Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ljDboQ4uCRWjTPD_RnnsRyD6E4k.roa
File: ljDboQ4uCRWjTPD_RnnsRyD6E4k.roa (raw, json)
Hash identifier: QQqXvSxCRI7NaAeIsZzpekUpn9jhZIYrI+6CNkgaonM=
Subject key identifier: 96:30:DB:A1:0E:2E:09:15:A3:4C:F0:FF:46:79:EC:47:20:FA:13:89
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 049087A6
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ljDboQ4uCRWjTPD_RnnsRyD6E4k.roa
Signing time: Mon 11 Apr 2022 12:55:00 +0000
ROA not before: Mon 11 Apr 2022 12:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206044
IP address blocks: 185.212.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76580774 (0x49087a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 11 12:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9630dba10e2e0915a34cf0ff4679ec4720fa1389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:84:4a:71:c4:fa:ff:49:36:a0:2c:a3:00:
55:e4:88:79:fc:f5:8e:01:02:bb:68:9f:f1:f5:66:
59:61:50:63:bb:f7:6b:2a:c4:c6:57:14:4c:eb:7d:
f1:d6:d4:97:a9:05:33:c5:9f:3b:e5:4a:1c:b7:9e:
89:68:d8:70:79:9b:e0:5b:23:72:c7:3d:95:9f:4e:
97:f5:ec:98:73:2d:6d:56:60:e6:04:23:d3:44:22:
07:3d:53:f1:0a:b4:0f:de:b1:0c:af:78:8e:d4:88:
3e:83:0d:da:b2:27:55:95:f4:5e:e0:e6:d2:4d:7a:
95:54:dd:62:9e:43:c4:1c:57:6e:7b:81:ee:ab:90:
72:48:30:4e:d7:b0:9a:bb:fd:df:3a:e8:f4:0e:d4:
51:c7:9a:2e:34:aa:a2:c5:a4:27:8e:a6:14:b8:c1:
96:8d:ae:05:73:51:f8:ea:7d:10:13:89:96:94:80:
37:fd:68:ad:fa:e3:46:77:68:9e:46:e8:22:45:8a:
7e:7c:2e:4a:41:1d:b2:ab:a8:8d:e5:85:dc:03:8a:
b8:ea:41:e1:45:63:37:3e:0f:c5:1e:40:fc:77:66:
12:1a:47:d4:a8:bd:35:9b:f0:3f:81:7c:e3:6b:69:
ea:04:cc:28:d5:c9:43:4c:b0:09:56:bd:1c:89:bd:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:30:DB:A1:0E:2E:09:15:A3:4C:F0:FF:46:79:EC:47:20:FA:13:89
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ljDboQ4uCRWjTPD_RnnsRyD6E4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.150.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d4:e6:01:c6:9c:55:d5:6a:f1:11:28:f9:f2:b4:51:9f:16:
4a:1a:fc:ad:6e:b4:4f:50:a8:0f:f1:ce:de:87:f9:a5:5d:5b:
e7:14:55:8d:0c:37:43:5a:66:f2:73:7b:64:51:30:aa:6e:43:
f0:7b:10:49:60:44:80:bd:4b:47:2e:ae:f8:0f:44:61:2c:a1:
78:79:f8:6b:1a:d4:3d:f3:f3:14:ce:05:9a:8c:8d:77:8c:50:
1c:30:57:0c:e4:ed:a1:52:8c:cd:10:f6:78:b3:5f:5e:81:ad:
ad:ae:66:00:9f:47:12:b4:23:50:eb:88:c2:55:c4:ba:85:47:
42:dd:11:87:12:64:93:50:6a:e9:3b:f6:6f:12:48:31:3b:c7:
34:35:4f:6f:10:3b:00:ff:e0:43:fa:aa:6f:d0:e5:01:12:d4:
ec:a8:a9:41:d2:b0:7e:2a:fd:e3:1a:44:07:8c:f3:de:bb:c0:
3b:4d:bd:f5:64:bc:1e:92:f8:6b:a5:2e:43:f0:e7:4f:28:15:
f3:91:40:5a:32:4d:91:fa:8c:de:8d:76:bb:87:e8:fb:fa:3f:
94:c2:27:f6:28:f8:16:0a:b3:eb:ef:7d:04:3c:f9:a6:11:e1:
d5:5c:7b:98:da:3e:f8:0c:d8:9e:1f:47:27:aa:5c:a6:d8:1c:
c1:37:3b:ef
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBJCHpjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDQx
MTEyNTUwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTYzMGRiYTEwZTJl
MDkxNWEzNGNmMGZmNDY3OWVjNDcyMGZhMTM4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAZhEpxxPr/STagLKMAVeSIefz1jgECu2if8fVmWWFQY7v3
ayrExlcUTOt98dbUl6kFM8WfO+VKHLeeiWjYcHmb4Fsjcsc9lZ9Ol/XsmHMtbVZg
5gQj00QiBz1T8Qq0D96xDK94jtSIPoMN2rInVZX0XuDm0k16lVTdYp5DxBxXbnuB
7quQckgwTtewmrv93zro9A7UUceaLjSqosWkJ46mFLjBlo2uBXNR+Op9EBOJlpSA
N/1orfrjRndonkboIkWKfnwuSkEdsquojeWF3AOKuOpB4UVjNz4PxR5A/HdmEhpH
1Ki9NZvwP4F842tp6gTMKNXJQ0ywCVa9HIm93mECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSWMNuhDi4JFaNM8P9GeexHIPoTiTAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
L2xqRGJvUTR1Q1JXalRQRF9Sbm5zUnlENkU0ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnUljANBgkqhkiG9w0BAQsFAAOC
AQEAItTmAcacVdVq8REo+fK0UZ8WShr8rW60T1CoD/HO3of5pV1b5xRVjQw3Q1pm
8nN7ZFEwqm5D8HsQSWBEgL1LRy6u+A9EYSyheHn4axrUPfPzFM4FmoyNd4xQHDBX
DOTtoVKMzRD2eLNfXoGtra5mAJ9HErQjUOuIwlXEuoVHQt0RhxJkk1Bq6Tv2bxJI
MTvHNDVPbxA7AP/gQ/qqb9DlARLU7KipQdKwfir94xpEB4zz3rvAO0299WS8HpL4
a6UuQ/DnTygV85FAWjJNkfqM3o12u4fo+/o/lMIn9ij4Fgqz6+99BDz5phHh1Vx7
mNo++AzYnh9HJ6pcptgcwTc77w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org