Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/RCWogqMTPxwLOy3MkJioU3XXuWE.roa
File: RCWogqMTPxwLOy3MkJioU3XXuWE.roa (raw, json)
Hash identifier: DGKlg5ELtdnTe8NJJ8Dt3QW4FsMP7eQYyVbwWN7GtB0=
Subject key identifier: 44:25:A8:82:A3:13:3F:1C:0B:3B:2D:CC:90:98:A8:53:75:D7:B9:61
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 07745384
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/RCWogqMTPxwLOy3MkJioU3XXuWE.roa
Signing time: Sat 01 Jan 2022 02:53:48 +0000
ROA not before: Sat 01 Jan 2022 02:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57581
IP address blocks: 185.27.78.0/24 maxlen: 24
185.27.77.0/24 maxlen: 24
185.27.76.0/22 maxlen: 22
185.27.76.0/24 maxlen: 24
194.114.145.0/24 maxlen: 24
2a00:92a0::/32 maxlen: 32
2a00:92a0:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125064068 (0x7745384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Jan 1 02:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4425a882a3133f1c0b3b2dcc9098a85375d7b961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:a0:e1:a3:37:50:16:dc:73:c9:fc:96:7c:
0b:fb:bc:5e:87:11:1d:d7:da:57:63:99:ae:21:c2:
21:60:51:57:ff:3b:85:74:04:3b:27:d0:1b:8f:a9:
a5:31:7f:3a:f7:05:b6:c7:73:98:30:65:55:89:91:
0f:ad:a6:ce:63:52:04:da:e6:76:2f:ba:d5:c0:1b:
cf:9f:52:ab:3b:5d:0e:98:73:dd:e7:db:34:75:57:
0e:44:07:20:5e:b9:7b:bb:78:49:b9:36:a9:ce:57:
2d:a5:e5:f2:38:24:41:32:53:d1:8e:89:d0:95:cc:
8f:a0:a1:99:fa:a9:66:db:e2:01:d5:73:88:56:25:
b3:23:43:c8:1b:a6:e4:73:88:76:7e:3c:b9:ca:e2:
d0:64:aa:7b:0d:92:da:de:47:3a:d2:b5:63:d6:5a:
a0:ba:30:20:be:85:c6:8f:9c:64:2c:b7:b5:62:0f:
0f:0a:f6:91:5e:f4:17:56:76:29:48:19:88:2f:f4:
e1:24:26:38:c2:7e:c0:4f:9a:39:67:e9:98:05:f2:
d8:5d:7c:22:32:d6:35:b3:ca:ee:48:3a:b5:eb:79:
d4:16:a0:2b:cc:96:6f:97:4e:ae:be:25:e5:18:f5:
3b:ae:7b:60:df:fc:97:33:04:58:0b:17:33:d5:4b:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:A8:82:A3:13:3F:1C:0B:3B:2D:CC:90:98:A8:53:75:D7:B9:61
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/RCWogqMTPxwLOy3MkJioU3XXuWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.76.0/22
194.114.145.0/24
IPv6:
2a00:92a0::/32
Signature Algorithm: sha256WithRSAEncryption
58:df:9d:17:1a:00:6a:a4:11:a5:9b:5d:a8:60:9e:9b:6d:69:
13:5f:64:53:ec:ea:08:bc:4a:90:72:76:b9:00:72:2b:59:f7:
79:0f:65:ac:b0:bb:d5:35:cc:73:e1:64:76:13:0c:8c:5c:c1:
c7:27:cd:82:58:60:49:80:a6:31:c6:48:b8:79:c3:04:73:b8:
c8:e4:cc:91:6a:98:33:ab:f5:c0:c8:91:3f:ce:7d:93:21:9a:
85:81:92:bb:dc:9c:ad:10:aa:66:8e:73:21:76:87:b2:5d:1f:
d3:c0:61:cb:f7:92:85:84:58:60:a8:9a:75:18:28:e5:4a:bb:
0f:9a:5a:7f:a7:2f:83:ef:47:44:78:1a:7a:88:ea:bb:2e:18:
a2:e9:6e:60:b8:0f:ad:5d:72:04:0e:8f:d0:dc:b8:73:42:0e:
56:d4:87:5a:a3:f4:06:f2:61:a9:18:89:6a:e3:6a:bf:ce:66:
d0:14:70:6e:22:3a:71:74:e3:e7:eb:fe:a9:4d:ad:b9:8c:ff:
17:18:e0:38:11:4f:7f:44:a8:a2:31:aa:de:38:f0:12:0b:9c:
45:bb:b3:2f:8d:82:10:2a:b6:df:e2:33:76:1a:3c:6e:27:3c:
80:27:0b:48:c9:0b:b7:0e:61:08:8f:96:71:c6:eb:6b:db:dd:
01:89:c5:3f
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEB3RThDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWUwMDk2MjQ3YThjNTRlNWRlOGMxYjBkYWYxMDU0YWVjOGNjNDUwMB4XDTIyMDEw
MTAyNTM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQyNWE4ODJhMzEz
M2YxYzBiM2IyZGNjOTA5OGE4NTM3NWQ3Yjk2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALN7oOGjN1AW3HPJ/JZ8C/u8XocRHdfaV2OZriHCIWBRV/87
hXQEOyfQG4+ppTF/OvcFtsdzmDBlVYmRD62mzmNSBNrmdi+61cAbz59SqztdDphz
3efbNHVXDkQHIF65e7t4Sbk2qc5XLaXl8jgkQTJT0Y6J0JXMj6ChmfqpZtviAdVz
iFYlsyNDyBum5HOIdn48ucri0GSqew2S2t5HOtK1Y9ZaoLowIL6Fxo+cZCy3tWIP
Dwr2kV70F1Z2KUgZiC/04SQmOMJ+wE+aOWfpmAXy2F18IjLWNbPK7kg6tet51Bag
K8yWb5dOrr4l5Rj1O657YN/8lzMEWAsXM9VLWkUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBREJaiCoxM/HAs7LcyQmKhTdde5YTAfBgNVHSMEGDAWgBQ64AliR6jFTl3o
wbDa8QVK7IzEUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L091QUpZa2VveFU1ZDZNR3cydkVGU3V5TXhGQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWYvMGFhNDk0LTkzMDgtNDdlZS1hODA4LWI5NzIyMTQ0NTEzZi8x
L1JDV29ncU1UUHh3TE95M01rSmlvVTNYWHVXRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYv
MGFhNDk0LTkzMDgtNDdlZS1hODA4LWI5NzIyMTQ0NTEzZi8xL091QUpZa2VveFU1
ZDZNR3cydkVGU3V5TXhGQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArkbTAMEAMJykTANBAIAAjAHAwUA
KgCSoDANBgkqhkiG9w0BAQsFAAOCAQEAWN+dFxoAaqQRpZtdqGCem21pE19kU+zq
CLxKkHJ2uQByK1n3eQ9lrLC71TXMc+FkdhMMjFzBxyfNglhgSYCmMcZIuHnDBHO4
yOTMkWqYM6v1wMiRP859kyGahYGSu9ycrRCqZo5zIXaHsl0f08Bhy/eShYRYYKia
dRgo5Uq7D5paf6cvg+9HRHgaeojquy4YouluYLgPrV1yBA6P0Ny4c0IOVtSHWqP0
BvJhqRiJauNqv85m0BRwbiI6cXTj5+v+qU2tuYz/FxjgOBFPf0SoojGq3jjwEguc
RbuzL42CECq23+Izdho8bic8gCcLSMkLtw5hCI+Wccbra9vdAYnFPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:56 2024 by rpki-client on console-fra.rpki-client.org