Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cqe7OSaQMF3JxvYeDLhZ0ldLS0o.roa
File: Cqe7OSaQMF3JxvYeDLhZ0ldLS0o.roa (raw, json)
Hash identifier: pKfUWFt/oNw7ciwlHp+U9O611nx6DFxa9anRy+IqE/Q=
Subject key identifier: 0A:A7:BB:39:26:90:30:5D:C9:C6:F6:1E:0C:B8:59:D2:57:4B:4B:4A
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 175A7B95
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cqe7OSaQMF3JxvYeDLhZ0ldLS0o.roa
Signing time: Sat 26 Feb 2022 06:35:53 +0000
ROA not before: Sat 26 Feb 2022 06:35:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200686
IP address blocks: 85.143.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391805845 (0x175a7b95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 26 06:35:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aa7bb392690305dc9c6f61e0cb859d2574b4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:3a:09:5e:01:4e:35:6a:8b:de:e0:21:ee:76:
f0:5a:ac:41:c6:b0:66:fb:e2:de:58:e5:f5:49:18:
c3:cc:76:20:84:a8:18:c9:b2:d7:f6:47:5d:06:59:
bc:89:81:e4:12:fa:d2:0d:cc:f5:b3:80:88:79:7e:
11:f6:dc:1d:3f:9e:91:9f:ae:e7:47:14:38:84:b5:
c3:33:52:db:ad:9f:fc:39:7a:f6:ee:67:4f:59:ad:
4e:9b:03:8f:56:b3:bd:3d:fb:40:9b:eb:3e:55:c0:
38:20:53:fe:8c:92:99:a1:7b:b4:d2:a9:a3:d0:3d:
5b:d8:5b:29:d8:7a:bf:ee:cd:06:ac:15:7c:e2:c5:
dc:d1:99:62:52:1b:42:61:7d:d6:4b:b6:5e:34:dc:
54:01:71:9b:b8:a4:07:a9:23:69:b4:31:e1:f0:29:
bb:ae:85:b6:2c:2d:0b:9e:11:06:c9:b3:69:8f:67:
11:fb:e9:01:99:d3:94:c6:19:c5:51:49:59:a0:f0:
c0:67:d1:02:21:14:0a:24:82:75:71:0c:e9:83:d2:
42:66:19:23:74:62:26:13:9c:da:3a:3a:ba:f5:08:
2a:8c:6e:da:a6:25:30:f6:c4:a2:53:6b:6c:ed:27:
71:7a:91:f5:5a:b9:04:1b:23:81:27:0c:d3:4c:a7:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:BB:39:26:90:30:5D:C9:C6:F6:1E:0C:B8:59:D2:57:4B:4B:4A
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cqe7OSaQMF3JxvYeDLhZ0ldLS0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.100.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3e:79:e9:7e:df:eb:fb:c1:59:55:86:26:ec:0a:8b:e7:86:
62:8c:85:dd:5c:c6:97:a6:31:6d:03:69:49:c6:57:c8:e2:25:
5c:05:a7:41:17:46:3f:be:ab:79:3d:97:4f:ec:dd:04:ca:60:
eb:0e:26:10:21:0b:d9:57:86:6e:bb:07:05:8b:d9:38:2b:f6:
e7:55:6a:85:83:1a:10:44:53:20:92:27:ff:de:ee:28:d8:0b:
39:5d:6e:40:80:36:32:90:7c:69:7a:c6:59:92:7d:8d:64:24:
08:d4:3d:c9:e9:08:18:f6:77:04:d7:c5:d5:95:de:41:02:73:
18:20:a5:19:63:36:58:33:e9:3b:52:16:87:e0:9f:5f:bc:36:
f6:a9:9f:0c:07:4e:cd:1a:59:17:ce:fe:c1:4c:47:74:38:f2:
b7:be:f3:75:1c:cf:98:08:84:6a:78:75:3d:02:e9:88:c5:0b:
12:c0:18:24:26:fb:54:83:4a:91:68:2a:58:36:5f:c3:37:6c:
91:50:76:ce:3c:65:62:cd:2a:84:ed:e3:dc:f4:9b:a7:e4:aa:
12:fd:37:3b:cc:b8:1a:6d:25:af:b1:64:3f:e8:d7:08:69:26:
38:38:e5:29:eb:c7:f2:0a:e2:f5:85:b5:49:e7:06:52:09:0c:
90:cb:ff:52
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF1p7lTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OGIyMjAyM2I2ZWFkNGMyOTY4M2E5ZmVkNDQ5M2QwM2RlZTJjNjg1MB4XDTIyMDIy
NjA2MzU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGFhN2JiMzkyNjkw
MzA1ZGM5YzZmNjFlMGNiODU5ZDI1NzRiNGI0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAP06CV4BTjVqi97gIe528FqsQcawZvvi3ljl9UkYw8x2IISo
GMmy1/ZHXQZZvImB5BL60g3M9bOAiHl+EfbcHT+ekZ+u50cUOIS1wzNS262f/Dl6
9u5nT1mtTpsDj1azvT37QJvrPlXAOCBT/oySmaF7tNKpo9A9W9hbKdh6v+7NBqwV
fOLF3NGZYlIbQmF91ku2XjTcVAFxm7ikB6kjabQx4fApu66FtiwtC54RBsmzaY9n
EfvpAZnTlMYZxVFJWaDwwGfRAiEUCiSCdXEM6YPSQmYZI3RiJhOc2jo6uvUIKoxu
2qYlMPbEolNrbO0ncXqR9Vq5BBsjgScM00ynYT0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKp7s5JpAwXcnG9h4MuFnSV0tLSjAfBgNVHSMEGDAWgBQ4siAjturUwpaD
qf7UST0D3uLGhTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09MSWdJN2JxMU1LV2c2bi0xRWs5QTk3aXhvVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8x
L0NxZTdPU2FRTUYzSnh2WWVETGhaMGxkTFMwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
ODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8xL09MSWdJN2JxMU1L
V2c2bi0xRWs5QTk3aXhvVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWPZDANBgkqhkiG9w0BAQsFAAOC
AQEAKD556X7f6/vBWVWGJuwKi+eGYoyF3VzGl6YxbQNpScZXyOIlXAWnQRdGP76r
eT2XT+zdBMpg6w4mECEL2VeGbrsHBYvZOCv251VqhYMaEERTIJIn/97uKNgLOV1u
QIA2MpB8aXrGWZJ9jWQkCNQ9yekIGPZ3BNfF1ZXeQQJzGCClGWM2WDPpO1IWh+Cf
X7w29qmfDAdOzRpZF87+wUxHdDjyt77zdRzPmAiEanh1PQLpiMULEsAYJCb7VINK
kWgqWDZfwzdskVB2zjxlYs0qhO3j3PSbp+SqEv03O8y4Gm0lr7FkP+jXCGkmODjl
KevH8gri9YW1SecGUgkMkMv/Ug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org