Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vT4R-FUnErbjAMFfUx9XhCWZME8.roa
File: vT4R-FUnErbjAMFfUx9XhCWZME8.roa (raw, json)
Hash identifier: 4c/KjgIyKWPVzK0uY+ZNhhKAsgGdwj5RyO0HhCq19To=
Subject key identifier: BD:3E:11:F8:55:27:12:B6:E3:00:C1:5F:53:1F:57:84:25:99:30:4F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 033762FE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vT4R-FUnErbjAMFfUx9XhCWZME8.roa
Signing time: Sat 01 Jan 2022 16:04:31 +0000
ROA not before: Sat 01 Jan 2022 16:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204173
IP address blocks: 185.106.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53961470 (0x33762fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd3e11f8552712b6e300c15f531f57842599304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:46:ce:b5:95:d6:c2:c4:c4:41:24:2f:09:
13:55:19:fe:37:2f:c0:b5:66:75:76:de:df:3c:59:
07:5f:21:c1:a8:6c:4f:d4:d5:02:9a:a9:53:35:40:
ff:e5:80:de:c7:de:a9:1b:ef:75:d4:71:09:68:49:
3f:cc:97:74:c3:d5:93:da:ca:a5:2d:16:cb:7c:d3:
7a:75:c9:d3:99:13:89:10:51:04:e6:3f:b3:eb:4d:
36:c5:03:8f:7e:37:de:fd:d4:62:de:f9:ab:73:77:
00:40:39:69:45:df:4d:d9:f0:d1:41:fc:5b:88:db:
47:db:b8:35:42:8d:aa:f9:c8:d8:06:fd:5a:38:88:
1a:ff:56:09:37:c8:d0:cf:bb:05:e5:fe:08:43:7d:
23:ac:6b:67:88:20:3b:f2:aa:55:19:80:86:60:7a:
50:b1:bf:84:cf:2a:0f:6c:cd:c3:eb:a5:5e:d3:d3:
07:5a:0a:29:ed:59:b8:aa:f2:9b:bb:bf:13:2e:8c:
b4:df:4a:98:4b:41:84:c4:6a:9e:ef:44:b5:4e:9f:
a0:0e:e7:7c:c2:5c:e5:c9:0b:cf:d8:6e:3d:c2:b0:
b3:d3:0d:a2:97:44:c4:34:25:b9:3a:09:57:0a:aa:
c1:92:ea:1b:f4:92:2f:2e:8b:64:47:9b:76:22:6c:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:11:F8:55:27:12:B6:E3:00:C1:5F:53:1F:57:84:25:99:30:4F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vT4R-FUnErbjAMFfUx9XhCWZME8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:db:dd:13:d9:da:c0:ab:07:12:89:31:69:f8:50:b4:f4:bb:
0d:7c:47:ab:3c:19:95:c3:7a:11:5f:5f:96:0e:c4:a8:d9:18:
0e:9f:c4:36:b3:52:eb:57:d9:0c:1e:71:5a:b7:c6:14:eb:a7:
b6:ba:1a:f6:7f:c2:d4:54:5c:22:17:9b:5f:fb:4d:50:f6:93:
da:9b:ef:c6:21:22:42:ca:b1:66:3d:f0:1f:0e:f0:6c:fd:d9:
e5:46:b2:13:6d:bd:9c:e5:e2:2e:b2:dc:00:91:d9:2d:de:71:
31:c0:20:9e:bd:10:f5:18:51:47:fd:1d:4c:2e:a2:b2:71:4c:
bd:4a:1a:b3:9d:00:2d:f9:0f:2b:7d:8a:f1:33:23:ba:ef:c2:
d4:b2:9f:65:7a:77:23:dc:af:73:6c:6f:7d:6d:6c:45:a8:5e:
b6:65:95:08:3d:6a:d3:e8:cc:7d:7d:f0:60:ea:d3:6b:a4:34:
b8:60:76:9d:6d:54:91:24:9e:55:2c:9e:f7:7d:a2:e8:6b:64:
56:3e:35:a9:7e:a2:cc:88:5f:9f:7b:2e:54:da:5b:08:de:43:
67:72:49:10:cc:56:48:81:5b:9a:03:3c:39:a4:7a:3b:fb:30:
61:6d:0c:a5:86:13:f1:2c:3b:62:ce:20:76:5d:25:52:7a:e3:
e2:2a:8c:49
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAzdi/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDEw
MTE2MDQzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQzZTExZjg1NTI3
MTJiNmUzMDBjMTVmNTMxZjU3ODQyNTk5MzA0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmORs61ldbCxMRBJC8JE1UZ/jcvwLVmdXbe3zxZB18hwahs
T9TVApqpUzVA/+WA3sfeqRvvddRxCWhJP8yXdMPVk9rKpS0Wy3zTenXJ05kTiRBR
BOY/s+tNNsUDj3433v3UYt75q3N3AEA5aUXfTdnw0UH8W4jbR9u4NUKNqvnI2Ab9
WjiIGv9WCTfI0M+7BeX+CEN9I6xrZ4ggO/KqVRmAhmB6ULG/hM8qD2zNw+ulXtPT
B1oKKe1ZuKrym7u/Ey6MtN9KmEtBhMRqnu9EtU6foA7nfMJc5ckLz9huPcKws9MN
opdExDQluToJVwqqwZLqG/SSLy6LZEebdiJsh3ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS9PhH4VScStuMAwV9TH1eEJZkwTzAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
L3ZUNFItRlVuRXJiakFNRmZVeDlYaENXWk1FOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlqajANBgkqhkiG9w0BAQsFAAOC
AQEAHtvdE9nawKsHEokxafhQtPS7DXxHqzwZlcN6EV9flg7EqNkYDp/ENrNS61fZ
DB5xWrfGFOuntroa9n/C1FRcIhebX/tNUPaT2pvvxiEiQsqxZj3wHw7wbP3Z5Uay
E229nOXiLrLcAJHZLd5xMcAgnr0Q9RhRR/0dTC6isnFMvUoas50ALfkPK32K8TMj
uu/C1LKfZXp3I9yvc2xvfW1sRahetmWVCD1q0+jMfX3wYOrTa6Q0uGB2nW1UkSSe
VSye932i6GtkVj41qX6izIhfn3suVNpbCN5DZ3JJEMxWSIFbmgM8OaR6O/swYW0M
pYYT8Sw7Ys4gdl0lUnrj4iqMSQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org