Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/XFCjRcfvx517a_bcFSzvK1RRkkI.roa
File: XFCjRcfvx517a_bcFSzvK1RRkkI.roa (raw, json)
Hash identifier: M6LA+zWU9jFFHUGC5YYRFsVRfcYdy+K9yWme9+bDwwI=
Subject key identifier: 5C:50:A3:45:C7:EF:C7:9D:7B:6B:F6:DC:15:2C:EF:2B:54:51:92:42
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 05AA3231
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/XFCjRcfvx517a_bcFSzvK1RRkkI.roa
Signing time: Sat 01 Jan 2022 11:56:27 +0000
ROA not before: Sat 01 Jan 2022 11:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.129.18.0/24 maxlen: 24
185.129.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95040049 (0x5aa3231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jan 1 11:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c50a345c7efc79d7b6bf6dc152cef2b54519242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:ed:9e:5c:3f:ca:15:77:b0:fb:ab:57:bb:
ec:7a:59:88:21:db:03:2e:90:5d:db:ea:af:8f:c5:
08:2a:48:3d:01:f2:07:ae:e0:88:b8:91:02:d1:80:
61:3e:24:8a:bd:2b:27:ec:07:13:84:f4:9a:a3:19:
d3:37:5e:0c:51:67:a7:16:5a:01:c0:9b:e4:03:94:
dd:da:7b:5c:83:6b:72:e5:b3:c1:80:f0:a9:a7:fd:
c2:8d:b3:5c:4e:52:f1:be:e7:88:0b:0c:24:62:4b:
08:12:f9:fe:9c:2b:19:ca:3a:e5:b3:2e:ef:7a:a9:
c3:6e:65:a0:d3:34:09:4e:7d:87:6a:a1:ed:3f:5b:
f6:8f:c2:d5:15:99:04:39:d5:b6:c4:1f:2c:58:77:
7c:6c:7c:c8:e5:8d:ea:b7:29:2c:54:91:5d:d5:72:
b5:87:d3:41:f8:6c:bc:37:a9:af:f5:b5:b0:55:62:
0a:d6:49:9a:cf:f3:a7:58:73:5e:55:3e:44:d4:dd:
62:58:8c:8e:b1:cb:b3:e2:d5:a3:a1:c2:87:d7:48:
d1:de:3b:8f:82:62:8f:c5:b3:89:0d:31:e3:e4:0e:
31:b5:5a:1b:32:61:dd:c1:0d:a1:65:43:c0:3e:de:
02:3e:87:61:b3:4a:65:13:51:cb:40:0f:cc:eb:10:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:A3:45:C7:EF:C7:9D:7B:6B:F6:DC:15:2C:EF:2B:54:51:92:42
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/XFCjRcfvx517a_bcFSzvK1RRkkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.18.0/23
Signature Algorithm: sha256WithRSAEncryption
43:63:d5:5c:87:07:f9:18:93:9f:75:46:d8:28:0f:40:c1:1c:
ef:c3:f7:41:a1:f0:74:98:bc:2e:1b:f7:1f:c7:b6:97:fa:bf:
1b:42:a5:76:68:bc:a0:c0:32:fc:81:55:b1:d4:07:36:a8:74:
3c:b1:57:8e:cf:ca:95:3a:3b:72:c5:ae:08:4a:c5:ef:eb:e6:
38:04:9d:5b:c1:a1:cb:71:47:da:0b:3a:98:58:24:3f:9c:a2:
64:9e:8f:8e:67:88:1c:32:4c:42:7b:da:9f:ed:10:22:9d:32:
a4:e0:b5:20:90:dc:38:b0:1c:ce:b9:6f:c8:98:5f:16:ba:12:
bc:5e:d0:56:97:86:09:09:b1:d5:64:23:57:d0:64:2b:83:94:
81:01:d5:d5:32:d5:51:eb:fb:ae:07:32:51:56:79:ea:97:37:
4c:bd:25:4b:85:4d:f5:00:a7:b6:a7:27:5a:5b:44:74:29:f8:
7e:1c:12:a1:c1:ee:82:27:10:58:c7:d8:25:27:d2:aa:55:11:
3a:5a:e3:b2:4e:06:f7:a6:d4:f4:e2:bb:53:6a:6b:bc:92:09:
be:a6:97:4b:3b:a8:d7:26:e7:9e:ea:e9:7f:bf:ee:3c:1a:1c:
8d:48:3d:26:bf:80:3b:39:aa:3d:88:57:de:e1:7d:b8:f0:74:
3c:86:5f:d7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBaoyMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGEyMDg1YzdkZTNiNTk4MjE2Yjg5ZmIwZjJiMWQ5MzBkZTY2YzE5MB4XDTIyMDEw
MTExNTYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWM1MGEzNDVjN2Vm
Yzc5ZDdiNmJmNmRjMTUyY2VmMmI1NDUxOTI0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANu07Z5cP8oVd7D7q1e77HpZiCHbAy6QXdvqr4/FCCpIPQHy
B67giLiRAtGAYT4kir0rJ+wHE4T0mqMZ0zdeDFFnpxZaAcCb5AOU3dp7XINrcuWz
wYDwqaf9wo2zXE5S8b7niAsMJGJLCBL5/pwrGco65bMu73qpw25loNM0CU59h2qh
7T9b9o/C1RWZBDnVtsQfLFh3fGx8yOWN6rcpLFSRXdVytYfTQfhsvDepr/W1sFVi
CtZJms/zp1hzXlU+RNTdYliMjrHLs+LVo6HCh9dI0d47j4Jij8WziQ0x4+QOMbVa
GzJh3cENoWVDwD7eAj6HYbNKZRNRy0APzOsQZRECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRcUKNFx+/HnXtr9twVLO8rVFGSQjAfBgNVHSMEGDAWgBS0oghcfeO1mCFr
ifsPKx2TDeZsGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RLSUlYSDNqdFpnaGE0bjdEeXNka3czbWJCay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvZDY1MTNkLTJkNTMtNDAyMi04MzYwLTMxMTc5ODk2MDFhZC8x
L1hGQ2pSY2Z2eDUxN2FfYmNGU3p2SzFSUmtrSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
ZDY1MTNkLTJkNTMtNDAyMi04MzYwLTMxMTc5ODk2MDFhZC8xL3RLSUlYSDNqdFpn
aGE0bjdEeXNka3czbWJCay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmBEjANBgkqhkiG9w0BAQsFAAOC
AQEAQ2PVXIcH+RiTn3VG2CgPQMEc78P3QaHwdJi8Lhv3H8e2l/q/G0Kldmi8oMAy
/IFVsdQHNqh0PLFXjs/KlTo7csWuCErF7+vmOASdW8Ghy3FH2gs6mFgkP5yiZJ6P
jmeIHDJMQnvan+0QIp0ypOC1IJDcOLAczrlvyJhfFroSvF7QVpeGCQmx1WQjV9Bk
K4OUgQHV1TLVUev7rgcyUVZ56pc3TL0lS4VN9QCntqcnWltEdCn4fhwSocHugicQ
WMfYJSfSqlUROlrjsk4G96bU9OK7U2prvJIJvqaXSzuo1ybnnurpf7/uPBocjUg9
Jr+AOzmqPYhX3uF9uPB0PIZf1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:21 2024 by rpki-client on console-fra.rpki-client.org