Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/sWb7d3dwqRLNIrdrp0MYfy5JgdM.roa
File: sWb7d3dwqRLNIrdrp0MYfy5JgdM.roa (raw, json)
Hash identifier: 2sJspDI1JTDF4RAb6Aua7DS7Bdc9t+juTw8chFi5kXA=
Subject key identifier: B1:66:FB:77:77:70:A9:12:CD:22:B7:6B:A7:43:18:7F:2E:49:81:D3
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 3608865A
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/sWb7d3dwqRLNIrdrp0MYfy5JgdM.roa
Signing time: Sat 01 Jan 2022 05:53:38 +0000
ROA not before: Sat 01 Jan 2022 05:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 185.7.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906528346 (0x3608865a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 05:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b166fb777770a912cd22b76ba743187f2e4981d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:6f:82:8f:56:ed:53:7b:95:58:63:1a:34:
78:46:5d:70:cf:86:46:9f:db:a2:ef:be:4f:85:59:
59:72:27:7f:ff:e9:23:3f:4b:68:76:ae:0b:90:b8:
d8:e2:3e:79:5a:40:72:c6:47:ec:56:ec:9a:d0:61:
14:0f:91:f1:41:d7:d6:16:d4:d3:b4:d4:11:c0:2a:
a5:f9:fc:ab:54:96:c1:32:f1:26:cb:99:1d:7b:85:
79:71:66:9f:7e:eb:b4:8a:8d:7f:5d:d9:e2:30:f4:
12:53:ef:44:bc:53:f0:7a:17:2f:1b:50:71:64:10:
09:31:39:01:48:ae:fa:83:a5:ab:6c:e2:65:91:a0:
07:72:da:eb:58:f2:31:b7:0f:52:30:ac:dc:9c:65:
dd:a1:18:c4:8b:80:97:7b:8b:75:d7:25:7e:6e:34:
67:83:de:6c:77:b3:0e:4e:76:96:9d:9a:68:c9:05:
63:83:ef:d9:dd:34:21:d4:7c:94:a3:d0:95:c3:41:
1e:b1:34:d1:48:54:87:9a:4e:43:56:c9:54:af:75:
c2:38:af:b2:93:88:e6:fe:00:b2:35:31:d4:be:2b:
77:f1:8a:35:60:f0:b3:68:16:f0:02:0e:e1:f0:c3:
07:00:22:61:79:3f:c4:7d:fc:74:60:f5:df:b1:9a:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:FB:77:77:70:A9:12:CD:22:B7:6B:A7:43:18:7F:2E:49:81:D3
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/sWb7d3dwqRLNIrdrp0MYfy5JgdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:74:cc:8a:19:9e:8e:e9:83:41:8d:da:46:67:1e:e1:92:33:
17:fa:ad:cb:00:67:6c:be:2b:1c:19:b7:0f:9c:f7:f6:fc:26:
d5:ec:7a:ec:c8:86:11:f7:e7:d1:9e:87:da:ea:66:65:ac:63:
80:51:d4:f5:b7:76:21:a6:1e:60:6d:40:23:72:d1:6d:67:22:
1a:ef:7f:71:46:49:0b:86:4c:60:33:88:38:60:62:df:d0:8e:
76:c0:ed:fe:a9:7b:8e:d1:43:c0:f9:7a:cc:f5:b8:bf:39:26:
9a:40:36:6f:a5:6d:da:76:a1:a8:96:6f:33:5a:71:c7:85:d5:
62:95:04:49:4a:6a:3d:a4:e1:fb:92:77:95:98:81:c0:2c:7b:
cf:fd:83:6d:83:c9:6c:49:c6:5f:ab:1b:f9:08:c2:3e:ee:a8:
8b:50:9e:8f:83:ba:17:19:16:dc:27:4c:10:dc:87:9d:29:d5:
d7:35:77:07:a7:d6:d0:a6:b0:eb:95:63:04:a9:df:7e:ac:e2:
52:bc:79:43:dc:69:d0:76:30:b5:12:d9:d4:11:1a:d8:39:23:
4d:6e:88:6f:71:76:a4:d2:d4:a7:0e:0c:09:c0:d4:c2:54:9b:
b1:f2:18:94:9e:b2:76:77:b3:d9:7c:1a:8c:12:cc:11:f1:e0:
c6:17:e3:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENgiGWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NTRhMmFlZTA4NjE3NGIwMTI3MmZhZTc3OWFkNDMxZWIwOTJhZWI3MB4XDTIyMDEw
MTA1NTMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjE2NmZiNzc3Nzcw
YTkxMmNkMjJiNzZiYTc0MzE4N2YyZTQ5ODFkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ/Pb4KPVu1Te5VYYxo0eEZdcM+GRp/bou++T4VZWXInf//p
Iz9LaHauC5C42OI+eVpAcsZH7FbsmtBhFA+R8UHX1hbU07TUEcAqpfn8q1SWwTLx
JsuZHXuFeXFmn37rtIqNf13Z4jD0ElPvRLxT8HoXLxtQcWQQCTE5AUiu+oOlq2zi
ZZGgB3La61jyMbcPUjCs3Jxl3aEYxIuAl3uLddclfm40Z4PebHezDk52lp2aaMkF
Y4Pv2d00IdR8lKPQlcNBHrE00UhUh5pOQ1bJVK91wjivspOI5v4AsjUx1L4rd/GK
NWDws2gW8AIO4fDDBwAiYXk/xH38dGD137GaQo0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSxZvt3d3CpEs0it2unQxh/LkmB0zAfBgNVHSMEGDAWgBSVSiruCGF0sBJy
+ud5rUMesJKutzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xVb3E3Z2hoZExBU2N2cm5lYTFESHJDU3JyYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvMjM1Mzk2LTBlNDItNDM3Ny04NTVhLTQ1NjVmMDRmOGQ4NS8x
L3NXYjdkM2R3cVJMTklyZHJwME1ZZnk1SmdkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
MjM1Mzk2LTBlNDItNDM3Ny04NTVhLTQ1NjVmMDRmOGQ4NS8xL2xVb3E3Z2hoZExB
U2N2cm5lYTFESHJDU3JyYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkHUTANBgkqhkiG9w0BAQsFAAOC
AQEAG3TMihmejumDQY3aRmce4ZIzF/qtywBnbL4rHBm3D5z39vwm1ex67MiGEffn
0Z6H2upmZaxjgFHU9bd2IaYeYG1AI3LRbWciGu9/cUZJC4ZMYDOIOGBi39COdsDt
/ql7jtFDwPl6zPW4vzkmmkA2b6Vt2nahqJZvM1pxx4XVYpUESUpqPaTh+5J3lZiB
wCx7z/2DbYPJbEnGX6sb+QjCPu6oi1Cej4O6FxkW3CdMENyHnSnV1zV3B6fW0Kaw
65VjBKnffqziUrx5Q9xp0HYwtRLZ1BEa2DkjTW6Ib3F2pNLUpw4MCcDUwlSbsfIY
lJ6ydnez2XwajBLMEfHgxhfjwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org