Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/Svq5849B9ZeZ268wN18t9Y7FTDI.roa
File: Svq5849B9ZeZ268wN18t9Y7FTDI.roa (raw, json)
Hash identifier: hARqvAmet6Gk9Hlts3HtNaVeI2DwLsNm5rmE2+fwN7A=
Subject key identifier: 4A:FA:B9:F3:8F:41:F5:97:99:DB:AF:30:37:5F:2D:F5:8E:C5:4C:32
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 03F3F4CA
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/Svq5849B9ZeZ268wN18t9Y7FTDI.roa
Signing time: Sat 01 Jan 2022 15:03:41 +0000
ROA not before: Sat 01 Jan 2022 15:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35571
IP address blocks: 185.141.180.0/22 maxlen: 22
87.236.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66319562 (0x3f3f4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Jan 1 15:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4afab9f38f41f59799dbaf30375f2df58ec54c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:3e:88:65:10:73:f7:35:36:25:ee:1f:40:
d4:c0:cb:0d:41:17:4f:67:18:fc:1b:98:e4:f3:4f:
67:f8:91:fe:16:44:9e:cf:bf:f7:17:37:a3:1e:26:
b5:fb:f6:cc:4f:fb:f7:ae:8e:00:4c:50:85:a2:03:
3b:eb:92:94:9c:89:57:2a:4c:9c:93:95:4c:2f:1d:
16:fc:2c:03:5f:d0:27:f0:6e:fc:05:fb:6d:c5:2e:
73:2e:07:f6:5e:cb:7d:b7:03:51:bb:21:64:aa:29:
2e:98:99:17:05:72:e8:eb:a7:a2:49:a9:31:bd:2c:
c1:2b:2e:91:64:8c:dd:50:51:9a:9d:a8:e9:fc:05:
dc:6d:32:02:69:0c:a2:75:b4:10:24:e3:ec:61:47:
89:75:1c:1d:a1:4b:3f:47:b0:84:e1:0e:9b:84:01:
52:69:ff:07:36:a7:f6:e4:31:27:3e:4a:18:23:ec:
96:4d:43:2f:67:64:f6:67:14:84:cf:1d:ad:81:5e:
a1:21:79:39:8f:11:f6:9c:19:d5:2a:58:d4:d4:2a:
d4:38:aa:bc:5a:ad:a3:36:d1:b1:d2:ed:ad:18:39:
bd:e1:d6:1f:ea:3f:18:0f:ef:23:f2:0c:de:f6:8d:
48:0f:46:9b:35:28:99:b9:f3:4c:fd:61:a0:50:08:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:B9:F3:8F:41:F5:97:99:DB:AF:30:37:5F:2D:F5:8E:C5:4C:32
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/Svq5849B9ZeZ268wN18t9Y7FTDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.80.0/21
185.141.180.0/22
Signature Algorithm: sha256WithRSAEncryption
16:5d:89:f9:97:5b:d7:76:56:b1:08:b7:02:e7:ab:cb:c8:b5:
ad:87:ef:fe:be:f3:1a:8e:6f:d4:39:45:2d:0e:75:da:f2:cf:
4b:ce:4f:c2:18:b6:bc:8c:48:e1:1c:8e:49:c3:a5:9d:f8:4a:
bd:00:4c:e5:4e:39:cc:8f:91:c3:10:79:89:08:aa:fb:8f:53:
7a:ef:b1:4d:0a:bf:c7:d8:95:eb:f5:7c:42:1b:a3:ca:15:1e:
3a:ac:c2:da:ca:1f:8d:51:e3:c4:ff:83:73:b4:6b:69:9c:5a:
cc:c2:07:4c:3e:0d:3b:17:1d:13:7c:b0:bd:f2:e8:55:74:2d:
5a:39:3f:67:98:58:4a:84:38:2b:e1:d6:8b:68:b3:95:3b:9b:
b3:a6:73:7b:7a:f9:d8:c5:ea:72:83:43:7f:88:6c:27:db:f1:
5c:6c:59:10:eb:86:60:67:e1:c8:66:85:01:0e:e5:90:63:30:
c3:13:38:53:95:42:f6:10:67:1d:5a:19:7c:62:35:de:a9:92:
ff:78:73:28:40:95:22:03:c0:f8:2e:6b:01:2d:14:fd:3d:d6:
d6:7b:36:e7:06:b5:33:f4:66:58:d7:15:e3:d9:95:06:98:93:
cc:9e:1d:81:67:95:d5:11:76:d5:24:9b:4f:5e:e4:1f:90:68:
81:de:f8:0e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA/P0yjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ODdhYWM3MWYxN2VmMDMzY2I2NTM2Nzk1MzM4ZmRjN2JjMGYyMjYzMB4XDTIyMDEw
MTE1MDM0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFmYWI5ZjM4ZjQx
ZjU5Nzk5ZGJhZjMwMzc1ZjJkZjU4ZWM1NGMzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALMFPohlEHP3NTYl7h9A1MDLDUEXT2cY/BuY5PNPZ/iR/hZE
ns+/9xc3ox4mtfv2zE/7966OAExQhaIDO+uSlJyJVypMnJOVTC8dFvwsA1/QJ/Bu
/AX7bcUucy4H9l7LfbcDUbshZKopLpiZFwVy6OunokmpMb0swSsukWSM3VBRmp2o
6fwF3G0yAmkMonW0ECTj7GFHiXUcHaFLP0ewhOEOm4QBUmn/Bzan9uQxJz5KGCPs
lk1DL2dk9mcUhM8drYFeoSF5OY8R9pwZ1SpY1NQq1DiqvFqtozbRsdLtrRg5veHW
H+o/GA/vI/IM3vaNSA9GmzUombnzTP1hoFAI3S8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRK+rnzj0H1l5nbrzA3Xy31jsVMMjAfBgNVHSMEGDAWgBR4eqxx8X7wM8tl
NnlTOP3HvA8iYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VIcXNjZkYtOERQTFpUWjVVemo5eDd3UEltTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvODVkZGFlLTU0YTctNGU3Yi05NmRhLWQxMjg2N2I0NjczMy8x
L1N2cTU4NDlCOVplWjI2OHdOMTh0OVk3RlRESS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
ODVkZGFlLTU0YTctNGU3Yi05NmRhLWQxMjg2N2I0NjczMy8xL2VIcXNjZkYtOERQ
TFpUWjVVemo5eDd3UEltTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA1fsUAMEArmNtDANBgkqhkiG9w0B
AQsFAAOCAQEAFl2J+Zdb13ZWsQi3Auery8i1rYfv/r7zGo5v1DlFLQ512vLPS85P
whi2vIxI4RyOScOlnfhKvQBM5U45zI+RwxB5iQiq+49Teu+xTQq/x9iV6/V8Qhuj
yhUeOqzC2sofjVHjxP+Dc7RraZxazMIHTD4NOxcdE3ywvfLoVXQtWjk/Z5hYSoQ4
K+HWi2izlTubs6Zze3r52MXqcoNDf4hsJ9vxXGxZEOuGYGfhyGaFAQ7lkGMwwxM4
U5VC9hBnHVoZfGI13qmS/3hzKECVIgPA+C5rAS0U/T3W1ns25wa1M/RmWNcV49mV
BpiTzJ4dgWeV1RF21SSbT17kH5Bogd74Dg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org