Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/k384yUoXwWfUrTMWd-zyMxD-qx0.roa
File: k384yUoXwWfUrTMWd-zyMxD-qx0.roa (raw, json)
Hash identifier: EB0Y0ZXwheAyE+MGShnSqBUDTk/4PSprqwlzIsKE9D4=
Subject key identifier: 93:7F:38:C9:4A:17:C1:67:D4:AD:33:16:77:EC:F2:33:10:FE:AB:1D
Certificate issuer: /CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Certificate serial: 0E7DCA44
Authority key identifier: 4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/k384yUoXwWfUrTMWd-zyMxD-qx0.roa
Signing time: Sat 01 Jan 2022 11:02:46 +0000
ROA not before: Sat 01 Jan 2022 11:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58075
IP address blocks: 185.96.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243124804 (0xe7dca44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Validity
Not Before: Jan 1 11:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=937f38c94a17c167d4ad331677ecf23310feab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:9c:20:6e:cb:16:03:84:fb:11:7e:83:27:
87:69:23:94:a6:9b:ba:44:ce:3d:11:a3:9a:cf:f8:
ad:98:b6:ab:8e:f9:6f:25:23:75:17:14:26:df:80:
33:1d:57:0f:66:32:5a:d0:65:69:21:b5:0b:e1:e4:
63:5e:b8:80:90:87:97:04:a8:a1:54:19:15:c0:c3:
16:c9:ce:1c:c1:1c:b2:71:a7:11:05:f1:47:59:66:
5a:d1:68:58:5c:b6:bb:b1:2a:6f:52:76:fc:bb:47:
ca:68:1c:77:b1:20:3d:b7:dd:4e:81:23:74:df:50:
be:be:6e:55:73:bf:f3:34:cf:4e:28:65:69:f1:c0:
1a:cb:fe:aa:98:ff:f5:4b:8d:2f:6f:e7:a7:ac:85:
b4:29:03:1a:d1:a3:7c:8d:1b:f1:f3:c6:0d:08:b4:
ed:9c:d5:a2:28:8b:95:ee:b6:57:ea:3a:c4:71:7f:
05:2f:ae:fc:03:9e:68:0e:f4:59:29:0a:3e:fc:27:
69:3d:3a:11:d1:34:64:b0:d1:79:f0:cb:f1:15:70:
02:5a:56:66:d2:95:1e:91:7a:d1:c6:61:05:58:f4:
64:15:2a:08:04:96:04:37:05:57:a6:04:65:99:c2:
78:f1:da:60:57:f6:e2:95:6b:ea:25:2f:a0:fe:20:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7F:38:C9:4A:17:C1:67:D4:AD:33:16:77:EC:F2:33:10:FE:AB:1D
X509v3 Authority Key Identifier:
keyid:4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/k384yUoXwWfUrTMWd-zyMxD-qx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:ef:98:50:41:d8:a7:69:89:5e:43:89:88:b9:ef:9d:d8:50:
57:c5:6d:3d:ce:38:5d:c8:44:66:af:b6:15:75:93:58:ad:9f:
2b:ca:8a:db:8d:af:35:f9:75:79:42:34:9c:ea:7e:1b:42:74:
10:ac:50:fa:e8:7e:73:44:c8:08:57:92:5c:21:c7:d5:2e:ff:
a2:9e:fc:58:88:58:b7:3c:c8:d0:ca:06:65:af:8c:a2:f9:b9:
3f:0f:b7:8d:b0:4c:1d:d1:4e:b2:f2:95:a8:18:55:cf:a9:13:
5b:b4:55:47:57:64:ae:0d:6e:67:18:56:7b:3b:b0:f6:29:3f:
bd:0f:14:35:bb:72:bf:a6:02:c5:05:f6:40:e6:3d:62:e6:88:
ef:b4:80:98:3f:f2:90:b9:9d:90:32:2c:2b:c4:6f:49:58:3d:
a9:47:d0:8e:43:ae:01:f0:e7:7d:0b:7e:f6:9d:2b:e2:15:98:
77:4e:2b:7e:45:12:55:a4:1c:64:3c:c0:82:9c:fa:92:a5:f6:
f8:25:93:48:ff:85:41:5e:30:f1:b9:00:06:9b:d7:e0:27:bd:
73:3e:fb:6f:da:2e:ad:8b:17:bb:9b:a8:09:bd:d3:57:06:d9:
d0:9a:be:9a:07:fb:4e:b4:9b:7a:66:78:98:55:10:d4:80:d5:
39:b2:03:ab
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDn3KRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2FmMGY3NjM1YTk2ZWZmNWI3M2YyMTZkOGZlNzdjYzRlMmEwYThlMB4XDTIyMDEw
MTExMDI0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTM3ZjM4Yzk0YTE3
YzE2N2Q0YWQzMzE2NzdlY2YyMzMxMGZlYWIxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjlnCBuyxYDhPsRfoMnh2kjlKabukTOPRGjms/4rZi2q475
byUjdRcUJt+AMx1XD2YyWtBlaSG1C+HkY164gJCHlwSooVQZFcDDFsnOHMEcsnGn
EQXxR1lmWtFoWFy2u7Eqb1J2/LtHymgcd7EgPbfdToEjdN9Qvr5uVXO/8zTPTihl
afHAGsv+qpj/9UuNL2/np6yFtCkDGtGjfI0b8fPGDQi07ZzVoiiLle62V+o6xHF/
BS+u/AOeaA70WSkKPvwnaT06EdE0ZLDRefDL8RVwAlpWZtKVHpF60cZhBVj0ZBUq
CASWBDcFV6YEZZnCePHaYFf24pVr6iUvoP4g5n0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSTfzjJShfBZ9StMxZ37PIzEP6rHTAfBgNVHSMEGDAWgBRMrw92Nalu/1tz
8hbY/nfMTioKjjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RLOFBkaldwYnY5YmNfSVcyUDUzekU0cUNvNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvMDZhYTU5LWM2OTQtNGQwZi1iYzM2LTRmZGJjYjMwNWQ5ZC8x
L2szODR5VW9Yd1dmVXJUTVdkLXp5TXhELXF4MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
MDZhYTU5LWM2OTQtNGQwZi1iYzM2LTRmZGJjYjMwNWQ5ZC8xL1RLOFBkaldwYnY5
YmNfSVcyUDUzekU0cUNvNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlglDANBgkqhkiG9w0BAQsFAAOC
AQEAL++YUEHYp2mJXkOJiLnvndhQV8VtPc44XchEZq+2FXWTWK2fK8qK242vNfl1
eUI0nOp+G0J0EKxQ+uh+c0TICFeSXCHH1S7/op78WIhYtzzI0MoGZa+Movm5Pw+3
jbBMHdFOsvKVqBhVz6kTW7RVR1dkrg1uZxhWezuw9ik/vQ8UNbtyv6YCxQX2QOY9
YuaI77SAmD/ykLmdkDIsK8RvSVg9qUfQjkOuAfDnfQt+9p0r4hWYd04rfkUSVaQc
ZDzAgpz6kqX2+CWTSP+FQV4w8bkABpvX4Ce9cz77b9ourYsXu5uoCb3TVwbZ0Jq+
mgf7TrSbemZ4mFUQ1IDVObIDqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:10 2024 by rpki-client on console-ams.rpki-client.org