Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/COF9g1kUl5_0DSBkJ2PnYpW1IF4.roa
File: COF9g1kUl5_0DSBkJ2PnYpW1IF4.roa (raw, json)
Hash identifier: SAS7B9oL9t6Ihqp/xNGT0C2CRbMreuwQMPGXPYPhH0I=
Subject key identifier: 08:E1:7D:83:59:14:97:9F:F4:0D:20:64:27:63:E7:62:95:B5:20:5E
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0B2C0DC1
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/COF9g1kUl5_0DSBkJ2PnYpW1IF4.roa
Signing time: Thu 17 Mar 2022 12:18:39 +0000
ROA not before: Thu 17 Mar 2022 12:18:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.189.34.0/24 maxlen: 24
185.189.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187436481 (0xb2c0dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Mar 17 12:18:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e17d835914979ff40d20642763e76295b5205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:6c:0f:33:97:a5:a2:63:a5:a8:4a:b6:79:
3e:60:9e:92:4b:07:64:8b:b8:a5:9e:45:40:35:91:
c2:e0:52:45:3a:7e:3b:79:0c:8d:cd:64:33:dd:63:
73:30:9f:db:b0:2a:8d:8e:f1:7b:66:d1:fd:7c:08:
41:90:52:1a:ea:f0:d4:1b:e2:d2:a2:29:be:fd:ac:
86:df:e8:2f:53:75:da:24:0a:4b:7d:f0:a4:25:a6:
50:02:ee:17:7e:ac:1f:02:57:0e:95:12:6e:94:8b:
3b:bd:a2:b7:70:3e:d2:94:64:ed:36:0a:fd:03:f1:
fe:7b:fa:b4:59:a7:14:64:4c:10:e0:c2:db:a4:ab:
0a:ca:72:ff:23:3e:7c:70:2b:dd:18:f3:d8:4f:4f:
97:20:97:66:8d:03:df:fa:77:88:84:a6:f7:ff:b5:
7c:18:a4:27:3c:4f:39:1b:45:f0:d0:2b:fb:ba:14:
ad:37:74:0e:4e:6e:c1:fc:2c:85:af:9d:ba:9c:4f:
7b:ca:38:8b:0b:35:1f:c5:7c:77:85:b3:91:8a:b9:
cf:b9:5d:7e:69:c6:10:ab:29:91:4c:ab:7a:13:04:
45:ad:44:57:b3:c9:c6:8a:48:2f:3f:68:45:4b:4b:
53:72:76:b4:27:a3:f3:66:fb:1f:56:84:35:39:39:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:7D:83:59:14:97:9F:F4:0D:20:64:27:63:E7:62:95:B5:20:5E
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/COF9g1kUl5_0DSBkJ2PnYpW1IF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.34.0/23
Signature Algorithm: sha256WithRSAEncryption
02:97:aa:e8:5f:dc:a9:39:bb:29:e6:9a:36:db:a4:33:41:77:
4b:08:bd:26:e5:df:f5:ba:9d:09:83:ec:36:24:6c:7f:0d:e4:
8d:e8:dc:cd:de:04:ed:60:c8:f0:f0:5d:d9:8b:8e:8e:21:c5:
4e:5e:69:a9:b7:38:17:c4:46:d5:b9:43:55:cd:36:b2:36:8e:
b5:e6:3a:3d:74:aa:c8:bd:1d:6f:78:62:ab:5b:6a:fa:a9:c2:
ea:b3:ed:9c:a0:63:72:78:6d:f3:5b:88:9b:09:1c:8f:1e:30:
ce:34:65:60:ca:cb:7b:e9:82:5a:8e:55:aa:b0:e1:38:88:b6:
25:99:ab:b6:60:50:be:1c:45:e6:9d:3e:37:d1:88:5c:ac:3d:
76:4a:bb:c9:8e:f5:0f:5e:cb:c2:74:26:bf:69:2e:79:b6:88:
10:c0:dd:f8:f0:73:9c:1a:e5:a2:58:37:a6:be:fe:5e:b2:9b:
e5:93:e2:d9:d0:bd:91:b2:26:ce:dc:89:11:b5:50:e2:d8:13:
e2:c6:fd:3d:95:0d:36:90:5f:6b:e8:fc:11:61:2e:c1:64:f2:
ca:12:06:d3:cc:17:8b:b1:90:3f:0d:14:05:bb:2d:64:d5:2c:
c3:37:32:c2:e9:45:bd:6d:97:a6:19:2d:51:e1:79:b8:0a:61:
bf:b4:d4:c8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECywNwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MmU3MjA0NjVjNWNkMGRhOWM2YTEzYjQ0ZmEwZDg2ZjY0OWU1MDU1MB4XDTIyMDMx
NzEyMTgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhlMTdkODM1OTE0
OTc5ZmY0MGQyMDY0Mjc2M2U3NjI5NWI1MjA1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALt2bA8zl6WiY6WoSrZ5PmCekksHZIu4pZ5FQDWRwuBSRTp+
O3kMjc1kM91jczCf27AqjY7xe2bR/XwIQZBSGurw1Bvi0qIpvv2sht/oL1N12iQK
S33wpCWmUALuF36sHwJXDpUSbpSLO72it3A+0pRk7TYK/QPx/nv6tFmnFGRMEODC
26SrCspy/yM+fHAr3Rjz2E9PlyCXZo0D3/p3iISm9/+1fBikJzxPORtF8NAr+7oU
rTd0Dk5uwfwsha+dupxPe8o4iws1H8V8d4WzkYq5z7ldfmnGEKspkUyrehMERa1E
V7PJxopILz9oRUtLU3J2tCej82b7H1aENTk5bKMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQI4X2DWRSXn/QNIGQnY+dilbUgXjAfBgNVHSMEGDAWgBSS5yBGXFzQ2pxq
E7RPoNhvZJ5QVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2t1Y2dSbHhjME5xY2FoTzBUNkRZYjJTZVVGVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvZjhhOWViLTdmOGQtNGJmNy04M2Q5LTkwOTZlMTY3NGUyMi8x
L0NPRjlnMWtVbDVfMERTQmtKMlBuWXBXMUlGNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
ZjhhOWViLTdmOGQtNGJmNy04M2Q5LTkwOTZlMTY3NGUyMi8xL2t1Y2dSbHhjME5x
Y2FoTzBUNkRZYjJTZVVGVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbm9IjANBgkqhkiG9w0BAQsFAAOC
AQEAApeq6F/cqTm7KeaaNtukM0F3Swi9JuXf9bqdCYPsNiRsfw3kjejczd4E7WDI
8PBd2YuOjiHFTl5pqbc4F8RG1blDVc02sjaOteY6PXSqyL0db3hiq1tq+qnC6rPt
nKBjcnht81uImwkcjx4wzjRlYMrLe+mCWo5VqrDhOIi2JZmrtmBQvhxF5p0+N9GI
XKw9dkq7yY71D17LwnQmv2kuebaIEMDd+PBznBrlolg3pr7+XrKb5ZPi2dC9kbIm
ztyJEbVQ4tgT4sb9PZUNNpBfa+j8EWEuwWTyyhIG08wXi7GQPw0UBbstZNUswzcy
wulFvW2XphktUeF5uAphv7TUyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org