Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ee3LQcFqZ0JlDBQ-__sh4U-uegA.roa
File: ee3LQcFqZ0JlDBQ-__sh4U-uegA.roa (raw, json)
Hash identifier: J1ZE+3Fb98mkgx5uIBQC6Km1Gavo0S9BZLhZoR+mrqA=
Subject key identifier: 79:ED:CB:41:C1:6A:67:42:65:0C:14:3E:FF:FB:21:E1:4F:AE:7A:00
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 199B0C02
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ee3LQcFqZ0JlDBQ-__sh4U-uegA.roa
Signing time: Sun 10 Apr 2022 22:04:23 +0000
ROA not before: Sun 10 Apr 2022 22:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 185.172.167.0/24 maxlen: 32
195.85.49.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429591554 (0x199b0c02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 10 22:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79edcb41c16a6742650c143efffb21e14fae7a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:4b:06:6c:b1:ef:f0:52:c3:f6:f4:56:e9:
45:2c:7b:8e:ff:db:55:b0:7e:f4:e3:88:dd:3f:b0:
5d:b4:01:44:dc:d8:40:f2:7f:97:1e:e5:d4:04:b4:
7b:60:69:ea:aa:30:83:93:dd:f7:c6:da:80:6d:d8:
1e:a6:03:5c:03:5c:c3:6f:73:c9:fb:03:e4:55:e9:
fd:97:6c:d5:73:8e:be:68:86:12:e1:a7:b9:7c:ed:
4e:6a:0e:59:56:70:08:69:10:47:06:e8:9b:a9:79:
76:99:21:44:33:ea:d1:c2:bf:c4:de:1e:15:2a:36:
e5:99:b0:e4:21:e6:b8:52:1f:78:70:19:b4:0b:99:
47:fe:1d:c9:62:9d:97:a0:8d:7e:27:e7:04:c6:e5:
db:8d:26:65:6e:c2:41:00:4a:8e:33:49:66:62:90:
1d:65:7f:3e:bf:4e:e5:43:10:bd:47:e6:ff:3a:e9:
18:a7:e5:cf:72:23:c0:92:94:c9:dd:23:04:04:4a:
17:8e:d0:53:fb:a9:f9:fe:07:03:81:f1:6a:f2:cc:
b1:9d:ed:72:79:a1:30:16:96:bb:83:aa:d9:dd:22:
90:78:cc:97:61:80:56:9e:9b:39:99:97:88:7b:0e:
1c:0d:47:b6:56:6d:ce:4c:f1:3d:ea:04:54:d4:11:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:CB:41:C1:6A:67:42:65:0C:14:3E:FF:FB:21:E1:4F:AE:7A:00
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ee3LQcFqZ0JlDBQ-__sh4U-uegA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
195.85.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4a:dc:73:5c:f6:07:04:ac:a2:c1:13:d5:40:e5:0f:5f:3f:
1f:30:c5:0e:67:5e:06:75:58:7a:c8:ec:af:90:8d:2a:39:ac:
df:96:7f:06:0b:eb:05:ca:68:85:12:5a:2e:25:fc:7a:b8:e6:
c3:55:4d:54:ef:53:e5:b2:48:d9:1d:a5:b0:45:eb:e3:46:7b:
7d:97:86:93:f5:50:45:e6:be:1a:5d:4a:d1:c6:39:94:98:30:
cc:7d:de:74:cb:3d:42:29:c8:c6:c4:de:a3:15:c1:e5:d0:a0:
2d:8c:03:5f:79:d5:57:85:79:48:61:a0:55:23:fd:bb:c7:28:
b1:80:c7:7c:38:db:7c:ae:ec:c7:e1:4e:4a:db:58:86:5b:d0:
a2:3f:5c:d8:c8:64:15:3a:0b:81:56:bf:de:64:ac:dc:a0:17:
ad:08:23:15:bb:6b:2f:7b:54:78:f2:71:c9:2d:57:dd:b4:13:
52:82:ed:b6:39:9b:50:ac:79:8e:d0:4e:8d:e1:51:bd:80:69:
4d:7b:d8:58:e8:d6:53:ef:56:10:a2:f6:d1:20:ef:75:82:4d:
cc:8c:63:1a:eb:f7:fa:86:7f:26:4e:db:7b:f2:09:27:b1:6f:
3d:1b:04:16:e4:75:7f:86:9a:19:41:1d:a6:d5:70:3b:3c:c5:
25:f3:da:4e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGZsMAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDQx
MDIyMDQyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzllZGNiNDFjMTZh
Njc0MjY1MGMxNDNlZmZmYjIxZTE0ZmFlN2EwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMG5SwZsse/wUsP29FbpRSx7jv/bVbB+9OOI3T+wXbQBRNzY
QPJ/lx7l1AS0e2Bp6qowg5Pd98bagG3YHqYDXANcw29zyfsD5FXp/Zds1XOOvmiG
EuGnuXztTmoOWVZwCGkQRwbom6l5dpkhRDPq0cK/xN4eFSo25Zmw5CHmuFIfeHAZ
tAuZR/4dyWKdl6CNfifnBMbl240mZW7CQQBKjjNJZmKQHWV/Pr9O5UMQvUfm/zrp
GKflz3IjwJKUyd0jBARKF47QU/up+f4HA4HxavLMsZ3tcnmhMBaWu4Oq2d0ikHjM
l2GAVp6bOZmXiHsOHA1HtlZtzkzxPeoEVNQRb5MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR57ctBwWpnQmUMFD7/+yHhT656ADAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2VlM0xRY0ZxWjBKbERCUS1fX3NoNFUtdWVnQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALmspwMEAMNVMTANBgkqhkiG9w0B
AQsFAAOCAQEAbErcc1z2BwSsosET1UDlD18/HzDFDmdeBnVYesjsr5CNKjms35Z/
BgvrBcpohRJaLiX8erjmw1VNVO9T5bJI2R2lsEXr40Z7fZeGk/VQRea+Gl1K0cY5
lJgwzH3edMs9QinIxsTeoxXB5dCgLYwDX3nVV4V5SGGgVSP9u8cosYDHfDjbfK7s
x+FOSttYhlvQoj9c2MhkFToLgVa/3mSs3KAXrQgjFbtrL3tUePJxyS1X3bQTUoLt
tjmbUKx5jtBOjeFRvYBpTXvYWOjWU+9WEKL20SDvdYJNzIxjGuv3+oZ/Jk7be/IJ
J7FvPRsEFuR1f4aaGUEdptVwOzzFJfPaTg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org