDL7g91c8L4I4ChNEH2FTCkfxvSVPdQJQ
7rOvhiUFmLvZycvcpmLatWKU/GjFjTdNdZPV/UYeNfbtcTC2ltQpe/uGCNdjL1je
r/TUT+JFU0C9VB/2nUXMxNJCqGN7mBwpByzhkXD//ZNEJfga/5x6aKO9V0JcDWlK
PT/MRtYZxpAwIUJyqef7wIPvuGnDmPOW0eyeY7qpFY06Na2ZwVdu+s9diEVPZj8P
MvBgluoe5l+xExlgSudNukqeNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org