Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/hV60Av4Em9WghisAw00LPl2MkxI.roa
File: hV60Av4Em9WghisAw00LPl2MkxI.roa (raw, json)
Hash identifier: REjqxAW4obteNRwL7F2bMgAqtoHDM89wRcUeD00RrTg=
Subject key identifier: 85:5E:B4:02:FE:04:9B:D5:A0:86:2B:00:C3:4D:0B:3E:5D:8C:93:12
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 165466
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/hV60Av4Em9WghisAw00LPl2MkxI.roa
Signing time: Fri 24 Jun 2022 17:26:15 +0000
ROA not before: Fri 24 Jun 2022 17:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 185.155.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463398 (0x165466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Jun 24 17:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=855eb402fe049bd5a0862b00c34d0b3e5d8c9312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:f9:ca:ff:e5:2f:fe:84:93:2e:73:85:6f:
f2:43:20:1b:a4:65:a1:96:aa:ce:dc:2e:e9:2b:a8:
8c:14:52:90:75:7b:fb:35:a3:a3:d4:78:d8:fc:c3:
b2:7e:47:ec:d7:05:81:d0:f9:5c:1b:4b:eb:7c:05:
3f:73:69:02:7a:5f:d3:e5:8a:a0:c6:94:87:ea:0d:
2b:c7:c0:68:3c:56:99:e2:a7:91:08:ab:4f:5d:e8:
e8:4e:70:5c:ea:3c:ea:ce:91:bd:1c:b8:74:b0:26:
d0:b2:b9:31:2a:ca:f5:15:e4:c8:0b:dc:b5:9f:39:
cc:4c:cf:a7:00:1c:a4:49:50:fd:df:3b:15:ec:be:
8d:29:ec:1f:38:38:88:5a:2f:93:b4:a2:68:3b:6b:
10:a0:5c:07:31:1a:38:7c:0b:60:e0:e5:3a:17:ca:
46:44:90:c2:21:83:73:a5:b8:09:ea:02:b5:1e:46:
d9:a2:b7:72:fa:34:4f:9d:00:4e:c5:12:d3:9a:04:
6f:8d:ae:43:22:68:1c:bd:88:11:ce:33:b7:bb:ee:
8f:9f:40:da:f5:8f:1b:80:30:a1:c3:4c:aa:02:dc:
8e:f3:b6:5a:f0:3b:b4:6f:7d:69:99:42:57:65:60:
ba:54:26:43:f9:6c:e0:a6:be:4d:f3:58:96:01:df:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:B4:02:FE:04:9B:D5:A0:86:2B:00:C3:4D:0B:3E:5D:8C:93:12
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/hV60Av4Em9WghisAw00LPl2MkxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:dd:e3:5b:60:8c:24:1e:2e:08:85:f4:ad:13:09:18:00:d4:
60:ee:21:36:04:28:7e:d3:88:38:06:02:70:70:56:4d:32:7e:
07:12:ee:ec:a2:51:d2:d0:19:16:ec:c7:a6:9f:dd:d3:e9:6d:
de:1c:c9:2b:4f:29:4d:fd:0f:90:fb:83:48:de:98:11:10:c5:
b1:08:1f:8e:0a:d0:b4:2d:b8:6f:4b:a6:eb:5d:43:16:6a:63:
ff:4a:67:47:cf:e5:ea:c8:a4:d7:2e:2c:75:55:a3:27:eb:6a:
86:e5:8b:c8:f5:cb:cc:f8:0e:3b:c2:04:10:88:09:c2:48:b8:
34:f2:4c:cc:97:6f:c8:6f:c1:22:76:43:56:da:fd:97:ba:42:
ef:1e:e6:b7:f8:9e:e6:98:5e:be:1b:30:7a:cb:20:02:3d:e7:
75:04:dd:ad:1f:53:28:68:72:97:eb:f9:1a:84:e8:08:e8:0f:
7e:fe:bf:fa:f9:9f:82:d3:f2:bc:7b:3c:16:01:d2:30:6d:b2:
40:e5:4a:1b:3f:8a:57:3c:64:cb:58:ed:56:63:8b:2c:52:9b:
d4:a9:c6:bc:a5:76:84:6e:cc:de:4d:50:c1:85:68:e1:91:e6:
68:f5:0c:c7:07:7b:1c:66:e8:ac:50:3c:f5:98:42:96:bd:c2:
8b:99:ef:c0
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDFlRmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM1
MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQyYTBlZDYwHhcNMjIwNjI0
MTcyNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4NTVlYjQwMmZlMDQ5
YmQ1YTA4NjJiMDBjMzRkMGIzZTVkOGM5MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjBT5yv/lL/6Eky5zhW/yQyAbpGWhlqrO3C7pK6iMFFKQdXv7
NaOj1HjY/MOyfkfs1wWB0PlcG0vrfAU/c2kCel/T5YqgxpSH6g0rx8BoPFaZ4qeR
CKtPXejoTnBc6jzqzpG9HLh0sCbQsrkxKsr1FeTIC9y1nznMTM+nABykSVD93zsV
7L6NKewfODiIWi+TtKJoO2sQoFwHMRo4fAtg4OU6F8pGRJDCIYNzpbgJ6gK1HkbZ
ordy+jRPnQBOxRLTmgRvja5DImgcvYgRzjO3u+6Pn0Da9Y8bgDChw0yqAtyO87Za
8Du0b31pmUJXZWC6VCZD+Wzgpr5N81iWAd/dFwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIVetAL+BJvVoIYrAMNNCz5djJMSMB8GA1UdIwQYMBaAFDUXyd6Sf6db6u94
hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJiLzEv
aFY2MEF2NEVtOVdnaGlzQXcwMExQbDJNa3hJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85
NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJiLzEvTlJmSjNwSl9wMXZx
NzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvqMA0GCSqGSIb3DQEBCwUAA4IB
AQAt3eNbYIwkHi4IhfStEwkYANRg7iE2BCh+04g4BgJwcFZNMn4HEu7solHS0BkW
7Memn93T6W3eHMkrTylN/Q+Q+4NI3pgREMWxCB+OCtC0LbhvS6brXUMWamP/SmdH
z+XqyKTXLix1VaMn62qG5YvI9cvM+A47wgQQiAnCSLg08kzMl2/Ib8EidkNW2v2X
ukLvHua3+J7mmF6+GzB6yyACPed1BN2tH1MoaHKX6/kahOgI6A9+/r/6+Z+C0/K8
ezwWAdIwbbJA5UobP4pXPGTLWO1WY4ssUpvUqca8pXaEbszeTVDBhWjhkeZo9QzH
B3scZuisUDz1mEKWvcKLme/A
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:43 2023 by rpki-client on console-fra.rpki-client.org