Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/xmu3hMelbBogJtUgwykhQubnOU4.roa
File: xmu3hMelbBogJtUgwykhQubnOU4.roa (raw, json)
Hash identifier: wKsybXAMlx0CQ/1yGnNCbb7x7kPrUM98aLiWiVDOb8c=
Subject key identifier: C6:6B:B7:84:C7:A5:6C:1A:20:26:D5:20:C3:29:21:42:E6:E7:39:4E
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 01850DABFDA8C3BA19B56FF21EC8EFF73938
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/xmu3hMelbBogJtUgwykhQubnOU4.roa
Signing time: Tue 13 Dec 2022 22:47:33 +0000
ROA not before: Tue 13 Dec 2022 22:47:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.154.161.0/24 maxlen: 24
185.154.160.0/24 maxlen: 24
185.154.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:ab:fd:a8:c3:ba:19:b5:6f:f2:1e:c8:ef:f7:39:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Dec 13 22:47:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c66bb784c7a56c1a2026d520c3292142e6e7394e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:92:9c:9a:05:b9:9b:28:c1:d2:b0:72:5a:
18:4e:95:db:14:9e:b6:44:5f:26:db:b6:af:51:1c:
d7:08:50:ae:5c:b0:03:12:bf:2a:fe:3f:6f:bf:60:
61:35:f6:f5:0e:04:e1:4d:d6:3c:59:c3:7b:77:02:
3c:88:87:8c:49:e0:e9:6d:00:47:0f:1f:4b:81:2f:
c1:2c:4b:50:01:a5:eb:aa:35:69:b1:74:30:a5:a5:
a2:d3:92:5b:d3:6a:ab:da:76:d8:50:08:d1:d3:f7:
8a:3d:a3:34:3a:92:8d:d5:67:7a:b4:e9:ec:73:63:
2f:54:83:3e:b4:19:7b:48:a1:9c:28:7d:32:ad:9c:
6d:13:71:f3:0b:f3:6f:ce:f9:3c:9e:42:97:0d:f1:
17:5a:cd:81:b6:21:78:a7:63:dd:6d:d0:4d:93:c0:
d2:e6:24:82:c7:43:d4:de:c2:5f:c3:3f:22:e0:a3:
25:ae:7e:75:1e:10:ea:1a:da:33:79:41:c3:41:2d:
79:31:93:34:dc:13:5a:9a:2d:22:43:86:d3:49:68:
1e:ea:37:48:17:9d:0f:44:6b:37:79:86:ff:ea:76:
6a:d6:1a:f1:b9:70:f7:66:7e:cf:1c:4f:28:1d:c2:
29:cf:4b:95:9a:78:f4:0a:28:a1:fe:ec:29:5c:a8:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:B7:84:C7:A5:6C:1A:20:26:D5:20:C3:29:21:42:E6:E7:39:4E
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/xmu3hMelbBogJtUgwykhQubnOU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.160.0-185.154.162.255
Signature Algorithm: sha256WithRSAEncryption
25:5e:1a:17:c3:8a:0c:31:11:a0:08:24:a7:d8:c2:0e:50:28:
16:de:2d:e2:73:38:a4:4a:bb:2d:71:0e:44:ea:2f:72:8e:59:
68:33:a0:14:51:71:db:63:6f:71:59:e1:fd:50:b6:5a:27:00:
ef:77:19:fb:9c:78:0d:97:20:b5:42:b4:5f:ce:40:11:0a:27:
50:7a:35:99:3b:a8:03:fb:4a:ff:19:2f:b3:4b:24:87:6e:3c:
fd:71:7f:aa:3d:bf:cf:f1:5c:12:23:c5:94:34:97:24:2b:8e:
c5:b6:51:87:09:1b:1e:de:20:0b:3a:b3:80:2a:5c:f3:a7:31:
89:74:8b:41:ef:8a:3b:5a:13:cc:c6:ff:98:6b:be:d6:bb:46:
01:dd:aa:05:79:f3:db:19:16:9f:72:fa:ca:35:53:7d:a8:10:
b5:f3:5b:d7:b9:9c:6e:1f:46:66:22:4d:11:e7:5a:0d:a3:d9:
e5:1c:f7:c2:a3:5e:bf:21:59:c9:5c:40:ee:db:08:76:eb:4b:
1c:c6:16:a2:08:51:89:67:67:6e:de:1c:88:da:35:5f:1a:0e:
f5:4e:aa:33:b5:84:9c:a6:17:f1:0b:c8:96:28:a5:a9:82:27:
1c:cd:f1:3a:86:64:df:3e:ec:fa:42:81:05:96:52:f9:d3:47:
3a:e0:e7:b5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYUNq/2ow7oZtW/yHsjv9zk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk
MzAyMDYwHhcNMjIxMjEzMjI0NzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjZiYjc4NGM3YTU2YzFhMjAyNmQ1MjBjMzI5MjE0MmU2ZTczOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+aSnJoFuZsowdKwcloYTpXbFJ62
RF8m27avURzXCFCuXLADEr8q/j9vv2BhNfb1DgThTdY8WcN7dwI8iIeMSeDpbQBH
Dx9LgS/BLEtQAaXrqjVpsXQwpaWi05Jb02qr2nbYUAjR0/eKPaM0OpKN1Wd6tOns
c2MvVIM+tBl7SKGcKH0yrZxtE3HzC/Nvzvk8nkKXDfEXWs2BtiF4p2PdbdBNk8DS
5iSCx0PU3sJfwz8i4KMlrn51HhDqGtozeUHDQS15MZM03BNami0iQ4bTSWge6jdI
F50PRGs3eYb/6nZq1hrxuXD3Zn7PHE8oHcIpz0uVmnj0Ciih/uwpXKj19wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMZrt4THpWwaICbVIMMpIULm5zlOMB8GA1UdIwQY
MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt
ODlmMTgxNWQ0YzE5LzEveG11M2hNZWxiQm9nSnRVZ3d5a2hRdWJuT1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5
LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAW5mqAD
BAC5mqIwDQYJKoZIhvcNAQELBQADggEBACVeGhfDigwxEaAIJKfYwg5QKBbeLeJz
OKRKuy1xDkTqL3KOWWgzoBRRcdtjb3FZ4f1QtlonAO93GfuceA2XILVCtF/OQBEK
J1B6NZk7qAP7Sv8ZL7NLJIduPP1xf6o9v8/xXBIjxZQ0lyQrjsW2UYcJGx7eIAs6
s4AqXPOnMYl0i0HvijtaE8zG/5hrvta7RgHdqgV589sZFp9y+so1U32oELXzW9e5
nG4fRmYiTRHnWg2j2eUc98KjXr8hWclcQO7bCHbrSxzGFqIIUYlnZ27eHIjaNV8a
DvVOqjO1hJymF/ELyJYopamCJxzN8TqGZN8+7PpCgQWWUvnTRzrg57U=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:49 2023 by rpki-client on console-ams.rpki-client.org