Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/XzV-w0du48EQibdjk4jvJfkUOAE.roa
File: XzV-w0du48EQibdjk4jvJfkUOAE.roa (raw, json)
Hash identifier: PyDu8CffqL9azAwoHVTpvyS+6xp/imlL+JXR2kQlzE8=
Subject key identifier: 5F:35:7E:C3:47:6E:E3:C1:10:89:B7:63:93:88:EF:25:F9:14:38:01
Certificate issuer: /CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Certificate serial: 10BE44CA
Authority key identifier: 94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/XzV-w0du48EQibdjk4jvJfkUOAE.roa
Signing time: Sat 01 Jan 2022 15:58:01 +0000
ROA not before: Sat 01 Jan 2022 15:58:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21212
IP address blocks: 185.153.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280904906 (0x10be44ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Validity
Not Before: Jan 1 15:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f357ec3476ee3c11089b7639388ef25f9143801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4e:33:c4:23:a5:2d:5d:83:f4:4c:fa:9f:b6:
a8:e9:6f:2f:8a:03:89:95:81:fb:50:c2:8a:51:09:
41:3c:63:60:4b:59:90:58:e2:8f:31:82:fe:ba:8f:
98:43:60:4f:fd:c9:b9:05:fe:84:c0:2e:36:5d:1f:
b3:d0:ed:45:ff:7b:e9:e8:80:57:23:43:27:2c:54:
12:57:5b:7e:74:10:5a:96:b2:a2:2e:cc:8b:cd:40:
9b:16:3e:b2:7e:4a:91:75:51:bf:81:20:6f:10:2f:
57:8f:51:7a:14:db:98:f2:de:be:f3:51:3e:c6:f5:
af:ea:e1:bf:d8:8c:ef:36:b5:58:20:50:34:82:99:
f7:54:81:18:a9:5a:64:52:6d:6e:41:bf:b6:2d:2d:
fe:50:ac:d3:c5:3e:42:66:5e:ba:d0:91:e5:9f:93:
b3:c8:5c:5e:c6:ee:63:b3:ab:7f:c7:6e:e7:99:73:
b3:e5:58:16:a8:3b:73:b0:e0:23:1a:39:ab:63:00:
09:9a:3d:09:c8:6c:a7:74:97:05:0a:b7:7a:38:35:
59:9f:a7:3f:8f:dd:66:3e:1c:2f:1a:e9:ca:10:f1:
14:00:06:0a:d1:54:93:90:7c:b4:75:1c:19:c7:0a:
fc:6d:8f:d9:22:98:53:cb:b6:ac:4e:b3:ed:fa:47:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:35:7E:C3:47:6E:E3:C1:10:89:B7:63:93:88:EF:25:F9:14:38:01
X509v3 Authority Key Identifier:
keyid:94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/XzV-w0du48EQibdjk4jvJfkUOAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f1:bf:66:cd:12:e7:d7:73:21:86:45:e9:a1:cc:cf:00:e9:
22:bc:3c:88:9d:aa:03:5f:cb:5e:64:d9:99:6d:f2:ed:b1:8d:
a1:04:cf:87:69:08:8c:7b:5a:00:8b:fe:f5:b0:37:6d:e6:df:
b2:20:a4:02:3c:6d:ee:10:95:fd:92:5e:fe:75:1d:11:e6:c8:
b4:e6:c4:78:3c:7d:54:d0:0e:b4:49:15:fc:46:8f:90:e3:10:
e8:26:05:68:5a:9b:0b:4a:30:6d:57:7c:4c:fa:44:b7:b1:c2:
64:8d:c6:1c:9b:0d:1c:48:57:9a:ed:d6:8b:ee:92:d1:b5:f3:
6b:16:aa:2c:a4:ff:de:12:bb:fb:8c:00:d1:1c:38:e7:51:33:
7d:75:4e:e2:1d:df:68:b6:b1:98:b7:54:8b:a3:22:53:0a:d8:
7f:f8:82:f4:73:77:4d:e6:eb:7b:e4:61:8f:7c:4f:f6:9b:55:
46:1a:66:de:3e:70:07:f9:2a:e0:be:01:f5:30:77:42:13:bb:
88:e3:e1:37:d6:d6:66:1e:3e:b8:a4:bd:07:a9:e3:b7:65:43:
6c:22:a5:fe:b0:d8:09:f3:07:27:be:6f:44:73:51:b1:2f:31:
d8:9b:8f:b6:f5:26:ed:c5:77:30:b6:9c:01:06:a3:ff:46:2d:
1c:5d:6b:d5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEL5EyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDNlODI3ZjY2ZDViMzk1NWZlNmQ3M2JhMGYxNWZiYWFjOGI1MTUwMB4XDTIyMDEw
MTE1NTgwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWYzNTdlYzM0NzZl
ZTNjMTEwODliNzYzOTM4OGVmMjVmOTE0MzgwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO9OM8QjpS1dg/RM+p+2qOlvL4oDiZWB+1DCilEJQTxjYEtZ
kFjijzGC/rqPmENgT/3JuQX+hMAuNl0fs9DtRf976eiAVyNDJyxUEldbfnQQWpay
oi7Mi81AmxY+sn5KkXVRv4EgbxAvV49RehTbmPLevvNRPsb1r+rhv9iM7za1WCBQ
NIKZ91SBGKlaZFJtbkG/ti0t/lCs08U+QmZeutCR5Z+Ts8hcXsbuY7Orf8du55lz
s+VYFqg7c7DgIxo5q2MACZo9Cchsp3SXBQq3ejg1WZ+nP4/dZj4cLxrpyhDxFAAG
CtFUk5B8tHUcGccK/G2P2SKYU8u2rE6z7fpHXkUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRfNX7DR27jwRCJt2OTiO8l+RQ4ATAfBgNVHSMEGDAWgBSUPoJ/ZtWzlV/m
1zug8V+6rItRUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xENkNmMmJWczVWZjV0YzdvUEZmdXF5TFVWQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvMDhiNTliLTRmZDMtNDU2OS05YjU2LTFlMGNjNWUxNThmYS8x
L1h6Vi13MGR1NDhFUWliZGprNGp2SmZrVU9BRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
MDhiNTliLTRmZDMtNDU2OS05YjU2LTFlMGNjNWUxNThmYS8xL2xENkNmMmJWczVW
ZjV0YzdvUEZmdXF5TFVWQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmZiTANBgkqhkiG9w0BAQsFAAOC
AQEAf/G/Zs0S59dzIYZF6aHMzwDpIrw8iJ2qA1/LXmTZmW3y7bGNoQTPh2kIjHta
AIv+9bA3bebfsiCkAjxt7hCV/ZJe/nUdEebItObEeDx9VNAOtEkV/EaPkOMQ6CYF
aFqbC0owbVd8TPpEt7HCZI3GHJsNHEhXmu3Wi+6S0bXzaxaqLKT/3hK7+4wA0Rw4
51EzfXVO4h3faLaxmLdUi6MiUwrYf/iC9HN3Tebre+Rhj3xP9ptVRhpm3j5wB/kq
4L4B9TB3QhO7iOPhN9bWZh4+uKS9B6njt2VDbCKl/rDYCfMHJ75vRHNRsS8x2JuP
tvUm7cV3MLacAQaj/0YtHF1r1Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:32 2023 by rpki-client on console-ams.rpki-client.org