Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/vzR7ta5_YwJkOhRcWK9VHAEXa3E.roa
File: vzR7ta5_YwJkOhRcWK9VHAEXa3E.roa (raw, json)
Hash identifier: 44S37l/kBCz3ZpKvya787fMYtuma6mKjJXCGw46AYeA=
Subject key identifier: BF:34:7B:B5:AE:7F:63:02:64:3A:14:5C:58:AF:55:1C:01:17:6B:71
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 096B4904
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/vzR7ta5_YwJkOhRcWK9VHAEXa3E.roa
Signing time: Sat 01 Jan 2022 02:55:39 +0000
ROA not before: Sat 01 Jan 2022 02:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52093
IP address blocks: 185.156.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158025988 (0x96b4904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Jan 1 02:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf347bb5ae7f6302643a145c58af551c01176b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:4f:7e:c8:94:22:2e:bd:7d:5e:6f:9f:6e:
95:d9:e9:7c:e8:da:a7:a9:05:7b:51:99:fd:c7:e7:
71:7f:ab:d1:87:ac:9e:25:4c:45:81:12:a2:c5:38:
d8:2e:f4:7d:0a:9c:b8:72:e5:2d:69:ac:d5:77:ab:
aa:3a:7d:0c:07:5e:b8:80:de:6c:c9:33:70:3f:d6:
5e:f2:f4:e8:05:e4:35:3e:9b:ec:3c:cc:13:29:a3:
b3:93:a4:e9:43:b2:07:73:00:64:3e:cc:b6:34:68:
cd:69:4f:4b:ca:31:70:8f:ce:f8:37:ea:10:0b:18:
15:b5:e6:9a:99:71:a1:8e:33:08:a3:a3:4f:99:4e:
f3:ce:89:77:6a:61:7a:9f:a9:7c:82:c7:04:03:13:
c7:61:e5:a8:60:27:c9:16:e7:13:74:65:d7:a7:76:
93:d4:a4:51:64:49:6a:c1:1b:63:54:08:88:d7:e8:
83:97:e3:d6:4e:b1:7b:83:16:46:36:de:f1:98:2d:
24:27:26:fe:2a:f2:e8:d9:f0:a8:e4:08:fc:97:b0:
c3:c7:eb:f9:65:e6:6a:27:49:fb:60:61:ea:4f:b9:
70:b0:cf:d3:09:b7:ef:ed:e2:51:06:6c:3a:0a:eb:
3a:b8:d5:32:07:79:9c:c4:0a:ff:0a:9e:3b:70:ae:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:34:7B:B5:AE:7F:63:02:64:3A:14:5C:58:AF:55:1C:01:17:6B:71
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/vzR7ta5_YwJkOhRcWK9VHAEXa3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.4.0/24
Signature Algorithm: sha256WithRSAEncryption
30:70:b0:58:17:92:87:b7:d9:ac:4e:36:b1:9a:e2:2a:74:d0:
dd:70:ee:b8:48:b0:1d:b3:f0:b5:0c:e4:4d:c8:50:3c:04:38:
a6:94:68:cb:4e:03:b2:7c:b2:f5:16:00:fa:39:18:c6:e8:2d:
37:85:9b:6b:09:08:22:a0:2c:d4:54:c8:4a:d2:16:e2:1d:78:
13:f0:45:b2:92:09:55:38:55:6a:8f:8d:36:fb:91:6e:2b:59:
a8:ba:c2:e1:7d:16:5d:aa:6c:9b:15:de:a3:f5:95:7a:d8:85:
95:2d:4e:05:53:06:48:b2:62:85:e6:b8:c2:17:be:6b:61:a7:
2f:25:e7:7d:43:e5:1f:0d:f6:3b:7a:2c:1c:b6:0d:db:9d:55:
21:ae:0f:2d:d9:eb:24:b9:bb:ec:68:2e:5e:04:56:cf:ee:e3:
8b:80:9b:12:79:ad:fc:49:66:84:07:9f:31:fe:02:3b:e6:b2:
47:73:59:bb:11:22:d0:a0:eb:01:09:54:8b:91:78:b4:ae:18:
c2:33:bb:71:83:0e:84:32:a3:0f:2a:9a:c7:89:10:14:f6:4f:
d7:3c:f1:3d:03:c8:59:e6:08:e8:04:35:7d:3d:27:09:7b:6a:
7d:30:52:2c:d6:6a:1e:29:22:ec:81:52:5d:4a:05:d4:38:94:
3c:ac:49:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECWtJBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MGRlNjE4ODIyYjhhZjZmOWVjYWZmY2Q3ZDU0NTliN2NjMTE0NDlhMB4XDTIyMDEw
MTAyNTUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmYzNDdiYjVhZTdm
NjMwMjY0M2ExNDVjNThhZjU1MWMwMTE3NmI3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQgT37IlCIuvX1eb59uldnpfOjap6kFe1GZ/cfncX+r0Yes
niVMRYESosU42C70fQqcuHLlLWms1Xerqjp9DAdeuIDebMkzcD/WXvL06AXkNT6b
7DzMEymjs5Ok6UOyB3MAZD7MtjRozWlPS8oxcI/O+DfqEAsYFbXmmplxoY4zCKOj
T5lO886Jd2phep+pfILHBAMTx2HlqGAnyRbnE3Rl16d2k9SkUWRJasEbY1QIiNfo
g5fj1k6xe4MWRjbe8ZgtJCcm/iry6NnwqOQI/Jeww8fr+WXmaidJ+2Bh6k+5cLDP
0wm37+3iUQZsOgrrOrjVMgd5nMQK/wqeO3Cu/x8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS/NHu1rn9jAmQ6FFxYr1UcARdrcTAfBgNVHSMEGDAWgBTQ3mGIIrivb57K
/819VFm3zBFEmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBONWhpQ0s0cjItZXl2X05mVlJadDh3UlJKby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvNWFjZDc4LWQ2NzAtNDE5Mi1iNTY0LTA0MGUwNjQ0ZmJlOC8x
L3Z6Ujd0YTVfWXdKa09oUmNXSzlWSEFFWGEzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
NWFjZDc4LWQ2NzAtNDE5Mi1iNTY0LTA0MGUwNjQ0ZmJlOC8xLzBONWhpQ0s0cjIt
ZXl2X05mVlJadDh3UlJKby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmcBDANBgkqhkiG9w0BAQsFAAOC
AQEAMHCwWBeSh7fZrE42sZriKnTQ3XDuuEiwHbPwtQzkTchQPAQ4ppRoy04Dsnyy
9RYA+jkYxugtN4WbawkIIqAs1FTIStIW4h14E/BFspIJVThVao+NNvuRbitZqLrC
4X0WXapsmxXeo/WVetiFlS1OBVMGSLJihea4whe+a2GnLyXnfUPlHw32O3osHLYN
251VIa4PLdnrJLm77GguXgRWz+7ji4CbEnmt/ElmhAefMf4CO+ayR3NZuxEi0KDr
AQlUi5F4tK4YwjO7cYMOhDKjDyqax4kQFPZP1zzxPQPIWeYI6AQ1fT0nCXtqfTBS
LNZqHiki7IFSXUoF1DiUPKxJ7g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:44 2023 by rpki-client on console-fra.rpki-client.org