Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/EbCm33Bj8W_hgZGooQwvyL_LMTo.roa
File: EbCm33Bj8W_hgZGooQwvyL_LMTo.roa (raw, json)
Hash identifier: L2l6uWXVFq7GS9xU81K/czbSy89VC8eUxXgJpg3g//c=
Subject key identifier: 11:B0:A6:DF:70:63:F1:6F:E1:81:91:A8:A1:0C:2F:C8:BF:CB:31:3A
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 07EA15F8
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/EbCm33Bj8W_hgZGooQwvyL_LMTo.roa
Signing time: Sat 01 Jan 2022 07:55:47 +0000
ROA not before: Sat 01 Jan 2022 07:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 185.83.40.0/22 maxlen: 22
2a05:9800::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132781560 (0x7ea15f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Jan 1 07:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11b0a6df7063f16fe18191a8a10c2fc8bfcb313a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:ea:09:5f:6d:6f:ef:e1:1d:45:b3:49:e1:
36:ae:5f:79:23:ce:18:17:97:a5:a1:49:97:1d:74:
96:ab:ca:e4:ca:28:19:50:62:b0:5e:31:84:0d:fc:
38:ff:02:bc:ab:bd:80:12:a7:52:a8:bd:59:0b:df:
06:96:d3:e1:41:37:da:70:42:48:7e:b6:6d:3e:ca:
44:be:df:a9:9b:57:ef:f2:e3:82:44:4e:e5:3d:da:
e4:2f:cf:f4:8d:ab:a7:dd:b2:fc:63:3d:21:2c:5a:
2a:28:aa:97:a4:74:14:62:63:47:c7:b5:66:a9:e2:
9f:99:0f:cd:fe:17:2d:f2:a3:56:09:fa:d3:07:ec:
e5:5e:95:9c:a2:37:6a:6f:a2:bd:bc:e1:39:0a:74:
41:7f:1e:8b:b5:38:8d:70:d0:2f:b9:72:6d:c9:7d:
86:07:03:d7:1f:33:3e:4e:c1:b8:a4:b2:fe:2f:ca:
da:8c:97:3a:7b:6e:41:c8:55:63:1a:cb:46:ca:c8:
a2:11:01:73:df:55:9d:02:40:c6:42:5d:c3:41:75:
61:a2:39:a8:ef:d1:a0:c3:65:2d:19:f6:e4:b8:bf:
d5:2c:ca:86:ff:56:6c:28:31:cd:be:e3:28:50:a7:
5a:2c:38:58:c5:00:83:85:10:30:a1:43:6e:c1:d4:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:A6:DF:70:63:F1:6F:E1:81:91:A8:A1:0C:2F:C8:BF:CB:31:3A
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/EbCm33Bj8W_hgZGooQwvyL_LMTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.40.0/22
IPv6:
2a05:9800::/29
Signature Algorithm: sha256WithRSAEncryption
6e:b6:78:ae:e9:dd:07:68:fe:10:42:71:98:88:cb:2b:d4:68:
1a:e9:93:54:d9:9e:66:a2:53:6c:ca:b3:97:98:7a:09:6b:ef:
ec:c1:63:26:2d:89:48:e1:dd:28:b6:83:66:91:22:8d:17:58:
c5:cb:95:29:ce:e9:da:03:3e:a0:5b:2e:7a:98:fd:cd:46:40:
ec:1d:13:61:cc:31:7b:66:c2:7c:fd:65:88:03:3b:f1:aa:df:
97:02:0f:2a:ef:94:a0:d3:a8:69:3e:87:61:2a:5c:cd:2e:fd:
61:9d:2c:45:ef:36:1e:3f:86:50:61:c1:39:e8:43:22:df:ee:
95:2a:74:bb:ef:89:08:ac:e5:fd:3b:bf:a7:bd:df:30:b2:26:
a6:b1:8d:14:60:58:99:11:72:b5:ab:4d:96:ea:87:a9:94:6f:
f4:73:3b:97:09:36:47:fe:ad:b3:3d:6c:23:36:ec:f2:37:e5:
f3:04:ad:c5:0a:65:e1:5f:35:90:dd:bf:39:46:74:9d:37:c1:
fa:79:fe:b8:41:58:12:4d:9d:66:da:7c:e2:40:71:55:d3:e5:
57:ab:cb:2d:51:b7:50:bb:78:99:38:c1:47:1e:d3:3e:7d:8f:
37:3b:bc:18:2a:30:8b:8f:2f:60:ca:c5:94:58:f4:8a:c8:6b:
ac:df:e4:12
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB+oV+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDBiNDRlNDkyNTQ5ZTFiN2RhNTMyYzgwYzM0ODg1MGM1YTQ0ZTgwMB4XDTIyMDEw
MTA3NTU0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFiMGE2ZGY3MDYz
ZjE2ZmUxODE5MWE4YTEwYzJmYzhiZmNiMzEzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI426glfbW/v4R1Fs0nhNq5feSPOGBeXpaFJlx10lqvK5Moo
GVBisF4xhA38OP8CvKu9gBKnUqi9WQvfBpbT4UE32nBCSH62bT7KRL7fqZtX7/Lj
gkRO5T3a5C/P9I2rp92y/GM9ISxaKiiql6R0FGJjR8e1Zqnin5kPzf4XLfKjVgn6
0wfs5V6VnKI3am+ivbzhOQp0QX8ei7U4jXDQL7lybcl9hgcD1x8zPk7BuKSy/i/K
2oyXOntuQchVYxrLRsrIohEBc99VnQJAxkJdw0F1YaI5qO/RoMNlLRn25Li/1SzK
hv9WbCgxzb7jKFCnWiw4WMUAg4UQMKFDbsHUQEUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQRsKbfcGPxb+GBkaihDC/Iv8sxOjAfBgNVHSMEGDAWgBR9C0TkklSeG32l
MsgMNIhQxaROgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRdEU1SkpVbmh0OXBUTElERFNJVU1Xa1RvQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvYjkyMzFmLWIzZGYtNDAxMi05NmQ3LTcyMDRiODExMjUwZi8x
L0ViQ20zM0JqOFdfaGdaR29vUXd2eUxfTE1Uby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
YjkyMzFmLWIzZGYtNDAxMi05NmQ3LTcyMDRiODExMjUwZi8xL2ZRdEU1SkpVbmh0
OXBUTElERFNJVU1Xa1RvQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlTKDANBAIAAjAHAwUDKgWYADAN
BgkqhkiG9w0BAQsFAAOCAQEAbrZ4rundB2j+EEJxmIjLK9RoGumTVNmeZqJTbMqz
l5h6CWvv7MFjJi2JSOHdKLaDZpEijRdYxcuVKc7p2gM+oFsuepj9zUZA7B0TYcwx
e2bCfP1liAM78arflwIPKu+UoNOoaT6HYSpczS79YZ0sRe82Hj+GUGHBOehDIt/u
lSp0u++JCKzl/Tu/p73fMLImprGNFGBYmRFytatNluqHqZRv9HM7lwk2R/6tsz1s
Izbs8jfl8wStxQpl4V81kN2/OUZ0nTfB+nn+uEFYEk2dZtp84kBxVdPlV6vLLVG3
ULt4mTjBRx7TPn2PNzu8GCowi48vYMrFlFj0ishrrN/kEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-fra.rpki-client.org