Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/3K1qMjv2m_FML70fPvAc0Xr6NmI.roa
File: 3K1qMjv2m_FML70fPvAc0Xr6NmI.roa (raw, json)
Hash identifier: kePPhi2am1FaipJHTSSdntLWquYkGm+xqHTWevWjsrM=
Subject key identifier: DC:AD:6A:32:3B:F6:9B:F1:4C:2F:BD:1F:3E:F0:1C:D1:7A:FA:36:62
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 01C4A9E8
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/3K1qMjv2m_FML70fPvAc0Xr6NmI.roa
Signing time: Sat 01 Jan 2022 02:53:33 +0000
ROA not before: Sat 01 Jan 2022 02:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204806
IP address blocks: 185.239.92.0/22 maxlen: 24
185.239.92.0/24 maxlen: 24
185.239.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29665768 (0x1c4a9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Jan 1 02:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcad6a323bf69bf14c2fbd1f3ef01cd17afa3662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:6c:f5:3d:8b:05:87:23:8b:fe:d4:9c:f0:
82:c2:fb:64:44:1f:59:0f:68:fc:3f:6f:d3:61:fa:
6d:d4:d4:98:ce:dc:90:8f:b9:67:43:89:c0:05:23:
60:18:30:f6:75:ec:96:83:28:a0:e2:c5:d0:67:db:
8c:48:c2:f1:4d:b3:4e:bf:56:47:63:16:49:7c:24:
02:14:40:f3:44:7b:ce:72:ab:c5:61:8d:cd:c8:d4:
fb:05:92:f5:f4:7a:58:fb:9e:a3:a2:5d:3b:b8:58:
3f:22:d1:50:7d:5a:d3:9b:6d:30:73:5b:e4:2b:6b:
b1:3e:18:b2:76:ff:ba:4f:db:19:90:0e:8e:d3:0a:
1d:d4:de:0b:d5:57:9d:8b:a3:0f:c7:f4:1a:ea:0b:
4b:b2:b7:2d:ac:5a:3a:92:2e:3f:03:3b:f5:6e:97:
ab:c2:05:73:cd:66:79:52:dc:21:a0:ae:73:19:89:
7b:5e:9a:15:9f:ce:01:da:50:a8:e8:56:b4:c5:a8:
9f:0f:7b:e8:3a:9f:2a:1c:c7:61:12:14:33:32:0e:
ed:5d:21:84:a7:ff:e0:3c:ef:c2:30:84:a0:17:d1:
c3:da:ca:6f:94:f4:fa:f5:0b:7d:8f:c8:ef:df:1a:
43:81:46:6d:c0:5b:16:ad:07:54:cb:dc:35:ae:fe:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AD:6A:32:3B:F6:9B:F1:4C:2F:BD:1F:3E:F0:1C:D1:7A:FA:36:62
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/3K1qMjv2m_FML70fPvAc0Xr6NmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:4c:df:59:60:47:35:ae:1d:c6:a2:01:4d:d2:38:ed:ce:15:
6f:1b:de:65:10:1b:d0:38:5d:31:e7:9b:a2:c8:03:a2:14:a3:
3e:78:58:53:a9:c4:fa:e8:f0:aa:cc:f4:47:c4:42:48:f8:f2:
3b:c2:c2:e5:6a:d2:b2:a3:5e:1c:2b:3f:8d:28:81:2d:ee:61:
aa:42:8d:75:0e:9a:24:4a:9d:00:cd:62:5b:80:54:13:1e:df:
c4:66:49:34:78:21:32:f2:f0:c3:4a:fd:e5:20:56:d9:3c:26:
de:27:f5:eb:59:2b:eb:35:34:65:56:9a:64:6e:07:c3:47:bf:
42:29:b6:41:de:28:bd:e8:87:df:4d:0d:d1:de:e6:75:b5:c7:
f8:e6:5f:01:81:42:80:e9:7c:0b:fb:ef:55:b7:40:26:ef:bf:
35:5c:14:92:2c:97:56:c5:4b:da:13:fd:63:35:f1:66:be:e9:
f9:16:e2:99:17:9a:ef:1b:b5:c2:91:2b:2a:dc:14:45:ca:e9:
e8:a7:98:99:74:cf:e4:b5:57:c9:23:6a:36:58:a5:c8:28:5b:
1b:22:1a:3e:eb:f9:17:f9:2b:a1:83:d8:d4:3c:dd:b0:c5:f9:
85:d9:59:bc:0b:2b:b2:45:39:30:2b:4d:4d:87:36:23:d1:bc:
7f:8d:b0:18
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAcSp6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDQ1MjNmODgxMWViZTVhYTM1OTg1MTFhNDhmM2JhZjAwMDFhOGU4MB4XDTIyMDEw
MTAyNTMzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGNhZDZhMzIzYmY2
OWJmMTRjMmZiZDFmM2VmMDFjZDE3YWZhMzY2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvzbPU9iwWHI4v+1JzwgsL7ZEQfWQ9o/D9v02H6bdTUmM7c
kI+5Z0OJwAUjYBgw9nXsloMooOLF0GfbjEjC8U2zTr9WR2MWSXwkAhRA80R7znKr
xWGNzcjU+wWS9fR6WPueo6JdO7hYPyLRUH1a05ttMHNb5CtrsT4Ysnb/uk/bGZAO
jtMKHdTeC9VXnYujD8f0GuoLS7K3LaxaOpIuPwM79W6Xq8IFc81meVLcIaCucxmJ
e16aFZ/OAdpQqOhWtMWonw976DqfKhzHYRIUMzIO7V0hhKf/4DzvwjCEoBfRw9rK
b5T0+vULfY/I798aQ4FGbcBbFq0HVMvcNa7+WckCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTcrWoyO/ab8UwvvR8+8BzRevo2YjAfBgNVHSMEGDAWgBRQRSP4gR6+WqNZ
hRGkjzuvAAGo6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VFVWotSUVldmxxaldZVVJwSTg3cndBQnFPZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvM2IwMjNlLWEzOTctNDZiYi05NDY1LWJmM2Y2MmI5NWYxMC8x
LzNLMXFNanYybV9GTUw3MGZQdkFjMFhyNk5tSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
M2IwMjNlLWEzOTctNDZiYi05NDY1LWJmM2Y2MmI5NWYxMC8xL1VFVWotSUVldmxx
aldZVVJwSTg3cndBQnFPZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnvXDANBgkqhkiG9w0BAQsFAAOC
AQEATUzfWWBHNa4dxqIBTdI47c4VbxveZRAb0DhdMeebosgDohSjPnhYU6nE+ujw
qsz0R8RCSPjyO8LC5WrSsqNeHCs/jSiBLe5hqkKNdQ6aJEqdAM1iW4BUEx7fxGZJ
NHghMvLww0r95SBW2Twm3if161kr6zU0ZVaaZG4Hw0e/Qim2Qd4oveiH300N0d7m
dbXH+OZfAYFCgOl8C/vvVbdAJu+/NVwUkiyXVsVL2hP9YzXxZr7p+RbimRea7xu1
wpErKtwURcrp6KeYmXTP5LVXySNqNlilyChbGyIaPuv5F/kroYPY1DzdsMX5hdlZ
vAsrskU5MCtNTYc2I9G8f42wGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org