Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2WMb0-DBGLT3poGuhQq_BGWDQQg.roa
File: 2WMb0-DBGLT3poGuhQq_BGWDQQg.roa (raw, json)
Hash identifier: wzAuM3wJ4YTBO+Boulr7Ry5OIE4Ib4G+uednk/0QsN4=
Subject key identifier: D9:63:1B:D3:E0:C1:18:B4:F7:A6:81:AE:85:0A:BF:04:65:83:41:08
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A88C3EE
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2WMb0-DBGLT3poGuhQq_BGWDQQg.roa
Signing time: Sat 01 Jan 2022 16:07:16 +0000
ROA not before: Sat 01 Jan 2022 16:07:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199173
IP address blocks: 85.187.218.0/23 maxlen: 23
85.187.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176735214 (0xa88c3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9631bd3e0c118b4f7a681ae850abf0465834108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:88:31:c0:aa:b1:b2:01:e0:43:f5:a5:29:
f8:3f:ee:55:89:b3:4a:a5:e3:a4:e4:7e:b8:a7:a1:
db:16:97:52:b3:3a:7b:ca:2c:6f:43:47:cc:cf:06:
86:c3:cd:1a:03:84:31:07:7e:00:fc:80:ae:56:a4:
c5:fb:7a:ef:96:dd:d8:e0:bf:eb:cd:2f:f9:5f:4b:
69:9c:4e:c0:7e:d5:a9:72:67:41:9d:72:22:8d:f2:
c1:05:32:83:ca:b9:ab:4e:43:0b:04:0a:e4:02:df:
dd:6d:2e:15:e2:e3:b3:bb:3b:b0:8b:22:a6:72:5e:
48:dd:d6:d5:ef:fc:32:49:6c:46:b8:5b:15:53:1f:
83:03:d6:64:5f:a8:22:7e:69:f7:84:ca:67:96:a3:
e9:91:d5:b7:e4:28:2f:41:44:9e:da:db:cd:87:9b:
76:06:97:6c:30:08:cf:25:d8:d6:7e:fa:18:b0:6f:
d1:49:b4:1b:f6:32:fa:8b:e2:95:dc:fb:92:e3:b3:
76:09:fa:75:b1:8e:61:36:aa:73:58:c2:12:03:db:
79:62:fc:d1:57:71:d9:d1:db:37:bd:90:47:81:e7:
dc:d4:dd:c5:56:94:96:2d:54:c0:ee:b5:00:14:e1:
1d:61:99:eb:0b:a3:1e:43:27:ec:7a:df:2c:60:a5:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:63:1B:D3:E0:C1:18:B4:F7:A6:81:AE:85:0A:BF:04:65:83:41:08
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2WMb0-DBGLT3poGuhQq_BGWDQQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.218.0/23
85.187.224.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:0b:d6:15:3d:75:ac:c3:5b:92:62:3b:53:34:91:80:2b:94:
b9:85:0d:45:aa:23:98:d7:90:f3:d4:52:5c:e1:a8:3f:8b:62:
73:c8:39:f7:bb:13:64:b0:fd:a2:35:bb:82:e5:d1:42:55:e1:
07:d5:a1:8d:14:67:70:31:cf:cf:6d:e5:31:51:44:38:d5:fc:
51:1e:db:ba:d7:bb:d6:07:b2:b1:d8:b8:a3:a8:b7:78:6a:3e:
dc:e1:ad:1d:a8:65:34:2b:3d:b3:5b:ab:04:24:eb:1a:51:e2:
8e:18:9b:3a:e5:a5:78:3a:9f:24:dc:0f:6c:52:5a:37:f6:99:
3c:ea:6c:72:6f:80:67:68:91:fc:b0:07:f1:73:ce:fd:ca:25:
34:a3:55:b0:0a:d7:8e:b6:84:1c:e9:61:84:58:a4:a5:27:f4:
51:4a:f9:88:22:99:5f:b2:85:ff:0e:c8:38:9f:8e:59:90:ec:
b0:06:88:c7:6e:d1:9e:d1:78:f6:d2:2b:90:2c:b4:64:b3:d4:
d4:57:59:cd:1b:8b:e1:5e:d5:e2:d3:92:54:bc:e5:7d:63:12:
1f:39:f7:8f:37:2a:55:b8:bb:46:be:1d:fd:03:2d:a9:33:ef:
6a:e2:2b:4e:9e:fd:09:4d:12:63:10:93:66:a7:a3:f5:a8:f6:
ec:8a:02:9b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECojD7jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWJmMzAyMDFmMTJhMDQwZDM4NmQyYjRlZWQ0NDg0NjIzZTRkMTFiMB4XDTIyMDEw
MTE2MDcxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk2MzFiZDNlMGMx
MThiNGY3YTY4MWFlODUwYWJmMDQ2NTgzNDEwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOV7iDHAqrGyAeBD9aUp+D/uVYmzSqXjpOR+uKeh2xaXUrM6
e8osb0NHzM8GhsPNGgOEMQd+APyArlakxft675bd2OC/680v+V9LaZxOwH7VqXJn
QZ1yIo3ywQUyg8q5q05DCwQK5ALf3W0uFeLjs7s7sIsipnJeSN3W1e/8MklsRrhb
FVMfgwPWZF+oIn5p94TKZ5aj6ZHVt+QoL0FEntrbzYebdgaXbDAIzyXY1n76GLBv
0Um0G/Yy+ovildz7kuOzdgn6dbGOYTaqc1jCEgPbeWL80Vdx2dHbN72QR4Hn3NTd
xVaUli1UwO61ABThHWGZ6wujHkMn7HrfLGCl328CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTZYxvT4MEYtPemga6FCr8EZYNBCDAfBgNVHSMEGDAWgBT+vzAgHxKgQNOG
0rTu1EhGI+TRGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8x
LzJXTWIwLURCR0xUM3BvR3VoUXFfQkdXRFFRZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8xL19yOHdJQjhTb0VE
VGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVW72gMEA1W74DANBgkqhkiG9w0B
AQsFAAOCAQEASgvWFT11rMNbkmI7UzSRgCuUuYUNRaojmNeQ89RSXOGoP4tic8g5
97sTZLD9ojW7guXRQlXhB9WhjRRncDHPz23lMVFEONX8UR7bute71geysdi4o6i3
eGo+3OGtHahlNCs9s1urBCTrGlHijhibOuWleDqfJNwPbFJaN/aZPOpscm+AZ2iR
/LAH8XPO/colNKNVsArXjraEHOlhhFikpSf0UUr5iCKZX7KF/w7IOJ+OWZDssAaI
x27RntF49tIrkCy0ZLPU1FdZzRuL4V7V4tOSVLzlfWMSHzn3jzcqVbi7Rr4d/QMt
qTPvauIrTp79CU0SYxCTZqej9aj27IoCmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org