Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/wh1Avu5K3KXDuB2s1NCQimXUjnk.roa
File: wh1Avu5K3KXDuB2s1NCQimXUjnk.roa (raw, json)
Hash identifier: YFNAR+NrV21j8Oza4mIzYBTWCcgV/ggSK9EwVqjFhpc=
Subject key identifier: C2:1D:40:BE:EE:4A:DC:A5:C3:B8:1D:AC:D4:D0:90:8A:65:D4:8E:79
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 0183794638AE31339FC3359DAE3538C8F1EE
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/wh1Avu5K3KXDuB2s1NCQimXUjnk.roa
Signing time: Mon 26 Sep 2022 10:09:48 +0000
ROA not before: Mon 26 Sep 2022 10:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208871
IP address blocks: 185.156.26.0/24 maxlen: 24
185.156.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:46:38:ae:31:33:9f:c3:35:9d:ae:35:38:c8:f1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Sep 26 10:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c21d40beee4adca5c3b81dacd4d0908a65d48e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:4b:3c:91:13:63:d5:44:e8:21:da:ab:bc:
ac:66:06:98:68:93:52:16:df:be:73:eb:59:16:a0:
1a:4b:58:32:5c:c9:f5:13:6b:15:c4:a3:d6:6a:21:
04:48:10:5b:3c:dd:ba:3c:e8:aa:cb:92:2a:5e:11:
dd:16:c9:01:75:1f:6a:82:78:46:c3:02:82:61:89:
eb:a7:7a:e8:37:79:82:6b:5c:f2:51:c1:59:7d:3d:
b4:e7:c5:0f:22:cf:aa:84:d2:2a:b6:e7:4d:53:88:
45:84:2d:9d:2a:1d:3f:d6:5f:41:4b:f9:76:6a:9f:
ad:f2:ab:0d:21:ac:ae:8b:f2:d3:d8:76:99:72:8d:
40:c7:4b:69:0e:d0:3a:fd:b0:3b:3c:27:43:16:a8:
ec:38:a0:1c:1c:96:10:43:29:fd:2f:ca:03:07:ca:
a3:28:29:b4:70:32:55:f5:60:ab:84:43:16:a5:1f:
d7:3f:2a:87:12:15:e5:3e:fb:4f:e1:83:4c:3c:55:
4f:65:c6:84:64:6a:2c:05:85:e4:85:ca:f5:f1:34:
1f:ee:9b:b7:a7:d5:b1:22:9f:29:d4:72:11:ac:a6:
17:46:1d:d1:d1:eb:c1:94:48:00:a8:08:72:c7:3e:
5d:be:8f:f2:a3:b1:d9:e4:67:86:3e:20:67:3f:96:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:40:BE:EE:4A:DC:A5:C3:B8:1D:AC:D4:D0:90:8A:65:D4:8E:79
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/wh1Avu5K3KXDuB2s1NCQimXUjnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.25.0-185.156.26.255
Signature Algorithm: sha256WithRSAEncryption
8a:27:42:9a:c1:02:e6:41:d5:3c:98:a8:46:28:57:53:e0:ab:
f4:f1:b6:48:16:94:f2:68:47:74:17:87:68:11:14:1d:fb:c1:
72:80:33:cf:4b:99:71:b6:57:09:ea:db:57:6d:e9:47:97:60:
0f:3d:32:5c:fb:b3:a3:66:46:4b:54:2e:1f:a8:3f:de:02:de:
27:0b:f4:50:d0:e1:e8:c5:a3:ca:c8:a1:8c:d7:c8:e3:8c:5e:
7a:d2:f4:b2:50:23:37:0e:7f:ac:71:70:d9:f4:02:af:a5:e1:
42:bc:65:71:15:e3:55:24:9a:41:51:f6:f6:72:68:42:74:5d:
af:0e:c3:3a:b1:b5:db:8b:3b:66:50:6d:80:93:03:fa:52:be:
4a:fa:d8:b3:e2:30:ee:5c:19:c9:7d:00:8d:d7:b7:84:1c:ab:
5d:b9:18:37:91:89:bc:8a:cb:ba:ce:45:80:ef:77:2e:42:b6:
db:af:12:af:fd:46:3d:32:74:54:79:21:08:3b:0f:63:54:17:
e2:2d:76:9c:c4:b2:e3:2f:6a:d6:30:44:ef:9f:f2:a1:3d:c4:
e8:74:42:a3:8c:13:57:33:67:73:66:7e:39:7a:74:81:8c:7b:
16:5a:54:fe:7d:d0:8a:a8:07:7c:dd:6c:8b:d5:c4:ef:67:60:
68:88:1c:ec
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYN5RjiuMTOfwzWdrjU4yPHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1
NGVmYWQwHhcNMjIwOTI2MTAwOTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjFkNDBiZWVlNGFkY2E1YzNiODFkYWNkNGQwOTA4YTY1ZDQ4ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxBLPJETY9VE6CHaq7ysZgaYaJNS
Ft++c+tZFqAaS1gyXMn1E2sVxKPWaiEESBBbPN26POiqy5IqXhHdFskBdR9qgnhG
wwKCYYnrp3roN3mCa1zyUcFZfT2058UPIs+qhNIqtudNU4hFhC2dKh0/1l9BS/l2
ap+t8qsNIayui/LT2HaZco1Ax0tpDtA6/bA7PCdDFqjsOKAcHJYQQyn9L8oDB8qj
KCm0cDJV9WCrhEMWpR/XPyqHEhXlPvtP4YNMPFVPZcaEZGosBYXkhcr18TQf7pu3
p9WxIp8p1HIRrKYXRh3R0evBlEgAqAhyxz5dvo/yo7HZ5GeGPiBnP5YKBQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMIdQL7uStylw7gdrNTQkIpl1I55MB8GA1UdIwQY
MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt
ZTk5YThkYzMwMjU1LzEvd2gxQXZ1NUszS1hEdUIyczFOQ1FpbVhVam5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1
LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5nBkD
BAC5nBowDQYJKoZIhvcNAQELBQADggEBAIonQprBAuZB1TyYqEYoV1Pgq/TxtkgW
lPJoR3QXh2gRFB37wXKAM89LmXG2Vwnq21dt6UeXYA89Mlz7s6NmRktULh+oP94C
3icL9FDQ4ejFo8rIoYzXyOOMXnrS9LJQIzcOf6xxcNn0Aq+l4UK8ZXEV41UkmkFR
9vZyaEJ0Xa8OwzqxtduLO2ZQbYCTA/pSvkr62LPiMO5cGcl9AI3Xt4Qcq125GDeR
ibyKy7rORYDvdy5CttuvEq/9Rj0ydFR5IQg7D2NUF+ItdpzEsuMvatYwRO+f8qE9
xOh0QqOME1czZ3Nmfjl6dIGMexZaVP590IqoB3zdbIvVxO9nYGiIHOw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:49 2024 by rpki-client on console-ams.rpki-client.org