Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/yqKniB3WR2FcCNDsjbUEls2azfo.roa
File: yqKniB3WR2FcCNDsjbUEls2azfo.roa (raw, json)
Hash identifier: Dzbbj/k/HroLoexzDYy38oETCo1bRmXRj8RllmJdpiI=
Subject key identifier: CA:A2:A7:88:1D:D6:47:61:5C:08:D0:EC:8D:B5:04:96:CD:9A:CD:FA
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 01844BA0A493CECDC51B94E9D4E2B10E6B57
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/yqKniB3WR2FcCNDsjbUEls2azfo.roa
Signing time: Sun 06 Nov 2022 06:28:49 +0000
ROA not before: Sun 06 Nov 2022 06:28:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201703
IP address blocks: 185.206.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4b:a0:a4:93:ce:cd:c5:1b:94:e9:d4:e2:b1:0e:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Nov 6 06:28:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=caa2a7881dd647615c08d0ec8db50496cd9acdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:11:b1:59:f6:e2:40:7b:44:e2:cd:ee:23:
93:ff:96:56:f1:1a:31:25:9a:ea:3d:fe:61:26:0a:
2f:91:98:e6:99:62:13:4c:cb:f5:6d:ec:2d:cc:bc:
ac:21:03:a8:d1:e6:b5:c8:67:cd:77:20:1c:ff:23:
41:3b:9a:e6:d4:89:c7:31:22:e1:41:e6:e1:c1:dd:
73:53:d6:56:84:fa:c3:67:b1:68:79:df:7b:95:18:
8c:0e:54:8b:a9:6a:a4:80:7e:0b:e3:c2:81:6c:3b:
30:9d:fe:71:c8:21:ed:45:ad:4a:7d:2a:9e:a0:56:
9c:fa:01:83:2d:45:8a:34:56:7c:26:2f:81:87:47:
bb:73:97:88:61:2c:c4:78:0e:67:7e:c7:71:0f:83:
58:a6:5b:66:50:b4:d4:25:e5:3f:00:f4:da:20:04:
fc:fe:69:d3:ef:a3:25:01:fd:f2:bc:8a:96:e4:c7:
ed:62:f9:f4:28:ea:82:ec:42:21:ba:9a:24:97:05:
53:b3:56:e6:8f:4a:1c:ce:2a:a6:0a:06:a0:a6:9f:
7c:95:31:63:6f:4a:38:7a:45:3c:19:a8:10:8f:c2:
21:60:1b:de:d4:ee:1e:c2:eb:93:9b:92:9e:cc:06:
44:6b:6f:b0:47:76:fc:e6:ac:fb:95:22:5a:d4:77:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:A7:88:1D:D6:47:61:5C:08:D0:EC:8D:B5:04:96:CD:9A:CD:FA
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/yqKniB3WR2FcCNDsjbUEls2azfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d1:6a:29:49:ae:f4:ac:db:ee:31:20:8c:f2:4c:29:e2:7b:
49:c7:a6:b2:59:91:8b:ec:64:66:7c:d1:67:a6:8f:07:f5:49:
23:bb:3e:a6:e6:d6:e4:7b:ad:dc:06:fc:1e:65:51:cb:87:30:
37:88:28:32:fc:85:b1:3a:a4:7c:24:f8:ef:46:7c:e0:df:a2:
d0:dd:1d:71:64:56:04:3e:32:61:05:2f:5d:c0:db:8d:8b:7e:
4a:cf:9e:30:f6:ef:a4:77:e2:f5:10:cd:b5:70:d6:fb:62:74:
e0:ad:f2:60:72:58:80:99:97:ce:5f:d6:18:ac:95:99:c1:93:
a5:88:ff:c4:91:d3:e5:25:78:d4:21:8c:47:03:c8:92:0c:de:
e1:b5:a4:db:0a:7b:a0:8e:79:fe:62:3b:95:b1:6c:3c:d5:3a:
7a:13:01:0f:58:d6:c7:bf:c6:fa:22:73:cf:56:e3:7b:03:bb:
12:b0:1f:bf:1e:35:6a:2c:d3:e8:c2:47:36:11:14:07:36:e1:
99:73:02:70:4b:54:ef:32:a9:c1:85:82:a9:60:42:37:1e:9e:
16:3b:37:52:1b:16:6d:4d:94:d7:cf:3f:b9:06:ef:f9:de:be:
37:db:a4:7b:8e:65:26:3a:2a:0a:d9:b6:a8:85:e1:09:01:5c:
44:c6:d5:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRLoKSTzs3FG5Tp1OKxDmtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjIxMTA2MDYyODQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWEyYTc4ODFkZDY0NzYxNWMwOGQwZWM4ZGI1MDQ5NmNkOWFjZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKwRsVn24kB7ROLN7iOT/5ZW8Rox
JZrqPf5hJgovkZjmmWITTMv1bewtzLysIQOo0ea1yGfNdyAc/yNBO5rm1InHMSLh
Qebhwd1zU9ZWhPrDZ7Foed97lRiMDlSLqWqkgH4L48KBbDswnf5xyCHtRa1KfSqe
oFac+gGDLUWKNFZ8Ji+Bh0e7c5eIYSzEeA5nfsdxD4NYpltmULTUJeU/APTaIAT8
/mnT76MlAf3yvIqW5MftYvn0KOqC7EIhupoklwVTs1bmj0ocziqmCgagpp98lTFj
b0o4ekU8GagQj8IhYBve1O4ewuuTm5KezAZEa2+wR3b85qz7lSJa1HcnewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqip4gd1kdhXAjQ7I21BJbNms36MB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEveXFLbmlCM1dSMkZjQ05Ec2piVUVsczJhemZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc7lMA0G
CSqGSIb3DQEBCwUAA4IBAQAm0WopSa70rNvuMSCM8kwp4ntJx6ayWZGL7GRmfNFn
po8H9Ukjuz6m5tbke63cBvweZVHLhzA3iCgy/IWxOqR8JPjvRnzg36LQ3R1xZFYE
PjJhBS9dwNuNi35Kz54w9u+kd+L1EM21cNb7YnTgrfJgcliAmZfOX9YYrJWZwZOl
iP/EkdPlJXjUIYxHA8iSDN7htaTbCnugjnn+YjuVsWw81Tp6EwEPWNbHv8b6InPP
VuN7A7sSsB+/HjVqLNPowkc2ERQHNuGZcwJwS1TvMqnBhYKpYEI3Hp4WOzdSGxZt
TZTXzz+5Bu/53r4326R7jmUmOioK2baoheEJAVxExtVL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org