Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ECniXAuSl-GFYFqbSavMsrKW69A.roa
File: ECniXAuSl-GFYFqbSavMsrKW69A.roa (raw, json)
Hash identifier: 3rve5vXJW8ZPoIUJq3qj5jgN+8+EyKqrlbRRg3hCJ4g=
Subject key identifier: 10:29:E2:5C:0B:92:97:E1:85:60:5A:9B:49:AB:CC:B2:B2:96:EB:D0
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 12823F99
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ECniXAuSl-GFYFqbSavMsrKW69A.roa
Signing time: Sat 01 Jan 2022 10:05:43 +0000
ROA not before: Sat 01 Jan 2022 10:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34918
IP address blocks: 185.126.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310525849 (0x12823f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 10:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1029e25c0b9297e185605a9b49abccb2b296ebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:8c:ed:e1:c8:4f:5b:e2:26:4a:3e:bb:e4:
c8:e0:a1:72:46:c9:e3:e7:07:51:4d:5e:02:a1:b9:
65:c2:99:3e:28:e7:db:0c:5e:64:f4:52:9b:47:7f:
0d:d7:f9:d5:24:f6:7b:94:8c:ea:58:4d:55:f8:b0:
c4:76:8e:fa:dc:c3:bc:e9:26:47:72:08:51:0a:35:
e0:11:d5:f0:38:94:90:a2:77:1d:0c:b1:ba:ec:23:
d6:aa:cb:19:a6:af:9f:31:07:68:00:da:f1:d1:ec:
da:20:82:43:3e:d7:e3:cf:ca:88:3e:44:8a:d4:c5:
31:1d:59:7b:f7:23:dc:dd:80:36:bb:1c:92:9d:2e:
0a:d7:8f:28:6f:65:36:13:eb:02:eb:5c:a2:b5:72:
25:68:ac:62:90:ac:7d:59:9c:5d:ea:29:01:82:77:
a2:58:3d:5b:54:ad:6d:9b:84:b6:48:e5:68:b7:92:
6c:9b:e9:69:66:5a:22:a1:8f:a3:de:b3:1c:b1:ac:
ec:0e:c9:6b:69:e4:7c:3e:9d:7e:2a:d0:c0:70:55:
82:9a:84:3b:fd:5d:0a:98:e2:d4:33:cd:99:1f:5e:
e5:82:bc:15:01:26:d9:c2:7f:ea:74:f0:ed:2b:81:
e9:bc:06:cc:9c:3c:e2:19:36:d7:80:a5:e5:16:56:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:E2:5C:0B:92:97:E1:85:60:5A:9B:49:AB:CC:B2:B2:96:EB:D0
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ECniXAuSl-GFYFqbSavMsrKW69A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.8.0/21
Signature Algorithm: sha256WithRSAEncryption
78:bf:ec:de:20:fb:fe:a8:51:65:14:7a:38:38:2a:cd:54:d7:
9c:b3:62:fa:aa:af:ce:76:01:f4:39:2a:63:e7:4f:c3:1c:22:
ce:93:b3:b7:dc:69:e2:e5:33:69:a8:cd:50:27:6c:ad:ab:c8:
f7:b8:0b:06:92:49:73:f5:73:52:2b:f8:b5:f5:3e:ca:28:71:
be:76:77:61:42:4e:b7:83:65:98:e3:02:24:4a:bc:16:0b:37:
b8:32:d7:eb:32:35:60:d3:09:02:aa:18:80:d0:1c:51:51:69:
19:c5:f3:15:bf:73:4e:48:ab:b9:5c:2d:26:5f:87:5f:5c:7f:
e5:5f:05:9d:7c:fb:00:76:79:32:c1:85:f0:ca:5c:ed:ef:f6:
62:0f:2a:e2:a8:f6:e9:6e:ce:0f:7e:8b:72:f4:61:32:81:d0:
4b:ab:be:85:d1:73:8f:51:80:83:80:c1:59:93:e9:cd:ba:24:
96:1d:5e:41:fb:0e:c2:6d:ff:80:83:4e:a2:3d:bf:75:4f:0a:
9d:bb:f8:a3:2f:c9:26:32:ff:8d:16:70:cb:8b:da:ca:70:f3:
80:d9:3f:59:c1:22:a0:3b:6a:68:bb:3f:5e:89:0c:12:3e:e1:
8f:d0:09:91:1e:d7:76:21:ca:49:9d:1d:6d:48:dd:2d:20:d8:
41:57:e1:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEoI/mTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTFlNjkzNjhhYmQzNDUzOGZlNzdkZGFhYmNkYzgzNWFmNTk1ZWJhMB4XDTIyMDEw
MTEwMDU0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTAyOWUyNWMwYjky
OTdlMTg1NjA1YTliNDlhYmNjYjJiMjk2ZWJkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL86jO3hyE9b4iZKPrvkyOChckbJ4+cHUU1eAqG5ZcKZPijn
2wxeZPRSm0d/Ddf51ST2e5SM6lhNVfiwxHaO+tzDvOkmR3IIUQo14BHV8DiUkKJ3
HQyxuuwj1qrLGaavnzEHaADa8dHs2iCCQz7X48/KiD5EitTFMR1Ze/cj3N2ANrsc
kp0uCtePKG9lNhPrAutcorVyJWisYpCsfVmcXeopAYJ3olg9W1StbZuEtkjlaLeS
bJvpaWZaIqGPo96zHLGs7A7Ja2nkfD6dfirQwHBVgpqEO/1dCpji1DPNmR9e5YK8
FQEm2cJ/6nTw7SuB6bwGzJw84hk214Cl5RZWMfcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQQKeJcC5KX4YVgWptJq8yyspbr0DAfBgNVHSMEGDAWgBSaHmk2ir00U4/n
fdqrzcg1r1leujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21oNXBOb3E5TkZPUDUzM2FxODNJTmE5Wlhyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvNzg4NmY0LTVmY2MtNGQ0NC1iZDYyLTEwOTgyZTA0MGQ1My8x
L0VDbmlYQXVTbC1HRllGcWJTYXZNc3JLVzY5QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
Nzg4NmY0LTVmY2MtNGQ0NC1iZDYyLTEwOTgyZTA0MGQ1My8xL21oNXBOb3E5TkZP
UDUzM2FxODNJTmE5Wlhyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7l+CDANBgkqhkiG9w0BAQsFAAOC
AQEAeL/s3iD7/qhRZRR6ODgqzVTXnLNi+qqvznYB9DkqY+dPwxwizpOzt9xp4uUz
aajNUCdsravI97gLBpJJc/VzUiv4tfU+yihxvnZ3YUJOt4NlmOMCJEq8Fgs3uDLX
6zI1YNMJAqoYgNAcUVFpGcXzFb9zTkiruVwtJl+HX1x/5V8FnXz7AHZ5MsGF8Mpc
7e/2Yg8q4qj26W7OD36LcvRhMoHQS6u+hdFzj1GAg4DBWZPpzboklh1eQfsOwm3/
gINOoj2/dU8Knbv4oy/JJjL/jRZwy4vaynDzgNk/WcEioDtqaLs/XokMEj7hj9AJ
kR7XdiHKSZ0dbUjdLSDYQVfhZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org