Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/R-FddyTtSo5Pr5PvpSVQ0gSeFbQ.roa
File: R-FddyTtSo5Pr5PvpSVQ0gSeFbQ.roa (raw, json)
Hash identifier: qvdlrBxD8TBS10u+QkmwENaDjgWDVaeW8IT1NP1fGVQ=
Subject key identifier: 47:E1:5D:77:24:ED:4A:8E:4F:AF:93:EF:A5:25:50:D2:04:9E:15:B4
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 0183E4A400380305A063F74C8ADE974631B1
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/R-FddyTtSo5Pr5PvpSVQ0gSeFbQ.roa
Signing time: Mon 17 Oct 2022 06:31:36 +0000
ROA not before: Mon 17 Oct 2022 06:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205638
IP address blocks: 185.211.157.0/24 maxlen: 24
185.211.159.0/24 maxlen: 24
185.211.156.0/24 maxlen: 24
185.211.158.0/23 maxlen: 23
185.211.156.0/22 maxlen: 22
185.211.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:a4:00:38:03:05:a0:63:f7:4c:8a:de:97:46:31:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Oct 17 06:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47e15d7724ed4a8e4faf93efa52550d2049e15b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:d7:53:75:0f:c2:10:4b:c3:25:17:ad:44:
a5:72:89:0a:03:ef:3c:c4:03:c9:8c:24:03:84:a8:
c6:15:eb:4f:47:50:12:b7:12:6a:36:58:aa:09:45:
12:3d:b6:71:ff:08:d4:a7:32:87:0b:c9:a5:d5:44:
21:b9:63:af:55:bb:d0:48:eb:34:6c:ce:63:74:d7:
dc:33:b7:25:74:a2:29:b5:a6:88:e1:e7:23:6e:9e:
b2:4f:70:37:10:b3:16:24:b1:d0:25:b9:44:b6:10:
8d:20:7c:80:d0:10:1c:90:87:2c:ff:ef:fd:a2:35:
f3:13:2f:45:b5:86:85:82:48:04:70:ca:62:fa:7f:
2d:d6:78:6b:78:b1:83:d1:3c:a7:c4:ce:ca:63:d0:
5f:c4:10:65:2e:73:eb:b6:1c:2e:cb:75:1a:c9:d8:
25:69:7a:7b:d6:96:dc:15:12:fe:a6:70:2b:cc:34:
64:9e:27:67:cf:f3:0a:f4:aa:44:8c:9f:7e:86:f3:
60:cf:79:bc:a7:d7:bd:73:54:5c:57:61:b2:bd:b5:
69:c7:0e:c1:5b:2d:87:5b:84:43:5e:7d:4d:02:e8:
73:62:2b:52:eb:f3:8c:d0:6d:1b:72:7e:28:65:4b:
68:1d:bf:6b:36:13:8f:9a:8e:9a:0f:fd:49:18:ab:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:5D:77:24:ED:4A:8E:4F:AF:93:EF:A5:25:50:D2:04:9E:15:B4
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/R-FddyTtSo5Pr5PvpSVQ0gSeFbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:dc:5d:a6:1e:a4:a9:75:10:a3:25:c7:05:ba:31:31:a4:03:
52:96:77:0c:2f:b5:73:81:14:24:13:de:6e:8a:3f:d9:d2:91:
9b:fc:19:21:ac:44:91:36:17:c3:10:38:13:e6:48:0c:a4:67:
ba:9e:fb:9b:35:bf:c9:c2:4a:82:9a:a5:c4:60:44:46:ed:bd:
c9:a2:e3:e8:cf:3a:93:01:e7:ae:31:95:c4:72:5a:00:ff:e5:
c1:67:c8:4c:27:f6:41:5a:e0:a1:ed:e4:ce:f8:b2:58:72:fd:
7a:21:3c:c3:e2:89:87:44:0c:c3:62:86:c8:91:ef:33:7d:c9:
8e:79:92:69:e9:ee:b4:76:4c:9e:1e:01:bc:2c:7b:1f:87:10:
0e:de:b0:9f:8c:9e:1a:a0:4c:f9:94:60:a8:71:96:b4:1d:fe:
68:ec:92:7b:87:67:21:4f:c5:8a:af:e1:4d:d6:4c:62:fd:fc:
d6:0c:8a:95:cc:ed:3f:63:17:79:4d:1d:ff:96:4c:b1:83:a0:
1c:64:23:30:ff:ef:79:e9:39:97:50:c5:e0:e1:a2:e6:66:89:
30:22:eb:f5:fb:53:cc:bd:07:02:39:5c:f6:1e:ff:8a:44:62:
ef:89:9f:38:49:23:41:7a:bb:18:04:54:1d:0a:8a:92:e6:44:
98:3e:4b:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPkpAA4AwWgY/dMit6XRjGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODdkMzViZGNhYjEyM2FmZmMxYTkxZDE3MzY4Njc5Njk3
MDlhMjMwHhcNMjIxMDE3MDYzMTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2UxNWQ3NzI0ZWQ0YThlNGZhZjkzZWZhNTI1NTBkMjA0OWUxNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2jXU3UPwhBLwyUXrUSlcokKA+88
xAPJjCQDhKjGFetPR1AStxJqNliqCUUSPbZx/wjUpzKHC8ml1UQhuWOvVbvQSOs0
bM5jdNfcM7cldKIptaaI4ecjbp6yT3A3ELMWJLHQJblEthCNIHyA0BAckIcs/+/9
ojXzEy9FtYaFgkgEcMpi+n8t1nhreLGD0TynxM7KY9BfxBBlLnPrthwuy3Uaydgl
aXp71pbcFRL+pnArzDRknidnz/MK9KpEjJ9+hvNgz3m8p9e9c1RcV2GyvbVpxw7B
Wy2HW4RDXn1NAuhzYitS6/OM0G0bcn4oZUtoHb9rNhOPmo6aD/1JGKsgowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfhXXck7UqOT6+T76UlUNIEnhW0MB8GA1UdIwQY
MBaAFN6H01vcqxI6/8GpHRc2hnlpcJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQt
YzIyMzkwZThkOWE2LzEvUi1GZGR5VHRTbzVQcjVQdnBTVlEwZ1NlRmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQtYzIyMzkwZThkOWE2
LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudOcMA0G
CSqGSIb3DQEBCwUAA4IBAQCM3F2mHqSpdRCjJccFujExpANSlncML7VzgRQkE95u
ij/Z0pGb/BkhrESRNhfDEDgT5kgMpGe6nvubNb/JwkqCmqXEYERG7b3JouPozzqT
AeeuMZXEcloA/+XBZ8hMJ/ZBWuCh7eTO+LJYcv16ITzD4omHRAzDYobIke8zfcmO
eZJp6e60dkyeHgG8LHsfhxAO3rCfjJ4aoEz5lGCocZa0Hf5o7JJ7h2chT8WKr+FN
1kxi/fzWDIqVzO0/Yxd5TR3/lkyxg6AcZCMw/+956TmXUMXg4aLmZokwIuv1+1PM
vQcCOVz2Hv+KRGLviZ84SSNBersYBFQdCoqS5kSYPkvs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:00 2024 by rpki-client on console-fra.rpki-client.org