Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Dw_imeqDMzLb8osy_vTiWk4jbTk.roa
File: Dw_imeqDMzLb8osy_vTiWk4jbTk.roa (raw, json)
Hash identifier: DWwijY6IVyc9DSzMCW4frTbftoB9kn1imU8nBJyeXfY=
Subject key identifier: 0F:0F:E2:99:EA:83:33:32:DB:F2:8B:32:FE:F4:E2:5A:4E:23:6D:39
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0BEB5AB7
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Dw_imeqDMzLb8osy_vTiWk4jbTk.roa
Signing time: Thu 23 Jun 2022 12:12:31 +0000
ROA not before: Thu 23 Jun 2022 12:12:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.237.82.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.237.83.0/24 maxlen: 24
185.86.81.0/24 maxlen: 24
185.86.80.0/24 maxlen: 24
185.205.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199973559 (0xbeb5ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jun 23 12:12:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f0fe299ea833332dbf28b32fef4e25a4e236d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:58:cc:36:f0:7b:89:5b:13:f4:c1:0d:b3:
6a:47:2b:e1:21:4b:9a:19:5b:86:da:62:f1:cf:33:
4d:e2:d1:02:f8:6b:95:24:85:80:17:2f:70:cf:d0:
28:aa:38:de:84:bb:fe:f9:b3:1e:cb:22:cd:1c:63:
3c:c0:41:d2:ec:89:a0:30:63:86:5d:a3:79:70:73:
ff:eb:3f:87:e4:c7:6c:de:3f:f1:a6:af:b6:7d:ca:
09:93:cc:58:e6:f7:de:3c:50:f5:32:1d:f2:3e:88:
48:57:64:b0:a2:9d:ad:68:45:9d:18:23:8b:64:ed:
bd:fc:f7:07:85:0e:d9:f2:e2:bd:61:7f:c1:7e:37:
cf:90:17:d4:00:b5:50:1c:f8:b7:a7:78:18:19:8f:
79:d5:e3:d9:f6:66:4f:50:f2:16:f0:52:c3:47:83:
2c:96:24:15:80:80:0a:0d:80:74:ee:4e:0c:98:51:
ee:2e:72:40:06:ea:97:7a:11:cc:1c:4e:2e:3c:fc:
d4:81:38:d6:fe:ba:20:d9:d3:c2:91:02:c6:10:a4:
0b:b8:21:81:ab:8b:4e:79:07:ee:96:cb:b2:61:2c:
2e:05:29:d0:b7:7b:3a:45:2b:3d:b3:92:42:e6:5f:
51:54:3f:51:12:d7:70:5b:42:83:8f:39:1d:c9:4b:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0F:E2:99:EA:83:33:32:DB:F2:8B:32:FE:F4:E2:5A:4E:23:6D:39
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Dw_imeqDMzLb8osy_vTiWk4jbTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.80.0/23
185.205.19.0/24
185.237.81.0-185.237.83.255
Signature Algorithm: sha256WithRSAEncryption
14:dd:c5:bb:3e:d3:85:32:f5:e5:cf:55:8a:64:48:de:a2:76:
2d:80:92:c9:8a:79:bb:c5:34:3f:92:51:9d:de:42:92:87:fa:
a8:e0:53:2a:b4:07:bf:ba:c1:64:3a:57:7a:2f:50:97:af:cd:
36:37:ea:67:94:45:ac:c7:26:aa:ce:94:d4:25:13:1e:94:a0:
a6:e3:96:a2:43:65:73:bf:f5:c9:62:fe:c6:c6:bc:f0:7c:5c:
fc:53:2a:21:8f:37:3d:71:98:79:94:32:6f:4e:7b:37:ec:49:
b2:14:a5:21:22:9c:ed:ff:41:ae:5d:e5:32:ec:b8:58:61:8c:
44:25:c2:5a:1e:c4:be:53:88:66:53:1d:78:52:b3:bd:dd:1b:
ef:20:20:25:6a:34:ee:6b:7b:27:40:96:09:29:17:1f:c1:b1:
b3:2a:a4:22:25:4b:00:93:da:37:c1:c9:36:15:62:aa:81:89:
70:0e:cc:79:23:4f:94:3c:96:7a:ae:06:0d:f0:f0:c0:a1:c5:
1a:37:5a:31:cd:cb:42:9c:36:c0:54:7a:aa:8c:19:6f:87:47:
f9:a4:38:25:7d:c1:bb:c5:b2:54:42:47:c9:e6:a2:70:fb:38:
14:3c:3b:a1:9a:5b:5d:86:90:ed:65:6d:1e:f1:a9:c8:c5:6d:
06:ad:2a:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEC+tatzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDU5MmU2ODg5NWM3MDY4YjQ2NTU1MDg5MTdhZDViYmRkYmQwYTVmMB4XDTIyMDYy
MzEyMTIzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGYwZmUyOTllYTgz
MzMzMmRiZjI4YjMyZmVmNGUyNWE0ZTIzNmQzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKlbWMw28HuJWxP0wQ2zakcr4SFLmhlbhtpi8c8zTeLRAvhr
lSSFgBcvcM/QKKo43oS7/vmzHssizRxjPMBB0uyJoDBjhl2jeXBz/+s/h+THbN4/
8aavtn3KCZPMWOb33jxQ9TId8j6ISFdksKKdrWhFnRgji2Ttvfz3B4UO2fLivWF/
wX43z5AX1AC1UBz4t6d4GBmPedXj2fZmT1DyFvBSw0eDLJYkFYCACg2AdO5ODJhR
7i5yQAbql3oRzBxOLjz81IE41v66INnTwpECxhCkC7ghgauLTnkH7pbLsmEsLgUp
0Ld7OkUrPbOSQuZfUVQ/URLXcFtCg485HclLuyUCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBQPD+KZ6oMzMtvyizL+9OJaTiNtOTAfBgNVHSMEGDAWgBRQWS5oiVxwaLRl
VQiRetW73b0KXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VGa3VhSWxjY0dpMFpWVUlrWHJWdTkyOUNsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8x
L0R3X2ltZXFETXpMYjhvc3lfdlRpV2s0amJUay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8xL1VGa3VhSWxjY0dp
MFpWVUlrWHJWdTkyOUNsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAblWUAMEALnNEzAMAwQAue1RAwQC
ue1QMA0GCSqGSIb3DQEBCwUAA4IBAQAU3cW7PtOFMvXlz1WKZEjeonYtgJLJinm7
xTQ/klGd3kKSh/qo4FMqtAe/usFkOld6L1CXr802N+pnlEWsxyaqzpTUJRMelKCm
45aiQ2Vzv/XJYv7GxrzwfFz8Uyohjzc9cZh5lDJvTns37EmyFKUhIpzt/0GuXeUy
7LhYYYxEJcJaHsS+U4hmUx14UrO93RvvICAlajTua3snQJYJKRcfwbGzKqQiJUsA
k9o3wck2FWKqgYlwDsx5I0+UPJZ6rgYN8PDAocUaN1oxzctCnDbAVHqqjBlvh0f5
pDglfcG7xbJUQkfJ5qJw+zgUPDuhmltdhpDtZW0e8anIxW0GrSon
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org