Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/wvMGFxUAVj9e9m_jW154tOgE7uw.roa
File: wvMGFxUAVj9e9m_jW154tOgE7uw.roa (raw, json)
Hash identifier: JRyAhnsV0VJG34frKD4pE/lswFx1eRewxbOyYxu9aws=
Subject key identifier: C2:F3:06:17:15:00:56:3F:5E:F6:6F:E3:5B:5E:78:B4:E8:04:EE:EC
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 1337DA36
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/wvMGFxUAVj9e9m_jW154tOgE7uw.roa
Signing time: Mon 16 May 2022 08:15:28 +0000
ROA not before: Mon 16 May 2022 08:15:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47597
IP address blocks: 185.152.140.0/22 maxlen: 22
2a07:8280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322427446 (0x1337da36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: May 16 08:15:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2f306171500563f5ef66fe35b5e78b4e804eeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:53:09:30:c2:ea:9a:e9:b5:a6:20:26:cf:
45:54:91:17:a9:a5:5c:35:69:b5:a3:04:c9:4a:53:
db:1f:c5:c5:99:3a:30:0e:58:b4:10:6d:27:50:c8:
bf:23:64:1c:88:87:c4:0e:4f:d1:21:8a:cf:68:cb:
26:26:69:e1:07:3e:4f:23:79:ba:98:45:5f:25:20:
f9:86:60:ea:43:bd:91:68:fc:eb:1b:7a:7c:8b:f3:
28:68:40:8b:b4:0f:1b:b4:3c:5c:d3:3d:b8:b3:be:
70:ec:2d:7b:a0:e7:6c:34:83:92:a8:79:c7:53:ab:
7a:53:32:c0:56:49:24:05:0d:cb:bd:86:86:0e:1f:
27:a3:13:84:f5:97:90:f6:d8:db:74:6f:fb:7a:13:
c5:da:98:6d:17:7d:46:7d:82:3b:27:ae:2e:c6:39:
a5:82:df:b0:4e:5e:52:f9:f1:ca:ae:a2:e8:05:77:
bb:5d:55:2c:52:bd:d5:af:df:c9:19:aa:75:41:46:
d0:42:88:61:99:70:5a:40:91:bc:93:4b:c5:97:72:
15:98:34:40:cf:38:ff:6b:80:6f:d8:6f:f5:9d:bf:
cb:e4:ed:4e:50:16:bf:5d:e5:0c:20:c9:4f:1b:64:
64:fe:11:81:98:79:e3:b7:6a:93:cc:20:90:bc:61:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:06:17:15:00:56:3F:5E:F6:6F:E3:5B:5E:78:B4:E8:04:EE:EC
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/wvMGFxUAVj9e9m_jW154tOgE7uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.140.0/22
IPv6:
2a07:8280::/29
Signature Algorithm: sha256WithRSAEncryption
56:49:40:9c:ad:1d:15:07:13:a9:ca:c6:89:e4:c7:dc:93:e5:
ae:65:a8:a1:a7:92:4a:80:62:11:2f:aa:85:1f:d1:d8:f2:69:
fb:ab:99:e5:bd:34:82:b1:1a:c0:2f:ec:68:e9:2b:d8:16:24:
22:94:97:f9:41:cd:c1:1b:70:6b:d2:71:47:11:08:4e:5b:67:
58:47:c0:5d:6a:78:d4:7c:73:74:f6:c5:03:a8:ac:55:01:c3:
6d:e0:9a:59:7f:0a:64:32:3e:08:bd:53:00:ec:aa:d4:1c:e2:
ab:6b:0a:b3:19:56:15:e9:22:5f:e9:c7:19:e7:e8:c5:1d:e2:
eb:a5:b5:c2:6b:cb:38:f6:2f:10:3f:e0:47:5e:97:4f:72:c8:
15:5a:55:4f:d2:c3:1c:d1:8b:3f:48:5b:3b:25:0f:00:5e:1d:
c5:be:a1:84:f9:77:1c:2e:20:86:47:62:6f:e5:87:b0:24:d7:
d1:b3:f5:9b:2d:52:fa:4e:bb:05:36:ce:6d:d0:e0:4e:c1:35:
af:cb:88:ae:f3:64:47:68:8f:36:90:21:42:15:9a:2d:ba:ce:
80:fa:fc:57:a4:93:12:9e:59:de:9e:a6:5f:f0:a4:6e:80:55:
89:40:d7:26:4f:1b:01:a5:1a:03:ab:38:1d:fd:ff:43:0f:70:
21:35:2e:cf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEEzfaNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTRmNTUxZTk3YTEzMjU0MmUzYjA1NmU5MDVkZThmM2RiYTI0YzljMB4XDTIyMDUx
NjA4MTUyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzJmMzA2MTcxNTAw
NTYzZjVlZjY2ZmUzNWI1ZTc4YjRlODA0ZWVlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKbUwkwwuqa6bWmICbPRVSRF6mlXDVptaMEyUpT2x/FxZk6
MA5YtBBtJ1DIvyNkHIiHxA5P0SGKz2jLJiZp4Qc+TyN5uphFXyUg+YZg6kO9kWj8
6xt6fIvzKGhAi7QPG7Q8XNM9uLO+cOwte6DnbDSDkqh5x1OrelMywFZJJAUNy72G
hg4fJ6MThPWXkPbY23Rv+3oTxdqYbRd9Rn2COyeuLsY5pYLfsE5eUvnxyq6i6AV3
u11VLFK91a/fyRmqdUFG0EKIYZlwWkCRvJNLxZdyFZg0QM84/2uAb9hv9Z2/y+Tt
TlAWv13lDCDJTxtkZP4RgZh547dqk8wgkLxh9f0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTC8wYXFQBWP172b+NbXni06ATu7DAfBgNVHSMEGDAWgBR5T1Uel6EyVC47
BW6QXejz26JMnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VVOVZIcGVoTWxRdU93VnVrRjNvODl1aVRKdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvMTkyNWU3LTE2OTQtNDNlZC04ZmJjLTQzNjg1ODg3NDM2Yy8x
L3d2TUdGeFVBVmo5ZTltX2pXMTU0dE9nRTd1dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
MTkyNWU3LTE2OTQtNDNlZC04ZmJjLTQzNjg1ODg3NDM2Yy8xL2VVOVZIcGVoTWxR
dU93VnVrRjNvODl1aVRKdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmYjDANBAIAAjAHAwUDKgeCgDAN
BgkqhkiG9w0BAQsFAAOCAQEAVklAnK0dFQcTqcrGieTH3JPlrmWooaeSSoBiES+q
hR/R2PJp+6uZ5b00grEawC/saOkr2BYkIpSX+UHNwRtwa9JxRxEITltnWEfAXWp4
1HxzdPbFA6isVQHDbeCaWX8KZDI+CL1TAOyq1Bziq2sKsxlWFekiX+nHGefoxR3i
66W1wmvLOPYvED/gR16XT3LIFVpVT9LDHNGLP0hbOyUPAF4dxb6hhPl3HC4ghkdi
b+WHsCTX0bP1my1S+k67BTbObdDgTsE1r8uIrvNkR2iPNpAhQhWaLbrOgPr8V6ST
Ep5Z3p6mX/CkboBViUDXJk8bAaUaA6s4Hf3/Qw9wITUuzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:23 2024 by rpki-client on console-ams.rpki-client.org