Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8PZ-a4JLSLm12RZg2BGU9G5IEM.roa
File: l8PZ-a4JLSLm12RZg2BGU9G5IEM.roa (raw, json)
Hash identifier: e+FzgHHt7ujw0S+2+uWrv3gGuZVsMMlh7/rOYarf724=
Subject key identifier: 97:C3:D9:F9:AE:09:2D:22:E6:D7:64:59:83:60:46:53:D1:B9:20:43
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0181D56758B4848FF8E9C0332AF97C5A81D0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8PZ-a4JLSLm12RZg2BGU9G5IEM.roa
Signing time: Wed 06 Jul 2022 21:25:28 +0000
ROA not before: Wed 06 Jul 2022 21:25:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 185.226.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:67:58:b4:84:8f:f8:e9:c0:33:2a:f9:7c:5a:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 6 21:25:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97c3d9f9ae092d22e6d7645983604653d1b92043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:88:90:4d:dd:1b:14:3c:0b:b1:dc:84:f4:
18:89:15:eb:8e:a8:2b:89:84:52:2b:4d:89:b3:0a:
dc:2c:08:a4:5c:da:e1:19:d0:5a:dc:61:c0:39:58:
6b:c8:50:95:6f:a2:e4:be:3b:4e:4b:de:f5:72:fa:
b5:89:35:a1:5d:40:f5:4b:9a:7f:af:3e:db:f1:d8:
aa:87:8c:ac:7b:bf:e4:b2:75:7d:33:97:72:fe:09:
aa:9c:a9:86:ae:17:16:ea:5e:0c:0f:5f:50:25:c9:
92:41:d0:e6:9f:4e:20:7a:2f:e5:98:3b:c9:61:34:
2e:ec:31:83:b3:de:2a:28:6d:fb:0d:d5:7a:09:89:
2b:9d:00:b8:a9:c6:81:79:9a:f6:10:3b:d9:3f:24:
8d:de:73:93:06:c9:19:6f:8a:40:d9:87:bf:26:64:
e6:f9:29:20:ae:c4:30:b1:c3:ec:e6:dc:e6:90:21:
ca:bc:da:e5:ba:f5:9e:b2:32:81:be:6d:3b:eb:88:
89:7d:b3:02:4e:88:1b:ae:90:5a:c6:7f:96:2f:35:
57:2e:a3:75:22:ae:b3:76:1a:51:25:a6:3d:2c:e4:
41:c2:e2:68:5f:e3:9f:6c:8a:28:ef:87:d0:c8:dc:
c2:d2:9f:f3:99:1f:5c:5b:df:90:cd:bf:7c:de:72:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:D9:F9:AE:09:2D:22:E6:D7:64:59:83:60:46:53:D1:B9:20:43
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8PZ-a4JLSLm12RZg2BGU9G5IEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.105.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5c:f0:87:65:a9:26:8c:ba:8f:cc:cd:52:dc:b9:2d:d7:b0:
88:76:e9:d5:2a:18:c2:9f:42:17:e9:07:29:2d:bc:19:24:c9:
31:15:c6:28:a3:47:7f:4f:93:cf:b0:7c:31:74:66:c1:ee:02:
a5:55:6b:16:cc:ee:9f:29:9c:63:9f:34:73:d4:6a:b8:4c:3b:
25:5a:22:54:6c:73:15:3b:e9:11:02:5c:9f:63:5b:02:d9:9d:
0c:f0:1d:b7:04:6f:ca:84:f9:6b:3a:da:31:70:d8:52:3c:fd:
38:44:4e:fe:9a:cb:38:e8:7d:0c:6f:cf:a6:f9:9e:df:5a:71:
48:40:53:07:02:0d:6b:b2:81:59:0d:b7:54:f9:78:80:b3:8e:
2c:8e:b6:2a:fc:05:8e:76:38:15:24:cb:92:b3:cc:29:56:34:
77:78:20:a5:66:03:df:ff:6b:c5:03:5a:1e:03:2b:b3:3e:2c:
5f:cb:5a:ba:36:ed:9a:e3:aa:02:97:df:c9:07:1a:d4:c2:0d:
fb:bf:bc:6d:05:10:3a:23:50:f8:90:d8:a9:86:31:42:90:d6:
3e:5b:31:0d:38:9f:80:11:2d:08:86:b3:d1:e4:1b:be:26:bf:
29:6c:0e:f4:94:e2:96:85:12:38:30:35:be:b7:6b:4b:14:0b:
2c:41:21:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHVZ1i0hI/46cAzKvl8WoHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjIwNzA2MjEyNTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2MzZDlmOWFlMDkyZDIyZTZkNzY0NTk4MzYwNDY1M2QxYjkyMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz2IkE3dGxQ8C7HchPQYiRXrjqgr
iYRSK02JswrcLAikXNrhGdBa3GHAOVhryFCVb6LkvjtOS971cvq1iTWhXUD1S5p/
rz7b8diqh4yse7/ksnV9M5dy/gmqnKmGrhcW6l4MD19QJcmSQdDmn04gei/lmDvJ
YTQu7DGDs94qKG37DdV6CYkrnQC4qcaBeZr2EDvZPySN3nOTBskZb4pA2Ye/JmTm
+SkgrsQwscPs5tzmkCHKvNrluvWesjKBvm0764iJfbMCTogbrpBaxn+WLzVXLqN1
Iq6zdhpRJaY9LORBwuJoX+OfbIoo74fQyNzC0p/zmR9cW9+Qzb983nLEHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJfD2fmuCS0i5tdkWYNgRlPRuSBDMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvbDhQWi1hNEpMU0xtMTJSWmcyQkdVOUc1SUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJpMA0G
CSqGSIb3DQEBCwUAA4IBAQBGXPCHZakmjLqPzM1S3Lkt17CIdunVKhjCn0IX6Qcp
LbwZJMkxFcYoo0d/T5PPsHwxdGbB7gKlVWsWzO6fKZxjnzRz1Gq4TDslWiJUbHMV
O+kRAlyfY1sC2Z0M8B23BG/KhPlrOtoxcNhSPP04RE7+mss46H0Mb8+m+Z7fWnFI
QFMHAg1rsoFZDbdU+XiAs44sjrYq/AWOdjgVJMuSs8wpVjR3eCClZgPf/2vFA1oe
AyuzPixfy1q6Nu2a46oCl9/JBxrUwg37v7xtBRA6I1D4kNiphjFCkNY+WzENOJ+A
ES0IhrPR5Bu+Jr8pbA70lOKWhRI4MDW+t2tLFAssQSFH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org