Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ow16SRKrYa3GSHVqLGSOv17QxSM.roa
File: ow16SRKrYa3GSHVqLGSOv17QxSM.roa (raw, json)
Hash identifier: nVCqNzy7kiWsPThDV86TSbOjBqKgiLOm9pzcOI+j3CY=
Subject key identifier: A3:0D:7A:49:12:AB:61:AD:C6:48:75:6A:2C:64:8E:BF:5E:D0:C5:23
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0A3C7C8B
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ow16SRKrYa3GSHVqLGSOv17QxSM.roa
Signing time: Sat 01 Jan 2022 09:53:40 +0000
ROA not before: Sat 01 Jan 2022 09:53:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206119
IP address blocks: 185.237.80.0/24 maxlen: 24
185.205.18.0/24 maxlen: 24
193.36.62.0/24 maxlen: 24
185.254.93.0/24 maxlen: 24
185.254.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171736203 (0xa3c7c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 09:53:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a30d7a4912ab61adc648756a2c648ebf5ed0c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:9d:33:24:69:10:95:09:5c:e9:1f:5e:bd:
ca:0d:87:f0:9f:ce:ef:c4:6f:6d:41:bb:2a:02:a8:
83:5d:d9:f7:e6:ef:d6:02:52:ca:61:51:a7:77:bb:
88:9c:36:cf:a3:b1:98:c3:f6:21:45:a9:0b:b2:5e:
59:a4:0a:9c:b7:3b:1e:e4:fc:08:40:30:9b:f4:3a:
b1:8c:29:85:b0:91:95:9c:b6:0a:e2:a0:9b:1a:fd:
3c:a3:a4:01:a7:4a:c8:18:44:f2:88:93:cb:e7:6b:
de:48:09:c9:7b:cf:8a:79:61:5e:3a:d6:16:cc:2a:
9c:c1:32:76:2a:25:80:af:25:54:1d:7e:cd:86:ec:
2b:57:83:de:4b:da:e5:1d:f4:98:51:19:60:70:a7:
e8:a1:82:ad:39:97:3f:1a:df:28:77:c4:0c:6d:9f:
e9:9d:04:98:da:81:aa:f6:68:7b:7c:c8:17:66:c2:
39:33:2d:26:14:a6:16:47:53:6f:cd:01:93:a0:ac:
08:4b:61:e5:88:a0:62:a9:3b:f6:1b:f4:38:a7:8c:
9b:07:31:52:bb:84:6c:14:45:c1:e0:04:88:22:76:
a0:8f:6e:a8:4e:91:f0:d4:8a:69:c0:31:c8:6c:25:
ed:4b:7f:68:3f:8d:84:19:c1:f4:5d:58:09:65:49:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:7A:49:12:AB:61:AD:C6:48:75:6A:2C:64:8E:BF:5E:D0:C5:23
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ow16SRKrYa3GSHVqLGSOv17QxSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.18.0/24
185.237.80.0/24
185.254.93.0/24
185.254.95.0/24
193.36.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d5:09:5f:c0:49:a1:47:97:78:3b:bb:0e:26:57:76:4d:c3:
dd:f5:d0:e2:d9:09:cd:10:f7:8c:06:38:a9:13:ba:d2:c1:74:
3b:01:5e:b4:8c:e7:f2:b6:cc:9f:3e:64:37:92:e8:45:35:46:
2d:4e:b3:74:66:5d:79:2e:fe:ac:66:9a:6d:3f:85:05:7d:74:
a5:06:55:5d:e1:44:fb:2a:90:ad:1d:1d:84:2c:37:f2:cb:5f:
b8:80:82:fb:35:62:34:a0:7f:4d:b2:a6:e0:6d:a2:15:44:ad:
e9:5f:67:5c:37:3b:7a:bf:b7:1d:13:b0:f9:d3:9d:54:67:bd:
d9:4a:83:71:88:c0:fd:ae:95:3b:be:a5:48:de:60:43:1d:04:
8d:18:ac:05:d9:6d:eb:f6:ae:71:82:4a:c2:fc:ef:85:18:c4:
bf:c3:c9:b2:99:16:56:17:f3:7b:cf:62:21:86:ed:40:ee:76:
88:71:82:fa:86:05:87:e1:2c:a5:10:07:fb:7a:28:7d:3f:b9:
7e:33:dc:59:bf:63:40:a2:3b:f0:92:eb:08:15:92:a8:c7:55:
a0:39:10:ea:e8:c8:05:be:0f:4d:65:a9:8a:3a:bd:21:44:79:
fd:f6:7f:b9:9c:86:9c:d0:d5:6d:13:1d:30:e0:6f:3a:88:7c:
2a:50:e1:f0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIECjx8izANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDU5MmU2ODg5NWM3MDY4YjQ2NTU1MDg5MTdhZDViYmRkYmQwYTVmMB4XDTIyMDEw
MTA5NTM0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTMwZDdhNDkxMmFi
NjFhZGM2NDg3NTZhMmM2NDhlYmY1ZWQwYzUyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOY/nTMkaRCVCVzpH169yg2H8J/O78RvbUG7KgKog13Z9+bv
1gJSymFRp3e7iJw2z6OxmMP2IUWpC7JeWaQKnLc7HuT8CEAwm/Q6sYwphbCRlZy2
CuKgmxr9PKOkAadKyBhE8oiTy+dr3kgJyXvPinlhXjrWFswqnMEydiolgK8lVB1+
zYbsK1eD3kva5R30mFEZYHCn6KGCrTmXPxrfKHfEDG2f6Z0EmNqBqvZoe3zIF2bC
OTMtJhSmFkdTb80Bk6CsCEth5YigYqk79hv0OKeMmwcxUruEbBRFweAEiCJ2oI9u
qE6R8NSKacAxyGwl7Ut/aD+NhBnB9F1YCWVJ73cCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSjDXpJEqthrcZIdWosZI6/XtDFIzAfBgNVHSMEGDAWgBRQWS5oiVxwaLRl
VQiRetW73b0KXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VGa3VhSWxjY0dpMFpWVUlrWHJWdTkyOUNsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8x
L293MTZTUktyWWEzR1NIVnFMR1NPdjE3UXhTTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8xL1VGa3VhSWxjY0dp
MFpWVUlrWHJWdTkyOUNsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEALnNEgMEALntUAMEALn+XQMEALn+
XwMEAMEkPjANBgkqhkiG9w0BAQsFAAOCAQEATNUJX8BJoUeXeDu7DiZXdk3D3fXQ
4tkJzRD3jAY4qRO60sF0OwFetIzn8rbMnz5kN5LoRTVGLU6zdGZdeS7+rGaabT+F
BX10pQZVXeFE+yqQrR0dhCw38stfuICC+zViNKB/TbKm4G2iFUSt6V9nXDc7er+3
HROw+dOdVGe92UqDcYjA/a6VO76lSN5gQx0EjRisBdlt6/aucYJKwvzvhRjEv8PJ
spkWVhfze89iIYbtQO52iHGC+oYFh+EspRAH+3oofT+5fjPcWb9jQKI78JLrCBWS
qMdVoDkQ6ujIBb4PTWWpijq9IUR5/fZ/uZyGnNDVbRMdMOBvOoh8KlDh8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org