Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/67pIcJw10L-rqdmKbCKHZX_6M60.roa
File: 67pIcJw10L-rqdmKbCKHZX_6M60.roa (raw, json)
Hash identifier: KIhdrE8fZ6O3nV5thbQEJJZ0I9jxEtJuvuVg6BbLmUg=
Subject key identifier: EB:BA:48:70:9C:35:D0:BF:AB:A9:D9:8A:6C:22:87:65:7F:FA:33:AD
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 047E5CBA
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/67pIcJw10L-rqdmKbCKHZX_6M60.roa
Signing time: Sat 01 Jan 2022 14:03:54 +0000
ROA not before: Sat 01 Jan 2022 14:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212866
IP address blocks: 185.111.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75390138 (0x47e5cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Jan 1 14:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebba48709c35d0bfaba9d98a6c2287657ffa33ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:b8:a4:4d:33:6f:78:46:fd:26:36:dc:21:
b4:ea:b7:5b:18:35:f4:10:f8:13:86:43:65:d4:f1:
b4:d8:63:b0:30:c9:5f:ad:97:a8:2b:93:84:1e:9e:
e0:64:d5:4c:68:c1:2a:d8:b6:cc:3b:c0:24:15:97:
cd:69:2b:02:24:15:12:1c:0c:e1:f6:4e:4c:d7:2d:
e3:52:5b:ec:0d:4d:16:5f:ed:64:98:51:9b:65:5d:
dd:bc:00:6e:a0:72:1c:01:c4:e9:d7:24:03:da:c7:
35:76:86:92:d3:1c:2c:0b:2c:00:82:7e:49:22:cd:
d9:b3:43:c7:32:3b:bc:d9:36:07:cb:c1:97:77:6c:
ee:be:72:9a:c4:ef:b8:48:42:b5:28:11:8c:b1:aa:
c8:5a:1d:59:5e:39:c4:ca:d9:58:53:ca:1d:aa:9a:
1a:c1:28:09:93:30:7d:f1:e2:1d:e1:55:2c:eb:34:
8e:6b:4d:b5:40:61:7c:db:46:9b:e6:35:cd:c2:bb:
b3:b5:de:e8:31:b2:32:5d:60:a4:cb:69:74:81:22:
c8:7e:03:2c:74:18:82:e7:ce:af:7c:82:12:f4:cb:
3e:b2:d2:d7:e8:32:68:e5:dd:f5:08:77:e8:2f:00:
4a:e9:79:83:d5:0c:b9:7a:fb:17:f3:52:ee:60:b3:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:48:70:9C:35:D0:BF:AB:A9:D9:8A:6C:22:87:65:7F:FA:33:AD
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/67pIcJw10L-rqdmKbCKHZX_6M60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:bb:31:94:0a:9b:84:f1:e4:80:88:26:27:d2:4b:9f:4f:b5:
b3:21:ce:85:be:6d:76:c9:a4:c7:f8:be:aa:35:ff:4e:af:65:
a4:7a:f3:8a:00:e1:40:7f:a5:1d:b7:3b:59:cd:21:36:de:d2:
a5:48:d5:1c:63:d6:e7:39:da:e4:8c:c6:5d:68:39:7a:25:bb:
e6:39:c4:7c:f3:cf:f4:8c:48:b9:ce:e0:bf:eb:5f:7d:cc:de:
50:9a:4b:91:8c:2e:12:07:4d:27:c3:b6:28:59:97:0d:45:cb:
39:ae:c5:fa:14:de:aa:e8:b4:72:c7:94:65:08:63:2c:47:0d:
17:73:57:46:32:ba:76:63:ce:4e:26:a1:f1:20:33:13:0d:3b:
7f:51:d2:d3:83:29:48:27:b0:06:35:26:9b:f9:82:34:82:b7:
9c:f3:7a:d3:75:82:2c:4e:4c:5a:c4:9f:7a:26:28:be:2c:83:
c7:f3:16:d2:ae:a4:5e:b9:fb:ed:80:f8:e9:92:c5:bf:ec:72:
3f:4a:53:82:fa:4f:e9:1c:71:e4:5a:7a:a9:cc:ca:47:e1:f8:
45:20:78:b6:72:f3:6c:6b:5a:90:71:5d:8a:4a:44:83:0c:4e:
21:3f:af:31:e0:64:04:eb:d9:58:9a:2a:68:20:dd:68:99:60:
7e:ec:eb:1d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBH5cujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OGU3NTgwMmU3ZWZiODY1M2UzYWY1OWNiZjFiYzA2NTM4YmNhNjcxMB4XDTIyMDEw
MTE0MDM1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWJiYTQ4NzA5YzM1
ZDBiZmFiYTlkOThhNmMyMjg3NjU3ZmZhMzNhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANN2uKRNM294Rv0mNtwhtOq3Wxg19BD4E4ZDZdTxtNhjsDDJ
X62XqCuThB6e4GTVTGjBKti2zDvAJBWXzWkrAiQVEhwM4fZOTNct41Jb7A1NFl/t
ZJhRm2Vd3bwAbqByHAHE6dckA9rHNXaGktMcLAssAIJ+SSLN2bNDxzI7vNk2B8vB
l3ds7r5ymsTvuEhCtSgRjLGqyFodWV45xMrZWFPKHaqaGsEoCZMwffHiHeFVLOs0
jmtNtUBhfNtGm+Y1zcK7s7Xe6DGyMl1gpMtpdIEiyH4DLHQYgufOr3yCEvTLPrLS
1+gyaOXd9Qh36C8ASul5g9UMuXr7F/NS7mCzqykCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTrukhwnDXQv6up2YpsIodlf/ozrTAfBgNVHSMEGDAWgBSo51gC5++4ZT46
9Zy/G8BlOLymcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FPZFlBdWZ2dUdVLU92V2N2eHZBWlRpOHBuRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjIvNjI1NmI2LTM2YTEtNGYyZi1hMGI5LTQxMWY1ODM3ZmVmYS8x
LzY3cEljSncxMEwtcnFkbUtiQ0tIWlhfNk02MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIv
NjI1NmI2LTM2YTEtNGYyZi1hMGI5LTQxMWY1ODM3ZmVmYS8xL3FPZFlBdWZ2dUdV
LU92V2N2eHZBWlRpOHBuRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlv/DANBgkqhkiG9w0BAQsFAAOC
AQEAZrsxlAqbhPHkgIgmJ9JLn0+1syHOhb5tdsmkx/i+qjX/Tq9lpHrzigDhQH+l
Hbc7Wc0hNt7SpUjVHGPW5zna5IzGXWg5eiW75jnEfPPP9IxIuc7gv+tffczeUJpL
kYwuEgdNJ8O2KFmXDUXLOa7F+hTequi0cseUZQhjLEcNF3NXRjK6dmPOTiah8SAz
Ew07f1HS04MpSCewBjUmm/mCNIK3nPN603WCLE5MWsSfeiYoviyDx/MW0q6kXrn7
7YD46ZLFv+xyP0pTgvpP6Rxx5Fp6qczKR+H4RSB4tnLzbGtakHFdikpEgwxOIT+v
MeBkBOvZWJoqaCDdaJlgfuzrHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:23 2024 by rpki-client on console-fra.rpki-client.org