Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/cxvLBxq7Qm-kdqiqd0pdtp6UCjk.roa
File: cxvLBxq7Qm-kdqiqd0pdtp6UCjk.roa (raw, json)
Hash identifier: NqTuN8Y5LJdiURGMM3PGEt5rBJqn1EUfTk0bxFL73aM=
Subject key identifier: 73:1B:CB:07:1A:BB:42:6F:A4:76:A8:AA:77:4A:5D:B6:9E:94:0A:39
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 07C85996
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/cxvLBxq7Qm-kdqiqd0pdtp6UCjk.roa
Signing time: Sat 01 Jan 2022 06:56:30 +0000
ROA not before: Sat 01 Jan 2022 06:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203201
IP address blocks: 185.146.128.0/22 maxlen: 22
2a07:50c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130570646 (0x7c85996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Jan 1 06:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=731bcb071abb426fa476a8aa774a5db69e940a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:e6:b2:5a:e0:21:2f:ff:57:a0:21:01:9b:
ab:ed:79:bd:3e:c9:e8:47:c7:58:77:84:df:69:a2:
94:3a:29:2c:76:bd:d1:e9:a3:f8:ad:4e:61:85:33:
35:ad:53:ac:c1:39:37:0a:a6:de:10:28:67:e7:88:
75:dd:d8:73:c2:65:49:bc:36:fb:6d:63:56:53:61:
36:3a:27:52:e7:03:93:3d:55:e0:65:83:13:0b:2c:
33:b0:2d:86:a3:ee:f6:ca:e5:be:06:79:52:7b:0b:
ff:1a:ed:ca:42:82:2e:db:e8:86:86:d1:5c:81:7d:
34:bd:67:ad:9d:5f:18:0e:df:cf:a8:68:2d:c9:4e:
cb:11:20:53:e6:03:ba:af:c0:f2:a6:e4:dd:f0:2e:
38:84:97:99:f8:80:fd:73:91:92:93:4e:49:95:0d:
61:67:43:44:ed:aa:82:f6:50:a1:58:82:7b:4c:6f:
8f:5b:19:be:90:64:a8:96:56:0b:fd:3d:a3:52:75:
49:a0:19:a5:48:4c:b3:d9:0a:80:f9:a2:cb:8f:81:
6b:53:1c:fe:a4:9e:37:3d:8d:fd:b6:32:91:5c:6c:
6e:56:6c:24:68:4a:0b:35:88:4f:c2:c7:39:c7:39:
50:9d:d2:d7:b2:08:c8:d6:fe:22:e0:1a:d2:ce:6d:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:CB:07:1A:BB:42:6F:A4:76:A8:AA:77:4A:5D:B6:9E:94:0A:39
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/cxvLBxq7Qm-kdqiqd0pdtp6UCjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.128.0/22
IPv6:
2a07:50c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:b6:e7:47:9e:cf:61:a9:c7:a7:eb:0e:c6:05:1d:b9:86:b9:
c8:ae:9e:dc:ed:94:d9:4a:f7:77:ae:8e:aa:a0:10:01:cd:e5:
e4:3e:f7:0c:f1:dd:35:f5:d7:4e:e5:e0:85:40:18:39:85:33:
6a:9b:70:4d:4a:14:fb:e6:4f:2a:a2:da:68:15:7c:f2:ac:ca:
a8:cf:df:c1:a1:be:0a:0c:e9:ba:34:82:77:6c:22:e7:0b:28:
86:eb:82:e6:59:52:fd:a1:35:13:ab:70:72:df:e8:61:85:a8:
8e:c3:42:aa:fb:cd:87:a7:ef:f6:3f:70:5a:02:de:79:de:c8:
46:c1:91:71:4f:0f:b5:0e:d8:1f:4e:5c:93:2f:72:d9:0a:d2:
a0:e2:81:fd:c3:bf:15:2f:4e:a8:a8:20:6e:8e:79:88:a5:f1:
c7:e1:1d:d7:73:3c:78:58:f2:5f:c5:d4:6e:b0:52:db:4d:20:
64:9f:1a:cf:f6:60:38:4e:7d:71:86:77:00:fc:9e:40:01:40:
fd:63:d9:ed:b2:3a:68:79:01:bd:b1:bf:30:87:f3:3e:92:ce:
b4:dc:f5:cc:2f:ce:9d:33:39:99:02:dc:fb:f3:af:fd:6d:ff:
35:e0:7b:d6:b7:1a:b7:9b:01:de:d0:d2:26:f1:b6:da:ed:77:
36:b7:e3:1f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB8hZljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Nzk5MjA4OGU3NjU1Y2IxMzQwMjBjYTk1YjBlNTdkNGU2ZGFmNDBmMB4XDTIyMDEw
MTA2NTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzMxYmNiMDcxYWJi
NDI2ZmE0NzZhOGFhNzc0YTVkYjY5ZTk0MGEzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN0u5rJa4CEv/1egIQGbq+15vT7J6EfHWHeE32milDopLHa9
0emj+K1OYYUzNa1TrME5Nwqm3hAoZ+eIdd3Yc8JlSbw2+21jVlNhNjonUucDkz1V
4GWDEwssM7AthqPu9srlvgZ5UnsL/xrtykKCLtvohobRXIF9NL1nrZ1fGA7fz6ho
LclOyxEgU+YDuq/A8qbk3fAuOISXmfiA/XORkpNOSZUNYWdDRO2qgvZQoViCe0xv
j1sZvpBkqJZWC/09o1J1SaAZpUhMs9kKgPmiy4+Ba1Mc/qSeNz2N/bYykVxsblZs
JGhKCzWIT8LHOcc5UJ3S17IIyNb+IuAa0s5t/WUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRzG8sHGrtCb6R2qKp3Sl22npQKOTAfBgNVHSMEGDAWgBSHmSCI52VcsTQC
DKlbDlfU5tr0DzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2g1a2dpT2RsWExFMEFneXBXdzVYMU9iYTlBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvZTA4MzE4LTI5NzUtNDE3YS1iODYzLTg1ZWE2M2MyNDQ3NC8x
L2N4dkxCeHE3UW0ta2RxaXFkMHBkdHA2VUNqay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
ZTA4MzE4LTI5NzUtNDE3YS1iODYzLTg1ZWE2M2MyNDQ3NC8xL2g1a2dpT2RsWExF
MEFneXBXdzVYMU9iYTlBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmSgDANBAIAAjAHAwUDKgdQwDAN
BgkqhkiG9w0BAQsFAAOCAQEAfLbnR57PYanHp+sOxgUduYa5yK6e3O2U2Ur3d66O
qqAQAc3l5D73DPHdNfXXTuXghUAYOYUzaptwTUoU++ZPKqLaaBV88qzKqM/fwaG+
CgzpujSCd2wi5wsohuuC5llS/aE1E6twct/oYYWojsNCqvvNh6fv9j9wWgLeed7I
RsGRcU8PtQ7YH05cky9y2QrSoOKB/cO/FS9OqKggbo55iKXxx+Ed13M8eFjyX8XU
brBS200gZJ8az/ZgOE59cYZ3APyeQAFA/WPZ7bI6aHkBvbG/MIfzPpLOtNz1zC/O
nTM5mQLc+/Ov/W3/NeB71rcat5sB3tDSJvG22u13NrfjHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:00 2024 by rpki-client on console-ams.rpki-client.org