Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/cHVwEeq1U-FTH1DRPT0aqxHge28.roa
File: cHVwEeq1U-FTH1DRPT0aqxHge28.roa (raw, json)
Hash identifier: lAx6hbjTJZxsWYLi7nyiCwbMvUpNEQ54BJcmG5DTaO8=
Subject key identifier: 70:75:70:11:EA:B5:53:E1:53:1F:50:D1:3D:3D:1A:AB:11:E0:7B:6F
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 18E1C234
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/cHVwEeq1U-FTH1DRPT0aqxHge28.roa
Signing time: Fri 10 Jun 2022 14:38:03 +0000
ROA not before: Fri 10 Jun 2022 14:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208062
IP address blocks: 149.3.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417448500 (0x18e1c234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jun 10 14:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70757011eab553e1531f50d13d3d1aab11e07b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:bd:bf:02:d5:9e:b7:cd:ad:46:f3:1d:38:
b0:d4:cb:3e:7b:0a:05:14:92:6f:be:01:19:bf:56:
18:51:9b:8c:96:fa:88:8a:f4:86:cc:b4:71:97:5c:
dc:f2:11:6e:48:d7:eb:f8:4f:2d:6d:2f:65:8a:b6:
37:06:d9:9b:9b:79:3e:d0:3e:63:61:2e:22:34:3e:
a3:a5:5a:09:d5:4f:0c:48:93:69:0f:a9:36:f3:75:
88:0e:3b:30:ec:76:b7:e5:0b:ae:82:e1:87:5a:5b:
3f:da:6e:32:fd:c2:f4:1b:c7:fc:62:87:64:02:e3:
56:4b:1b:ac:fd:e6:1b:c7:18:58:dc:c7:f3:25:94:
49:52:08:cf:84:1c:4d:21:57:09:52:53:c1:77:1e:
27:84:1b:e0:3a:9f:62:0c:b7:eb:52:bf:5b:22:d7:
23:8c:4c:67:1c:7c:de:df:4a:ad:66:1a:8c:72:5e:
66:36:0f:58:c5:42:5f:8f:2f:85:a6:33:42:5d:db:
74:6d:03:c6:03:6d:69:0d:6b:f9:68:79:b4:af:05:
53:84:87:50:8b:82:65:93:ac:7f:77:04:c0:c6:ba:
b7:93:82:b7:c2:1f:5f:99:ea:6f:ce:13:45:e6:d7:
b1:03:50:2a:ee:a6:e9:53:13:81:97:50:fd:2e:6d:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:70:11:EA:B5:53:E1:53:1F:50:D1:3D:3D:1A:AB:11:E0:7B:6F
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/cHVwEeq1U-FTH1DRPT0aqxHge28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.188.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:4b:8d:34:66:d7:53:2c:84:80:9b:54:00:2f:c6:9c:4e:7a:
bb:5e:85:bc:c9:17:4b:d4:ee:a8:d3:15:08:93:fc:72:05:d7:
de:b3:cb:32:fd:21:7e:1c:cb:6a:b2:60:6c:34:31:41:07:77:
b7:71:cb:38:09:67:f2:64:15:04:65:c5:33:da:1a:1e:76:01:
fb:6f:2b:70:51:5b:59:bb:7e:2a:1a:9c:6a:bb:1f:d7:53:2f:
13:c5:c9:de:d8:9e:87:12:dd:f5:f9:72:c0:40:8d:a4:f9:56:
0b:9f:ed:c3:b9:f3:e0:5e:8d:af:16:ef:18:45:2c:1f:62:3e:
71:e4:51:26:ed:96:33:ea:bb:cc:a1:53:9e:bf:33:5a:40:8b:
fa:a8:b1:0a:dd:aa:1b:4a:2e:3e:72:2d:d3:4d:9a:94:12:a6:
ba:67:06:13:31:d8:eb:c0:55:fb:c9:83:16:8a:ff:4c:e1:ae:
ed:11:bc:2f:82:b2:84:b7:93:d9:50:bd:36:41:05:32:4e:3d:
71:d9:5d:f3:75:d3:b5:60:70:0b:ef:3e:c4:78:21:1b:22:9d:
e4:ab:36:59:ce:96:3a:53:d9:f8:0b:88:cc:e7:47:5b:dc:c7:
58:bf:54:3b:de:58:39:f3:00:70:bb:a6:ac:98:66:e6:70:2d:
fd:e2:d1:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGOHCNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YmZhNjYzNmZlNjQ0MGFjZjI5M2I3NTcwNWE3YTFkY2FkYTg0MjBiMB4XDTIyMDYx
MDE0MzgwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA3NTcwMTFlYWI1
NTNlMTUzMWY1MGQxM2QzZDFhYWIxMWUwN2I2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPNvb8C1Z63za1G8x04sNTLPnsKBRSSb74BGb9WGFGbjJb6
iIr0hsy0cZdc3PIRbkjX6/hPLW0vZYq2NwbZm5t5PtA+Y2EuIjQ+o6VaCdVPDEiT
aQ+pNvN1iA47MOx2t+ULroLhh1pbP9puMv3C9BvH/GKHZALjVksbrP3mG8cYWNzH
8yWUSVIIz4QcTSFXCVJTwXceJ4Qb4DqfYgy361K/WyLXI4xMZxx83t9KrWYajHJe
ZjYPWMVCX48vhaYzQl3bdG0DxgNtaQ1r+Wh5tK8FU4SHUIuCZZOsf3cEwMa6t5OC
t8IfX5nqb84TRebXsQNQKu6m6VMTgZdQ/S5t0hcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRwdXAR6rVT4VMfUNE9PRqrEeB7bzAfBgNVHSMEGDAWgBQ7+mY2/mRArPKT
t1cFp6HcrahCCzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09fcG1OdjVrUUt6eWs3ZFhCYWVoM0syb1Fncy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvYTQ3Y2RmLWQyMWItNGYxZC04OTAxLTkyZWM1MTVjNTk1YS8x
L2NIVndFZXExVS1GVEgxRFJQVDBhcXhIZ2UyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
YTQ3Y2RmLWQyMWItNGYxZC04OTAxLTkyZWM1MTVjNTk1YS8xL09fcG1OdjVrUUt6
eWs3ZFhCYWVoM0syb1Fncy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJUDvDANBgkqhkiG9w0BAQsFAAOC
AQEAxUuNNGbXUyyEgJtUAC/GnE56u16FvMkXS9TuqNMVCJP8cgXX3rPLMv0hfhzL
arJgbDQxQQd3t3HLOAln8mQVBGXFM9oaHnYB+28rcFFbWbt+Khqcarsf11MvE8XJ
3tiehxLd9flywECNpPlWC5/tw7nz4F6NrxbvGEUsH2I+ceRRJu2WM+q7zKFTnr8z
WkCL+qixCt2qG0ouPnIt002alBKmumcGEzHY68BV+8mDFor/TOGu7RG8L4KyhLeT
2VC9NkEFMk49cdld83XTtWBwC+8+xHghGyKd5Ks2Wc6WOlPZ+AuIzOdHW9zHWL9U
O95YOfMAcLumrJhm5nAt/eLRRA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:40 2023 by rpki-client on console-fra.rpki-client.org