Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/_vdw2JapSJz0Ya871HG3RLxsQtQ.roa
File: _vdw2JapSJz0Ya871HG3RLxsQtQ.roa (raw, json)
Hash identifier: WtI++SnmY1EctoOFSPgFd8Y57AWhEgjI7Pc3f+ryLDA=
Subject key identifier: FE:F7:70:D8:96:A9:48:9C:F4:61:AF:3B:D4:71:B7:44:BC:6C:42:D4
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 099B0E1F
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/_vdw2JapSJz0Ya871HG3RLxsQtQ.roa
Signing time: Sat 01 Jan 2022 10:53:57 +0000
ROA not before: Sat 01 Jan 2022 10:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209543
IP address blocks: 185.150.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161156639 (0x99b0e1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Jan 1 10:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fef770d896a9489cf461af3bd471b744bc6c42d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:82:34:17:94:84:b5:a9:37:7f:f7:44:a9:
9a:3e:78:84:c6:30:fb:e2:e6:99:2f:38:9f:81:ed:
fa:1d:af:8a:8b:aa:51:c4:0b:95:1a:53:98:ac:15:
63:8c:e6:ef:da:e0:68:66:26:c9:e1:fb:89:8f:f4:
ad:d3:2d:30:ac:72:6b:b7:87:2f:0d:3c:9c:bc:47:
52:09:9d:af:09:f3:c9:f4:d5:54:94:24:49:2d:9a:
63:ac:47:f4:c1:df:85:f6:34:8a:b7:a9:74:d1:37:
eb:2e:6a:bc:a7:f3:cb:cc:de:3c:5f:ea:d8:37:d3:
8f:37:6e:c1:79:bf:61:16:7e:c5:2a:ad:5c:44:54:
1c:8a:55:f2:c0:e8:75:eb:c1:02:79:84:c0:f1:b9:
c7:8c:6b:97:89:55:01:04:79:b0:72:8a:32:69:a2:
f3:89:bf:2a:ca:fe:5f:1c:1d:1a:67:5e:80:de:22:
57:ae:e8:52:6e:70:c1:28:e9:41:64:d1:1f:78:20:
02:53:e8:b9:b4:71:f9:72:02:70:58:3a:b7:97:8b:
4e:6a:1d:26:c8:1b:88:5f:1d:fd:12:e3:d8:e6:d2:
ee:fd:c7:b6:5a:f5:6c:e4:e5:1c:75:41:72:74:cf:
96:3a:b7:76:f7:9b:9b:b0:00:55:41:44:14:1d:ad:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:70:D8:96:A9:48:9C:F4:61:AF:3B:D4:71:B7:44:BC:6C:42:D4
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/_vdw2JapSJz0Ya871HG3RLxsQtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.36.0/22
Signature Algorithm: sha256WithRSAEncryption
96:b0:35:73:bd:d7:5e:19:77:cd:b0:cc:d0:47:41:0d:e7:d3:
e1:88:17:55:ac:07:43:c4:6b:04:d3:e3:60:b8:e8:bb:46:ce:
c6:82:0e:99:0f:7f:7b:60:53:11:0b:fb:e4:38:02:b8:6d:4b:
8c:9f:d5:77:3f:14:1c:64:79:f2:bf:c9:1c:8c:4b:e7:56:6d:
e0:a3:df:7c:a5:4a:8b:d8:95:5d:d3:4a:d7:e9:e4:5d:c7:fb:
02:d4:08:44:0d:ae:76:01:04:ee:24:69:f7:91:33:4b:db:f8:
75:72:c0:63:30:63:21:6a:09:73:4b:42:17:3b:d1:79:ba:07:
81:e8:e8:04:a2:36:f9:03:af:72:27:96:8a:55:9a:57:9f:f2:
ea:e4:96:eb:3f:05:8b:03:ed:14:df:9a:0d:5b:19:c1:21:46:
67:7c:de:7f:d9:18:d3:5c:7a:54:d1:57:ec:5e:3e:b0:a5:55:
a7:ff:f5:bf:00:0e:4b:c6:2b:d6:6b:f9:85:f7:53:32:8d:c9:
c9:fd:ae:47:b8:49:2d:ee:7e:77:4e:4e:3f:d1:71:fe:71:13:
94:74:2a:a6:f7:c1:f3:ea:1b:9c:fb:ab:de:bf:54:38:44:27:
f1:eb:18:b6:be:68:12:21:4d:3d:b5:cc:65:5c:cd:d2:90:9b:
68:89:8b:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECZsOHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzU1MmU5Yzk2NGRlNmZmNTRlMDk5YzcxMTU1YzFhMWRlYzhhNzMwMB4XDTIyMDEw
MTEwNTM1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmVmNzcwZDg5NmE5
NDg5Y2Y0NjFhZjNiZDQ3MWI3NDRiYzZjNDJkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAODCgjQXlIS1qTd/90Spmj54hMYw++LmmS84n4Ht+h2viouq
UcQLlRpTmKwVY4zm79rgaGYmyeH7iY/0rdMtMKxya7eHLw08nLxHUgmdrwnzyfTV
VJQkSS2aY6xH9MHfhfY0irepdNE36y5qvKfzy8zePF/q2DfTjzduwXm/YRZ+xSqt
XERUHIpV8sDodevBAnmEwPG5x4xrl4lVAQR5sHKKMmmi84m/Ksr+XxwdGmdegN4i
V67oUm5wwSjpQWTRH3ggAlPoubRx+XICcFg6t5eLTmodJsgbiF8d/RLj2ObS7v3H
tlr1bOTlHHVBcnTPljq3dvebm7AAVUFEFB2tlZcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT+93DYlqlInPRhrzvUcbdEvGxC1DAfBgNVHSMEGDAWgBQ3VS6clk3m/1Tg
mccRVcGh3sinMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L04xVXVuSlpONXY5VTRKbkhFVlhCb2Q3SXB6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvZGM0M2ZiLTQ2NTYtNGFmOS1hYWQyLWVlMjhhNjVjOGEyMi8x
L192ZHcySmFwU0p6MFlhODcxSEczUkx4c1F0US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
ZGM0M2ZiLTQ2NTYtNGFmOS1hYWQyLWVlMjhhNjVjOGEyMi8xL04xVXVuSlpONXY5
VTRKbkhFVlhCb2Q3SXB6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmWJDANBgkqhkiG9w0BAQsFAAOC
AQEAlrA1c73XXhl3zbDM0EdBDefT4YgXVawHQ8RrBNPjYLjou0bOxoIOmQ9/e2BT
EQv75DgCuG1LjJ/Vdz8UHGR58r/JHIxL51Zt4KPffKVKi9iVXdNK1+nkXcf7AtQI
RA2udgEE7iRp95EzS9v4dXLAYzBjIWoJc0tCFzvReboHgejoBKI2+QOvcieWilWa
V5/y6uSW6z8FiwPtFN+aDVsZwSFGZ3zef9kY01x6VNFX7F4+sKVVp//1vwAOS8Yr
1mv5hfdTMo3Jyf2uR7hJLe5+d05OP9Fx/nETlHQqpvfB8+obnPur3r9UOEQn8esY
tr5oEiFNPbXMZVzN0pCbaImLcQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:08 2025 by rpki-client