Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/EddCDsPFCUXUL1UipcT0UxQ5bxE.roa
File: EddCDsPFCUXUL1UipcT0UxQ5bxE.roa (raw, json)
Hash identifier: FMD3UkVnqPo38a7sI0kLVPowvK2PQkN8RZgs8ADUtZo=
Subject key identifier: 11:D7:42:0E:C3:C5:09:45:D4:2F:55:22:A5:C4:F4:53:14:39:6F:11
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: B9280E
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/EddCDsPFCUXUL1UipcT0UxQ5bxE.roa
Signing time: Sat 01 Jan 2022 06:52:27 +0000
ROA not before: Sat 01 Jan 2022 06:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210655
IP address blocks: 185.130.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12134414 (0xb9280e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Jan 1 06:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11d7420ec3c50945d42f5522a5c4f45314396f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:d9:b4:93:db:d1:ae:3a:0c:55:20:e9:34:
8d:71:0d:48:bf:5b:3f:d9:34:c1:54:7e:53:ce:4a:
6e:36:41:0c:cb:f9:3a:fb:66:95:1a:f4:88:d1:bb:
2e:c3:ae:bc:90:0e:7d:9f:70:0b:ef:50:e2:bd:e7:
ea:d9:76:92:93:bd:ea:f7:89:f3:7b:18:bb:04:7d:
5a:ce:e4:07:a4:ea:3a:9c:46:7c:1e:29:a9:60:f3:
03:82:ca:07:ff:62:30:ae:17:81:8b:1c:35:63:9d:
44:eb:23:63:20:16:59:58:10:03:da:8e:36:45:68:
c3:2f:86:5c:70:ae:d9:88:20:d6:14:09:40:00:0c:
fb:f7:5c:f2:0e:84:10:6f:65:79:84:e8:c4:25:be:
c2:eb:3d:e4:2c:c5:1e:0b:82:cd:9b:51:54:4d:e2:
ae:7a:a2:1c:bc:5b:96:4b:f0:a8:e1:09:c2:16:30:
35:19:93:31:25:da:a2:ee:c3:39:c7:f4:21:e3:25:
18:a4:ed:b6:5a:69:27:f0:01:4d:60:fb:6d:42:83:
84:77:2a:0f:77:cf:93:40:04:96:6a:a6:fc:a5:06:
99:98:b3:5e:1a:c7:2b:0f:df:b9:f9:67:25:66:97:
06:d7:da:f8:05:dd:a6:98:71:1a:30:50:c6:17:26:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:42:0E:C3:C5:09:45:D4:2F:55:22:A5:C4:F4:53:14:39:6F:11
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/EddCDsPFCUXUL1UipcT0UxQ5bxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.90.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8c:09:06:89:15:a6:55:12:ba:69:ea:b3:f0:12:1c:15:d9:
8e:ed:80:65:19:94:ed:50:c9:a0:e5:cb:52:52:89:d4:0f:17:
94:c0:a9:fa:d7:e2:09:22:dc:f5:28:29:ac:ed:ef:13:6a:17:
1e:ec:6c:b6:aa:4a:97:57:52:2b:98:55:1b:3f:73:f6:7f:b6:
75:84:31:5e:59:2c:ee:e0:a6:1d:66:52:fa:76:2c:0e:b7:11:
b3:54:41:bb:4f:91:07:0e:5a:78:b4:5a:ba:17:6a:c6:a7:b0:
06:7a:c9:a0:82:fc:d6:78:22:58:97:8f:3e:30:fa:cd:f1:3f:
d9:38:a8:2f:bb:83:e8:9c:94:83:5b:fe:5c:25:67:d6:ab:00:
0e:cf:c6:aa:b2:78:af:1d:20:a3:57:06:4a:be:01:89:61:82:
72:ec:dc:5f:ad:89:ff:52:7c:81:4a:d7:9a:8a:5f:18:96:e8:
13:11:f1:56:a2:c8:cf:ba:5c:8a:4b:dd:e9:35:2f:8b:f6:b2:
5c:75:05:1e:9f:ac:ab:fe:73:f2:1d:67:b2:86:dc:f6:3a:7d:
a9:db:f8:cc:68:88:39:90:60:c3:73:25:c2:a7:09:e1:ca:76:
96:17:dc:48:bb:19:53:57:96:e6:d5:35:c0:df:83:b3:8d:40:
42:58:62:0d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALkoDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjFmMTIzYjViYTRiYzFiNzc5M2I5ZTlmYTFiNDNkYWM0OWE2NjBhMB4XDTIyMDEw
MTA2NTIyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFkNzQyMGVjM2M1
MDk0NWQ0MmY1NTIyYTVjNGY0NTMxNDM5NmYxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALr02bST29GuOgxVIOk0jXENSL9bP9k0wVR+U85KbjZBDMv5
OvtmlRr0iNG7LsOuvJAOfZ9wC+9Q4r3n6tl2kpO96veJ83sYuwR9Ws7kB6TqOpxG
fB4pqWDzA4LKB/9iMK4XgYscNWOdROsjYyAWWVgQA9qONkVowy+GXHCu2Ygg1hQJ
QAAM+/dc8g6EEG9leYToxCW+wus95CzFHguCzZtRVE3irnqiHLxblkvwqOEJwhYw
NRmTMSXaou7DOcf0IeMlGKTttlppJ/ABTWD7bUKDhHcqD3fPk0AElmqm/KUGmZiz
XhrHKw/fuflnJWaXBtfa+AXdpphxGjBQxhcmCkkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQR10IOw8UJRdQvVSKlxPRTFDlvETAfBgNVHSMEGDAWgBSbHxI7W6S8G3eT
uen6G0PaxJpmCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L214OFNPMXVrdkJ0M2s3bnAtaHREMnNTYVpnby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvNTIzZWI4LTM2NzctNGM5Zi1iNmJkLTdjNWU3ZTMyNDUzMC8x
L0VkZENEc1BGQ1VYVUwxVWlwY1QwVXhRNWJ4RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
NTIzZWI4LTM2NzctNGM5Zi1iNmJkLTdjNWU3ZTMyNDUzMC8xL214OFNPMXVrdkJ0
M2s3bnAtaHREMnNTYVpnby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmCWjANBgkqhkiG9w0BAQsFAAOC
AQEAMIwJBokVplUSumnqs/ASHBXZju2AZRmU7VDJoOXLUlKJ1A8XlMCp+tfiCSLc
9SgprO3vE2oXHuxstqpKl1dSK5hVGz9z9n+2dYQxXlks7uCmHWZS+nYsDrcRs1RB
u0+RBw5aeLRauhdqxqewBnrJoIL81ngiWJePPjD6zfE/2TioL7uD6JyUg1v+XCVn
1qsADs/GqrJ4rx0go1cGSr4BiWGCcuzcX62J/1J8gUrXmopfGJboExHxVqLIz7pc
ikvd6TUvi/ayXHUFHp+sq/5z8h1nsobc9jp9qdv4zGiIOZBgw3MlwqcJ4cp2lhfc
SLsZU1eW5tU1wN+Ds41AQlhiDQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:52 2023 by rpki-client on console-fra.rpki-client.org