Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/rXUlrdCOJVREOuNtNU3ZfGdYfjw.roa
File: rXUlrdCOJVREOuNtNU3ZfGdYfjw.roa (raw, json)
Hash identifier: YZ3TuYEjd6qYVw3Oh1WZ4CYpcGvc8TAQmk6T220AhBs=
Subject key identifier: AD:75:25:AD:D0:8E:25:54:44:3A:E3:6D:35:4D:D9:7C:67:58:7E:3C
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 01E213
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/rXUlrdCOJVREOuNtNU3ZfGdYfjw.roa
Signing time: Tue 22 Mar 2022 18:39:40 +0000
ROA not before: Tue 22 Mar 2022 18:39:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49157
IP address blocks: 185.131.176.0/24 maxlen: 24
185.131.178.0/24 maxlen: 24
185.131.177.0/24 maxlen: 24
185.131.179.0/24 maxlen: 24
185.151.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123411 (0x1e213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Mar 22 18:39:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad7525add08e2554443ae36d354dd97c67587e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:5c:da:6e:7e:6d:0c:54:ae:70:33:3f:38:
8f:dd:f2:32:59:72:3b:ad:ee:58:9a:3a:4d:9d:cb:
88:18:21:58:0e:e8:f1:d2:41:30:69:cc:e3:ea:f6:
54:79:2c:6e:60:c4:6e:f8:d7:bb:9b:15:49:fb:74:
65:2e:fc:55:87:24:00:b1:ee:6f:ff:1a:68:3d:4f:
9a:3b:2f:4d:70:1f:01:8d:18:db:cd:3d:14:3e:64:
ee:fa:e5:d5:bf:8e:c4:a0:ba:43:db:85:79:94:7e:
da:86:a5:65:95:60:00:46:59:90:ca:43:2f:82:78:
3c:f9:e9:ce:7e:ac:3f:7b:a2:8e:33:9e:51:13:2c:
f8:34:ae:32:46:bb:7d:d5:65:22:61:13:5c:9b:18:
f7:40:70:72:43:03:34:b5:b3:ac:0d:7f:fa:48:6d:
4d:05:68:59:f7:43:51:4e:7f:4a:4b:c4:5f:59:24:
24:c6:63:6d:e5:e5:cb:f6:c4:cc:b4:5c:33:2c:5b:
e7:df:d0:1d:6b:f6:59:9e:e5:8a:6a:a0:b3:44:e0:
72:78:6c:57:4c:e2:1d:39:3c:68:85:3e:08:91:f0:
2f:23:22:de:98:08:21:b0:1e:08:88:ad:f3:00:69:
df:0a:ca:f4:a1:d2:77:b2:83:b4:7b:c3:6f:a5:ff:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:25:AD:D0:8E:25:54:44:3A:E3:6D:35:4D:D9:7C:67:58:7E:3C
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/rXUlrdCOJVREOuNtNU3ZfGdYfjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.176.0/22
185.151.199.0/24
Signature Algorithm: sha256WithRSAEncryption
97:77:7f:fc:83:e2:fc:f6:59:bf:bd:ca:5f:ae:2b:6a:4d:87:
0c:c9:2c:6e:3f:3c:de:bc:64:61:39:d0:c3:32:e3:67:5b:f1:
34:e3:a7:7c:2c:5a:f5:d4:e8:de:a2:de:62:1e:3c:a9:8f:4a:
67:19:d7:0c:0b:bc:71:72:69:80:e8:c0:dc:1b:58:0e:fb:20:
eb:89:07:10:69:3a:bd:b7:71:40:0e:d1:e2:5a:13:6f:17:68:
c5:40:71:9f:cd:56:33:79:0e:44:6a:28:5a:f5:8c:be:e9:9d:
ef:72:b9:53:ad:77:22:89:6b:0e:3b:7c:ec:52:bd:bb:b3:55:
dd:5d:0e:ab:54:71:2e:fa:2f:ac:1b:2f:78:0a:39:25:f4:d2:
d5:75:6e:24:71:50:88:7a:bf:09:a1:17:a2:b9:a7:35:9e:a0:
a8:1a:4f:51:f4:02:67:de:6a:71:ac:b6:7d:09:a6:79:a8:9d:
6f:86:0c:11:59:d5:56:8b:68:fb:a8:12:7b:3d:42:d0:9a:9d:
9c:1a:69:ed:02:b9:79:98:84:89:e9:50:7a:49:31:f0:a1:a8:
b1:ad:f6:77:15:60:ea:80:b2:ab:59:df:db:42:1a:54:a4:91:
db:0d:1f:02:b8:e8:89:94:51:07:67:dd:5e:b4:71:89:c3:20:
33:b0:23:78
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDAeITMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkwYWI3NzAwHhcNMjIwMzIy
MTgzOTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhZDc1MjVhZGQwOGUy
NTU0NDQzYWUzNmQzNTRkZDk3YzY3NTg3ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAselc2m5+bQxUrnAzPziP3fIyWXI7re5YmjpNncuIGCFYDujx
0kEwaczj6vZUeSxuYMRu+Ne7mxVJ+3RlLvxVhyQAse5v/xpoPU+aOy9NcB8BjRjb
zT0UPmTu+uXVv47EoLpD24V5lH7ahqVllWAARlmQykMvgng8+enOfqw/e6KOM55R
Eyz4NK4yRrt91WUiYRNcmxj3QHByQwM0tbOsDX/6SG1NBWhZ90NRTn9KS8RfWSQk
xmNt5eXL9sTMtFwzLFvn39Ada/ZZnuWKaqCzROByeGxXTOIdOTxohT4IkfAvIyLe
mAghsB4IiK3zAGnfCsr0odJ3soO0e8Nvpf/CZwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFK11Ja3QjiVURDrjbTVN2XxnWH48MB8GA1UdIwQYMBaAFNnv6dNvX4j98EdC
xBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4LzEv
clhVbHJkQ09KVlJFT3VOdE5VM1pmR2RZZmp3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81
NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3
UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYOwAwQAuZfHMA0GCSqGSIb3DQEB
CwUAA4IBAQCXd3/8g+L89lm/vcpfritqTYcMySxuPzzevGRhOdDDMuNnW/E046d8
LFr11Ojeot5iHjypj0pnGdcMC7xxcmmA6MDcG1gO+yDriQcQaTq9t3FADtHiWhNv
F2jFQHGfzVYzeQ5Eaiha9Yy+6Z3vcrlTrXciiWsOO3zsUr27s1XdXQ6rVHEu+i+s
Gy94Cjkl9NLVdW4kcVCIer8JoReiuac1nqCoGk9R9AJn3mpxrLZ9CaZ5qJ1vhgwR
WdVWi2j7qBJ7PULQmp2cGmntArl5mISJ6VB6STHwoaixrfZ3FWDqgLKrWd/bQhpU
pJHbDR8CuOiJlFEHZ91etHGJwyAzsCN4
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-fra.rpki-client.org