Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/7U1bJG4uzG1nMLB7ZVsbmhiIDPE.roa
File: 7U1bJG4uzG1nMLB7ZVsbmhiIDPE.roa (raw, json)
Hash identifier: IlqCrtHjV0swPFmp3o7DfBLhNMtZdIObfylX2iY42rg=
Subject key identifier: ED:4D:5B:24:6E:2E:CC:6D:67:30:B0:7B:65:5B:1B:9A:18:88:0C:F1
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 4379CE
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/7U1bJG4uzG1nMLB7ZVsbmhiIDPE.roa
Signing time: Thu 21 Apr 2022 20:02:02 +0000
ROA not before: Thu 21 Apr 2022 20:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18434
IP address blocks: 185.41.233.0/24 maxlen: 24
185.41.232.0/24 maxlen: 24
185.41.234.0/24 maxlen: 24
185.41.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4422094 (0x4379ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Apr 21 20:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed4d5b246e2ecc6d6730b07b655b1b9a18880cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:2f:8d:83:e3:d4:f6:d9:9b:a3:9a:86:ca:
81:e6:a4:fe:c9:83:76:47:e3:47:07:25:4f:af:66:
24:84:87:c3:2d:c5:14:a5:ef:6b:43:22:a0:88:8e:
68:57:5c:91:cf:c6:ef:85:f9:fe:c4:ab:03:03:d0:
63:3f:bf:26:67:44:db:62:a6:87:db:0a:33:56:ac:
62:15:63:34:6c:ac:31:05:bc:0c:bc:62:a9:d6:09:
2c:ba:08:99:44:3d:c8:7a:e3:99:36:25:bc:66:6a:
53:9a:65:f1:1a:39:14:58:05:31:a0:f3:51:4b:21:
15:c3:8c:84:52:61:ba:46:ff:79:f7:96:5a:e8:d7:
86:e0:51:5f:13:de:5e:2d:b5:20:17:ac:12:59:3e:
c9:a8:3f:96:39:0b:8b:96:e5:4b:46:cf:56:6c:f3:
ee:99:43:ca:ca:e8:5b:40:12:fe:75:dd:82:3c:0e:
08:78:e7:81:c4:82:23:44:25:80:22:1c:59:72:85:
af:93:81:7e:9a:e3:f7:54:13:bc:92:43:ea:67:dd:
cc:c9:53:72:cc:7d:6c:2b:3c:88:bf:df:67:36:22:
bc:6f:a4:8e:5c:ac:fc:a9:76:ca:ed:37:dd:16:fd:
81:06:df:53:cd:cb:ef:97:59:a5:74:2b:cd:98:d7:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:5B:24:6E:2E:CC:6D:67:30:B0:7B:65:5B:1B:9A:18:88:0C:F1
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/7U1bJG4uzG1nMLB7ZVsbmhiIDPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
25:10:0c:90:57:16:66:00:a1:4f:5e:98:45:ec:66:da:ed:53:
af:da:30:1d:ad:2a:f5:c5:bc:1d:3b:22:12:22:ea:ef:4b:0f:
0d:a7:b1:3e:bf:f4:19:2b:1d:6b:a2:06:11:4b:1a:65:b5:b3:
21:82:2f:32:49:68:8f:f6:9e:ea:df:34:8d:79:bf:d9:fc:33:
9e:ec:52:e1:ca:76:46:28:69:5f:92:5e:c2:da:d0:c4:19:dd:
16:cc:cc:b0:dc:c1:10:87:a5:5f:b9:cd:fd:e4:d1:49:b2:a6:
bb:ed:21:6b:9d:13:4c:48:43:29:f9:e3:e4:12:4d:d0:62:10:
47:ca:df:2c:91:9f:9d:6d:21:13:1b:3c:2c:c5:46:6b:fc:6b:
55:97:74:e4:b1:fe:8c:a3:84:c4:ca:7a:b4:d9:d0:4b:99:c4:
46:4a:75:11:bd:70:7f:01:46:f2:40:6e:92:c3:d1:a9:76:42:
17:bf:3a:36:8f:35:3b:86:17:e7:5a:18:d4:80:7a:9b:12:08:
eb:26:02:6c:83:46:c3:bf:c9:00:ab:e7:cb:c4:ab:57:73:bc:
a6:03:3a:3e:e7:0b:99:bb:e5:54:a3:41:d7:18:d3:ab:57:e0:
84:85:83:01:62:2f:36:b5:58:0b:b5:20:3f:88:a7:f5:87:89:
71:53:e7:02
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDQ3nOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGViMWU5ZGEwHhcNMjIwNDIx
MjAwMjAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlZDRkNWIyNDZlMmVj
YzZkNjczMGIwN2I2NTViMWI5YTE4ODgwY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAusMvjYPj1PbZm6OahsqB5qT+yYN2R+NHByVPr2YkhIfDLcUU
pe9rQyKgiI5oV1yRz8bvhfn+xKsDA9BjP78mZ0TbYqaH2wozVqxiFWM0bKwxBbwM
vGKp1gksugiZRD3IeuOZNiW8ZmpTmmXxGjkUWAUxoPNRSyEVw4yEUmG6Rv9595Za
6NeG4FFfE95eLbUgF6wSWT7JqD+WOQuLluVLRs9WbPPumUPKyuhbQBL+dd2CPA4I
eOeBxIIjRCWAIhxZcoWvk4F+muP3VBO8kkPqZ93MyVNyzH1sKzyIv99nNiK8b6SO
XKz8qXbK7TfdFv2BBt9Tzcvvl1mldCvNmNd9/wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFO1NWyRuLsxtZzCwe2VbG5oYiAzxMB8GA1UdIwQYMBaAFJSjgG90KrzV2xIE
9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIwLzEv
N1UxYkpHNHV6RzFuTUxCN1pWc2JtaGlJRFBFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9j
N2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2Tlhi
RWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSnoMA0GCSqGSIb3DQEBCwUAA4IB
AQAlEAyQVxZmAKFPXphF7Gba7VOv2jAdrSr1xbwdOyISIurvSw8Np7E+v/QZKx1r
ogYRSxpltbMhgi8ySWiP9p7q3zSNeb/Z/DOe7FLhynZGKGlfkl7C2tDEGd0WzMyw
3MEQh6Vfuc395NFJsqa77SFrnRNMSEMp+ePkEk3QYhBHyt8skZ+dbSETGzwsxUZr
/GtVl3Tksf6Mo4TEynq02dBLmcRGSnURvXB/AUbyQG6Sw9GpdkIXvzo2jzU7hhfn
WhjUgHqbEgjrJgJsg0bDv8kAq+fLxKtXc7ymAzo+5wuZu+VUo0HXGNOrV+CEhYMB
Yi82tVgLtSA/iKf1h4lxU+cC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:12 2024 by rpki-client on console-ams.rpki-client.org