Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/4CVv3CeYOC8bS-XzMI22CfVb4l0.roa
File: 4CVv3CeYOC8bS-XzMI22CfVb4l0.roa (raw, json)
Hash identifier: ajWK4AHE1ZO2B+SIe8zfXbq05JT3BMRG90VMrBeyyNw=
Subject key identifier: E0:25:6F:DC:27:98:38:2F:1B:4B:E5:F3:30:8D:B6:09:F5:5B:E2:5D
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01FE29A5
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/4CVv3CeYOC8bS-XzMI22CfVb4l0.roa
Signing time: Wed 23 Feb 2022 10:04:40 +0000
ROA not before: Wed 23 Feb 2022 10:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62579
IP address blocks: 147.185.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33434021 (0x1fe29a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Feb 23 10:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0256fdc2798382f1b4be5f3308db609f55be25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:24:33:75:40:33:08:0b:33:d2:58:0b:37:
eb:7b:5d:b9:6f:98:c9:af:33:d2:ca:e1:9f:de:94:
dc:67:39:a1:dd:6a:ca:62:4a:c4:e4:75:f6:ec:a5:
1a:b5:90:7d:fd:e4:32:01:13:ad:ff:b4:6e:41:bd:
36:a1:5d:74:a5:85:5c:60:c5:9c:a3:e8:ad:a8:cb:
d3:93:a4:dd:b2:0b:e4:d8:fc:ba:bc:4b:13:20:44:
a3:a4:03:35:79:2c:6c:f3:09:79:fe:7d:d8:8d:31:
d4:7f:c0:96:45:4c:d8:de:bc:fd:19:8d:a0:2c:93:
6e:52:fb:7d:21:78:52:3e:8d:e1:ca:5f:9b:a6:9e:
ae:8f:0a:29:bf:af:26:ee:82:84:d8:33:63:e3:7e:
a9:a5:da:a5:d4:02:72:e2:4f:c2:1b:fe:69:ce:87:
bf:0c:98:3f:0b:bf:b5:f2:e1:78:8c:3e:4d:33:58:
55:10:f4:cc:63:22:d8:fc:1c:48:cc:23:36:d5:d5:
ae:cd:d2:aa:a8:bb:f2:f6:5b:bb:24:28:75:02:d4:
39:32:5a:33:1d:49:ec:db:2d:0e:9f:32:09:8f:97:
74:7f:1c:1c:5d:80:40:0a:8f:9f:8c:0d:9e:ac:d9:
67:99:34:8a:e8:e8:ec:40:f9:07:3f:1e:9b:0a:18:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:6F:DC:27:98:38:2F:1B:4B:E5:F3:30:8D:B6:09:F5:5B:E2:5D
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/4CVv3CeYOC8bS-XzMI22CfVb4l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.106.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:30:04:0c:df:3d:d1:dd:b4:73:c3:b9:60:91:75:b1:c6:3c:
75:83:17:78:95:35:ca:ed:ed:73:da:c8:c9:5d:f6:ef:e6:35:
09:62:12:4c:52:a9:8b:3d:ed:76:c1:46:3e:07:0a:09:84:87:
77:2a:a7:53:b9:df:00:7c:72:17:cb:f6:2d:a1:11:ab:0b:12:
cd:4b:14:14:f8:0c:01:c5:bc:df:57:a1:da:bf:cc:8c:45:f9:
0d:25:ea:d7:01:6d:26:53:4f:c8:d8:2f:4e:88:0d:43:37:cf:
c5:ef:d4:58:d2:23:7d:c2:a6:96:98:6b:56:d4:ee:12:a2:23:
f0:3f:93:05:28:90:4b:2d:ff:de:12:86:f7:a7:70:11:68:81:
ab:f9:3e:11:07:f0:cd:4b:a3:ef:ec:dd:ce:f7:02:2f:5a:49:
75:54:e4:77:99:11:24:ec:9b:ae:1d:27:b8:7f:07:62:15:15:
55:68:45:f4:c5:f2:25:97:fb:4f:ea:08:da:4d:29:4f:89:02:
b7:0f:16:5e:44:06:26:1d:c6:cd:c9:34:53:c0:c5:d1:e0:b2:
00:bd:2e:b7:4d:b7:50:1d:25:1b:bc:fd:d3:23:3a:8f:e8:7e:
f4:b2:74:48:30:a6:7a:47:05:e0:c6:18:a4:5b:9a:2b:bd:f1:
49:0d:c1:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAf4ppTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWMyYzFhZmQ0YmRlYzk4MDUwNmZhMDdkZjdjODY2MmQ1NTRmYTQ2MB4XDTIyMDIy
MzEwMDQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTAyNTZmZGMyNzk4
MzgyZjFiNGJlNWYzMzA4ZGI2MDlmNTViZTI1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOdlJDN1QDMICzPSWAs363tduW+Yya8z0srhn96U3Gc5od1q
ymJKxOR19uylGrWQff3kMgETrf+0bkG9NqFddKWFXGDFnKPorajL05Ok3bIL5Nj8
urxLEyBEo6QDNXksbPMJef592I0x1H/AlkVM2N68/RmNoCyTblL7fSF4Uj6N4cpf
m6aero8KKb+vJu6ChNgzY+N+qaXapdQCcuJPwhv+ac6HvwyYPwu/tfLheIw+TTNY
VRD0zGMi2PwcSMwjNtXVrs3Sqqi78vZbuyQodQLUOTJaMx1J7NstDp8yCY+XdH8c
HF2AQAqPn4wNnqzZZ5k0iujo7ED5Bz8emwoYmmECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgJW/cJ5g4LxtL5fMwjbYJ9VviXTAfBgNVHSMEGDAWgBTqwsGv1L3smAUG
+gfffIZi1VT6RjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZzTEJyOVM5N0pnRkJ2b0gzM3lHWXRWVS1rWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvNTg5YTZiLTRkN2UtNDAxMi1hMGZjLWMwY2ViMDM3YWQ0Mi8x
LzRDVnYzQ2VZT0M4YlMtWHpNSTIyQ2ZWYjRsMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
NTg5YTZiLTRkN2UtNDAxMi1hMGZjLWMwY2ViMDM3YWQ0Mi8xLzZzTEJyOVM5N0pn
RkJ2b0gzM3lHWXRWVS1rWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJO5ajANBgkqhkiG9w0BAQsFAAOC
AQEAnDAEDN890d20c8O5YJF1scY8dYMXeJU1yu3tc9rIyV327+Y1CWISTFKpiz3t
dsFGPgcKCYSHdyqnU7nfAHxyF8v2LaERqwsSzUsUFPgMAcW831eh2r/MjEX5DSXq
1wFtJlNPyNgvTogNQzfPxe/UWNIjfcKmlphrVtTuEqIj8D+TBSiQSy3/3hKG96dw
EWiBq/k+EQfwzUuj7+zdzvcCL1pJdVTkd5kRJOybrh0nuH8HYhUVVWhF9MXyJZf7
T+oI2k0pT4kCtw8WXkQGJh3Gzck0U8DF0eCyAL0ut023UB0lG7z90yM6j+h+9LJ0
SDCmekcF4MYYpFuaK73xSQ3BRg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:29 2023 by rpki-client on console-ams.rpki-client.org