Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/1-VFM5QER2kDua9WZnGLFz3r2Gxk.roa
File: 1-VFM5QER2kDua9WZnGLFz3r2Gxk.roa (raw, json)
Hash identifier: VZzwIOalL6YfingW/9wT4phHMjEMyKOTz156qAwHUWE=
Subject key identifier: F9:51:4C:E5:01:11:DA:40:EE:6B:D5:99:9C:62:C5:CF:7A:F6:1B:19
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 0C814D10
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/1-VFM5QER2kDua9WZnGLFz3r2Gxk.roa
Signing time: Sat 01 Jan 2022 05:53:21 +0000
ROA not before: Sat 01 Jan 2022 05:53:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 185.217.245.0/24 maxlen: 24
185.217.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209800464 (0xc814d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Jan 1 05:53:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9514ce50111da40ee6bd5999c62c5cf7af61b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:f9:12:3b:d8:4e:76:7d:b5:64:73:ec:ee:
de:e3:e6:af:e2:b3:05:9e:ba:e9:e1:4c:fc:d5:21:
c0:9d:85:69:e5:4f:9b:1e:f4:50:ce:f8:4a:9e:0f:
c6:d4:89:99:8f:b6:d2:ec:19:7e:39:c2:d3:54:8e:
13:76:ba:e5:76:3a:66:21:8c:be:a2:11:2b:f5:f2:
d4:16:3c:09:ad:ce:14:d8:b3:ed:15:14:1f:b5:61:
8f:95:6f:71:37:e5:2c:1a:5e:86:2f:27:b4:26:ec:
f3:71:34:c9:8f:42:1c:b0:41:c7:50:72:26:40:dc:
09:4f:fe:0d:2d:b3:19:41:a7:36:e9:84:bd:4f:c6:
42:bd:1b:ec:3d:68:07:8d:d4:06:01:49:31:be:bf:
28:02:a3:7e:6e:86:33:f4:42:50:80:18:e0:bf:98:
ea:a5:4d:cf:23:3a:05:08:29:72:ce:7d:bc:ca:a4:
5b:33:f7:f4:36:fc:d3:eb:39:49:03:b0:d8:f7:54:
e1:d0:68:65:c4:71:e3:a0:20:f7:c1:54:ee:56:99:
44:82:38:75:0f:ac:f8:28:b8:6c:3f:96:3b:7b:e0:
7e:1a:92:f0:f1:9a:a9:50:d9:51:79:7b:d1:e5:70:
32:55:46:4d:1e:3c:7f:2a:47:77:ca:03:11:82:31:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:4C:E5:01:11:DA:40:EE:6B:D5:99:9C:62:C5:CF:7A:F6:1B:19
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/1-VFM5QER2kDua9WZnGLFz3r2Gxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.244.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ae:47:b5:a3:37:fd:24:c5:ef:b4:85:92:2c:29:56:18:b7:
f1:89:b8:fc:c5:41:53:fb:a7:30:b2:9d:d3:c1:2c:42:98:69:
d8:34:9c:c3:e7:1f:ef:0e:0a:0a:e3:16:33:dd:20:33:bf:53:
c9:d0:e0:3c:57:5b:c1:d3:be:9b:6a:80:08:73:19:33:1b:83:
49:82:1c:63:7e:6d:b6:6a:12:07:f4:cd:24:ab:c5:67:5e:12:
64:20:4b:2d:d5:1d:6b:06:3e:08:65:d6:96:74:75:74:01:ca:
77:67:b9:09:2e:30:9d:f0:7d:55:08:3d:9a:ec:04:60:e4:f1:
d0:81:48:5a:4a:9d:e5:d8:41:9f:e3:6f:27:1e:92:02:5a:5a:
ba:aa:2f:4a:41:88:2d:8d:8f:89:e1:60:f4:9c:f9:88:c7:e9:
64:a3:51:a9:7d:b9:f6:d6:79:c3:cc:71:00:08:5a:6d:be:f6:
dd:61:4e:88:6b:a6:1a:d4:2a:b0:7a:a5:79:52:be:8c:5d:aa:
f2:0a:78:c5:7e:08:40:d2:74:ef:05:c6:54:e8:7a:b2:d9:f9:
ab:ae:04:ee:8b:0b:49:78:69:85:8b:c3:8c:9b:6d:f5:cf:55:
24:d4:43:22:91:83:82:60:7b:80:ad:22:a3:45:73:70:88:27:
5f:b1:30:9a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEDIFNEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NTEwYzY5YmVkMDM0NjViZmY4YWY5ZDcxYTZhZTliMTgzYjdjMjRkMB4XDTIyMDEw
MTA1NTMyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjk1MTRjZTUwMTEx
ZGE0MGVlNmJkNTk5OWM2MmM1Y2Y3YWY2MWIxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMU5+RI72E52fbVkc+zu3uPmr+KzBZ666eFM/NUhwJ2FaeVP
mx70UM74Sp4PxtSJmY+20uwZfjnC01SOE3a65XY6ZiGMvqIRK/Xy1BY8Ca3OFNiz
7RUUH7Vhj5VvcTflLBpehi8ntCbs83E0yY9CHLBBx1ByJkDcCU/+DS2zGUGnNumE
vU/GQr0b7D1oB43UBgFJMb6/KAKjfm6GM/RCUIAY4L+Y6qVNzyM6BQgpcs59vMqk
WzP39Db80+s5SQOw2PdU4dBoZcRx46Ag98FU7laZRII4dQ+s+Ci4bD+WO3vgfhqS
8PGaqVDZUXl70eVwMlVGTR48fypHd8oDEYIxtb0CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5UUzlARHaQO5r1ZmcYsXPevYbGTAfBgNVHSMEGDAWgBRFEMab7QNGW/+K
+dcaaumxg7fCTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JSREdtLTBEUmx2X2l2blhHbXJwc1lPM3drMC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvMDljODY1LWFjOWMtNDkxMy05Y2NlLWUxZmQwYjFmMGVmZC8x
LzEtVkZNNVFFUjJrRHVhOVdabkdMRnozcjJHeGsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Fj
LzA5Yzg2NS1hYzljLTQ5MTMtOWNjZS1lMWZkMGIxZjBlZmQvMS9SUkRHbS0wRFJs
dl9pdm5YR21ycHNZTzN3azAuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG52fQwDQYJKoZIhvcNAQELBQAD
ggEBADCuR7WjN/0kxe+0hZIsKVYYt/GJuPzFQVP7pzCyndPBLEKYadg0nMPnH+8O
CgrjFjPdIDO/U8nQ4DxXW8HTvptqgAhzGTMbg0mCHGN+bbZqEgf0zSSrxWdeEmQg
Sy3VHWsGPghl1pZ0dXQByndnuQkuMJ3wfVUIPZrsBGDk8dCBSFpKneXYQZ/jbyce
kgJaWrqqL0pBiC2Nj4nhYPSc+YjH6WSjUal9ufbWecPMcQAIWm2+9t1hTohrphrU
KrB6pXlSvoxdqvIKeMV+CEDSdO8FxlToerLZ+auuBO6LC0l4aYWLw4ybbfXPVSTU
QyKRg4Jge4CtIqNFc3CIJ1+xMJo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org