Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ezKgmYqZJEupGBdz6jQDvj5iG6Y.roa
File: ezKgmYqZJEupGBdz6jQDvj5iG6Y.roa (raw, json)
Hash identifier: DMczQDb/2gKJyU0pQ1L5dXy0KWfVpU8t9GyHsoltRr4=
Subject key identifier: 7B:32:A0:99:8A:99:24:4B:A9:18:17:73:EA:34:03:BE:3E:62:1B:A6
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0184D7689EF6EA80DC902A1AD080E9DBC73E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ezKgmYqZJEupGBdz6jQDvj5iG6Y.roa
Signing time: Sat 03 Dec 2022 09:54:28 +0000
ROA not before: Sat 03 Dec 2022 09:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400810
IP address blocks: 185.240.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:68:9e:f6:ea:80:dc:90:2a:1a:d0:80:e9:db:c7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Dec 3 09:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b32a0998a99244ba9181773ea3403be3e621ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:0b:95:98:36:68:5e:a8:7e:fc:5d:95:79:
c7:b2:8b:fa:69:16:48:f5:e4:4a:3f:92:2e:39:2f:
90:3b:06:22:bf:94:61:84:bb:c4:d4:80:25:2c:04:
a7:92:ea:e3:b0:8d:8d:b6:2e:70:dd:62:f3:13:b3:
0f:b2:ee:ed:c9:cd:93:0d:9d:ba:e1:4c:ec:35:57:
96:2c:09:fa:bf:44:df:b4:48:1a:29:ca:93:0b:c1:
16:6b:be:bd:a9:39:61:6f:bf:f4:bb:75:6b:68:5e:
60:6c:20:b1:b1:f8:0c:bf:5b:f9:01:17:d8:95:e6:
13:0e:88:f8:28:c4:23:9c:23:87:4e:cb:dd:c5:f0:
b7:b8:01:39:12:c4:0e:83:26:0e:98:1c:a2:0b:11:
a9:83:1e:74:f5:19:0f:68:7e:6a:59:ec:5a:93:fc:
0a:1d:4a:73:51:e1:ad:af:20:bb:4c:4c:2b:bf:cf:
80:e5:1e:0c:66:59:d7:99:06:b7:96:2a:fc:26:e4:
af:be:b9:ac:0e:2c:56:9f:ef:41:94:50:6e:42:dd:
ae:b6:4d:7c:9e:18:b7:5f:b0:3a:ef:cb:66:88:8c:
3e:a2:ad:1e:d7:97:b2:da:d8:dc:12:eb:b1:e2:c9:
12:46:8e:b2:c6:80:0e:eb:bb:f9:6a:af:0f:79:9f:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:32:A0:99:8A:99:24:4B:A9:18:17:73:EA:34:03:BE:3E:62:1B:A6
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ezKgmYqZJEupGBdz6jQDvj5iG6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.134.0/23
Signature Algorithm: sha256WithRSAEncryption
de:6e:1e:e2:15:eb:17:50:0b:9c:ec:46:c8:68:dc:f3:cc:ff:
1b:4c:66:ed:7a:6a:59:41:1f:cf:82:27:1f:01:af:96:89:89:
60:c6:af:56:69:9e:55:78:2a:86:a3:ec:e9:e3:e2:de:be:bf:
24:d2:1f:ae:3d:c0:46:80:f7:b5:c1:c1:c7:cf:0d:a7:04:c3:
e5:89:b4:a5:70:b3:85:6e:b0:20:a6:fd:ad:20:de:a2:96:ff:
ac:7f:7b:28:d3:ac:3c:e4:0d:47:21:72:02:cc:96:9c:c3:a7:
10:c8:27:4b:6c:5d:f4:cf:6a:cb:b7:4c:27:fd:37:e3:26:77:
87:61:b9:f7:93:83:6e:e1:e6:23:02:43:07:6b:74:8a:30:bb:
7c:af:54:5b:71:27:e2:49:18:02:dd:de:c3:dc:3b:ba:01:28:
36:01:df:9b:4a:dc:ec:f9:77:3f:22:34:e9:92:5a:ff:0b:b2:
51:42:9b:88:90:b0:d8:82:df:84:71:6a:56:4a:fe:73:c8:31:
31:46:3d:41:29:24:57:50:0e:1e:82:ed:5b:50:95:39:7c:57:
10:98:64:20:8c:c4:1b:30:5f:02:bd:c3:e6:75:46:e0:28:7f:
86:cd:a4:a1:72:8a:6d:4d:a2:ce:ab:d9:42:ae:fb:00:01:8a:
26:62:47:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTXaJ726oDckCoa0IDp28c+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjIxMjAzMDk1NDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjMyYTA5OThhOTkyNDRiYTkxODE3NzNlYTM0MDNiZTNlNjIxYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt8LlZg2aF6ofvxdlXnHsov6aRZI
9eRKP5IuOS+QOwYiv5RhhLvE1IAlLASnkurjsI2Nti5w3WLzE7MPsu7tyc2TDZ26
4UzsNVeWLAn6v0TftEgaKcqTC8EWa769qTlhb7/0u3VraF5gbCCxsfgMv1v5ARfY
leYTDoj4KMQjnCOHTsvdxfC3uAE5EsQOgyYOmByiCxGpgx509RkPaH5qWexak/wK
HUpzUeGtryC7TEwrv8+A5R4MZlnXmQa3lir8JuSvvrmsDixWn+9BlFBuQt2utk18
nhi3X7A678tmiIw+oq0e15ey2tjcEuux4skSRo6yxoAO67v5aq8PeZ/1wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHsyoJmKmSRLqRgXc+o0A74+YhumMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvZXpLZ21ZcVpKRXVwR0JkejZqUUR2ajVpRzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufCGMA0G
CSqGSIb3DQEBCwUAA4IBAQDebh7iFesXUAuc7EbIaNzzzP8bTGbtempZQR/Pgicf
Aa+WiYlgxq9WaZ5VeCqGo+zp4+Levr8k0h+uPcBGgPe1wcHHzw2nBMPlibSlcLOF
brAgpv2tIN6ilv+sf3so06w85A1HIXICzJacw6cQyCdLbF30z2rLt0wn/TfjJneH
Ybn3k4Nu4eYjAkMHa3SKMLt8r1RbcSfiSRgC3d7D3Du6ASg2Ad+bStzs+Xc/IjTp
klr/C7JRQpuIkLDYgt+EcWpWSv5zyDExRj1BKSRXUA4egu1bUJU5fFcQmGQgjMQb
MF8CvcPmdUbgKH+GzaShcoptTaLOq9lCrvsAAYomYkfU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org