Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-sCdbTtuok4zLvIm6pwJNMznr-k.roa
File: 1-sCdbTtuok4zLvIm6pwJNMznr-k.roa (raw, json)
Hash identifier: nPOWPAU+RqpZgBHi5iDXWS/Llt1NYacKeITOSR4ZrHM=
Subject key identifier: FA:C0:9D:6D:3B:6E:A2:4E:33:2E:F2:26:EA:9C:09:34:CC:E7:AF:E9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06FC6FDE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-sCdbTtuok4zLvIm6pwJNMznr-k.roa
Signing time: Wed 23 Feb 2022 13:17:02 +0000
ROA not before: Wed 23 Feb 2022 13:17:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 194.35.40.0/24 maxlen: 24
185.255.124.0/22 maxlen: 22
45.134.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117207006 (0x6fc6fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 23 13:17:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fac09d6d3b6ea24e332ef226ea9c0934cce7afe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:e2:72:a1:9b:11:de:fe:d0:37:51:88:de:
9e:96:4f:e3:be:54:61:f0:c1:a6:78:7c:4d:6b:a9:
eb:6c:f0:14:53:76:7a:8a:ca:6c:f9:dc:df:64:c6:
af:28:c7:80:f9:36:fa:cd:18:fe:4a:c9:5a:6c:35:
b1:97:08:5f:1e:49:28:fd:3f:0e:33:ab:d7:81:b1:
ac:5a:3d:03:b9:9c:56:54:0f:7f:0d:2f:29:16:1d:
b1:68:96:33:39:f7:c6:f3:a4:b8:77:33:cc:02:be:
5c:4c:7a:25:e8:9a:15:06:59:b7:4b:72:06:c7:f6:
41:b4:0e:2a:84:a2:b8:aa:3a:f1:5c:32:c0:68:98:
00:3f:90:0d:06:7e:45:16:0f:63:81:42:09:ca:08:
77:0f:2b:af:c8:37:1e:c8:c6:b4:3e:c9:d9:81:45:
11:7d:65:6e:c9:a2:02:ba:f8:54:1d:35:e0:2f:ff:
ce:42:30:6e:9d:38:d3:95:01:a6:26:1a:2b:19:0d:
83:b5:b7:83:a7:bb:88:69:e0:80:27:5e:9d:ee:e2:
40:de:c9:0d:ee:16:9e:71:06:a3:20:34:71:ae:b5:
fb:10:3c:8d:78:03:8d:69:72:7a:84:0b:8b:e6:5f:
13:b3:d2:10:00:c3:56:47:3e:d9:a7:89:1f:3e:a7:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C0:9D:6D:3B:6E:A2:4E:33:2E:F2:26:EA:9C:09:34:CC:E7:AF:E9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-sCdbTtuok4zLvIm6pwJNMznr-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
185.255.124.0/22
194.35.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a0:17:6f:e7:8c:26:4c:5b:d9:8f:df:76:02:9f:d9:3e:3d:
7a:aa:95:38:8a:af:2c:84:cd:00:35:68:44:a9:46:ec:2e:0f:
8d:b4:92:32:7a:2a:1d:22:9b:32:34:d5:02:ac:7d:0a:a5:0c:
17:50:03:26:47:1b:4d:27:0b:7f:b4:03:23:d2:da:c5:6d:e1:
84:41:8d:97:be:87:84:fd:fe:6a:1b:89:76:1d:b9:70:63:df:
dc:cd:32:37:c7:d2:25:4f:f1:c4:c3:c4:21:b8:fe:88:3b:02:
f6:80:76:0e:f9:43:b3:5a:3c:45:df:3f:50:19:6b:4e:8c:3b:
b3:6b:50:94:94:2c:73:e2:2b:6f:25:34:3d:f9:95:45:29:4b:
20:a5:66:d6:41:58:a9:5a:5a:db:fb:d5:29:fe:b8:c0:f1:72:
b5:16:d4:f7:70:32:3b:17:39:59:02:35:28:72:ea:97:a3:02:
eb:37:3d:63:9f:51:e4:a7:27:86:3d:98:09:98:ef:c5:d6:10:
20:40:47:5f:bd:9c:95:4e:f7:63:b0:b1:bd:81:b0:0f:26:eb:
8d:dc:1d:15:fa:8d:e3:3b:0f:06:8c:dc:59:11:69:a3:44:0b:
f0:ba:19:46:e3:21:7e:ef:b5:07:6f:cf:3e:23:69:4c:d9:12:
7f:4c:b5:9c
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEBvxv3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDIy
MzEzMTcwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFjMDlkNmQzYjZl
YTI0ZTMzMmVmMjI2ZWE5YzA5MzRjY2U3YWZlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXw4nKhmxHe/tA3UYjenpZP475UYfDBpnh8TWup62zwFFN2
eorKbPnc32TGryjHgPk2+s0Y/krJWmw1sZcIXx5JKP0/DjOr14GxrFo9A7mcVlQP
fw0vKRYdsWiWMzn3xvOkuHczzAK+XEx6JeiaFQZZt0tyBsf2QbQOKoSiuKo68Vwy
wGiYAD+QDQZ+RRYPY4FCCcoIdw8rr8g3HsjGtD7J2YFFEX1lbsmiArr4VB014C//
zkIwbp0405UBpiYaKxkNg7W3g6e7iGnggCdene7iQN7JDe4WnnEGoyA0ca61+xA8
jXgDjWlyeoQLi+ZfE7PSEADDVkc+2aeJHz6n3ucCAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBT6wJ1tO26iTjMu8ibqnAk0zOev6TAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
LzEtc0NkYlR0dW9rNHpMdkltNnB3Sk5Nem5yLWsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Qw
LzJiODM0ZS1iYWQyLTQ5ZmYtYmEzOC1iNDM0MmJhOTFhYmMvMS9ZR2VFd1FVSVc1
MXExZmM2QTdJTm1sd1JUSzguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAIthlQDBAK5/3wDBADCIygwDQYJ
KoZIhvcNAQELBQADggEBAH6gF2/njCZMW9mP33YCn9k+PXqqlTiKryyEzQA1aESp
RuwuD420kjJ6Kh0imzI01QKsfQqlDBdQAyZHG00nC3+0AyPS2sVt4YRBjZe+h4T9
/mobiXYduXBj39zNMjfH0iVP8cTDxCG4/og7AvaAdg75Q7NaPEXfP1AZa06MO7Nr
UJSULHPiK28lND35lUUpSyClZtZBWKlaWtv71Sn+uMDxcrUW1PdwMjsXOVkCNShy
6pejAus3PWOfUeSnJ4Y9mAmY78XWECBAR1+9nJVO92Owsb2BsA8m643cHRX6jeM7
DwaM3FkRaaNEC/C6GUbjIX7vtQdvzz4jaUzZEn9MtZw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org