Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/fWr1DyN-4XGuu4QBLzW0OHy6qz0.roa
File: fWr1DyN-4XGuu4QBLzW0OHy6qz0.roa (raw, json)
Hash identifier: ZVJQa8f4H8a77Qmez6RCnbNJAO4H4IrgWfDKq64MxfE=
Subject key identifier: 7D:6A:F5:0F:23:7E:E1:71:AE:BB:84:01:2F:35:B4:38:7C:BA:AB:3D
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 0421AAC3
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/fWr1DyN-4XGuu4QBLzW0OHy6qz0.roa
Signing time: Sat 01 Jan 2022 00:53:00 +0000
ROA not before: Sat 01 Jan 2022 00:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43231
IP address blocks: 185.188.38.0/24 maxlen: 24
185.188.37.0/24 maxlen: 24
185.188.36.0/24 maxlen: 24
185.188.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69315267 (0x421aac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Jan 1 00:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d6af50f237ee171aebb84012f35b4387cbaab3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:dc:1f:4c:76:ea:41:0a:be:83:05:3a:a6:
78:da:1d:0e:28:ff:e2:ca:4f:c4:2f:62:c4:f0:78:
29:1b:89:d1:8d:c2:d0:3e:7c:f7:de:e9:c1:e7:89:
25:ed:42:7d:48:a5:29:2f:3b:11:07:75:f7:be:43:
3b:cc:a2:47:a2:b6:13:7c:20:a9:d8:52:a6:06:17:
5f:37:18:fd:55:74:2c:3a:e4:01:8d:29:72:ce:7d:
27:dc:f6:a5:b0:89:6f:03:f2:ff:d3:42:a9:6a:5a:
e5:15:2e:d3:57:99:75:b1:98:1d:0b:06:9e:11:ce:
f1:b6:2e:87:d6:57:58:50:b6:dc:1b:7a:85:8f:b2:
3d:d7:a9:d5:05:b2:ee:5f:e1:b3:ad:cb:4a:8c:db:
ef:7d:a5:cc:b5:3b:87:43:93:33:ec:00:c6:55:8d:
44:9d:30:11:69:57:07:63:7a:79:fe:08:de:70:91:
59:3d:31:2f:66:d4:5d:c8:8a:de:c4:85:7d:c8:b2:
f0:14:87:65:fa:b7:7c:bf:fa:bd:c3:86:fa:cd:ef:
13:93:97:e9:c1:5c:12:24:11:30:46:3b:dc:52:4d:
cb:3e:96:ad:64:7e:67:44:47:b9:ac:23:a6:b8:75:
9d:e3:24:ae:c3:69:fa:07:14:25:22:85:0c:06:b2:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6A:F5:0F:23:7E:E1:71:AE:BB:84:01:2F:35:B4:38:7C:BA:AB:3D
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/fWr1DyN-4XGuu4QBLzW0OHy6qz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.36.0/22
Signature Algorithm: sha256WithRSAEncryption
18:8e:43:c2:e9:6a:3f:22:6d:2a:a8:f9:b8:c0:21:78:45:f4:
5e:ee:ef:fc:0d:3b:4d:39:8b:9c:cb:66:0c:74:e4:b9:43:87:
4a:03:c7:29:c4:da:ab:89:0e:9e:07:6d:d9:16:21:3c:78:e2:
5d:56:af:29:92:ed:ea:25:23:7e:50:45:d1:f4:2d:9d:63:8a:
82:0e:32:5e:e4:9b:de:2a:c7:b1:d4:86:4b:a6:93:49:ce:58:
54:0c:34:0c:79:03:41:6b:cf:b9:1b:27:59:20:f3:1c:84:eb:
59:61:63:a8:b3:6e:61:b3:88:3b:67:39:3a:b2:60:74:5f:06:
71:32:46:0d:02:9d:27:33:a9:17:0d:51:3e:13:35:95:f1:36:
2b:ad:2b:f3:d9:91:42:44:82:d8:7d:8d:c4:f0:85:3d:1f:b4:
b3:03:cd:5b:ac:a0:24:51:a7:9e:30:ae:58:33:8c:5e:43:d6:
f8:ac:01:14:c3:91:e4:0a:7f:5a:c2:2f:f9:35:f7:80:7c:76:
04:94:d9:23:41:12:31:2b:ce:0f:9a:a7:f3:fa:24:71:ed:8e:
44:41:d0:95:9e:7f:e1:44:a2:6f:21:a9:fb:8d:ea:c2:ad:42:
ee:4a:cf:90:29:f6:cc:ca:ed:8d:dd:1e:b7:83:dd:51:98:84:
11:95:34:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBCGqwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGI1OGM0NWJlZTI1MWZjNzU3NWE2M2U1YjQ5MGRlYzYxMTRlNmNhMB4XDTIyMDEw
MTAwNTMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q2YWY1MGYyMzdl
ZTE3MWFlYmI4NDAxMmYzNWI0Mzg3Y2JhYWIzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANjH3B9MdupBCr6DBTqmeNodDij/4spPxC9ixPB4KRuJ0Y3C
0D58997pweeJJe1CfUilKS87EQd1975DO8yiR6K2E3wgqdhSpgYXXzcY/VV0LDrk
AY0pcs59J9z2pbCJbwPy/9NCqWpa5RUu01eZdbGYHQsGnhHO8bYuh9ZXWFC23Bt6
hY+yPdep1QWy7l/hs63LSozb732lzLU7h0OTM+wAxlWNRJ0wEWlXB2N6ef4I3nCR
WT0xL2bUXciK3sSFfciy8BSHZfq3fL/6vcOG+s3vE5OX6cFcEiQRMEY73FJNyz6W
rWR+Z0RHuawjprh1neMkrsNp+gcUJSKFDAaygB8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR9avUPI37hca67hAEvNbQ4fLqrPTAfBgNVHSMEGDAWgBRdtYxFvuJR/HV1
pj5bSQ3sYRTmyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hiV01SYjdpVWZ4MWRhWS1XMGtON0dFVTVzby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvYWRmOTNkLTk4ZGEtNDFjYy04YTZkLTljMmFkNDc1YTIzMS8x
L2ZXcjFEeU4tNFhHdXU0UUJMelcwT0h5NnF6MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
YWRmOTNkLTk4ZGEtNDFjYy04YTZkLTljMmFkNDc1YTIzMS8xL1hiV01SYjdpVWZ4
MWRhWS1XMGtON0dFVTVzby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm8JDANBgkqhkiG9w0BAQsFAAOC
AQEAGI5DwulqPyJtKqj5uMAheEX0Xu7v/A07TTmLnMtmDHTkuUOHSgPHKcTaq4kO
ngdt2RYhPHjiXVavKZLt6iUjflBF0fQtnWOKgg4yXuSb3irHsdSGS6aTSc5YVAw0
DHkDQWvPuRsnWSDzHITrWWFjqLNuYbOIO2c5OrJgdF8GcTJGDQKdJzOpFw1RPhM1
lfE2K60r89mRQkSC2H2NxPCFPR+0swPNW6ygJFGnnjCuWDOMXkPW+KwBFMOR5Ap/
WsIv+TX3gHx2BJTZI0ESMSvOD5qn8/okce2OREHQlZ5/4USibyGp+43qwq1C7krP
kCn2zMrtjd0et4PdUZiEEZU0jw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:16 2024 by rpki-client on console-ams.rpki-client.org