Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lJT-Wq0fWFDqJBiq9T_4gw6RqpQ.roa
File: lJT-Wq0fWFDqJBiq9T_4gw6RqpQ.roa (raw, json)
Hash identifier: jP8fABHlXkq5tSLObeGexxfXh8Tq8q2D98n5jZXX734=
Subject key identifier: 94:94:FE:5A:AD:1F:58:50:EA:24:18:AA:F5:3F:F8:83:0E:91:AA:94
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 07D70E49
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lJT-Wq0fWFDqJBiq9T_4gw6RqpQ.roa
Signing time: Sat 01 Jan 2022 10:56:59 +0000
ROA not before: Sat 01 Jan 2022 10:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201882
IP address blocks: 185.73.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131534409 (0x7d70e49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 1 10:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9494fe5aad1f5850ea2418aaf53ff8830e91aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:89:0a:07:71:e5:41:2e:1a:ba:22:59:b9:
8e:f1:5a:f2:6e:91:16:f0:e1:3b:0b:e1:dd:40:ae:
31:56:8f:d5:72:ea:5d:42:58:c9:7f:1d:d2:d1:9b:
e8:23:cb:d2:d9:58:f2:15:8d:f0:37:af:48:ae:47:
70:d1:40:6f:53:63:9b:ed:b1:8f:ef:f5:00:17:92:
1d:82:22:f5:53:36:70:01:ec:98:ba:cf:ad:76:33:
35:02:13:f1:3b:53:97:8b:f3:40:78:6a:23:74:76:
4d:df:3c:33:1d:35:85:d0:0e:81:5f:7c:d0:5d:21:
96:13:df:56:7a:ee:6f:d4:70:68:44:ec:11:87:09:
50:7d:76:ab:2b:9f:91:52:46:52:91:15:d4:35:f2:
b5:fa:a8:a5:c1:86:70:93:84:3f:28:15:bd:27:1f:
fd:9f:ed:63:5d:f8:be:df:6a:54:90:48:1a:53:d9:
7b:be:65:06:df:64:6a:c3:e8:4b:23:4d:1c:24:b9:
92:98:bf:f0:9a:2c:cd:56:8b:74:33:32:ef:a1:80:
0d:59:2e:68:ed:7a:9c:d3:15:3f:a1:70:04:24:45:
f9:ae:00:f1:7c:0c:29:6f:fa:e2:92:c9:66:a4:01:
02:b8:8c:bb:80:df:05:11:f3:3f:6a:f1:96:b6:8b:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:FE:5A:AD:1F:58:50:EA:24:18:AA:F5:3F:F8:83:0E:91:AA:94
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lJT-Wq0fWFDqJBiq9T_4gw6RqpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:4f:0b:1b:a9:df:fa:0e:76:f3:21:2f:58:7c:b5:b6:d6:
d6:5e:ce:dd:d5:aa:9e:0d:d5:17:85:20:b1:14:bd:bd:81:7f:
bd:3e:d9:a8:1f:14:9d:61:a6:09:9b:68:d2:04:a0:ea:dc:e4:
05:bb:68:c6:cd:86:a1:c3:b4:e8:4f:28:ae:94:84:66:d3:4c:
3d:6f:46:b0:e9:4d:b7:f4:88:8a:5e:a5:b8:9d:7f:68:7b:2d:
8b:9d:2d:d6:eb:c9:5a:f9:6a:8a:19:07:5f:8a:2c:31:5e:54:
fc:00:ed:37:75:3f:10:bd:66:fb:6f:65:de:29:62:f7:52:51:
66:b8:69:c2:4b:a5:e7:7d:51:b3:59:16:fc:52:ba:b1:4e:56:
5d:4c:01:91:b5:8b:82:90:4d:72:ad:e4:a4:5e:7f:c9:4f:93:
52:c1:7d:ff:4f:f0:f0:6e:98:c5:f7:a5:2e:e9:90:2f:c4:bf:
0d:31:03:27:9a:41:91:c6:bd:88:83:f0:9d:86:54:78:5c:4c:
2a:e2:76:b6:39:65:6a:7f:ee:ad:48:a1:cc:14:41:c6:17:7f:
3c:ff:af:15:af:82:ca:41:a5:39:d5:60:72:b2:25:15:cb:4f:
63:91:41:b6:47:11:c6:be:cc:8b:43:45:4e:cc:8c:1a:0f:1b:
1a:3b:9d:a3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB9cOSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjQ3NGFjN2NhODVlMDljMmQ0OGIzM2U3YmY2NmY4ZWQ3NjRkZTBmMB4XDTIyMDEw
MTEwNTY1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQ5NGZlNWFhZDFm
NTg1MGVhMjQxOGFhZjUzZmY4ODMwZTkxYWE5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK++iQoHceVBLhq6Ilm5jvFa8m6RFvDhOwvh3UCuMVaP1XLq
XUJYyX8d0tGb6CPL0tlY8hWN8DevSK5HcNFAb1Njm+2xj+/1ABeSHYIi9VM2cAHs
mLrPrXYzNQIT8TtTl4vzQHhqI3R2Td88Mx01hdAOgV980F0hlhPfVnrub9RwaETs
EYcJUH12qyufkVJGUpEV1DXytfqopcGGcJOEPygVvScf/Z/tY134vt9qVJBIGlPZ
e75lBt9kasPoSyNNHCS5kpi/8JoszVaLdDMy76GADVkuaO16nNMVP6FwBCRF+a4A
8XwMKW/64pLJZqQBAriMu4DfBRHzP2rxlraLRQcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUlP5arR9YUOokGKr1P/iDDpGqlDAfBgNVHSMEGDAWgBQyR0rHyoXgnC1I
sz579m+O12TeDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01rZEt4OHFGNEp3dFNMTS1lX1p2anRkazNnOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvMWZkMGE2LTQ1MTctNGEwYi1iM2M5LTEyZWMyMmM5YzVhMi8x
L2xKVC1XcTBmV0ZEcUpCaXE5VF80Z3c2UnFwUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
MWZkMGE2LTQ1MTctNGEwYi1iM2M5LTEyZWMyMmM5YzVhMi8xL01rZEt4OHFGNEp3
dFNMTS1lX1p2anRkazNnOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlJ8zANBgkqhkiG9w0BAQsFAAOC
AQEAYyxPCxup3/oOdvMhL1h8tbbW1l7O3dWqng3VF4UgsRS9vYF/vT7ZqB8UnWGm
CZto0gSg6tzkBbtoxs2GocO06E8orpSEZtNMPW9GsOlNt/SIil6luJ1/aHsti50t
1uvJWvlqihkHX4osMV5U/ADtN3U/EL1m+29l3ili91JRZrhpwkul531Rs1kW/FK6
sU5WXUwBkbWLgpBNcq3kpF5/yU+TUsF9/0/w8G6YxfelLumQL8S/DTEDJ5pBkca9
iIPwnYZUeFxMKuJ2tjllan/urUihzBRBxhd/PP+vFa+CykGlOdVgcrIlFctPY5FB
tkcRxr7Mi0NFTsyMGg8bGjudow==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:06 2023 by rpki-client on console-fra.rpki-client.org