Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/w7Vt2KjP-DABhfVomE8RYmWXsnc.roa
File: w7Vt2KjP-DABhfVomE8RYmWXsnc.roa (raw, json)
Hash identifier: lpHLQrdufozAEXtsilIuyisJiQ1Ff+tf0mjrs9Xg2q0=
Subject key identifier: C3:B5:6D:D8:A8:CF:F8:30:01:85:F5:68:98:4F:11:62:65:97:B2:77
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0184A8F84DF2C8CBC0464D61F917DE3F2ADE
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/w7Vt2KjP-DABhfVomE8RYmWXsnc.roa
Signing time: Thu 24 Nov 2022 09:29:15 +0000
ROA not before: Thu 24 Nov 2022 09:29:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 185.74.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:f8:4d:f2:c8:cb:c0:46:4d:61:f9:17:de:3f:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Nov 24 09:29:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3b56dd8a8cff8300185f568984f11626597b277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:94:d7:29:32:59:58:5b:6f:7d:0b:60:b1:
98:f5:54:38:23:f6:f8:c1:65:e3:7a:fc:33:d9:fd:
5d:07:10:f6:eb:ef:67:4d:df:8d:70:b1:da:e5:75:
8e:5c:75:73:75:23:b1:02:16:c7:13:21:3b:c2:e2:
f7:04:73:dc:70:f2:20:e0:c9:e2:da:72:77:b7:7b:
49:d8:26:dd:25:12:8c:17:dc:e4:2f:cd:75:e9:b5:
a3:91:ad:e9:eb:88:f3:6d:47:07:96:5d:b6:96:e0:
c8:5a:65:26:b4:fa:1f:e2:10:35:20:4f:ca:e8:82:
d0:de:94:d1:3b:7c:41:be:f4:18:4f:c3:be:85:06:
cc:dd:3a:7e:00:85:e2:92:60:1a:b0:25:08:06:ec:
d1:21:5f:c5:7d:35:36:17:48:b4:47:f6:40:bb:6c:
97:da:6f:7f:24:69:33:3c:64:c0:d6:f4:d2:8f:71:
6b:8e:a0:6c:04:7d:d2:b9:50:f5:d4:dc:f6:c9:ee:
38:a6:b6:8d:d3:33:5f:9c:f5:8e:41:d3:db:1b:dc:
2a:7d:8e:a2:a8:53:a9:e8:dc:df:0e:26:04:40:f1:
87:39:3a:8a:69:04:08:c7:90:f4:03:f2:34:7d:62:
78:61:0c:92:92:3b:0f:76:fc:57:48:a8:c8:6d:24:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:6D:D8:A8:CF:F8:30:01:85:F5:68:98:4F:11:62:65:97:B2:77
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/w7Vt2KjP-DABhfVomE8RYmWXsnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:00:f3:9e:51:a4:9e:81:0f:5e:8d:a8:0e:ac:1c:3f:62:d8:
57:bd:bc:c9:75:6c:6f:73:8f:7d:f8:14:39:ce:ce:87:72:96:
f1:b7:ac:84:34:32:f6:14:e1:e9:d7:b2:f2:93:18:6d:9a:35:
4d:d5:6c:89:41:80:53:4d:7e:2f:23:b8:9a:e0:1d:29:6d:4f:
15:83:83:fc:ba:8d:59:03:96:7c:63:73:af:30:67:7a:f3:91:
e2:70:13:f2:d1:a5:99:a0:a6:55:53:19:c9:c0:d3:8f:48:ec:
9f:ab:03:ed:42:60:30:50:5f:1b:43:5e:04:28:d8:46:83:a2:
58:d4:0c:53:c4:37:04:61:c8:55:a7:c5:a0:d8:38:56:54:77:
de:e8:8c:de:8d:2c:7c:2e:5e:90:90:2c:70:28:49:05:d8:1b:
66:f1:b0:3b:0e:e7:f0:38:cd:8a:38:5e:f7:4e:27:a1:3e:27:
e6:f5:48:63:4e:12:5e:3e:df:6c:3a:82:d6:1e:bc:a2:45:1f:
b2:7b:a9:8d:b0:e4:f1:94:2c:c3:fa:d7:ff:7b:3d:84:7a:a6:
c1:16:60:8f:8a:6b:fc:7b:20:2f:c6:22:3e:c2:2b:c1:4d:b2:
3e:d7:de:b3:b7:43:87:78:36:79:c6:76:3b:dd:eb:90:96:80:
14:8d:e5:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSo+E3yyMvARk1h+RfePyreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjIxMTI0MDkyOTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2I1NmRkOGE4Y2ZmODMwMDE4NWY1Njg5ODRmMTE2MjY1OTdiMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaiU1ykyWVhbb30LYLGY9VQ4I/b4
wWXjevwz2f1dBxD26+9nTd+NcLHa5XWOXHVzdSOxAhbHEyE7wuL3BHPccPIg4Mni
2nJ3t3tJ2CbdJRKMF9zkL8116bWjka3p64jzbUcHll22luDIWmUmtPof4hA1IE/K
6ILQ3pTRO3xBvvQYT8O+hQbM3Tp+AIXikmAasCUIBuzRIV/FfTU2F0i0R/ZAu2yX
2m9/JGkzPGTA1vTSj3FrjqBsBH3SuVD11Nz2ye44praN0zNfnPWOQdPbG9wqfY6i
qFOp6NzfDiYEQPGHOTqKaQQIx5D0A/I0fWJ4YQySkjsPdvxXSKjIbSTgXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMO1bdioz/gwAYX1aJhPEWJll7J3MB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvdzdWdDJLalAtREFCaGZWb21FOFJZbVdYc25jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUo0MA0G
CSqGSIb3DQEBCwUAA4IBAQCjAPOeUaSegQ9ejagOrBw/YthXvbzJdWxvc499+BQ5
zs6Hcpbxt6yENDL2FOHp17LykxhtmjVN1WyJQYBTTX4vI7ia4B0pbU8Vg4P8uo1Z
A5Z8Y3OvMGd685HicBPy0aWZoKZVUxnJwNOPSOyfqwPtQmAwUF8bQ14EKNhGg6JY
1AxTxDcEYchVp8Wg2DhWVHfe6IzejSx8Ll6QkCxwKEkF2Btm8bA7DufwOM2KOF73
TiehPifm9UhjThJePt9sOoLWHryiRR+ye6mNsOTxlCzD+tf/ez2EeqbBFmCPimv8
eyAvxiI+wivBTbI+196zt0OHeDZ5xnY73euQloAUjeWv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org