Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/rBLnedSOmzEeznN1tlsa2zz7_ns.roa
File: rBLnedSOmzEeznN1tlsa2zz7_ns.roa (raw, json)
Hash identifier: vomZctDq9fBSzu9dTEOs6aN0jeyv9y5rDBVtr4igpaU=
Subject key identifier: AC:12:E7:79:D4:8E:9B:31:1E:CE:73:75:B6:5B:1A:DB:3C:FB:FE:7B
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 19DF4DB2
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/rBLnedSOmzEeznN1tlsa2zz7_ns.roa
Signing time: Sat 01 Jan 2022 04:55:12 +0000
ROA not before: Sat 01 Jan 2022 04:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206144
IP address blocks: 185.195.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434064818 (0x19df4db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 04:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac12e779d48e9b311ece7375b65b1adb3cfbfe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:10:77:38:d8:cc:1d:5d:d2:aa:e7:95:da:
b3:99:b6:e9:84:75:90:08:01:ae:f8:07:cc:7c:84:
5d:56:8f:8d:06:3e:15:1e:4c:b8:a0:3d:7e:4f:dd:
f6:e5:65:99:3b:a6:b4:c5:55:91:30:c1:27:42:4b:
53:79:82:02:8c:27:4e:28:3e:5b:bc:2d:dd:5b:b9:
93:2a:65:94:d4:33:f2:37:38:a5:be:a0:e3:f4:0d:
17:5d:31:aa:1f:00:ae:13:59:85:65:9c:6c:9e:f0:
c0:37:94:fd:e1:06:89:1e:aa:79:16:40:27:a9:0d:
b2:07:fb:fc:e3:c5:3b:cb:8d:25:1c:fe:8e:9e:10:
78:f7:78:73:26:72:12:5a:bf:90:65:b0:9f:2b:66:
e9:44:7b:18:d5:4d:c1:d5:62:6e:2d:76:c5:8c:28:
01:00:5a:4d:18:10:9b:59:3d:de:ef:96:d5:2d:b6:
1b:4e:a5:42:a5:a3:42:3e:7b:f1:be:d8:ad:39:ab:
4d:87:30:04:69:00:79:5a:96:36:8f:f9:39:b8:a9:
1a:59:cd:f7:a4:99:28:8b:46:c5:d7:a5:80:80:6f:
2b:33:09:fd:6e:46:34:27:59:e2:a5:42:87:f0:ed:
97:42:a1:e6:90:d1:bb:13:54:24:f9:7a:c7:b4:03:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:E7:79:D4:8E:9B:31:1E:CE:73:75:B6:5B:1A:DB:3C:FB:FE:7B
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/rBLnedSOmzEeznN1tlsa2zz7_ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.56.0/22
Signature Algorithm: sha256WithRSAEncryption
00:46:66:f0:07:c9:a0:3e:82:94:32:6d:dd:02:85:3a:4b:ab:
e6:6e:ef:51:35:25:e4:2d:0e:c5:a7:d7:c0:5b:6d:44:dd:f3:
ad:70:2a:23:e3:7e:69:98:d2:43:01:95:6b:67:f3:4e:f5:76:
98:32:bd:2f:8b:75:f0:5d:de:ac:c7:a2:51:2a:dc:d3:9d:98:
9b:67:65:ff:9c:3a:36:16:7e:03:45:77:cd:8d:9b:05:57:48:
7f:61:79:10:89:e3:25:3a:d8:c1:13:d0:02:23:ba:0c:cd:4a:
aa:a2:02:74:07:21:46:45:e2:c1:4a:a0:da:55:83:bf:e7:7f:
74:e3:20:af:f6:91:5b:b7:84:9e:bc:29:76:f0:bc:f2:ec:bf:
3e:ea:d4:6d:b1:be:9d:eb:80:a3:70:59:72:69:c1:3e:0f:44:
c4:d3:13:df:a1:cc:fc:6d:01:44:ae:ec:d3:4f:de:7e:6b:49:
36:5f:96:12:7e:b9:4a:ef:b9:35:fb:03:ea:99:86:19:b4:54:
d9:26:1d:f8:83:ef:fb:0a:81:df:8d:76:3b:52:e3:a8:0f:9b:
5c:9c:e4:03:f6:93:2f:ab:ba:1c:b7:d6:79:3a:5a:81:32:bf:
64:15:f7:80:ac:0e:98:c2:19:59:3f:ed:b7:bf:b4:f6:26:03:
b0:cb:39:60
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGd9NsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZmRlYzRhNDZhNmU2ZTRmOWE5MmQwYmEyZTBiM2FiNTY1OGJlMWJkMB4XDTIyMDEw
MTA0NTUxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWMxMmU3NzlkNDhl
OWIzMTFlY2U3Mzc1YjY1YjFhZGIzY2ZiZmU3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBNEHc42MwdXdKq55Xas5m26YR1kAgBrvgHzHyEXVaPjQY+
FR5MuKA9fk/d9uVlmTumtMVVkTDBJ0JLU3mCAownTig+W7wt3Vu5kypllNQz8jc4
pb6g4/QNF10xqh8ArhNZhWWcbJ7wwDeU/eEGiR6qeRZAJ6kNsgf7/OPFO8uNJRz+
jp4QePd4cyZyElq/kGWwnytm6UR7GNVNwdVibi12xYwoAQBaTRgQm1k93u+W1S22
G06lQqWjQj578b7YrTmrTYcwBGkAeVqWNo/5ObipGlnN96SZKItGxdelgIBvKzMJ
/W5GNCdZ4qVCh/Dtl0Kh5pDRuxNUJPl6x7QDuVcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSsEud51I6bMR7Oc3W2WxrbPPv+ezAfBgNVHSMEGDAWgBT/3sSkam5uT5qS
0LouCzq1ZYvhvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L185N0VwR3B1YmstYWt0QzZMZ3M2dFdXTDRiMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvMTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8x
L3JCTG5lZFNPbXpFZXpuTjF0bHNhMnp6N19ucy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
MTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8xL185N0VwR3B1Ymst
YWt0QzZMZ3M2dFdXTDRiMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnDODANBgkqhkiG9w0BAQsFAAOC
AQEAAEZm8AfJoD6ClDJt3QKFOkur5m7vUTUl5C0OxafXwFttRN3zrXAqI+N+aZjS
QwGVa2fzTvV2mDK9L4t18F3erMeiUSrc052Ym2dl/5w6NhZ+A0V3zY2bBVdIf2F5
EInjJTrYwRPQAiO6DM1KqqICdAchRkXiwUqg2lWDv+d/dOMgr/aRW7eEnrwpdvC8
8uy/PurUbbG+neuAo3BZcmnBPg9ExNMT36HM/G0BRK7s00/efmtJNl+WEn65Su+5
NfsD6pmGGbRU2SYd+IPv+wqB3412O1LjqA+bXJzkA/aTL6u6HLfWeTpagTK/ZBX3
gKwOmMIZWT/tt7+09iYDsMs5YA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org