Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/a7lEMgyaY1lbXjdl49qHjRZHatI.roa
File: a7lEMgyaY1lbXjdl49qHjRZHatI.roa (raw, json)
Hash identifier: Mj66YbwZ1n2815UGMsZ+x2fzXkVbX1I4FQmymJkrWeY=
Subject key identifier: 6B:B9:44:32:0C:9A:63:59:5B:5E:37:65:E3:DA:87:8D:16:47:6A:D2
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: A6755F
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/a7lEMgyaY1lbXjdl49qHjRZHatI.roa
Signing time: Wed 26 Jan 2022 10:23:27 +0000
ROA not before: Wed 26 Jan 2022 10:23:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60398
IP address blocks: 185.249.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10909023 (0xa6755f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Jan 26 10:23:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bb944320c9a63595b5e3765e3da878d16476ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:01:80:b0:ab:0d:9d:95:25:9e:25:51:11:
51:c3:84:e2:b2:c5:3d:3e:f0:cc:5c:b3:e2:e1:7a:
3c:b0:01:97:7d:eb:c8:7c:c8:3c:0b:ff:20:9a:4f:
33:82:9f:6a:6a:e1:d8:d9:ff:44:99:74:dc:0a:d7:
22:35:3d:50:d4:71:bb:cb:a8:f2:14:d3:94:f0:39:
32:3b:08:97:dc:1c:73:5c:52:cc:62:e2:90:81:d1:
b4:19:57:67:5e:e1:12:f2:5b:f4:35:b7:5b:d6:32:
af:36:6c:84:41:bf:83:95:62:8d:8d:8f:db:22:b1:
21:fb:d1:e2:23:56:0f:0c:49:ad:83:16:4b:64:8b:
c0:bd:e0:76:e9:2e:5c:0b:cc:b2:68:fb:99:2b:37:
ac:c2:14:3e:7f:3c:cb:74:6b:85:46:ef:7a:b4:69:
bb:f7:84:ab:ec:54:7a:dc:ba:e1:e1:f9:05:bd:07:
db:56:bf:d6:eb:75:15:bf:93:3a:f9:51:ea:58:be:
6c:c2:5e:80:fc:ff:bd:33:58:c6:ea:f1:a1:3b:48:
d2:63:0f:f6:77:92:61:14:3d:97:83:54:ff:e7:77:
4d:7e:a8:5d:79:5c:9b:9d:ab:a7:99:5e:33:fc:e6:
27:9e:4b:c7:d1:21:09:42:81:d0:94:97:5e:5d:1c:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B9:44:32:0C:9A:63:59:5B:5E:37:65:E3:DA:87:8D:16:47:6A:D2
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/a7lEMgyaY1lbXjdl49qHjRZHatI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.105.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3d:a9:90:dc:5a:79:60:6a:b2:57:0a:b6:b1:53:60:b4:04:
80:ca:e4:d8:58:e5:69:b9:b4:0d:70:ad:51:29:8e:b8:ea:5d:
cd:4a:41:2c:35:f2:fe:1d:69:5a:7f:18:85:47:f8:8c:0d:cd:
f4:c6:2d:36:73:6b:a9:92:4f:f9:a4:d8:97:9a:fd:7f:7b:37:
9b:6f:e1:ad:7e:14:0e:f6:4e:6a:85:57:fd:36:d1:c9:d4:bc:
8b:ed:6d:e7:3c:09:18:a9:54:35:40:0c:06:1a:da:a3:d6:4e:
b8:00:90:72:d6:17:0d:f6:47:a1:0f:6e:78:8e:9c:d0:27:3d:
48:e3:05:3b:13:2c:e4:a6:aa:a5:2e:eb:83:c6:a5:cc:e9:b8:
85:6a:a9:5f:52:85:9f:f8:69:c7:22:55:ee:25:1c:5e:f3:e6:
ee:d9:6c:14:52:4a:0a:53:14:f3:e3:0f:11:f3:2a:ef:1c:bb:
1c:a4:c2:3e:e2:e2:44:9e:30:94:af:13:f6:f9:54:24:42:f6:
71:0f:1b:8b:a1:86:39:ce:bc:e7:97:70:f0:29:6d:f4:a6:3a:
8b:8a:a4:4e:87:6c:99:a4:52:62:7e:79:a8:8d:31:dc:4e:17:
80:c3:d8:ab:7b:4e:1c:aa:6a:b4:67:aa:14:2a:90:30:26:2d:
9b:e7:28:00
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKZ1XzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTFjNWQzMzMxMTQ1ZWM4ZTI3MTg3NmY4MDQyMjA3YjlkMDBjYjY0MB4XDTIyMDEy
NjEwMjMyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJiOTQ0MzIwYzlh
NjM1OTViNWUzNzY1ZTNkYTg3OGQxNjQ3NmFkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALs5AYCwqw2dlSWeJVERUcOE4rLFPT7wzFyz4uF6PLABl33r
yHzIPAv/IJpPM4Kfamrh2Nn/RJl03ArXIjU9UNRxu8uo8hTTlPA5MjsIl9wcc1xS
zGLikIHRtBlXZ17hEvJb9DW3W9YyrzZshEG/g5VijY2P2yKxIfvR4iNWDwxJrYMW
S2SLwL3gdukuXAvMsmj7mSs3rMIUPn88y3RrhUbverRpu/eEq+xUety64eH5Bb0H
21a/1ut1Fb+TOvlR6li+bMJegPz/vTNYxurxoTtI0mMP9neSYRQ9l4NU/+d3TX6o
XXlcm52rp5leM/zmJ55Lx9EhCUKB0JSXXl0cQVMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRruUQyDJpjWVteN2Xj2oeNFkdq0jAfBgNVHSMEGDAWgBQ5HF0zMRReyOJx
h2+AQiB7nQDLZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09SeGRNekVVWHNqaWNZZHZnRUlnZTUwQXkyUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvMDU4NjI0LWRlNzctNDIyNC1iNTQwLWNhMzM1MGU3NjBjYi8x
L2E3bEVNZ3lhWTFsYlhqZGw0OXFIalJaSGF0SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
MDU4NjI0LWRlNzctNDIyNC1iNTQwLWNhMzM1MGU3NjBjYi8xL09SeGRNekVVWHNq
aWNZZHZnRUlnZTUwQXkyUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn5aTANBgkqhkiG9w0BAQsFAAOC
AQEAAz2pkNxaeWBqslcKtrFTYLQEgMrk2Fjlabm0DXCtUSmOuOpdzUpBLDXy/h1p
Wn8YhUf4jA3N9MYtNnNrqZJP+aTYl5r9f3s3m2/hrX4UDvZOaoVX/TbRydS8i+1t
5zwJGKlUNUAMBhrao9ZOuACQctYXDfZHoQ9ueI6c0Cc9SOMFOxMs5KaqpS7rg8al
zOm4hWqpX1KFn/hpxyJV7iUcXvPm7tlsFFJKClMU8+MPEfMq7xy7HKTCPuLiRJ4w
lK8T9vlUJEL2cQ8bi6GGOc6855dw8Clt9KY6i4qkTodsmaRSYn55qI0x3E4XgMPY
q3tOHKpqtGeqFCqQMCYtm+coAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:19 2024 by rpki-client on console-fra.rpki-client.org