Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/B6OeqDgb8pizsWSogT64RHb96eg.roa
File: B6OeqDgb8pizsWSogT64RHb96eg.roa (raw, json)
Hash identifier: qFcJ3MkxSudoqTQdtqwk5MSGWLWjMHgB95TgcG/mb4o=
Subject key identifier: 07:A3:9E:A8:38:1B:F2:98:B3:B1:64:A8:81:3E:B8:44:76:FD:E9:E8
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 03C07D31
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/B6OeqDgb8pizsWSogT64RHb96eg.roa
Signing time: Sat 01 Jan 2022 01:56:53 +0000
ROA not before: Sat 01 Jan 2022 01:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56388
IP address blocks: 185.156.200.0/24 maxlen: 24
185.156.203.0/24 maxlen: 24
185.156.201.0/24 maxlen: 24
185.156.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62946609 (0x3c07d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Jan 1 01:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07a39ea8381bf298b3b164a8813eb84476fde9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:e3:33:bf:a3:7b:53:60:63:9d:ac:61:d5:
23:14:78:ac:f9:83:d6:ba:1b:d3:cb:67:d4:34:25:
d1:89:1b:89:e6:ce:ba:d6:c9:f5:6f:38:d5:4b:1a:
bf:41:a2:f9:6c:18:82:81:f2:0c:4d:c1:76:38:52:
1a:c6:c0:a8:18:c6:c4:74:d8:67:fe:79:a4:28:60:
06:54:fa:0c:a7:0a:1e:e6:43:f2:c1:61:4a:1a:78:
f7:fb:2f:0e:30:ca:15:47:4c:91:a5:8a:6a:26:0e:
c2:ca:0f:f5:bc:0d:ad:27:8f:42:bb:f8:e6:eb:cb:
6a:d2:02:ea:8a:bd:df:83:21:69:92:d6:b1:db:44:
a5:7d:20:0b:c9:83:cf:f7:aa:c4:ea:89:07:ad:bf:
01:75:ea:12:9c:d5:17:10:ba:14:b0:bb:e8:e2:1d:
3d:83:53:10:79:82:c7:58:56:25:2b:5a:36:1d:0d:
92:60:52:a8:05:3b:d0:b8:04:d9:de:39:c4:08:34:
1b:de:eb:b4:79:8c:45:8b:96:be:03:68:63:75:f5:
79:9a:2a:29:ec:4a:2f:f4:ae:60:28:23:f8:f1:7b:
69:69:ac:37:a4:a3:be:10:88:46:09:3f:f3:82:58:
93:3b:37:1a:9e:ee:98:49:3c:03:15:17:08:d1:f5:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A3:9E:A8:38:1B:F2:98:B3:B1:64:A8:81:3E:B8:44:76:FD:E9:E8
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/B6OeqDgb8pizsWSogT64RHb96eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.200.0/22
Signature Algorithm: sha256WithRSAEncryption
65:0d:9d:86:c0:12:1b:54:b8:37:38:47:e8:b2:5d:e9:40:79:
f6:6b:d9:ad:6b:e4:3e:31:cb:ac:50:fb:b4:0d:f7:fc:8d:f6:
16:c7:ec:b9:e0:1d:3a:62:13:40:af:cf:16:2b:8f:4f:f9:0f:
4c:16:bd:e6:07:1c:61:f0:3d:80:1a:c4:1f:12:85:78:b7:8b:
1b:fb:89:fd:10:85:35:96:81:78:05:f0:df:50:7a:63:89:95:
4e:4e:7a:90:36:8a:0f:0e:46:97:46:52:c7:4f:4b:2c:f8:60:
9e:11:00:12:b0:f9:36:a2:16:bc:e5:e5:0c:f7:03:29:22:65:
31:0b:0e:df:e0:22:2a:d8:0e:e7:97:50:aa:15:0f:72:46:f1:
04:72:89:1d:a0:58:9e:58:3b:87:7d:72:4c:3a:ce:7e:c4:16:
4f:ee:2a:ad:bd:16:71:fc:d0:80:00:99:a9:e5:09:6f:68:1d:
cc:42:36:cb:90:b0:50:03:16:4a:b3:13:f7:f0:8e:fd:a8:54:
83:ef:cc:ab:35:c0:a8:a5:61:bd:52:7e:0a:4c:8d:c3:5a:6b:
3c:a6:78:07:49:8d:6f:8d:ff:64:28:6e:dc:67:eb:c0:ea:a6:
e3:2b:03:75:63:95:3b:37:e6:2b:c8:1d:30:d3:90:0d:bb:c3:
d3:59:d4:bb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8B9MTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZDM3MGE0OGI1OWZiODExNDk1ZjExYzQ5NzM0NDgyZjIyYjFhMzkyMB4XDTIyMDEw
MTAxNTY1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDdhMzllYTgzODFi
ZjI5OGIzYjE2NGE4ODEzZWI4NDQ3NmZkZTllODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCx4zO/o3tTYGOdrGHVIxR4rPmD1rob08tn1DQl0YkbiebO
utbJ9W841Usav0Gi+WwYgoHyDE3BdjhSGsbAqBjGxHTYZ/55pChgBlT6DKcKHuZD
8sFhShp49/svDjDKFUdMkaWKaiYOwsoP9bwNrSePQrv45uvLatIC6oq934MhaZLW
sdtEpX0gC8mDz/eqxOqJB62/AXXqEpzVFxC6FLC76OIdPYNTEHmCx1hWJStaNh0N
kmBSqAU70LgE2d45xAg0G97rtHmMRYuWvgNoY3X1eZoqKexKL/SuYCgj+PF7aWms
N6SjvhCIRgk/84JYkzs3Gp7umEk8AxUXCNH10HUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQHo56oOBvymLOxZKiBPrhEdv3p6DAfBgNVHSMEGDAWgBRdNwpItZ+4EUlf
EcSXNEgvIrGjkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hUY0tTTFdmdUJGSlh4SEVselJJTHlLeG81SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvNzA4NThhLTYzOTUtNDAyZC05YWNlLWUyNzIwMTMwMjZiNC8x
L0I2T2VxRGdiOHBpenNXU29nVDY0UkhiOTZlZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
NzA4NThhLTYzOTUtNDAyZC05YWNlLWUyNzIwMTMwMjZiNC8xL1hUY0tTTFdmdUJG
Slh4SEVselJJTHlLeG81SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmcyDANBgkqhkiG9w0BAQsFAAOC
AQEAZQ2dhsASG1S4NzhH6LJd6UB59mvZrWvkPjHLrFD7tA33/I32FsfsueAdOmIT
QK/PFiuPT/kPTBa95gccYfA9gBrEHxKFeLeLG/uJ/RCFNZaBeAXw31B6Y4mVTk56
kDaKDw5Gl0ZSx09LLPhgnhEAErD5NqIWvOXlDPcDKSJlMQsO3+AiKtgO55dQqhUP
ckbxBHKJHaBYnlg7h31yTDrOfsQWT+4qrb0WcfzQgACZqeUJb2gdzEI2y5CwUAMW
SrMT9/CO/ahUg+/MqzXAqKVhvVJ+CkyNw1prPKZ4B0mNb43/ZChu3GfrwOqm4ysD
dWOVOzfmK8gdMNOQDbvD01nUuw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:21 2023 by rpki-client on console-fra.rpki-client.org