Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0TQqtdvo_K1sO7SGIeFUEqea13k.roa
File: 0TQqtdvo_K1sO7SGIeFUEqea13k.roa (raw, json)
Hash identifier: T1ALd1bjLNKl6lf/iaF2QXut03MyrJ9J0iezKzWW9J4=
Subject key identifier: D1:34:2A:B5:DB:E8:FC:AD:6C:3B:B4:86:21:E1:54:12:A7:9A:D7:79
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A786BC6
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0TQqtdvo_K1sO7SGIeFUEqea13k.roa
Signing time: Sat 01 Jan 2022 16:07:07 +0000
ROA not before: Sat 01 Jan 2022 16:07:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44901
IP address blocks: 85.187.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175664070 (0xa786bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1342ab5dbe8fcad6c3bb48621e15412a79ad779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:98:f8:eb:a7:86:bc:12:48:84:fc:3e:1a:
7f:98:56:64:f0:b2:5b:f4:d8:55:55:6e:99:af:28:
a5:1a:f8:96:98:bf:b1:c1:a2:b2:96:e4:10:1b:21:
72:c1:71:d3:c4:f5:f8:cb:8c:c0:19:d1:53:de:a1:
9d:ca:64:86:34:c0:9c:3d:0a:d8:3f:ad:03:39:aa:
4a:97:13:a1:e9:34:77:46:83:c1:3c:ea:dd:e9:f6:
63:77:db:be:ee:c5:fb:4d:85:42:f6:6c:5c:28:85:
12:31:4a:6c:5c:4a:d4:11:19:b5:a1:0e:26:e6:80:
1e:fc:33:01:56:9a:16:a0:29:8a:b3:ff:c5:5b:b7:
c6:88:3f:b6:34:d8:b6:59:d3:66:53:af:fe:b6:9b:
0d:7b:bf:18:94:d0:df:00:cc:36:b2:5e:bc:32:8a:
a5:a8:72:b7:6c:eb:72:82:04:42:b5:d6:a0:78:25:
69:e0:6e:b1:7b:de:c0:b4:cb:4c:e5:57:c0:b0:f3:
a1:76:e9:24:3c:74:d6:f7:45:71:76:77:66:ad:11:
11:1b:ba:01:b9:46:e5:ae:58:1d:55:09:84:d4:b5:
21:7c:74:10:07:58:18:7a:43:46:30:64:32:d6:e8:
7d:57:0a:e3:17:f1:29:dc:a2:91:54:9c:e4:73:90:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:2A:B5:DB:E8:FC:AD:6C:3B:B4:86:21:E1:54:12:A7:9A:D7:79
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0TQqtdvo_K1sO7SGIeFUEqea13k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
db:83:e7:a2:c6:7e:17:4c:49:39:0a:7d:7b:5d:56:6c:9f:4d:
e9:64:86:5a:4b:0e:94:e9:2a:f1:b2:c1:9b:14:ea:d2:ef:42:
13:ed:57:5a:52:5e:41:6b:8f:44:b9:91:62:d0:69:93:86:f4:
7f:77:bb:21:f2:1f:81:f1:c1:cd:17:b9:d7:28:8e:d8:90:f8:
ff:1a:b0:83:5e:20:b4:b2:69:8c:dd:57:e6:6f:52:04:36:74:
f0:26:e1:a1:25:77:0e:4c:fe:66:e9:c4:6d:06:41:45:7f:0b:
a1:eb:4e:95:53:02:e2:27:41:f9:0d:2f:9a:ab:47:54:e4:fd:
f3:08:73:0c:c2:3c:98:4d:ec:05:72:f2:2d:9f:67:04:85:80:
c0:9c:7d:66:46:4f:cf:c6:66:79:b1:22:ec:65:a3:0c:e6:3b:
71:65:cc:b5:60:46:06:6a:80:8c:e0:1f:38:cc:d0:c1:56:ad:
8c:fd:ef:02:a8:bc:3a:a2:25:2d:d4:41:ac:3d:e0:bd:6b:2d:
b5:43:ce:aa:ef:56:03:a8:b5:25:29:89:1b:93:f9:57:80:62:
5f:45:bc:84:f7:fc:75:1f:cb:02:a9:df:4c:e4:69:17:d0:44:
fe:90:11:2a:02:60:6f:42:6a:4d:53:1f:2a:a5:43:8d:6e:b8:
be:ba:30:de
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECnhrxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWJmMzAyMDFmMTJhMDQwZDM4NmQyYjRlZWQ0NDg0NjIzZTRkMTFiMB4XDTIyMDEw
MTE2MDcwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDEzNDJhYjVkYmU4
ZmNhZDZjM2JiNDg2MjFlMTU0MTJhNzlhZDc3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/DmPjrp4a8EkiE/D4af5hWZPCyW/TYVVVuma8opRr4lpi/
scGispbkEBshcsFx08T1+MuMwBnRU96hncpkhjTAnD0K2D+tAzmqSpcToek0d0aD
wTzq3en2Y3fbvu7F+02FQvZsXCiFEjFKbFxK1BEZtaEOJuaAHvwzAVaaFqApirP/
xVu3xog/tjTYtlnTZlOv/rabDXu/GJTQ3wDMNrJevDKKpahyt2zrcoIEQrXWoHgl
aeBusXvewLTLTOVXwLDzoXbpJDx01vdFcXZ3Zq0RERu6AblG5a5YHVUJhNS1IXx0
EAdYGHpDRjBkMtbofVcK4xfxKdyikVSc5HOQ0vMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTRNCq12+j8rWw7tIYh4VQSp5rXeTAfBgNVHSMEGDAWgBT+vzAgHxKgQNOG
0rTu1EhGI+TRGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8x
LzBUUXF0ZHZvX0sxc083U0dJZUZVRXFlYTEzay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8xL19yOHdJQjhTb0VE
VGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFW7EDANBgkqhkiG9w0BAQsFAAOC
AQEA24PnosZ+F0xJOQp9e11WbJ9N6WSGWksOlOkq8bLBmxTq0u9CE+1XWlJeQWuP
RLmRYtBpk4b0f3e7IfIfgfHBzRe51yiO2JD4/xqwg14gtLJpjN1X5m9SBDZ08Cbh
oSV3Dkz+ZunEbQZBRX8LoetOlVMC4idB+Q0vmqtHVOT98whzDMI8mE3sBXLyLZ9n
BIWAwJx9ZkZPz8ZmebEi7GWjDOY7cWXMtWBGBmqAjOAfOMzQwVatjP3vAqi8OqIl
LdRBrD3gvWsttUPOqu9WA6i1JSmJG5P5V4BiX0W8hPf8dR/LAqnfTORpF9BE/pAR
KgJgb0JqTVMfKqVDjW64vrow3g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org