Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/atsu2oZHnRoYFPLmgZvnUjb00zI.roa
File: atsu2oZHnRoYFPLmgZvnUjb00zI.roa (raw, json)
Hash identifier: UdpM/ODST47BnJR/tyeHQEmHBUyxofDb1AL7yGCpasE=
Subject key identifier: 6A:DB:2E:DA:86:47:9D:1A:18:14:F2:E6:81:9B:E7:52:36:F4:D3:32
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 1C826941
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/atsu2oZHnRoYFPLmgZvnUjb00zI.roa
Signing time: Fri 18 Mar 2022 12:20:51 +0000
ROA not before: Fri 18 Mar 2022 12:20:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39210
IP address blocks: 185.235.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478308673 (0x1c826941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Mar 18 12:20:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6adb2eda86479d1a1814f2e6819be75236f4d332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:8a:f7:19:6b:24:2b:22:c2:f1:12:3d:eb:
d0:98:d2:45:87:71:43:58:90:39:47:3f:8e:ca:e6:
31:76:0b:2e:f8:a8:49:ae:47:87:84:bd:e1:8d:72:
20:32:95:31:e7:bc:b9:8d:70:63:2f:cd:cc:f6:42:
92:75:e6:6e:58:dc:87:bf:8b:91:c0:2e:08:c2:2c:
fc:1b:15:46:6e:f6:be:af:bc:e6:f4:47:72:40:df:
75:ce:8e:72:0a:c2:a0:b0:8b:58:f3:d5:55:d7:17:
e7:8c:98:57:57:7e:b5:08:e3:12:35:42:cb:6f:8d:
43:95:74:32:c6:43:af:e4:f7:cf:c0:e9:5e:b3:3b:
fa:aa:d8:25:96:bb:ae:46:24:b5:fa:f2:04:ba:f9:
85:99:18:af:1b:bc:92:e5:60:24:90:bf:af:f9:5f:
37:3c:46:25:a5:4d:78:93:e5:2b:4c:7b:9f:f3:1f:
6c:a2:f4:97:2c:e5:a5:f4:d6:a6:22:33:7b:4e:af:
87:7c:2e:df:c0:02:50:74:f7:85:c9:4b:36:ee:6e:
01:e7:a7:1d:cd:1d:a5:3c:4a:66:b1:15:24:62:66:
67:98:e3:01:19:06:1f:6d:7f:5d:c9:7a:da:52:28:
50:2b:40:66:cb:e5:c9:fe:36:ff:fa:1c:54:f1:dc:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DB:2E:DA:86:47:9D:1A:18:14:F2:E6:81:9B:E7:52:36:F4:D3:32
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/atsu2oZHnRoYFPLmgZvnUjb00zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:63:42:c8:7e:60:b9:6d:e0:a6:92:5b:1b:b7:f9:12:33:c6:
33:b0:7e:35:e7:2f:be:a3:6a:f1:1c:22:12:ba:a4:e2:b1:1e:
68:05:ef:ea:d2:74:70:94:b1:b9:56:a3:33:95:e6:10:03:12:
06:96:60:92:fc:95:89:5c:94:52:f9:cb:21:0f:62:2e:4d:e8:
28:2d:2f:06:f5:5e:76:11:c3:fa:e6:e2:0e:94:96:48:88:e7:
4b:cf:7d:d3:b1:8b:69:70:d5:eb:38:76:43:18:fc:64:a4:bf:
55:d0:92:2e:64:a4:6e:f4:7f:75:39:40:c2:da:69:e8:12:23:
a0:17:ec:67:d9:01:cc:d1:74:dc:03:4a:5f:47:4d:af:57:b4:
92:4c:27:73:a0:7d:4f:aa:2c:f0:94:df:eb:3f:43:4a:b6:74:
51:13:89:7b:dc:ae:85:7d:f8:ac:54:86:85:cd:1c:03:84:43:
3a:00:ca:57:f1:c9:e1:f1:55:4b:91:60:71:41:66:e7:34:8b:
d8:83:a8:a3:33:d5:2a:05:45:44:52:9f:12:32:93:7e:8b:32:
9f:e0:2a:71:84:48:95:92:1f:2b:0c:7e:b4:90:c7:25:63:4f:
34:d7:ca:14:a8:ea:e0:4a:d0:30:79:4e:a4:38:be:51:ea:66:
ec:9f:96:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHIJpQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YzQwZDk2MjQyYjA4MmVmZTViNGYyMjU4ODIwYjMwNTkzOTYxOThkMB4XDTIyMDMx
ODEyMjA1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmFkYjJlZGE4NjQ3
OWQxYTE4MTRmMmU2ODE5YmU3NTIzNmY0ZDMzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVSivcZayQrIsLxEj3r0JjSRYdxQ1iQOUc/jsrmMXYLLvio
Sa5Hh4S94Y1yIDKVMee8uY1wYy/NzPZCknXmbljch7+LkcAuCMIs/BsVRm72vq+8
5vRHckDfdc6OcgrCoLCLWPPVVdcX54yYV1d+tQjjEjVCy2+NQ5V0MsZDr+T3z8Dp
XrM7+qrYJZa7rkYktfryBLr5hZkYrxu8kuVgJJC/r/lfNzxGJaVNeJPlK0x7n/Mf
bKL0lyzlpfTWpiIze06vh3wu38ACUHT3hclLNu5uAeenHc0dpTxKZrEVJGJmZ5jj
ARkGH21/Xcl62lIoUCtAZsvlyf42//ocVPHcgQECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRq2y7ahkedGhgU8uaBm+dSNvTTMjAfBgNVHSMEGDAWgBTMQNliQrCC7+W0
8iWIILMFk5YZjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pFRFpZa0t3Z3VfbHRQSWxpQ0N6QlpPV0dZMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMWFhNjlmLWRiNTUtNGZiYS1iY2U5LWMxZWJlNjE1NDljYy8x
L2F0c3Uyb1pIblJvWUZQTG1nWnZuVWpiMDB6SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MWFhNjlmLWRiNTUtNGZiYS1iY2U5LWMxZWJlNjE1NDljYy8xL3pFRFpZa0t3Z3Vf
bHRQSWxpQ0N6QlpPV0dZMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnrlDANBgkqhkiG9w0BAQsFAAOC
AQEATWNCyH5guW3gppJbG7f5EjPGM7B+NecvvqNq8RwiErqk4rEeaAXv6tJ0cJSx
uVajM5XmEAMSBpZgkvyViVyUUvnLIQ9iLk3oKC0vBvVedhHD+ubiDpSWSIjnS899
07GLaXDV6zh2Qxj8ZKS/VdCSLmSkbvR/dTlAwtpp6BIjoBfsZ9kBzNF03ANKX0dN
r1e0kkwnc6B9T6os8JTf6z9DSrZ0UROJe9yuhX34rFSGhc0cA4RDOgDKV/HJ4fFV
S5FgcUFm5zSL2IOoozPVKgVFRFKfEjKTfosyn+AqcYRIlZIfKwx+tJDHJWNPNNfK
FKjq4ErQMHlOpDi+Uepm7J+Wnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org