Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/qJZ6axjl1RVx_Iyy-9lByU7FeZI.roa
File: qJZ6axjl1RVx_Iyy-9lByU7FeZI.roa (raw, json)
Hash identifier: ijR4lwZtdzdDHAg5h/6xcfStr6hGH19+eZwOub68Dyc=
Subject key identifier: A8:96:7A:6B:18:E5:D5:15:71:FC:8C:B2:FB:D9:41:C9:4E:C5:79:92
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01853051D01F895A634FBD3A176CD48A397C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/qJZ6axjl1RVx_Iyy-9lByU7FeZI.roa
Signing time: Tue 20 Dec 2022 16:15:46 +0000
ROA not before: Tue 20 Dec 2022 16:15:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200847
IP address blocks: 185.179.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:51:d0:1f:89:5a:63:4f:bd:3a:17:6c:d4:8a:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 16:15:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8967a6b18e5d51571fc8cb2fbd941c94ec57992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:ea:30:e5:e5:77:0e:bf:76:d3:0d:3e:0a:
3f:d9:ac:ca:db:fe:ec:01:17:0c:9e:79:de:75:a8:
9e:4e:29:86:a1:b6:85:9a:47:5b:08:90:02:51:f1:
1c:c3:28:1e:5e:c3:95:bc:c3:55:2d:b1:97:05:a1:
bf:f9:a4:24:5a:83:31:bb:9e:00:15:90:5d:28:6e:
eb:5d:ea:b3:16:c3:18:76:de:02:0a:47:de:df:6b:
60:34:cc:65:7e:aa:ea:da:0f:a5:30:b0:90:ec:cb:
fc:ec:34:fb:6f:22:3b:3d:61:37:9b:df:58:50:3f:
29:95:5b:87:49:66:37:1f:b0:13:57:3b:d5:fc:6a:
4b:19:f4:0b:a2:a8:08:84:05:d0:ea:d3:b6:87:13:
5c:57:d6:6e:3a:08:c5:d5:53:d5:43:6d:28:41:5c:
16:48:8d:37:b1:78:59:3c:1b:20:1c:8e:cc:b7:28:
de:fa:e6:ff:ff:4f:04:2e:7d:85:b4:29:b4:69:e9:
4f:12:ea:0d:51:64:f7:00:6a:d6:55:ea:fa:21:a7:
05:15:55:6d:db:ab:fa:35:1e:83:80:f6:2f:76:26:
ab:11:ae:93:e8:99:8f:5f:0c:f9:e5:a3:ef:b0:f1:
08:31:17:71:cd:1a:44:e3:ac:01:25:c8:c5:2e:7f:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:7A:6B:18:E5:D5:15:71:FC:8C:B2:FB:D9:41:C9:4E:C5:79:92
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/qJZ6axjl1RVx_Iyy-9lByU7FeZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.247.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b6:be:f4:26:e0:27:3a:0e:b1:37:57:01:ce:1e:01:a4:1e:
02:2f:85:fb:81:8a:78:66:bd:54:d6:de:ef:ab:20:9a:f6:80:
62:a3:97:5d:7e:6f:b8:07:be:bb:36:72:c5:72:41:46:31:db:
e7:e7:86:02:00:9d:60:4e:ea:f4:c1:71:fa:fa:d3:e5:53:46:
be:b1:0c:58:22:51:f8:c3:ac:10:ef:5c:70:94:81:a2:0c:2d:
ec:ee:7f:b5:03:16:17:6d:50:ac:ce:b2:58:17:b4:5f:4f:e1:
1d:14:21:c0:e4:da:5e:fc:87:02:19:b3:50:c1:ac:83:ad:ea:
98:d2:dd:82:18:60:d1:5a:6a:50:5f:9c:44:53:f5:bc:5f:a0:
65:f9:75:c4:a8:8f:ea:c1:8d:a2:6d:ca:ef:07:cd:3d:ca:38:
c7:af:fe:bf:09:92:75:c6:b5:04:a1:c0:9e:d3:a5:ea:42:e8:
22:2b:ad:2f:a6:ef:b2:5d:98:ac:a0:5c:98:e2:66:c1:74:58:
1a:14:db:0f:c6:aa:42:2d:ae:37:b2:7b:95:9a:41:b8:1d:48:
3d:11:b9:49:43:69:c8:46:d5:59:f7:d2:4a:4a:72:e2:6a:3f:
00:4a:cf:b4:fc:fb:13:77:19:15:d5:fe:5c:f9:14:ba:98:fe:
ba:d1:df:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUwUdAfiVpjT706F2zUijl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIwMTYxNTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODk2N2E2YjE4ZTVkNTE1NzFmYzhjYjJmYmQ5NDFjOTRlYzU3OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qzqMOXldw6/dtMNPgo/2azK2/7s
ARcMnnnedaieTimGobaFmkdbCJACUfEcwygeXsOVvMNVLbGXBaG/+aQkWoMxu54A
FZBdKG7rXeqzFsMYdt4CCkfe32tgNMxlfqrq2g+lMLCQ7Mv87DT7byI7PWE3m99Y
UD8plVuHSWY3H7ATVzvV/GpLGfQLoqgIhAXQ6tO2hxNcV9ZuOgjF1VPVQ20oQVwW
SI03sXhZPBsgHI7Mtyje+ub//08ELn2FtCm0aelPEuoNUWT3AGrWVer6IacFFVVt
26v6NR6DgPYvdiarEa6T6JmPXwz55aPvsPEIMRdxzRpE46wBJcjFLn+37wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiWemsY5dUVcfyMsvvZQclOxXmSMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvcUpaNmF4amwxUlZ4X0l5eS05bEJ5VTdGZVpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubP3MA0G
CSqGSIb3DQEBCwUAA4IBAQCWtr70JuAnOg6xN1cBzh4BpB4CL4X7gYp4Zr1U1t7v
qyCa9oBio5ddfm+4B767NnLFckFGMdvn54YCAJ1gTur0wXH6+tPlU0a+sQxYIlH4
w6wQ71xwlIGiDC3s7n+1AxYXbVCszrJYF7RfT+EdFCHA5Npe/IcCGbNQwayDreqY
0t2CGGDRWmpQX5xEU/W8X6Bl+XXEqI/qwY2ibcrvB809yjjHr/6/CZJ1xrUEocCe
06XqQugiK60vpu+yXZisoFyY4mbBdFgaFNsPxqpCLa43snuVmkG4HUg9EblJQ2nI
RtVZ99JKSnLiaj8ASs+0/PsTdxkV1f5c+RS6mP660d82
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org