Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/iZVcWyg7iaHssZ5O6YNhbuHWNkw.roa
File: iZVcWyg7iaHssZ5O6YNhbuHWNkw.roa (raw, json)
Hash identifier: hL7VlVN83dzhxMtQgaeOolH08psJe6m14JLavznHsM4=
Subject key identifier: 89:95:5C:5B:28:3B:89:A1:EC:B1:9E:4E:E9:83:61:6E:E1:D6:36:4C
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0BB8E904
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/iZVcWyg7iaHssZ5O6YNhbuHWNkw.roa
Signing time: Sat 01 Jan 2022 02:53:05 +0000
ROA not before: Sat 01 Jan 2022 02:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202289
IP address blocks: 185.155.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196667652 (0xbb8e904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Jan 1 02:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89955c5b283b89a1ecb19e4ee983616ee1d6364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:04:8f:c3:d7:e6:3d:e7:6a:29:02:fc:d7:
9b:93:73:21:4b:0c:5e:fe:51:4f:da:30:0c:b0:43:
8b:8b:ab:9e:9b:36:c4:f6:c1:ae:fb:c9:bb:70:bd:
d9:8e:4c:ac:cb:5d:bc:5c:77:14:42:6f:e2:49:a5:
73:43:9d:3a:ae:b1:ae:eb:23:83:2c:77:b8:e6:a5:
0e:21:d7:36:d9:a3:ae:37:b3:f8:61:66:24:2e:ba:
a3:82:9e:61:27:61:52:ab:91:8b:24:31:cd:2d:02:
e8:36:79:64:c3:ac:a2:d3:5e:74:3e:f8:60:bf:11:
e0:9f:cf:48:e1:04:4b:ee:32:2b:86:32:52:4b:3b:
b8:bf:ef:dc:48:2b:1f:c1:84:da:2f:64:03:e2:1b:
98:a3:87:b2:1d:a3:e1:06:18:fd:54:f2:20:81:0c:
68:17:26:ba:01:3b:53:f9:3b:94:51:4d:4f:37:da:
a8:0a:87:9a:9a:90:1a:7c:7d:76:c0:28:09:d8:36:
28:08:a4:a6:79:fe:09:19:5f:1a:d5:ab:ce:e4:c1:
33:7c:fa:78:b0:e3:33:91:34:24:b8:64:35:ab:2e:
da:01:d5:0f:41:f7:b4:b4:09:15:38:3d:fd:a4:07:
8d:56:fa:36:68:a6:e0:fc:e0:a0:42:be:a5:36:88:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:95:5C:5B:28:3B:89:A1:EC:B1:9E:4E:E9:83:61:6E:E1:D6:36:4C
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/iZVcWyg7iaHssZ5O6YNhbuHWNkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:91:ff:2c:e7:95:d3:28:39:ab:85:9f:95:d9:d1:a1:fa:ea:
ee:b0:29:78:e4:a0:57:a4:7d:3c:8c:d7:da:65:aa:7c:98:c0:
00:79:a9:4d:86:1d:fd:9a:50:b8:dc:d3:eb:96:ba:3b:5b:80:
5b:5a:10:7e:93:d0:fb:b0:48:29:f2:a0:4c:6c:59:ba:80:f9:
b5:c9:90:fd:b2:64:2e:c8:b9:ea:81:eb:a9:56:3b:27:fb:34:
15:a2:d4:27:8b:0d:cb:8a:a4:3f:dd:b4:84:08:1b:6a:b3:81:
20:84:25:b6:17:4b:07:a4:b6:d3:53:77:2d:1f:0d:57:ad:2c:
25:e5:cd:c4:37:4c:d8:17:da:0f:4a:5f:3b:35:02:6f:12:b4:
74:2c:89:4b:43:20:f1:ae:ce:63:37:86:49:d3:c9:e2:d6:df:
2c:6e:46:dd:71:1a:23:06:3a:5e:21:08:02:38:bd:b7:2b:6e:
b8:51:a8:13:02:7c:b6:73:4c:85:98:db:b8:4a:a4:75:55:d6:
50:5e:ad:f2:ca:f1:ee:e6:ab:37:b7:f8:c9:21:aa:e7:50:17:
32:93:bd:4a:fc:52:a8:47:6f:d0:15:30:5f:c7:51:2d:a3:b9:
13:ea:37:6f:fc:b7:90:98:9c:b0:6f:5f:97:b1:df:15:8e:b6:
5f:a8:a6:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC7jpBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ODViNDkwZDc2NmY0YjFjMjExZDdkYWRkNmVmYTc3MGY2ZWI5ZTI1MB4XDTIyMDEw
MTAyNTMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODk5NTVjNWIyODNi
ODlhMWVjYjE5ZTRlZTk4MzYxNmVlMWQ2MzY0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOkABI/D1+Y952opAvzXm5NzIUsMXv5RT9owDLBDi4urnps2
xPbBrvvJu3C92Y5MrMtdvFx3FEJv4kmlc0OdOq6xrusjgyx3uOalDiHXNtmjrjez
+GFmJC66o4KeYSdhUquRiyQxzS0C6DZ5ZMOsotNedD74YL8R4J/PSOEES+4yK4Yy
Uks7uL/v3EgrH8GE2i9kA+IbmKOHsh2j4QYY/VTyIIEMaBcmugE7U/k7lFFNTzfa
qAqHmpqQGnx9dsAoCdg2KAikpnn+CRlfGtWrzuTBM3z6eLDjM5E0JLhkNasu2gHV
D0H3tLQJFTg9/aQHjVb6Nmim4PzgoEK+pTaIeg0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSJlVxbKDuJoeyxnk7pg2Fu4dY2TDAfBgNVHSMEGDAWgBR4W0kNdm9LHCEd
fa3W76dw9uueJTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VGdEpEWFp2U3h3aEhYMnQxdS1uY1Bicm5pVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvNWYzNDNkLTliNDItNDRiNC05MDY3LTdjYWUwNDBlNDllOC8x
L2laVmNXeWc3aWFIc3NaNU82WU5oYnVIV05rdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
NWYzNDNkLTliNDItNDRiNC05MDY3LTdjYWUwNDBlNDllOC8xL2VGdEpEWFp2U3h3
aEhYMnQxdS1uY1Bicm5pVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmbEDANBgkqhkiG9w0BAQsFAAOC
AQEACpH/LOeV0yg5q4WfldnRofrq7rApeOSgV6R9PIzX2mWqfJjAAHmpTYYd/ZpQ
uNzT65a6O1uAW1oQfpPQ+7BIKfKgTGxZuoD5tcmQ/bJkLsi56oHrqVY7J/s0FaLU
J4sNy4qkP920hAgbarOBIIQlthdLB6S201N3LR8NV60sJeXNxDdM2BfaD0pfOzUC
bxK0dCyJS0Mg8a7OYzeGSdPJ4tbfLG5G3XEaIwY6XiEIAji9tytuuFGoEwJ8tnNM
hZjbuEqkdVXWUF6t8srx7uarN7f4ySGq51AXMpO9SvxSqEdv0BUwX8dRLaO5E+o3
b/y3kJicsG9fl7HfFY62X6im7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:55 2024 by rpki-client on console-ams.rpki-client.org