Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/a19MD16R0BoSDei9YuNFM-_db-k.roa
File: a19MD16R0BoSDei9YuNFM-_db-k.roa (raw, json)
Hash identifier: GLw/19T4fYZZQBqUfQXJ4bI9IqKDcgoITN3MQ29qy1U=
Subject key identifier: 6B:5F:4C:0F:5E:91:D0:1A:12:0D:E8:BD:62:E3:45:33:EF:DD:6F:E9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0E6E908D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/a19MD16R0BoSDei9YuNFM-_db-k.roa
Signing time: Tue 14 Jun 2022 15:19:48 +0000
ROA not before: Tue 14 Jun 2022 15:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 185.241.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242126989 (0xe6e908d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 14 15:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b5f4c0f5e91d01a120de8bd62e34533efdd6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:21:ad:fc:e9:12:24:38:cd:2c:4b:3a:cd:
5f:42:02:73:d4:63:9e:76:a6:53:f0:e9:dc:68:fc:
3c:89:f7:01:15:48:df:9b:7d:de:75:f1:17:b6:51:
0f:23:be:ca:e3:06:59:56:a1:63:e6:20:60:27:d2:
c0:f1:a1:38:04:67:4c:af:62:a0:2d:4f:f2:42:c0:
d7:dd:ff:70:fa:99:fb:02:7b:a4:69:cf:40:c0:ee:
91:8d:fc:6c:87:7e:57:45:a6:eb:11:94:93:01:a4:
27:00:a1:ef:bf:21:35:2a:55:34:fd:58:85:8c:e9:
e5:a9:81:1a:be:66:21:9d:03:b6:e3:d6:ff:05:c7:
bf:23:d8:4e:45:d5:0d:fe:bc:49:25:42:7e:4d:c8:
15:08:78:4c:bc:69:b8:df:ae:ba:5c:39:6c:1a:3b:
56:c6:53:ba:cf:26:9a:a5:f2:b4:1c:3f:24:22:60:
a2:2c:87:b1:6e:1c:4b:2e:a8:4d:50:0c:51:28:33:
95:c8:43:6c:95:cc:32:66:e8:c7:df:15:11:6a:63:
03:8c:1e:04:a2:cf:7d:15:6d:43:e6:1a:6e:72:c1:
06:7f:92:e9:45:04:e7:e2:f5:6a:99:f5:f6:ef:af:
79:28:97:92:82:4a:d5:a9:02:17:ab:bf:6c:e5:cd:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:4C:0F:5E:91:D0:1A:12:0D:E8:BD:62:E3:45:33:EF:DD:6F:E9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/a19MD16R0BoSDei9YuNFM-_db-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e6:ac:77:45:25:e3:9d:06:d0:66:e1:a5:49:bd:bf:71:a6:
23:4c:e2:ab:c5:39:68:be:44:25:e8:97:66:f5:2b:4a:c0:7e:
bb:0f:7d:a7:8a:29:81:ec:af:ea:79:6d:44:11:46:d6:80:a7:
0d:21:51:17:57:7c:72:a7:09:a7:fa:f2:0a:09:8e:81:e6:73:
40:2d:0b:bb:7f:5d:1e:f9:6f:3d:88:fe:60:b6:00:6d:c0:9e:
e2:8f:e7:7b:cf:6a:69:11:d7:b0:c7:7a:ba:d0:0c:fb:de:6c:
6d:7d:ed:ff:25:50:52:b2:5f:47:99:78:c8:15:f5:a9:9c:03:
64:cd:0e:8b:6c:cd:48:c4:30:2b:14:f2:d7:03:11:c7:67:b0:
27:a1:84:4d:95:0a:b2:f9:37:49:16:dc:b6:99:0c:73:ce:9e:
dd:a8:fc:d6:36:da:f6:47:d5:27:9f:b6:ef:a5:d4:1d:6d:93:
4a:69:1f:ca:ec:c0:56:49:d7:2b:a8:7d:46:9c:fa:dc:ca:23:
08:6a:7c:9b:60:df:9a:54:d1:e0:24:26:51:75:81:ab:99:77:
1e:fd:0d:49:ec:8f:68:ca:ce:fe:cc:f7:fc:17:73:a2:d2:0b:
20:f1:03:1d:24:1d:d9:3c:d1:9d:3f:6f:0a:e3:d7:4f:75:4d:
62:26:6a:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDm6QjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDYx
NDE1MTk0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmI1ZjRjMGY1ZTkx
ZDAxYTEyMGRlOGJkNjJlMzQ1MzNlZmRkNmZlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIIyIa386RIkOM0sSzrNX0ICc9RjnnamU/Dp3Gj8PIn3ARVI
35t93nXxF7ZRDyO+yuMGWVahY+YgYCfSwPGhOARnTK9ioC1P8kLA193/cPqZ+wJ7
pGnPQMDukY38bId+V0Wm6xGUkwGkJwCh778hNSpVNP1YhYzp5amBGr5mIZ0DtuPW
/wXHvyPYTkXVDf68SSVCfk3IFQh4TLxpuN+uulw5bBo7VsZTus8mmqXytBw/JCJg
oiyHsW4cSy6oTVAMUSgzlchDbJXMMmbox98VEWpjA4weBKLPfRVtQ+YabnLBBn+S
6UUE5+L1apn19u+veSiXkoJK1akCF6u/bOXNneUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRrX0wPXpHQGhIN6L1i40Uz791v6TAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
L2ExOU1EMTZSMEJvU0RlaTlZdU5GTS1fZGItay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnx0DANBgkqhkiG9w0BAQsFAAOC
AQEAbuasd0Ul450G0GbhpUm9v3GmI0ziq8U5aL5EJeiXZvUrSsB+uw99p4opgeyv
6nltRBFG1oCnDSFRF1d8cqcJp/ryCgmOgeZzQC0Lu39dHvlvPYj+YLYAbcCe4o/n
e89qaRHXsMd6utAM+95sbX3t/yVQUrJfR5l4yBX1qZwDZM0Oi2zNSMQwKxTy1wMR
x2ewJ6GETZUKsvk3SRbctpkMc86e3aj81jba9kfVJ5+276XUHW2TSmkfyuzAVknX
K6h9Rpz63MojCGp8m2DfmlTR4CQmUXWBq5l3Hv0NSeyPaMrO/sz3/BdzotILIPED
HSQd2TzRnT9vCuPXT3VNYiZqrg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org