Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/caXzMJD2LeznRI6IEVG-jiXV6I8.roa
File: caXzMJD2LeznRI6IEVG-jiXV6I8.roa (raw, json)
Hash identifier: TtGdzh4vsIHze74nIxSYSNb+kONPkWmyroFEh5ROA8c=
Subject key identifier: 71:A5:F3:30:90:F6:2D:EC:E7:44:8E:88:11:51:BE:8E:25:D5:E8:8F
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 0205D7F1
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/caXzMJD2LeznRI6IEVG-jiXV6I8.roa
Signing time: Fri 25 Feb 2022 15:27:27 +0000
ROA not before: Fri 25 Feb 2022 15:27:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 147.185.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33937393 (0x205d7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Feb 25 15:27:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71a5f33090f62dece7448e881151be8e25d5e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:3e:ab:3f:0f:20:d4:3b:80:83:87:20:f9:
9b:19:17:3b:b9:0a:d0:1e:b9:5e:7d:2e:c5:85:a8:
ec:71:0d:89:f2:5a:cb:9d:f0:4a:c7:57:6f:94:a6:
fc:d4:7a:55:44:35:b4:f0:d6:b7:85:28:d5:6c:c2:
43:78:50:c2:31:2b:3c:b4:7c:f4:15:23:cf:04:cf:
d3:5d:6d:16:8d:89:7f:6f:ec:19:31:c1:15:bd:05:
38:9b:4e:82:4a:ff:0d:77:5c:cd:72:9d:d3:43:4f:
1d:0e:3b:c7:95:8d:ba:35:50:99:b3:cc:38:b4:26:
ff:60:b9:6f:fd:a5:3c:eb:a7:49:91:89:7e:e4:cc:
cb:f2:9b:da:99:14:1a:78:6e:2e:a8:fc:1c:80:c7:
d8:ec:84:5b:03:15:5c:fd:16:33:a9:87:8d:6e:e0:
c0:18:d2:3d:18:34:7d:5c:81:a3:00:fd:ed:b0:06:
9d:3c:a4:0d:26:ef:ea:da:b6:7b:db:77:2a:38:4e:
b7:81:a8:57:17:83:36:c3:3a:04:4e:a3:f3:3a:1f:
3c:20:c7:5c:a6:56:a1:fb:46:8b:9e:b2:d6:d8:b2:
21:67:ec:14:d8:56:7d:2f:90:8c:7e:a4:49:7e:68:
f9:78:6a:e8:6c:4a:1d:65:34:75:4b:b8:a1:84:30:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:F3:30:90:F6:2D:EC:E7:44:8E:88:11:51:BE:8E:25:D5:E8:8F
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/caXzMJD2LeznRI6IEVG-jiXV6I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4f:56:f7:39:12:58:ed:23:21:cd:80:29:1e:59:9d:ff:99:
3d:75:aa:eb:1d:82:07:9e:c7:83:68:fa:99:75:36:da:65:80:
8d:7b:dd:ad:52:32:28:37:ac:a4:35:fa:4c:bc:cc:71:02:8d:
bb:11:3c:f2:45:42:da:59:b0:c1:19:94:eb:2c:83:d7:0e:89:
78:33:ee:a2:e1:99:bc:a1:03:dd:d8:00:6b:35:ef:d7:73:66:
8a:a8:da:ea:d1:d5:20:44:3d:78:67:db:6c:96:30:23:fa:1f:
63:8f:c3:b6:cc:bc:b0:30:a4:f2:6f:55:cb:39:b3:ec:57:15:
11:55:72:14:99:ec:2a:a4:cd:f7:f9:9e:97:08:a5:34:b9:49:
9d:03:9b:5c:6b:d6:e4:f0:41:a9:d4:2a:d0:d0:cb:02:9d:9d:
ab:bb:5b:3b:29:6c:93:2e:27:ca:de:74:aa:23:98:b9:f7:7d:
b5:4a:19:10:79:26:b1:84:b3:a3:66:90:ae:7b:f7:19:f7:a0:
18:59:be:c9:ce:c3:9b:39:80:96:23:0c:21:c7:73:64:82:2e:
59:ee:f3:fb:d0:6e:1d:75:0a:58:c6:92:23:00:2a:80:db:36:
20:90:e9:68:27:0f:81:2a:a6:c9:cc:27:74:fb:22:a1:73:e3:
6f:64:8c:19
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAgXX8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWMyYzFhZmQ0YmRlYzk4MDUwNmZhMDdkZjdjODY2MmQ1NTRmYTQ2MB4XDTIyMDIy
NTE1MjcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzFhNWYzMzA5MGY2
MmRlY2U3NDQ4ZTg4MTE1MWJlOGUyNWQ1ZTg4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOEFPqs/DyDUO4CDhyD5mxkXO7kK0B65Xn0uxYWo7HENifJa
y53wSsdXb5Sm/NR6VUQ1tPDWt4Uo1WzCQ3hQwjErPLR89BUjzwTP011tFo2Jf2/s
GTHBFb0FOJtOgkr/DXdczXKd00NPHQ47x5WNujVQmbPMOLQm/2C5b/2lPOunSZGJ
fuTMy/Kb2pkUGnhuLqj8HIDH2OyEWwMVXP0WM6mHjW7gwBjSPRg0fVyBowD97bAG
nTykDSbv6tq2e9t3KjhOt4GoVxeDNsM6BE6j8zofPCDHXKZWoftGi56y1tiyIWfs
FNhWfS+QjH6kSX5o+Xhq6GxKHWU0dUu4oYQwWAsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRxpfMwkPYt7OdEjogRUb6OJdXojzAfBgNVHSMEGDAWgBTqwsGv1L3smAUG
+gfffIZi1VT6RjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZzTEJyOVM5N0pnRkJ2b0gzM3lHWXRWVS1rWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvNTg5YTZiLTRkN2UtNDAxMi1hMGZjLWMwY2ViMDM3YWQ0Mi8x
L2NhWHpNSkQyTGV6blJJNklFVkctamlYVjZJOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
NTg5YTZiLTRkN2UtNDAxMi1hMGZjLWMwY2ViMDM3YWQ0Mi8xLzZzTEJyOVM5N0pn
RkJ2b0gzM3lHWXRWVS1rWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJO5ozANBgkqhkiG9w0BAQsFAAOC
AQEAD09W9zkSWO0jIc2AKR5Znf+ZPXWq6x2CB57Hg2j6mXU22mWAjXvdrVIyKDes
pDX6TLzMcQKNuxE88kVC2lmwwRmU6yyD1w6JeDPuouGZvKED3dgAazXv13Nmiqja
6tHVIEQ9eGfbbJYwI/ofY4/Dtsy8sDCk8m9Vyzmz7FcVEVVyFJnsKqTN9/melwil
NLlJnQObXGvW5PBBqdQq0NDLAp2dq7tbOylsky4nyt50qiOYufd9tUoZEHkmsYSz
o2aQrnv3GfegGFm+yc7DmzmAliMMIcdzZIIuWe7z+9BuHXUKWMaSIwAqgNs2IJDp
aCcPgSqmycwndPsioXPjb2SMGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:48 2024 by rpki-client on console-ams.rpki-client.org