Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/0DCekVI6UWn1mOIJjNSuFmBBsWo.roa
File: 0DCekVI6UWn1mOIJjNSuFmBBsWo.roa (raw, json)
Hash identifier: VGyFyAqm/tJf3Zuy2h+v8khMlzHSL5Vi7lLH7gqhsMw=
Subject key identifier: D0:30:9E:91:52:3A:51:69:F5:98:E2:09:8C:D4:AE:16:60:41:B1:6A
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 7AB514
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/0DCekVI6UWn1mOIJjNSuFmBBsWo.roa
Signing time: Sat 01 Jan 2022 01:59:53 +0000
ROA not before: Sat 01 Jan 2022 01:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197981
IP address blocks: 185.204.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8041748 (0x7ab514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jan 1 01:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0309e91523a5169f598e2098cd4ae166041b16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:56:dc:79:99:3d:ec:05:07:3a:19:3f:5b:
c5:83:69:f5:fe:ab:20:99:30:d8:3b:fa:43:e3:24:
9d:02:e4:85:2b:2a:e2:fd:aa:f7:bb:67:b6:5f:af:
3b:06:49:13:80:94:d9:5d:0b:22:5e:08:82:4f:97:
6c:dc:1f:c6:f3:2f:7a:e5:4a:32:db:d6:a0:c2:ed:
46:4d:de:fd:27:e3:03:82:dc:e5:5b:f9:c3:ab:db:
94:80:39:16:a8:17:d0:d8:33:e2:02:96:00:d5:5e:
71:7d:07:2f:28:c0:da:1c:3b:6e:f0:74:16:df:99:
4e:25:3d:19:85:09:d4:ac:24:9a:8f:3a:84:37:8a:
4f:2d:56:08:36:76:15:50:2a:b3:ee:8b:0f:6c:b5:
99:33:dd:96:b1:f4:ce:fe:e4:c8:34:9e:a8:b4:67:
51:1f:a5:bd:f8:9d:61:e3:74:0b:b5:37:a2:01:37:
81:f2:be:64:fd:f8:5f:56:63:96:db:2e:cd:89:80:
f1:f2:b9:f6:e3:99:a4:a7:f8:69:40:76:9e:0d:2e:
39:65:dc:e2:48:3b:75:dc:71:55:4d:b0:06:7d:04:
6b:09:bc:d4:74:ea:26:e4:0e:49:82:2a:ca:ff:59:
76:b1:74:67:87:1b:60:17:8f:60:f4:81:ca:2f:95:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:9E:91:52:3A:51:69:F5:98:E2:09:8C:D4:AE:16:60:41:B1:6A
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/0DCekVI6UWn1mOIJjNSuFmBBsWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:06:a0:40:94:8c:b1:d7:4b:82:28:c5:37:cd:a4:02:82:67:
f9:13:1a:25:02:9c:6b:bb:95:f2:c5:98:7d:65:c6:db:2c:ac:
6f:f1:bf:50:77:44:10:9e:80:78:5d:6a:9d:f8:fc:be:bd:59:
bf:81:8c:a9:7e:d9:67:ca:7e:17:fc:88:94:73:6b:5c:4a:a9:
0e:75:6f:15:b3:42:3f:0d:53:20:ce:de:66:13:2c:59:41:b1:
9f:16:c8:00:0c:50:94:19:54:9e:ad:dd:fb:5d:e8:a0:5a:88:
6e:ec:db:e8:d1:5b:58:40:fd:57:21:79:a2:92:11:8a:35:7b:
ce:b7:9c:c3:04:82:c6:4d:e1:d0:75:53:b6:0b:43:2e:8c:61:
14:3c:82:0f:06:0d:b6:d4:41:ec:17:15:fa:96:4f:a5:46:65:
d6:c7:14:82:6d:2c:d0:08:74:60:1e:7e:52:74:31:b3:df:92:
31:ec:52:7d:d6:ee:3f:22:4e:7d:3d:f8:8e:03:b1:84:84:15:
69:86:80:9b:94:0f:ad:7e:c4:78:99:96:77:a3:f3:ff:f0:a9:
d5:70:ae:dd:8e:e3:6e:e6:fc:e9:ba:01:de:10:02:7a:0c:4b:
5f:9f:b7:d1:35:bb:f4:b7:2c:1a:07:48:6a:7d:1c:c1:6f:54:
6c:ae:3f:10
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDerUUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgxYTMyYjMwHhcNMjIwMTAx
MDE1OTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMDMwOWU5MTUyM2E1
MTY5ZjU5OGUyMDk4Y2Q0YWUxNjYwNDFiMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoqBW3HmZPewFBzoZP1vFg2n1/qsgmTDYO/pD4ySdAuSFKyri
/ar3u2e2X687BkkTgJTZXQsiXgiCT5ds3B/G8y965Uoy29agwu1GTd79J+MDgtzl
W/nDq9uUgDkWqBfQ2DPiApYA1V5xfQcvKMDaHDtu8HQW35lOJT0ZhQnUrCSajzqE
N4pPLVYINnYVUCqz7osPbLWZM92WsfTO/uTINJ6otGdRH6W9+J1h43QLtTeiATeB
8r5k/fhfVmOW2y7NiYDx8rn245mkp/hpQHaeDS45ZdziSDt13HFVTbAGfQRrCbzU
dOom5A5JgirK/1l2sXRnhxtgF49g9IHKL5VpFQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNAwnpFSOlFp9ZjiCYzUrhZgQbFqMB8GA1UdIwQYMBaAFCe429l95M1AWbUu
UT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYxLzEv
MERDZWtWSTZVV24xbU9JSmpOU3VGbUJCc1dvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84
NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJa
dFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucwoMA0GCSqGSIb3DQEBCwUAA4IB
AQBMBqBAlIyx10uCKMU3zaQCgmf5ExolApxru5XyxZh9ZcbbLKxv8b9Qd0QQnoB4
XWqd+Py+vVm/gYypftlnyn4X/IiUc2tcSqkOdW8Vs0I/DVMgzt5mEyxZQbGfFsgA
DFCUGVSerd37XeigWohu7Nvo0VtYQP1XIXmikhGKNXvOt5zDBILGTeHQdVO2C0Mu
jGEUPIIPBg221EHsFxX6lk+lRmXWxxSCbSzQCHRgHn5SdDGz35Ix7FJ91u4/Ik59
PfiOA7GEhBVphoCblA+tfsR4mZZ3o/P/8KnVcK7djuNu5vzpugHeEAJ6DEtfn7fR
Nbv0tywaB0hqfRzBb1Rsrj8Q
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org