Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/AE3AgWWmm9kpvlACOz7igdbnG80.roa
File: AE3AgWWmm9kpvlACOz7igdbnG80.roa (raw, json)
Hash identifier: VZEo0WrsBL0uqwW/P8X88N2AeozgNQXgfDBto9+aTEo=
Subject key identifier: 00:4D:C0:81:65:A6:9B:D9:29:BE:50:02:3B:3E:E2:81:D6:E7:1B:CD
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 013E898E
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/AE3AgWWmm9kpvlACOz7igdbnG80.roa
Signing time: Wed 11 May 2022 14:45:02 +0000
ROA not before: Wed 11 May 2022 14:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 185.208.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20875662 (0x13e898e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: May 11 14:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=004dc08165a69bd929be50023b3ee281d6e71bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:ab:a5:d6:cf:1e:56:d6:fc:cf:5c:e4:d4:
d1:43:6e:82:8c:3d:20:a0:81:46:03:40:16:ce:5a:
7e:ce:3a:75:6f:3d:6d:d4:0d:a2:ba:25:e7:87:9a:
82:61:57:b6:63:d2:a1:fa:a1:05:1d:e2:e4:2b:54:
b2:97:e7:de:7b:c9:9e:08:6c:ee:de:cd:19:fa:27:
46:a1:70:c9:3f:ec:d8:4f:5c:45:20:9b:91:3a:7f:
e1:b3:30:46:ac:5b:7a:f5:34:b9:ea:35:d9:18:de:
62:9d:a0:ec:0b:4b:d8:b4:73:5c:6d:37:81:33:45:
b0:97:83:67:a8:9c:19:23:2a:54:23:05:9f:b9:e7:
bb:dc:88:b7:84:c8:53:6b:8b:82:31:7e:82:43:6f:
bb:1d:7c:40:fb:83:52:e5:e6:47:e5:45:1a:a5:cc:
dc:3c:fd:5a:df:a0:b8:62:b5:20:74:42:2b:ce:d3:
17:6a:63:42:71:9e:77:62:ed:40:35:1a:28:02:3d:
ed:4c:c1:45:85:44:a8:3b:fe:f9:89:52:b0:91:e1:
79:c1:9f:a7:48:60:3c:82:52:8e:d5:f3:35:2c:e7:
0b:5e:a1:43:14:75:7b:8b:89:be:dd:ed:3a:c6:b9:
64:b8:f5:2b:e9:33:a0:00:a4:65:b3:be:a5:d9:40:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4D:C0:81:65:A6:9B:D9:29:BE:50:02:3B:3E:E2:81:D6:E7:1B:CD
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/AE3AgWWmm9kpvlACOz7igdbnG80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.10.0/24
Signature Algorithm: sha256WithRSAEncryption
85:64:32:78:3b:fe:6a:f9:98:fe:27:5b:fc:cc:20:b7:c1:3c:
73:b7:e0:44:0b:1b:d1:62:11:c4:28:0c:5d:e8:e4:fa:95:ad:
e0:dd:75:ed:87:03:3f:c3:d6:29:53:4e:7d:c6:29:32:1d:aa:
90:98:43:58:33:19:8b:3e:ef:bb:55:47:51:30:92:4c:d6:e2:
35:3d:16:b5:6e:33:c6:18:bc:2c:d4:13:be:f8:76:27:4d:62:
27:9a:87:92:a8:51:a4:47:6b:1a:8e:26:e2:e4:fd:73:47:c0:
94:9b:b7:02:ff:d9:1d:00:b0:ac:bd:1e:23:e6:ec:e8:1b:96:
69:6f:22:55:0c:ef:18:b3:3a:69:fe:65:33:a5:25:c9:b0:50:
00:8e:9f:d3:3b:f0:84:5a:8b:d1:f4:51:83:0b:92:99:4c:da:
33:c9:04:16:40:6d:f6:27:ef:b0:3e:cd:f8:a1:45:7c:3a:f5:
37:9e:1d:13:05:81:1e:a2:fe:73:14:07:16:2e:0d:0c:cc:ae:
76:59:50:ce:cd:68:05:d0:0d:df:09:a8:23:fb:24:6b:74:75:
0d:b6:f1:ec:ed:67:2a:81:fb:c0:f8:2f:f9:69:cd:e9:5e:9e:
12:a7:0e:f0:ca:b3:e4:b8:7e:50:39:1b:72:31:bc:a9:5e:34:
84:6d:1a:3e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAT6JjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OGE4NGE4ZTQ3NWY2NjA2ZTdhMTJmOTJiMzMwZDYzZDhmODgwYmUwMB4XDTIyMDUx
MTE0NDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDA0ZGMwODE2NWE2
OWJkOTI5YmU1MDAyM2IzZWUyODFkNmU3MWJjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3wq6XWzx5W1vzPXOTU0UNugow9IKCBRgNAFs5afs46dW89
bdQNorol54eagmFXtmPSofqhBR3i5CtUspfn3nvJnghs7t7NGfonRqFwyT/s2E9c
RSCbkTp/4bMwRqxbevU0ueo12RjeYp2g7AtL2LRzXG03gTNFsJeDZ6icGSMqVCMF
n7nnu9yIt4TIU2uLgjF+gkNvux18QPuDUuXmR+VFGqXM3Dz9Wt+guGK1IHRCK87T
F2pjQnGed2LtQDUaKAI97UzBRYVEqDv++YlSsJHhecGfp0hgPIJSjtXzNSznC16h
QxR1e4uJvt3tOsa5ZLj1K+kzoACkZbO+pdlAs9UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQATcCBZaab2Sm+UAI7PuKB1ucbzTAfBgNVHSMEGDAWgBQYqEqOR19mBueh
L5KzMNY9j4gL4DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dLaEtqa2RmWmdibm9TLVNzekRXUFktSUMtQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvODkyYTI3LWZkYjYtNDI4NS04MjlhLTg3ZjViNjQ3OWQxZS8x
L0FFM0FnV1dtbTlrcHZsQUNPejdpZ2Ribkc4MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
ODkyYTI3LWZkYjYtNDI4NS04MjlhLTg3ZjViNjQ3OWQxZS8xL0dLaEtqa2RmWmdi
bm9TLVNzekRXUFktSUMtQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnQCjANBgkqhkiG9w0BAQsFAAOC
AQEAhWQyeDv+avmY/idb/Mwgt8E8c7fgRAsb0WIRxCgMXejk+pWt4N117YcDP8PW
KVNOfcYpMh2qkJhDWDMZiz7vu1VHUTCSTNbiNT0WtW4zxhi8LNQTvvh2J01iJ5qH
kqhRpEdrGo4m4uT9c0fAlJu3Av/ZHQCwrL0eI+bs6BuWaW8iVQzvGLM6af5lM6Ul
ybBQAI6f0zvwhFqL0fRRgwuSmUzaM8kEFkBt9ifvsD7N+KFFfDr1N54dEwWBHqL+
cxQHFi4NDMyudllQzs1oBdAN3wmoI/ska3R1Dbbx7O1nKoH7wPgv+WnN6V6eEqcO
8Mqz5Lh+UDkbcjG8qV40hG0aPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:01 2024 by rpki-client on console-ams.rpki-client.org