Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/_rnBe53lufU2eQ-UGjCDlmyWyfI.roa
File: _rnBe53lufU2eQ-UGjCDlmyWyfI.roa (raw, json)
Hash identifier: 81qf4WBdsszg5lqsA3+ccHI2lVMmiP5DLaSwl4BunaA=
Subject key identifier: FE:B9:C1:7B:9D:E5:B9:F5:36:79:0F:94:1A:30:83:96:6C:96:C9:F2
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 0593601F
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/_rnBe53lufU2eQ-UGjCDlmyWyfI.roa
Signing time: Sat 01 Jan 2022 03:01:17 +0000
ROA not before: Sat 01 Jan 2022 03:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204955
IP address blocks: 185.234.192.0/22 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93544479 (0x593601f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Jan 1 03:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=feb9c17b9de5b9f536790f941a3083966c96c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:83:1c:3b:ea:28:c3:19:fd:d0:b1:b7:f9:
c9:fd:0a:84:bb:e1:56:1d:69:ed:5f:f5:cf:2c:38:
39:db:db:ff:8d:f0:05:57:a9:a4:43:5e:1f:33:3f:
33:81:05:dd:78:6a:b6:a2:a4:96:82:6a:69:dd:d1:
95:42:d3:d4:27:5d:38:b0:2b:87:90:5c:0d:6d:cd:
94:24:6f:ea:14:f8:5d:0a:d4:07:63:ae:92:08:e9:
d4:6a:07:39:9e:1d:fd:c9:42:ae:ba:4f:aa:a8:24:
33:87:92:c4:ba:29:44:76:a5:d0:8e:65:63:0c:0b:
c3:30:49:68:48:21:93:e3:a7:cb:8c:58:93:27:f9:
66:5f:fa:b1:0b:df:c7:54:10:c9:45:65:b9:bb:b7:
68:58:f5:55:3a:90:ea:47:df:da:a7:e8:c4:21:9f:
fa:c0:78:58:d2:c8:75:0d:fd:67:d0:62:cc:ec:6a:
0f:71:e4:e6:0b:62:0f:73:6f:8c:00:13:ac:68:5b:
9b:27:21:d7:80:50:51:79:a6:8a:ba:10:ff:8e:fd:
5a:b4:b7:5d:92:0d:24:d5:d1:34:e5:e5:b2:47:f4:
a0:32:7f:c2:9a:06:68:fa:75:85:ac:ca:9d:c2:7d:
3f:bf:b0:0c:99:e6:65:7a:86:ee:f8:68:0d:4a:3f:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:C1:7B:9D:E5:B9:F5:36:79:0F:94:1A:30:83:96:6C:96:C9:F2
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/_rnBe53lufU2eQ-UGjCDlmyWyfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.192.0/22
Signature Algorithm: sha256WithRSAEncryption
82:dd:13:db:2e:93:cd:6d:f4:8f:bd:b4:40:25:53:97:d0:60:
17:68:f6:0a:9a:2b:ed:db:94:44:c4:0e:8d:3e:2b:16:a8:4f:
ca:39:23:1e:e6:1d:7e:92:b8:56:46:22:49:d7:e5:58:de:7f:
0c:0a:1a:67:c0:80:34:0d:01:42:ab:9b:05:58:a6:d9:e1:7c:
c1:93:2e:3a:72:c8:26:6d:fd:fe:9e:23:40:5a:a5:9b:0b:b8:
52:20:f2:33:a3:a2:fc:c5:81:eb:98:1d:a9:31:fe:db:80:11:
b6:16:5c:11:e5:b3:66:d7:07:58:28:a9:f5:c2:1a:12:40:4b:
d2:12:98:d4:e5:b4:18:40:f3:89:b6:c9:90:22:10:a0:78:44:
c3:08:62:c4:08:07:29:dd:9a:82:7e:2a:fe:ef:63:8c:62:10:
22:12:97:77:3f:e6:73:40:25:63:6f:f6:8a:e8:5a:e2:6f:76:
84:2e:ad:ee:16:3d:66:41:89:95:e3:b8:8b:5a:c7:4b:58:88:
0d:c0:9f:12:c7:f6:65:e4:2f:aa:b5:2d:bc:6d:57:81:15:ee:
e4:63:53:f9:d4:39:b3:e8:c8:af:59:5a:93:31:55:5e:98:0f:
c2:a8:6d:72:6f:6b:fc:5b:7c:f2:c6:a3:ce:88:0d:c1:c8:2c:
42:ae:aa:e6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBZNgHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTMwODhlZTcxY2I2ODE1OTkwZGMyNDg2N2I0YTBlMzE5NjgwMDBmMB4XDTIyMDEw
MTAzMDExN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmViOWMxN2I5ZGU1
YjlmNTM2NzkwZjk0MWEzMDgzOTY2Yzk2YzlmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANNpgxw76ijDGf3Qsbf5yf0KhLvhVh1p7V/1zyw4Odvb/43w
BVeppENeHzM/M4EF3XhqtqKkloJqad3RlULT1CddOLArh5BcDW3NlCRv6hT4XQrU
B2Oukgjp1GoHOZ4d/clCrrpPqqgkM4eSxLopRHal0I5lYwwLwzBJaEghk+Ony4xY
kyf5Zl/6sQvfx1QQyUVlubu3aFj1VTqQ6kff2qfoxCGf+sB4WNLIdQ39Z9BizOxq
D3Hk5gtiD3NvjAATrGhbmych14BQUXmmiroQ/479WrS3XZINJNXRNOXlskf0oDJ/
wpoGaPp1hazKncJ9P7+wDJnmZXqG7vhoDUo/SXkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT+ucF7neW59TZ5D5QaMIOWbJbJ8jAfBgNVHSMEGDAWgBSOMIjucctoFZkN
wkhntKDjGWgADzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pqQ0k3bkhMYUJXWkRjSklaN1NnNHhsb0FBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvMWFkZjQ2LWY0OTgtNDc0OC1hNDdhLTllYzJhMmEwOTRkNy8x
L19ybkJlNTNsdWZVMmVRLVVHakNEbG15V3lmSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
MWFkZjQ2LWY0OTgtNDc0OC1hNDdhLTllYzJhMmEwOTRkNy8xL2pqQ0k3bkhMYUJX
WkRjSklaN1NnNHhsb0FBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnqwDANBgkqhkiG9w0BAQsFAAOC
AQEAgt0T2y6TzW30j720QCVTl9BgF2j2Cpor7duURMQOjT4rFqhPyjkjHuYdfpK4
VkYiSdflWN5/DAoaZ8CANA0BQqubBVim2eF8wZMuOnLIJm39/p4jQFqlmwu4UiDy
M6Oi/MWB65gdqTH+24ARthZcEeWzZtcHWCip9cIaEkBL0hKY1OW0GEDzibbJkCIQ
oHhEwwhixAgHKd2agn4q/u9jjGIQIhKXdz/mc0AlY2/2iuha4m92hC6t7hY9ZkGJ
leO4i1rHS1iIDcCfEsf2ZeQvqrUtvG1XgRXu5GNT+dQ5s+jIr1lakzFVXpgPwqht
cm9r/Ft88sajzogNwcgsQq6q5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:39 2024 by rpki-client on console-fra.rpki-client.org