Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/eDtcfqyGmVROROhzemhxu9Aszak.roa
File: eDtcfqyGmVROROhzemhxu9Aszak.roa (raw, json)
Hash identifier: px2Urs5EmXadPerrzxgyEuFs1oVIfjU4+9krI/AkxBg=
Subject key identifier: 78:3B:5C:7E:AC:86:99:54:4E:44:E8:73:7A:68:71:BB:D0:2C:CD:A9
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01DBC0A6
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/eDtcfqyGmVROROhzemhxu9Aszak.roa
Signing time: Thu 19 May 2022 14:05:29 +0000
ROA not before: Thu 19 May 2022 14:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203068
IP address blocks: 185.145.179.0/24 maxlen: 24
185.145.176.0/24 maxlen: 24
185.145.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31178918 (0x1dbc0a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: May 19 14:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=783b5c7eac8699544e44e8737a6871bbd02ccda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:c7:31:63:12:2d:71:35:6e:e6:68:02:2f:
44:bb:b5:f2:c9:51:cd:4c:27:99:c2:70:dc:60:88:
e8:4d:be:e4:b3:33:df:b2:bb:10:1b:6c:91:46:88:
12:ef:32:6e:85:bb:82:57:6b:cb:4a:72:1d:c4:01:
45:2d:cc:46:e6:b4:e7:ab:56:63:8f:48:1c:3e:a5:
6b:e8:7a:c3:34:d1:ea:30:7f:3b:ce:e8:6c:98:3d:
f8:0b:31:31:29:b4:82:f0:f1:a5:88:d6:2c:35:0f:
58:b6:c7:c0:80:2f:16:70:8b:58:21:7a:63:2f:5c:
0a:a8:86:aa:37:3b:0c:47:bd:ec:d5:5a:f2:af:0c:
d9:ce:f2:d9:68:a5:83:56:b5:62:4f:a7:18:f8:75:
f0:05:48:29:d1:51:f9:cf:ec:6f:73:47:96:dc:34:
dd:60:f3:46:c3:e5:7e:c8:67:ba:68:f5:a4:8b:f3:
ff:f0:79:50:d0:b7:e5:4f:b7:8a:1d:3f:3b:e1:44:
01:cd:7b:40:bf:8d:6a:5c:7b:35:99:50:dd:73:a5:
9d:b4:ef:5a:0a:19:e3:ee:06:29:66:3a:48:d4:c5:
7b:b0:e0:99:be:37:f9:c9:4f:f3:f2:a3:4c:32:34:
f9:5a:0a:1c:8e:35:8e:79:2b:49:05:2d:9c:33:a6:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:5C:7E:AC:86:99:54:4E:44:E8:73:7A:68:71:BB:D0:2C:CD:A9
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/eDtcfqyGmVROROhzemhxu9Aszak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.176.0/23
185.145.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5b:34:fb:72:30:f7:02:02:94:10:65:80:4b:65:aa:73:b6:
2f:98:af:66:16:97:3e:3f:2e:80:e4:34:02:eb:92:d4:c3:1c:
8f:f6:41:69:6a:1a:75:f6:f5:0f:19:cd:79:b5:93:15:69:93:
98:6b:e0:3e:53:b8:44:22:8e:c5:26:d3:88:0a:9b:94:cc:4c:
b1:cb:e8:cb:ed:51:4c:8d:3b:c9:d8:14:99:42:d7:49:b6:ff:
2f:4d:ac:79:0a:77:eb:f0:4b:fe:e4:3a:36:ec:b4:a2:d1:2a:
f0:19:b6:ea:dd:15:5a:10:30:4a:03:4e:b2:eb:0a:a4:99:84:
c0:19:b1:93:70:e5:4f:0c:be:73:a9:63:ff:c9:55:6f:91:b0:
2f:d8:d5:7a:6a:c8:21:09:ea:16:65:fb:3b:4e:4a:47:76:9b:
8b:54:3d:f5:52:90:35:63:72:1a:54:d5:07:77:27:34:6c:d0:
a3:c0:a5:69:67:49:7f:af:db:60:06:dd:6f:18:29:9a:42:12:
57:60:d8:b4:e1:7f:4d:46:1b:ef:4e:29:17:44:5f:25:6b:30:
c3:1a:b6:58:31:35:42:0a:83:ab:30:55:ff:37:43:8e:83:e4:
e8:2e:67:c8:3b:b8:07:af:cf:d5:f7:2e:93:94:dd:17:a7:fe:
9d:3a:74:e6
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAdvApjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NDBkNDk0MzMzY2I0ZDllNWZkMTBjODQ2YzQ3Y2Y1NjQ0NWM1MDNhMB4XDTIyMDUx
OTE0MDUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzgzYjVjN2VhYzg2
OTk1NDRlNDRlODczN2E2ODcxYmJkMDJjY2RhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVhxzFjEi1xNW7maAIvRLu18slRzUwnmcJw3GCI6E2+5LMz
37K7EBtskUaIEu8yboW7gldry0pyHcQBRS3MRua056tWY49IHD6la+h6wzTR6jB/
O87obJg9+AsxMSm0gvDxpYjWLDUPWLbHwIAvFnCLWCF6Yy9cCqiGqjc7DEe97NVa
8q8M2c7y2Wilg1a1Yk+nGPh18AVIKdFR+c/sb3NHltw03WDzRsPlfshnumj1pIvz
//B5UNC35U+3ih0/O+FEAc17QL+Nalx7NZlQ3XOlnbTvWgoZ4+4GKWY6SNTFe7Dg
mb43+clP8/KjTDI0+VoKHI41jnkrSQUtnDOmUQ8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR4O1x+rIaZVE5E6HN6aHG70CzNqTAfBgNVHSMEGDAWgBS0DUlDM8tNnl/R
DIRsR89WRFxQOjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RBMUpRelBMVFo1ZjBReUViRWZQVmtSY1VEby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvMmE3YmY0LTM0NTQtNGQxNC05ZTBjLTE4M2Y5OTc1ZmM5NC8x
L2VEdGNmcXlHbVZST1JPaHplbWh4dTlBc3phay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
MmE3YmY0LTM0NTQtNGQxNC05ZTBjLTE4M2Y5OTc1ZmM5NC8xL3RBMUpRelBMVFo1
ZjBReUViRWZQVmtSY1VEby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbmRsAMEALmRszANBgkqhkiG9w0B
AQsFAAOCAQEAD1s0+3Iw9wIClBBlgEtlqnO2L5ivZhaXPj8ugOQ0AuuS1MMcj/ZB
aWoadfb1DxnNebWTFWmTmGvgPlO4RCKOxSbTiAqblMxMscvoy+1RTI07ydgUmULX
Sbb/L02seQp36/BL/uQ6Nuy0otEq8Bm26t0VWhAwSgNOsusKpJmEwBmxk3DlTwy+
c6lj/8lVb5GwL9jVemrIIQnqFmX7O05KR3abi1Q99VKQNWNyGlTVB3cnNGzQo8Cl
aWdJf6/bYAbdbxgpmkISV2DYtOF/TUYb704pF0RfJWswwxq2WDE1QgqDqzBV/zdD
joPk6C5nyDu4B6/P1fcuk5TdF6f+nTp05g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:17 2024 by rpki-client on console-fra.rpki-client.org