Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/RX8_h9oiypJhxc-WbYpGev9NL1s.roa
File: RX8_h9oiypJhxc-WbYpGev9NL1s.roa (raw, json)
Hash identifier: lxXn1j3aRPu3bdahi/yiqk8gkHEO9g8qlKfNtfx3TmQ=
Subject key identifier: 45:7F:3F:87:DA:22:CA:92:61:C5:CF:96:6D:8A:46:7A:FF:4D:2F:5B
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 0F778077
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/RX8_h9oiypJhxc-WbYpGev9NL1s.roa
Signing time: Sat 01 Jan 2022 11:03:05 +0000
ROA not before: Sat 01 Jan 2022 11:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206195
IP address blocks: 185.193.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259489911 (0xf778077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Jan 1 11:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=457f3f87da22ca9261c5cf966d8a467aff4d2f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:27:82:24:d2:d0:f1:ef:7f:33:80:30:3f:
f2:56:ca:0a:75:b9:0d:09:d2:b3:3c:2d:8e:79:e1:
22:27:c2:c0:22:23:c7:ad:07:58:5f:e5:0d:25:7a:
03:bf:d6:04:2d:15:90:33:92:a0:dd:dc:2b:90:41:
30:45:6f:ff:6a:20:6b:6a:63:c5:4e:4a:45:e8:e6:
84:09:0c:90:58:78:c6:89:fd:4c:0c:30:92:f9:e4:
53:12:3c:b6:7e:c5:9d:54:c4:d1:60:29:f0:46:e8:
6d:57:f9:d0:dd:94:ce:a2:0b:12:db:d3:6e:b7:26:
eb:fd:72:24:ad:f0:4f:e6:f7:27:f5:d4:78:63:6b:
fc:05:16:ca:4b:b8:a1:40:8d:3b:67:3b:56:2b:d9:
b2:56:f7:2d:95:33:69:58:78:99:6b:ba:38:65:d5:
60:66:0a:64:9b:e3:8f:a9:89:44:ee:d6:a4:91:16:
9f:57:8c:b7:73:44:83:8a:ba:d3:cb:71:6f:71:ad:
e0:3f:ed:e1:99:97:43:ee:5f:73:a0:ff:ec:53:13:
f7:a2:96:08:e5:d5:f5:12:ae:62:34:6b:10:82:55:
64:30:a6:37:ba:b5:20:73:98:fc:e3:4d:ef:8f:e3:
17:90:73:be:f1:b4:c6:81:99:06:68:1f:94:3d:e2:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:3F:87:DA:22:CA:92:61:C5:CF:96:6D:8A:46:7A:FF:4D:2F:5B
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/RX8_h9oiypJhxc-WbYpGev9NL1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.200.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b4:4a:ad:18:e0:d7:7a:5e:21:de:f7:c9:26:4f:8c:7a:02:
57:e1:db:8e:9b:57:56:58:06:f2:70:cb:48:24:2c:d9:0f:c6:
28:cc:87:2f:b2:64:a3:81:45:ad:5b:b1:ad:8f:81:ee:4f:5b:
d2:14:8f:d1:81:91:de:a4:8a:35:ee:a0:62:c3:84:f7:5b:03:
36:96:04:d6:66:81:ae:0c:5d:5a:59:71:3d:64:44:de:3f:52:
4e:7d:ff:4d:f7:43:6b:7f:c7:47:34:96:f7:ed:a7:72:be:ac:
32:88:53:89:eb:bc:eb:6b:a9:fc:1c:93:59:d3:7f:04:aa:22:
7c:5e:ed:a4:a7:f9:93:18:eb:73:c4:a1:0b:38:94:38:9c:be:
22:89:e8:60:5e:1f:bc:2a:83:c1:45:f6:e0:58:c9:89:af:85:
91:21:35:9d:d6:dd:e5:ec:3a:87:5c:9a:db:60:f7:26:23:6e:
a6:7f:5c:15:29:4e:6c:5d:5e:cd:cd:21:28:75:40:b0:9f:29:
a0:46:ad:00:fa:c1:58:39:85:11:6e:79:45:45:6a:10:d0:6f:
7f:b1:16:05:e5:21:bd:c1:a4:40:01:52:56:ad:ac:2e:8f:cf:
fd:5c:d6:0d:92:a7:c2:3a:6a:63:c9:26:df:25:2f:36:a1:89:
3e:2f:c5:16
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED3eAdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MzY4YWViYzFkNDU4NWI5YjM2MTJlY2MyMjAzNDU0ZDY1YTg3MmUzMB4XDTIyMDEw
MTExMDMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDU3ZjNmODdkYTIy
Y2E5MjYxYzVjZjk2NmQ4YTQ2N2FmZjRkMmY1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZJJ4Ik0tDx738zgDA/8lbKCnW5DQnSszwtjnnhIifCwCIj
x60HWF/lDSV6A7/WBC0VkDOSoN3cK5BBMEVv/2oga2pjxU5KRejmhAkMkFh4xon9
TAwwkvnkUxI8tn7FnVTE0WAp8EbobVf50N2UzqILEtvTbrcm6/1yJK3wT+b3J/XU
eGNr/AUWyku4oUCNO2c7VivZslb3LZUzaVh4mWu6OGXVYGYKZJvjj6mJRO7WpJEW
n1eMt3NEg4q608txb3Gt4D/t4ZmXQ+5fc6D/7FMT96KWCOXV9RKuYjRrEIJVZDCm
N7q1IHOY/ONN74/jF5BzvvG0xoGZBmgflD3i/9UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRFfz+H2iLKkmHFz5ZtikZ6/00vWzAfBgNVHSMEGDAWgBRzaK68HUWFubNh
LswiA0VNZahy4zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2MyaXV2QjFGaGJtellTN01JZ05GVFdXb2N1TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvYTAxZWJiLWVlMTgtNGZiNy1hNzNiLWY1OTUxYzdjY2JkMy8x
L1JYOF9oOW9peXBKaHhjLVdiWXBHZXY5Tkwxcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
YTAxZWJiLWVlMTgtNGZiNy1hNzNiLWY1OTUxYzdjY2JkMy8xL2MyaXV2QjFGaGJt
ellTN01JZ05GVFdXb2N1TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnByDANBgkqhkiG9w0BAQsFAAOC
AQEAB7RKrRjg13peId73ySZPjHoCV+HbjptXVlgG8nDLSCQs2Q/GKMyHL7Jko4FF
rVuxrY+B7k9b0hSP0YGR3qSKNe6gYsOE91sDNpYE1maBrgxdWllxPWRE3j9STn3/
TfdDa3/HRzSW9+2ncr6sMohTieu862up/ByTWdN/BKoifF7tpKf5kxjrc8ShCziU
OJy+IonoYF4fvCqDwUX24FjJia+FkSE1ndbd5ew6h1ya22D3JiNupn9cFSlObF1e
zc0hKHVAsJ8poEatAPrBWDmFEW55RUVqENBvf7EWBeUhvcGkQAFSVq2sLo/P/VzW
DZKnwjpqY8km3yUvNqGJPi/FFg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-ams.rpki-client.org