Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/i4VICtdwP4EEhlhimVU-DeO1y8o.roa
File: i4VICtdwP4EEhlhimVU-DeO1y8o.roa (raw, json)
Hash identifier: 6pUqQ7N26lA+77QKulC2k/GQq2opoXoDu8iQtxw9fpM=
Subject key identifier: 8B:85:48:0A:D7:70:3F:81:04:86:58:62:99:55:3E:0D:E3:B5:CB:CA
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 035B43F6
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/i4VICtdwP4EEhlhimVU-DeO1y8o.roa
Signing time: Sun 05 Jun 2022 12:06:20 +0000
ROA not before: Sun 05 Jun 2022 12:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.228.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56312822 (0x35b43f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jun 5 12:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b85480ad7703f810486586299553e0de3b5cbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:c7:a0:38:58:5c:df:0b:47:75:ff:7f:8e:
2d:3f:24:95:7c:c9:ff:4d:6c:8f:e2:a6:08:db:3d:
3c:72:60:b8:aa:ac:1c:c9:ee:e9:71:fb:73:a5:fd:
60:e8:be:66:67:51:85:89:d0:b9:9b:bf:b3:1a:23:
ab:1e:46:10:20:d7:10:e6:1b:51:83:48:2c:09:7d:
98:2f:17:dc:df:24:3f:05:bc:89:fd:c6:1c:fd:b3:
aa:51:d8:ab:ea:b7:39:95:d8:f8:35:0a:de:06:01:
59:88:74:b4:7d:21:f6:24:f1:0c:23:3f:35:4b:5d:
80:f5:93:7e:9d:71:98:af:d9:f4:b4:7b:61:b2:94:
e5:9a:18:08:80:d9:40:fd:24:d6:a8:d4:fa:f4:d7:
33:c2:a1:29:b6:0c:9e:07:66:94:21:76:50:06:2c:
28:33:ca:26:7f:5d:0a:d5:8a:88:b3:a3:b8:72:51:
57:90:68:80:dc:6b:1a:f6:31:07:24:97:30:b5:e8:
2c:f9:eb:92:e2:61:7e:53:84:11:1e:75:ed:89:0e:
1d:2b:fd:48:27:f9:37:eb:63:b6:4a:16:0d:ec:f7:
86:94:1f:40:56:37:1b:0a:f8:f0:e4:64:3f:19:b3:
b3:42:9b:83:d1:4c:d3:27:82:20:e7:7c:e6:d8:4e:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:48:0A:D7:70:3F:81:04:86:58:62:99:55:3E:0D:E3:B5:CB:CA
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/i4VICtdwP4EEhlhimVU-DeO1y8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
33:55:45:53:a4:95:ab:2d:89:a2:51:74:5e:af:27:15:58:57:
7e:f9:20:8c:80:b8:dc:1c:e1:6a:71:bd:13:c8:b8:fd:fc:6c:
70:bc:78:44:17:0d:9c:f0:bf:4b:60:2e:7a:6c:19:f5:bd:a1:
a5:1c:1a:11:0f:58:a7:b3:c4:36:af:a2:16:4d:54:14:91:94:
39:df:c4:78:ca:39:86:f4:1d:14:90:64:6e:b2:5d:e1:dc:74:
67:2d:60:a6:28:d9:7e:1c:30:fb:79:9b:d4:35:06:ae:33:be:
31:e3:0c:16:d2:48:9a:e4:ff:30:4b:76:fb:26:ac:33:3a:73:
7a:8f:b9:10:3f:36:a4:74:1d:e5:9c:2b:a0:5c:a2:91:1a:38:
6b:03:17:d0:14:63:d6:18:eb:09:03:05:83:a3:85:4e:4d:33:
3e:35:71:c0:e8:95:55:f7:4f:85:15:db:02:34:d4:54:3f:31:
82:a3:0a:1b:95:03:07:1c:44:18:67:ff:35:f9:eb:55:18:9b:
ad:d8:91:af:d3:f0:41:f7:bd:ef:2f:3a:51:bd:ba:21:13:d4:
f7:32:50:83:8b:2c:f3:76:79:a7:2e:af:e6:b8:57:d8:f5:e3:
0e:ab:07:e5:47:74:39:be:d8:6e:95:8b:2b:84:95:a1:6e:88:
b6:bb:59:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA1tD9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NWM2MzczZWFiMTljZjQzZGQyZjQzMTExMzk4MzgzZWUyYmFkMDMwMB4XDTIyMDYw
NTEyMDYyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGI4NTQ4MGFkNzcw
M2Y4MTA0ODY1ODYyOTk1NTNlMGRlM2I1Y2JjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPix6A4WFzfC0d1/3+OLT8klXzJ/01sj+KmCNs9PHJguKqs
HMnu6XH7c6X9YOi+ZmdRhYnQuZu/sxojqx5GECDXEOYbUYNILAl9mC8X3N8kPwW8
if3GHP2zqlHYq+q3OZXY+DUK3gYBWYh0tH0h9iTxDCM/NUtdgPWTfp1xmK/Z9LR7
YbKU5ZoYCIDZQP0k1qjU+vTXM8KhKbYMngdmlCF2UAYsKDPKJn9dCtWKiLOjuHJR
V5BogNxrGvYxBySXMLXoLPnrkuJhflOEER517YkOHSv9SCf5N+tjtkoWDez3hpQf
QFY3Gwr48ORkPxmzs0Kbg9FM0yeCIOd85thOR70CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSLhUgK13A/gQSGWGKZVT4N47XLyjAfBgNVHSMEGDAWgBSlxjc+qxnPQ90v
QxETmDg+4rrQMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BjWTNQcXNaejBQZEwwTVJFNWc0UHVLNjBEQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvZjBmNWUzLTYwNTAtNGUyZC1hNGVhLWE0ZWEwYTYzZjc2Ni8x
L2k0VklDdGR3UDRFRWhsaGltVlUtRGVPMXk4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
ZjBmNWUzLTYwNTAtNGUyZC1hNGVhLWE0ZWEwYTYzZjc2Ni8xL3BjWTNQcXNaejBQ
ZEwwTVJFNWc0UHVLNjBEQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnkAjANBgkqhkiG9w0BAQsFAAOC
AQEAM1VFU6SVqy2JolF0Xq8nFVhXfvkgjIC43BzhanG9E8i4/fxscLx4RBcNnPC/
S2AuemwZ9b2hpRwaEQ9Yp7PENq+iFk1UFJGUOd/EeMo5hvQdFJBkbrJd4dx0Zy1g
pijZfhww+3mb1DUGrjO+MeMMFtJImuT/MEt2+yasMzpzeo+5ED82pHQd5ZwroFyi
kRo4awMX0BRj1hjrCQMFg6OFTk0zPjVxwOiVVfdPhRXbAjTUVD8xgqMKG5UDBxxE
GGf/NfnrVRibrdiRr9PwQfe97y86Ub26IRPU9zJQg4ss83Z5py6v5rhX2PXjDqsH
5Ud0Ob7YbpWLK4SVoW6ItrtZeg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:12 2024 by rpki-client on console-ams.rpki-client.org