Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/mvShvdgGVtpBBiuVWB3lELjlpc0.roa
File: mvShvdgGVtpBBiuVWB3lELjlpc0.roa (raw, json)
Hash identifier: v/s7fDR7N/TZYAY5G/xsfNs/Aezy6l9EB0rTcU5rN+k=
Subject key identifier: 9A:F4:A1:BD:D8:06:56:DA:41:06:2B:95:58:1D:E5:10:B8:E5:A5:CD
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01853051D086B0DF52BC687A809E1724ABF7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/mvShvdgGVtpBBiuVWB3lELjlpc0.roa
Signing time: Tue 20 Dec 2022 16:15:46 +0000
ROA not before: Tue 20 Dec 2022 16:15:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212400
IP address blocks: 185.179.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:51:d0:86:b0:df:52:bc:68:7a:80:9e:17:24:ab:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 16:15:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9af4a1bdd80656da41062b95581de510b8e5a5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:b8:7f:5c:c8:fb:f5:eb:13:15:56:8e:2f:
77:7c:6e:88:a6:47:fd:67:38:b4:2a:c8:7f:c8:cb:
73:d3:90:16:3d:c2:61:ea:6c:4e:1b:83:e0:0d:03:
3b:b3:79:cd:46:3f:14:3a:3e:99:b2:56:d7:1b:06:
af:8e:4b:f0:f4:8b:33:10:de:52:87:8a:54:23:1f:
22:f8:b2:88:4b:d9:49:98:a9:f3:8d:05:e1:17:c2:
90:e2:e1:c2:4d:58:62:8f:dc:ae:bc:b4:b9:1a:5e:
82:15:c5:70:cf:23:be:21:2c:b8:01:be:ad:7c:4a:
ea:46:2c:50:ec:6f:cd:cb:64:db:05:75:4e:36:fb:
ea:49:02:aa:34:4d:1c:3c:7a:a8:f0:3b:f5:1c:03:
c8:ff:33:8a:88:90:df:1d:d8:53:d9:5a:40:11:bc:
b5:73:a8:ba:ed:3a:0e:b9:7f:b7:3b:cd:fa:22:54:
c8:6a:61:e5:be:43:95:5f:9c:fa:d8:a6:49:a4:db:
73:c1:1e:d8:b4:02:b2:dc:34:26:b1:c6:9c:34:92:
54:24:f9:de:b7:d1:58:c7:b9:c4:34:af:78:56:da:
11:11:35:e5:ec:dd:04:f7:7c:e7:de:0b:84:cc:66:
c9:dd:fc:d6:52:dd:47:72:67:89:6e:70:72:27:de:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F4:A1:BD:D8:06:56:DA:41:06:2B:95:58:1D:E5:10:B8:E5:A5:CD
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/mvShvdgGVtpBBiuVWB3lELjlpc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.247.0/24
Signature Algorithm: sha256WithRSAEncryption
55:25:56:93:46:c0:6b:e4:af:d0:3f:77:7d:60:a8:df:40:e9:
9f:b7:e5:48:6d:71:26:13:8d:f4:7a:ee:42:a5:22:fa:10:5d:
d6:69:a5:0d:a0:c6:90:a9:d0:08:b8:c6:8f:55:76:9a:f2:6f:
53:67:40:49:18:54:04:25:66:5d:fc:50:4f:c4:3a:89:d6:1f:
71:0d:5f:3f:9c:c5:2f:52:78:1a:5d:79:92:97:26:2c:a7:7e:
d4:4f:a6:b8:25:e0:1b:a9:c5:10:f4:95:65:30:3c:40:d0:f8:
2b:66:8c:68:28:db:06:9f:59:a0:f5:6b:f9:9b:8d:d3:42:75:
42:34:3e:b0:2d:dc:5c:92:57:a2:1c:2a:79:5c:fb:e1:a4:75:
98:7b:50:ce:e7:47:52:a9:48:88:d7:32:84:c2:9c:c7:06:cc:
4a:f9:88:27:47:d1:d4:c1:ec:50:09:6e:a4:32:95:51:0e:e3:
ee:66:57:6b:69:21:31:b3:9d:4e:01:d8:ba:3a:f3:01:89:7a:
d2:b9:10:cf:36:7c:ef:8f:0e:a9:8c:35:fe:c7:0a:8f:b1:27:
2f:30:e7:b2:fb:59:46:e0:ca:5d:1b:48:33:df:40:df:61:c5:
dd:a5:6d:e3:e5:80:55:ee:e4:4f:b1:5b:a7:60:fa:6c:85:5c:
19:0c:24:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUwUdCGsN9SvGh6gJ4XJKv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIwMTYxNTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWY0YTFiZGQ4MDY1NmRhNDEwNjJiOTU1ODFkZTUxMGI4ZTVhNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLy4f1zI+/XrExVWji93fG6Ipkf9
Zzi0Ksh/yMtz05AWPcJh6mxOG4PgDQM7s3nNRj8UOj6ZslbXGwavjkvw9IszEN5S
h4pUIx8i+LKIS9lJmKnzjQXhF8KQ4uHCTVhij9yuvLS5Gl6CFcVwzyO+ISy4Ab6t
fErqRixQ7G/Ny2TbBXVONvvqSQKqNE0cPHqo8Dv1HAPI/zOKiJDfHdhT2VpAEby1
c6i67ToOuX+3O836IlTIamHlvkOVX5z62KZJpNtzwR7YtAKy3DQmscacNJJUJPne
t9FYx7nENK94VtoRETXl7N0E93zn3guEzGbJ3fzWUt1HcmeJbnByJ95jgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJr0ob3YBlbaQQYrlVgd5RC45aXNMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvbXZTaHZkZ0dWdHBCQml1VldCM2xFTGpscGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubP3MA0G
CSqGSIb3DQEBCwUAA4IBAQBVJVaTRsBr5K/QP3d9YKjfQOmft+VIbXEmE430eu5C
pSL6EF3WaaUNoMaQqdAIuMaPVXaa8m9TZ0BJGFQEJWZd/FBPxDqJ1h9xDV8/nMUv
UngaXXmSlyYsp37UT6a4JeAbqcUQ9JVlMDxA0PgrZoxoKNsGn1mg9Wv5m43TQnVC
ND6wLdxckleiHCp5XPvhpHWYe1DO50dSqUiI1zKEwpzHBsxK+YgnR9HUwexQCW6k
MpVRDuPuZldraSExs51OAdi6OvMBiXrSuRDPNnzvjw6pjDX+xwqPsScvMOey+1lG
4MpdG0gz30DfYcXdpW3j5YBV7uRPsVunYPpshVwZDCQV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org