Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1fFg0VFBUOOocEKnNHlp6MVjfYQ.roa
File: 1fFg0VFBUOOocEKnNHlp6MVjfYQ.roa (raw, json)
Hash identifier: 2x1EyFrWlo/I4R3W5cjJuVXtjLAGw8R/nr0UFR4nm7I=
Subject key identifier: D5:F1:60:D1:51:41:50:E3:A8:70:42:A7:34:79:69:E8:C5:63:7D:84
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0E60A2B9
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1fFg0VFBUOOocEKnNHlp6MVjfYQ.roa
Signing time: Wed 08 Jun 2022 12:21:02 +0000
ROA not before: Wed 08 Jun 2022 12:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211826
IP address blocks: 194.32.123.0/24 maxlen: 24
45.135.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241214137 (0xe60a2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 8 12:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5f160d1514150e3a87042a7347969e8c5637d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:72:b3:f1:f7:ae:30:6c:52:c2:1e:e6:71:
5d:5e:16:02:c7:6a:7e:65:dd:eb:86:31:8d:60:cd:
81:27:01:2a:0b:b6:4d:71:e4:9b:a1:63:0b:bb:b8:
55:f1:aa:a0:d9:27:a8:b9:60:7d:dd:90:a1:20:c3:
78:24:64:53:10:10:2d:1e:fb:8d:fe:b6:71:44:42:
68:4d:a1:c5:f5:6e:8c:32:76:ab:a2:35:78:59:c2:
bd:55:be:0b:54:5c:42:1e:ab:b8:73:c8:f6:fc:8f:
63:9b:8b:28:f1:06:dc:4c:3b:c6:09:fc:c3:a3:31:
54:e4:6c:ec:a0:ea:e8:ab:df:b5:91:d4:37:fd:77:
43:55:4b:bb:49:c7:a7:48:5c:cb:15:af:96:75:36:
1b:c5:fa:e1:8f:45:b8:00:a4:5a:b7:72:5f:a0:2f:
5b:37:4e:d3:09:49:91:bc:26:de:b9:3f:f9:8e:47:
f8:1d:33:96:fc:19:1c:df:11:6a:f4:9a:0b:f4:1b:
b5:9f:f0:02:a6:94:31:76:fe:00:65:4b:48:b5:ee:
e0:0b:2e:a6:e1:13:01:ee:21:df:d5:49:ce:97:b0:
c1:15:44:0e:68:3d:0a:a4:54:c2:0b:99:41:93:40:
5b:b0:4d:3c:ef:0b:e3:11:0a:53:0e:f5:df:5f:35:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:60:D1:51:41:50:E3:A8:70:42:A7:34:79:69:E8:C5:63:7D:84
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1fFg0VFBUOOocEKnNHlp6MVjfYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.185.0/24
194.32.123.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8a:f7:00:df:46:29:79:dd:d8:53:42:1c:68:fb:5f:3c:ee:
73:1d:b4:6f:4f:e1:6f:5b:8d:71:72:1e:f9:f0:0b:c5:5f:d8:
38:d2:be:59:1e:7d:7a:ad:11:b7:3d:5a:40:fc:23:bc:3e:5e:
c3:4f:12:8a:b2:74:bf:c7:7c:1f:d6:38:f0:4f:7c:18:9e:dc:
9f:7c:0f:e6:be:7f:60:bb:ab:a3:0d:fb:82:4d:32:9d:0a:9b:
11:da:e6:3d:fb:90:88:44:f3:e8:75:85:d3:6b:31:38:18:cd:
25:70:e7:85:f2:f3:88:8a:79:8d:9a:f7:bd:30:40:e4:83:2b:
4d:3b:5d:1c:db:cc:ad:64:cb:c2:fc:42:6b:36:c9:10:91:03:
40:24:5c:b6:38:1c:cc:a3:58:eb:45:5a:dc:4e:f9:c2:de:ec:
c2:e8:b8:b9:14:95:3b:1f:12:74:92:dd:01:67:ad:7e:43:cc:
4e:f4:8c:a1:86:12:44:85:bd:a3:e7:d0:0d:72:50:98:10:13:
30:c1:e7:8d:52:7e:36:a3:0e:92:0e:aa:bb:7f:81:34:c9:69:
b4:72:d6:1e:7e:19:da:e8:b0:cc:84:36:dc:01:50:c1:db:cb:
88:23:d1:e0:81:79:13:77:3b:da:b7:0f:d2:16:a7:af:9e:98:
83:25:2a:f0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDmCiuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDYw
ODEyMjEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDVmMTYwZDE1MTQx
NTBlM2E4NzA0MmE3MzQ3OTY5ZThjNTYzN2Q4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANNLcrPx964wbFLCHuZxXV4WAsdqfmXd64YxjWDNgScBKgu2
TXHkm6FjC7u4VfGqoNknqLlgfd2QoSDDeCRkUxAQLR77jf62cURCaE2hxfVujDJ2
q6I1eFnCvVW+C1RcQh6ruHPI9vyPY5uLKPEG3Ew7xgn8w6MxVORs7KDq6KvftZHU
N/13Q1VLu0nHp0hcyxWvlnU2G8X64Y9FuACkWrdyX6AvWzdO0wlJkbwm3rk/+Y5H
+B0zlvwZHN8RavSaC/QbtZ/wAqaUMXb+AGVLSLXu4AsupuETAe4h39VJzpewwRVE
Dmg9CqRUwguZQZNAW7BNPO8L4xEKUw713181BN0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTV8WDRUUFQ46hwQqc0eWnoxWN9hDAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
LzFmRmcwVkZCVU9Pb2NFS25OSGxwNk1WamZZUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2HuQMEAMIgezANBgkqhkiG9w0B
AQsFAAOCAQEAAor3AN9GKXnd2FNCHGj7Xzzucx20b0/hb1uNcXIe+fALxV/YONK+
WR59eq0Rtz1aQPwjvD5ew08SirJ0v8d8H9Y48E98GJ7cn3wP5r5/YLurow37gk0y
nQqbEdrmPfuQiETz6HWF02sxOBjNJXDnhfLziIp5jZr3vTBA5IMrTTtdHNvMrWTL
wvxCazbJEJEDQCRctjgczKNY60Va3E75wt7swui4uRSVOx8SdJLdAWetfkPMTvSM
oYYSRIW9o+fQDXJQmBATMMHnjVJ+NqMOkg6qu3+BNMlptHLWHn4Z2uiwzIQ23AFQ
wdvLiCPR4IF5E3c72rcP0hanr56YgyUq8A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org