Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/M0x4OTUbEa6psUq9nmX2tJu0Plk.roa
File: M0x4OTUbEa6psUq9nmX2tJu0Plk.roa (raw, json)
Hash identifier: a1ffPyMg+fsaJJ4kXcT2A25NppO4D/Zwh9Ja795FUM0=
Subject key identifier: 33:4C:78:39:35:1B:11:AE:A9:B1:4A:BD:9E:65:F6:B4:9B:B4:3E:59
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 0EED6B0A
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/M0x4OTUbEa6psUq9nmX2tJu0Plk.roa
Signing time: Sat 01 Jan 2022 11:00:37 +0000
ROA not before: Sat 01 Jan 2022 11:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204561
IP address blocks: 128.127.182.0/24 maxlen: 24
185.192.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250440458 (0xeed6b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Jan 1 11:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=334c7839351b11aea9b14abd9e65f6b49bb43e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:44:01:f7:e7:f8:bb:48:41:d9:45:1f:61:
58:8a:e0:ea:97:c7:de:af:56:92:c7:de:43:d4:74:
71:65:89:57:41:42:68:a4:dd:a1:f3:e3:50:67:d4:
65:c5:3e:c4:d7:9f:bd:43:34:c6:22:95:fb:ae:ab:
2e:e4:a7:0a:3c:2f:78:02:87:28:08:bc:10:7b:c9:
2a:b1:88:4d:c8:59:a9:b8:8b:d8:54:f9:dd:d3:43:
d8:78:91:12:bc:9c:61:54:43:9e:fb:44:95:c6:6a:
e6:65:12:49:4b:bc:de:a4:d6:ef:3f:3c:83:9b:be:
05:b0:4b:29:54:72:66:29:0c:21:f8:75:9b:60:3b:
f8:06:c8:e8:04:a3:7c:60:ad:50:e3:ab:0b:06:96:
81:63:c3:7a:b0:88:86:29:26:2d:6c:33:53:38:a6:
c2:a6:d7:c0:7f:32:24:b5:dc:d6:47:e8:ff:77:7f:
27:18:1b:26:21:c9:f7:f3:ef:7d:e7:ab:92:54:81:
ed:a6:7d:84:26:d2:4e:ac:c2:f9:39:09:af:38:b5:
27:02:c5:c6:3b:e5:99:7d:65:4c:1c:b3:bc:08:d3:
5a:d0:24:ac:d9:d0:e9:af:c2:69:17:be:19:32:32:
3b:97:34:cd:65:ab:b3:81:e0:2a:87:1c:34:69:b1:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4C:78:39:35:1B:11:AE:A9:B1:4A:BD:9E:65:F6:B4:9B:B4:3E:59
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/M0x4OTUbEa6psUq9nmX2tJu0Plk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.182.0/24
185.192.44.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9b:19:96:f0:6d:d3:47:85:0b:cb:2b:01:d5:f2:bf:a3:c1:
dd:9d:43:16:a2:e6:13:2d:70:c4:67:e0:45:82:fa:4d:ef:c2:
13:42:e9:f1:c5:fa:66:38:f2:88:35:53:5a:09:61:3e:3c:6d:
be:93:03:04:17:d9:df:1a:8a:bc:fc:d9:e1:b5:a7:bb:2c:0f:
8d:1c:56:6a:ab:f0:28:d1:9d:1f:65:b4:dc:68:d7:4a:48:e4:
5f:37:43:ef:22:fe:0d:da:b8:48:bf:bb:6d:c8:cd:90:10:93:
ad:6f:9a:6c:73:ae:37:f4:fd:08:64:01:b0:ea:95:aa:8e:8a:
8c:a1:14:bc:75:49:2b:db:8e:8c:d7:2b:a6:94:a7:2a:b3:7d:
ba:01:a6:6d:64:6b:8d:22:46:a3:80:5c:5d:5d:48:5b:e9:55:
7f:58:cc:23:32:16:f1:27:cc:e8:3e:24:ed:aa:b5:5e:6f:9c:
5c:61:27:e1:fa:09:e7:f1:0f:3c:7d:7d:8a:f3:17:9e:51:31:
f0:bd:db:ef:36:99:9b:1c:02:1f:5f:1d:c0:ce:96:3d:2b:12:
28:76:a8:38:d2:a4:d5:e7:1a:ef:7e:74:3c:a8:bd:dc:aa:6a:
64:1a:8b:86:40:dd:32:ad:d7:fc:4d:06:6e:ee:a4:d6:24:39:
6d:a7:cc:2a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDu1rCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZTQ1NmNkYjRkMTQwMzQ1YzNkY2FlYmZjNzYzNGQ0ZTdjZGNiOTEzMB4XDTIyMDEw
MTExMDAzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzM0Yzc4MzkzNTFi
MTFhZWE5YjE0YWJkOWU2NWY2YjQ5YmI0M2U1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMr3RAH35/i7SEHZRR9hWIrg6pfH3q9WksfeQ9R0cWWJV0FC
aKTdofPjUGfUZcU+xNefvUM0xiKV+66rLuSnCjwveAKHKAi8EHvJKrGITchZqbiL
2FT53dND2HiRErycYVRDnvtElcZq5mUSSUu83qTW7z88g5u+BbBLKVRyZikMIfh1
m2A7+AbI6ASjfGCtUOOrCwaWgWPDerCIhikmLWwzUzimwqbXwH8yJLXc1kfo/3d/
JxgbJiHJ9/PvfeerklSB7aZ9hCbSTqzC+TkJrzi1JwLFxjvlmX1lTByzvAjTWtAk
rNnQ6a/CaRe+GTIyO5c0zWWrs4HgKoccNGmxZNsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQzTHg5NRsRrqmxSr2eZfa0m7Q+WTAfBgNVHSMEGDAWgBTeRWzbTRQDRcPc
rr/HY01OfNy5EzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNrVnMyMDBVQTBYRDNLNl94Mk5OVG56Y3VSTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvMjBjYjMzLWUyYmYtNDZhYS1hYmZhLTkyOGU3YmM2OTU3MC8x
L00weDRPVFViRWE2cHNVcTlubVgydEp1MFBsay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
MjBjYjMzLWUyYmYtNDZhYS1hYmZhLTkyOGU3YmM2OTU3MC8xLzNrVnMyMDBVQTBY
RDNLNl94Mk5OVG56Y3VSTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAIB/tgMEALnALDANBgkqhkiG9w0B
AQsFAAOCAQEAZpsZlvBt00eFC8srAdXyv6PB3Z1DFqLmEy1wxGfgRYL6Te/CE0Lp
8cX6ZjjyiDVTWglhPjxtvpMDBBfZ3xqKvPzZ4bWnuywPjRxWaqvwKNGdH2W03GjX
SkjkXzdD7yL+Ddq4SL+7bcjNkBCTrW+abHOuN/T9CGQBsOqVqo6KjKEUvHVJK9uO
jNcrppSnKrN9ugGmbWRrjSJGo4BcXV1IW+lVf1jMIzIW8SfM6D4k7aq1Xm+cXGEn
4foJ5/EPPH19ivMXnlEx8L3b7zaZmxwCH18dwM6WPSsSKHaoONKk1eca7350PKi9
3KpqZBqLhkDdMq3X/E0Gbu6k1iQ5bafMKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org