Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa
File: 1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa (raw, json)
Hash identifier: W2xw86DLKIRemE+l2CcQIDloJNsYLsyss18E0NF08wk=
Subject key identifier: F8:CD:C5:C3:D5:7B:5A:73:B0:C0:2E:BA:67:9F:AF:83:D9:16:2E:28
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 03945762
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa
Signing time: Sat 01 Jan 2022 15:57:45 +0000
ROA not before: Sat 01 Jan 2022 15:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44716
IP address blocks: 185.219.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60053346 (0x3945762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Jan 1 15:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8cdc5c3d57b5a73b0c02eba679faf83d9162e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:9c:dd:cb:7f:0e:0a:b9:73:8c:bc:4a:b5:
b5:e6:16:8f:e2:af:45:f8:f8:80:db:13:3e:3c:aa:
29:26:0c:69:0f:14:bb:a3:48:49:45:72:77:3b:bd:
9c:bb:ed:98:14:f1:bd:60:74:f1:08:fb:59:80:6e:
31:c0:34:57:44:43:ae:23:c9:ab:c0:ab:9a:0d:95:
49:3c:50:56:dc:84:b3:6b:e2:e8:e9:42:00:07:0b:
d3:9a:8e:f2:c9:7d:2a:96:5d:07:15:02:7f:cc:fc:
0f:da:45:fb:36:0c:c0:98:d3:4a:7c:f8:7a:6f:85:
16:0a:d6:a3:12:b6:a1:ba:66:b6:ad:6e:6a:f7:ec:
19:97:e7:8c:5b:46:bb:04:95:51:c4:83:5c:fe:2a:
9b:26:7a:4b:a7:51:76:0f:c1:36:26:0b:63:30:38:
f6:5a:6d:5c:a8:ce:28:65:2d:f8:8d:cb:94:8a:23:
9d:c7:1e:e4:4f:0e:6e:a5:cb:cb:b8:f7:91:0e:4b:
e8:63:25:cb:eb:95:3e:62:d9:c1:c0:b6:7a:ed:f5:
33:89:05:d0:96:a3:a1:ca:1b:18:ba:88:ba:7b:bf:
bf:13:e4:41:fa:43:88:3e:62:6c:49:79:c2:c8:97:
f3:ec:10:72:8f:c5:79:47:b4:01:b8:d8:26:6a:0b:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:C5:C3:D5:7B:5A:73:B0:C0:2E:BA:67:9F:AF:83:D9:16:2E:28
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:41:53:44:35:a6:d9:11:2c:31:27:4e:45:02:b1:89:72:ed:
21:ca:89:92:76:1d:04:72:33:b7:7f:80:5d:8a:4f:ed:ab:75:
80:52:82:bf:6b:18:fc:21:6c:07:e0:a8:40:86:d6:d5:48:2c:
66:53:8b:a0:a9:16:35:b5:fd:47:30:fa:af:0f:c3:a3:c2:3e:
53:c1:a5:4c:23:b5:a6:3c:80:71:a9:9d:a5:25:64:9b:7a:be:
7e:32:e7:8b:f5:46:89:0f:45:b2:d4:0c:30:b6:f7:e5:10:2b:
c1:f7:21:4e:87:7f:73:5e:c8:94:19:ac:0d:6f:36:24:a8:b0:
4a:6b:cf:f0:8d:d1:bd:35:b5:d6:36:30:98:63:55:9a:55:fb:
48:88:ad:e6:fe:57:d5:44:d4:2e:9c:e1:40:3c:b5:55:43:89:
db:80:d5:a9:43:c5:a4:08:ae:be:d9:2c:bf:55:b5:d6:89:a6:
29:52:d2:04:4e:d0:ec:56:04:d5:c8:61:bc:97:e5:15:80:90:
5f:f9:cb:f1:ca:da:bd:b0:da:d6:44:fb:57:9d:a6:a6:9c:5b:
91:7d:6c:dc:0d:78:63:63:22:82:cc:7b:0c:53:fa:bb:fe:73:
58:a7:8d:76:66:26:4e:26:f4:1d:2d:08:03:86:dc:0b:76:93:
93:ea:7b:4f
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEA5RXYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OGUyZjRhYmEwYmM5YjNlM2FiMTg1NjQ5N2E0MDA3MTk3MWI3MDRhMB4XDTIyMDEw
MTE1NTc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjhjZGM1YzNkNTdi
NWE3M2IwYzAyZWJhNjc5ZmFmODNkOTE2MmUyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnPnN3Lfw4KuXOMvEq1teYWj+KvRfj4gNsTPjyqKSYMaQ8U
u6NISUVydzu9nLvtmBTxvWB08Qj7WYBuMcA0V0RDriPJq8Crmg2VSTxQVtyEs2vi
6OlCAAcL05qO8sl9KpZdBxUCf8z8D9pF+zYMwJjTSnz4em+FFgrWoxK2obpmtq1u
avfsGZfnjFtGuwSVUcSDXP4qmyZ6S6dRdg/BNiYLYzA49lptXKjOKGUt+I3LlIoj
ncce5E8ObqXLy7j3kQ5L6GMly+uVPmLZwcC2eu31M4kF0JajocobGLqIunu/vxPk
QfpDiD5ibEl5wsiX8+wQco/FeUe0AbjYJmoLpFsCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT4zcXD1Xtac7DALrpnn6+D2RYuKDAfBgNVHSMEGDAWgBSY4vSroLybPjqx
hWSXpABxlxtwSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21PTDBxNkM4bXo0NnNZVmtsNlFBY1pjYmNFby5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvOTJkNTY0LTVkMDktNDI4ZS1hZjgwLTg4ODIxOTliY2NiNC8x
LzEtTTNGdzlWN1duT3d3QzY2WjUtdmc5a1dMaWcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vl
LzkyZDU2NC01ZDA5LTQyOGUtYWY4MC04ODgyMTk5YmNjYjQvMS9tT0wwcTZDOG16
NDZzWVZrbDZRQWNaY2JjRW8uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK525gwDQYJKoZIhvcNAQELBQAD
ggEBALJBU0Q1ptkRLDEnTkUCsYly7SHKiZJ2HQRyM7d/gF2KT+2rdYBSgr9rGPwh
bAfgqECG1tVILGZTi6CpFjW1/Ucw+q8Pw6PCPlPBpUwjtaY8gHGpnaUlZJt6vn4y
54v1RokPRbLUDDC29+UQK8H3IU6Hf3NeyJQZrA1vNiSosEprz/CN0b01tdY2MJhj
VZpV+0iIreb+V9VE1C6c4UA8tVVDiduA1alDxaQIrr7ZLL9VtdaJpilS0gRO0OxW
BNXIYbyX5RWAkF/5y/HK2r2w2tZE+1edpqacW5F9bNwNeGNjIoLMewxT+rv+c1in
jXZmJk4m9B0tCAOG3At2k5Pqe08=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:27 2024 by rpki-client on console-ams.rpki-client.org