Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Y0HazWr2Zb3GEAGKQEkXwU2rKjk.roa
File: Y0HazWr2Zb3GEAGKQEkXwU2rKjk.roa (raw, json)
Hash identifier: 3AIHjmWPqv2cPuda+Ln3KorOStEnuSzkab9lRWvuO0U=
Subject key identifier: 63:41:DA:CD:6A:F6:65:BD:C6:10:01:8A:40:49:17:C1:4D:AB:2A:39
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0726B021
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Y0HazWr2Zb3GEAGKQEkXwU2rKjk.roa
Signing time: Thu 10 Mar 2022 16:50:50 +0000
ROA not before: Thu 10 Mar 2022 16:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 185.230.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119975969 (0x726b021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 10 16:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6341dacd6af665bdc610018a404917c14dab2a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:9b:ec:72:d3:a9:26:da:8f:47:76:41:6b:
9c:9e:37:f5:80:02:3f:46:ef:7e:ce:f9:01:44:ba:
6a:b3:4a:12:97:0d:d1:43:49:c7:1d:9c:ea:82:9f:
f7:7e:8e:18:89:0d:f3:cb:4b:35:ef:33:3a:e3:cf:
1c:bc:d6:ba:0c:76:63:b2:04:f3:13:6b:d1:56:d8:
3a:f9:61:54:64:02:7c:9b:46:52:9c:59:76:7e:6a:
18:44:bf:67:b3:6f:04:1a:d6:2a:e4:87:f8:67:22:
13:54:db:88:63:79:d9:52:f6:89:57:dd:0a:1a:f9:
0e:9d:61:66:80:5c:4c:27:bc:27:a0:a1:39:95:b6:
b7:21:41:2b:52:02:be:b8:0f:aa:73:4a:01:cb:79:
6d:d7:51:43:97:0b:ca:20:b8:5e:d7:f7:37:f9:9c:
eb:d8:92:dd:c1:06:a6:d0:70:a8:d2:f0:f1:32:5f:
94:5a:a3:fd:00:d5:55:a7:e0:97:dd:97:0e:57:62:
c3:4a:bf:de:28:14:4e:f0:bf:8e:92:69:3b:11:d7:
62:0c:a7:75:34:ce:89:53:3d:57:96:63:12:15:45:
24:4b:a5:fa:64:55:6e:59:9f:ee:8a:df:d8:22:ae:
14:0d:f7:ca:76:95:e5:de:06:c8:85:8c:8a:18:3c:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:DA:CD:6A:F6:65:BD:C6:10:01:8A:40:49:17:C1:4D:AB:2A:39
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Y0HazWr2Zb3GEAGKQEkXwU2rKjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ed:04:9a:36:dd:ea:b2:ea:3d:d6:8d:70:b7:74:7c:45:82:
01:da:98:55:f0:5e:83:b5:21:54:2d:af:f9:51:63:24:b7:a4:
2e:7d:7a:5b:b4:12:b9:5e:a8:27:b6:5d:29:59:91:3c:6c:fa:
d7:7f:d8:e8:95:70:10:6a:f1:7e:4f:f1:f4:6c:28:b8:13:d7:
98:6f:05:2b:f5:ee:d3:d4:40:67:00:bf:e1:4f:bb:1d:76:d5:
1f:12:69:2b:50:df:b5:94:35:b6:7d:2a:2f:ee:68:b4:9e:0f:
17:23:89:85:1b:e0:5d:46:0b:b9:ae:82:90:c2:95:f8:2d:c8:
21:f7:80:c8:8f:af:a6:f6:25:9b:0e:e0:1e:3b:f8:cd:0e:b2:
c1:8d:67:b0:17:56:58:af:8f:cf:26:69:3b:20:2f:5c:96:ee:
14:7e:98:4e:3e:dd:c5:2d:1f:10:f9:26:55:cf:20:0d:d6:54:
bb:32:e2:d5:aa:e8:d3:f5:86:86:8e:b9:86:8a:2b:d9:ed:b8:
88:42:d8:bb:49:7f:90:48:1f:59:9c:29:e2:f3:24:73:b9:10:
3a:1e:62:78:08:6d:22:b2:0b:8b:38:5b:95:6f:56:5f:11:e2:
50:92:8e:0a:92:3c:38:c3:71:b8:54:bf:9a:88:56:1d:bd:d9:
c1:cc:1e:7e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEByawITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDMx
MDE2NTA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjM0MWRhY2Q2YWY2
NjViZGM2MTAwMThhNDA0OTE3YzE0ZGFiMmEzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3Wm+xy06km2o9HdkFrnJ439YACP0bvfs75AUS6arNKEpcN
0UNJxx2c6oKf936OGIkN88tLNe8zOuPPHLzWugx2Y7IE8xNr0VbYOvlhVGQCfJtG
UpxZdn5qGES/Z7NvBBrWKuSH+GciE1TbiGN52VL2iVfdChr5Dp1hZoBcTCe8J6Ch
OZW2tyFBK1ICvrgPqnNKAct5bddRQ5cLyiC4Xtf3N/mc69iS3cEGptBwqNLw8TJf
lFqj/QDVVafgl92XDldiw0q/3igUTvC/jpJpOxHXYgyndTTOiVM9V5ZjEhVFJEul
+mRVblmf7orf2CKuFA33ynaV5d4GyIWMihg8LrMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRjQdrNavZlvcYQAYpASRfBTasqOTAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L1kwSGF6V3IyWmIzR0VBR0tRRWtYd1Uycktqay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnmNTANBgkqhkiG9w0BAQsFAAOC
AQEAge0Emjbd6rLqPdaNcLd0fEWCAdqYVfBeg7UhVC2v+VFjJLekLn16W7QSuV6o
J7ZdKVmRPGz613/Y6JVwEGrxfk/x9GwouBPXmG8FK/Xu09RAZwC/4U+7HXbVHxJp
K1DftZQ1tn0qL+5otJ4PFyOJhRvgXUYLua6CkMKV+C3IIfeAyI+vpvYlmw7gHjv4
zQ6ywY1nsBdWWK+PzyZpOyAvXJbuFH6YTj7dxS0fEPkmVc8gDdZUuzLi1aro0/WG
ho65hoor2e24iELYu0l/kEgfWZwp4vMkc7kQOh5ieAhtIrILizhblW9WXxHiUJKO
CpI8OMNxuFS/mohWHb3Zwcwefg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org