Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/4hQ3XojWbS1FWvSs97RL889SrVM.roa
File: 4hQ3XojWbS1FWvSs97RL889SrVM.roa (raw, json)
Hash identifier: l1cmIUeEhJf94fpo06/cWwRUA83ve3dMrqophuChgcM=
Subject key identifier: E2:14:37:5E:88:D6:6D:2D:45:5A:F4:AC:F7:B4:4B:F3:CF:52:AD:53
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 03CA0155
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/4hQ3XojWbS1FWvSs97RL889SrVM.roa
Signing time: Sat 01 Jan 2022 10:58:37 +0000
ROA not before: Sat 01 Jan 2022 10:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210759
IP address blocks: 185.204.97.0/24 maxlen: 24
185.204.96.0/24 maxlen: 24
185.204.98.0/24 maxlen: 24
2a0a:f540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63570261 (0x3ca0155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jan 1 10:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e214375e88d66d2d455af4acf7b44bf3cf52ad53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:21:ea:21:b3:ca:aa:06:9f:52:18:2a:1f:
c8:c8:a7:7c:d5:df:bf:0c:49:c1:c6:57:8d:65:32:
cf:e3:02:97:96:23:d5:8d:f2:95:f1:d7:41:e0:c0:
73:fd:8c:4b:7f:36:5a:ea:b7:98:20:27:b0:88:9c:
7c:be:45:a0:b8:9f:c0:36:58:40:26:0c:f7:18:9a:
73:35:c2:2b:78:a7:e1:c7:e5:dd:80:1e:48:73:11:
dc:10:66:d4:6c:8a:46:20:07:5b:e7:c2:c3:de:01:
ec:9e:28:1e:3d:0f:91:8d:15:38:a5:9d:15:ac:81:
88:76:8f:f0:0f:45:3c:5d:94:2c:28:cc:de:a6:b9:
ae:2d:ac:72:79:2b:3b:d8:54:5b:80:0d:66:f9:da:
39:5e:d7:e6:cb:de:11:d2:ac:06:d0:93:2a:c4:a1:
65:92:16:53:42:fa:8f:01:05:5d:9c:2e:ec:2b:3e:
1c:0f:24:5c:0b:2e:d9:0e:8a:39:5b:c0:62:44:76:
aa:c0:51:76:9e:2d:ad:6f:dc:a7:18:0c:2f:63:45:
7d:c0:71:44:b6:18:f7:c7:b3:0f:0f:16:c9:5e:15:
34:a0:b2:42:24:03:3f:14:e4:4e:95:5f:65:02:7a:
ae:d7:3e:d5:0a:e3:83:8d:c7:07:9d:84:8e:08:11:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:37:5E:88:D6:6D:2D:45:5A:F4:AC:F7:B4:4B:F3:CF:52:AD:53
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/4hQ3XojWbS1FWvSs97RL889SrVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.96.0-185.204.98.255
IPv6:
2a0a:f540::/29
Signature Algorithm: sha256WithRSAEncryption
7f:2f:47:00:92:89:db:32:bd:9c:8e:56:b7:2f:f7:d4:32:35:
74:5b:88:50:0d:43:19:bf:6d:33:6a:aa:bd:5b:25:88:80:f8:
0a:27:be:dd:a9:1f:b9:aa:44:4c:71:c6:6b:d0:00:99:49:17:
0f:0c:4d:4d:71:ad:4d:b9:c2:b8:46:d5:2b:4b:03:92:21:ac:
5c:0e:45:4c:72:dc:5f:25:b6:61:9a:e2:aa:1b:68:1d:0b:cb:
fc:6f:3f:cc:46:98:27:28:37:ac:af:6f:4d:56:bc:44:1b:6f:
f3:ae:51:9c:8b:d4:98:64:cd:c7:6d:36:19:ed:a1:7f:33:bf:
df:da:b4:cd:7f:39:f6:94:18:6f:18:fc:2a:21:52:56:57:fc:
bd:6a:d8:9d:7e:54:81:15:f1:34:ae:f4:27:4a:31:fb:7b:7a:
46:a0:8c:65:c4:e3:5e:10:5f:f7:cc:2b:6b:3f:eb:92:b0:7f:
96:e4:9b:76:a4:80:65:4d:93:6e:98:e5:30:63:85:30:d6:19:
3f:71:60:88:fb:a3:ac:60:93:1a:0b:12:15:b7:58:bd:9e:71:
64:59:19:89:af:30:78:76:3d:0e:6e:b8:a3:93:15:82:5e:c4:
67:38:43:33:e5:11:ab:90:66:52:88:f5:13:ab:82:d8:01:19:
cb:01:5b:80
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEA8oBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OWM3NDZmNjdiN2FjNTZlYTZkZDg1OTUxZWMwMjJjYmJkNjdhZjA2MB4XDTIyMDEw
MTEwNTgzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTIxNDM3NWU4OGQ2
NmQyZDQ1NWFmNGFjZjdiNDRiZjNjZjUyYWQ1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1+Ieohs8qqBp9SGCofyMinfNXfvwxJwcZXjWUyz+MCl5Yj
1Y3ylfHXQeDAc/2MS382Wuq3mCAnsIicfL5FoLifwDZYQCYM9xiaczXCK3in4cfl
3YAeSHMR3BBm1GyKRiAHW+fCw94B7J4oHj0PkY0VOKWdFayBiHaP8A9FPF2ULCjM
3qa5ri2scnkrO9hUW4ANZvnaOV7X5sveEdKsBtCTKsShZZIWU0L6jwEFXZwu7Cs+
HA8kXAsu2Q6KOVvAYkR2qsBRdp4trW/cpxgML2NFfcBxRLYY98ezDw8WyV4VNKCy
QiQDPxTkTpVfZQJ6rtc+1Qrjg43HB52EjggRTAkCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBTiFDdeiNZtLUVa9Kz3tEvzz1KtUzAfBgNVHSMEGDAWgBQJx0b2e3rFbqbd
hZUewCLLvWevBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NjZEc5bnQ2eFc2bTNZV1ZIc0FpeTcxbnJ3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvOTNhZjk3LTNiOWUtNDk2MS04OTA0LWE2ZjYxMWE4YWI5My8x
LzRoUTNYb2pXYlMxRld2U3M5N1JMODg5U3JWTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
OTNhZjk3LTNiOWUtNDk2MS04OTA0LWE2ZjYxMWE4YWI5My8xL0NjZEc5bnQ2eFc2
bTNZV1ZIc0FpeTcxbnJ3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwFAQCAAEwDjAMAwQFucxgAwQAucxiMA0EAgACMAcD
BQMqCvVAMA0GCSqGSIb3DQEBCwUAA4IBAQB/L0cAkonbMr2cjla3L/fUMjV0W4hQ
DUMZv20zaqq9WyWIgPgKJ77dqR+5qkRMccZr0ACZSRcPDE1Nca1NucK4RtUrSwOS
IaxcDkVMctxfJbZhmuKqG2gdC8v8bz/MRpgnKDesr29NVrxEG2/zrlGci9SYZM3H
bTYZ7aF/M7/f2rTNfzn2lBhvGPwqIVJWV/y9atidflSBFfE0rvQnSjH7e3pGoIxl
xONeEF/3zCtrP+uSsH+W5Jt2pIBlTZNumOUwY4Uw1hk/cWCI+6OsYJMaCxIVt1i9
nnFkWRmJrzB4dj0ObrijkxWCXsRnOEMz5RGrkGZSiPUTq4LYARnLAVuA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-ams.rpki-client.org