Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/INiGy5qAbET0Wu-YXsf7H76eK-g.roa
File: INiGy5qAbET0Wu-YXsf7H76eK-g.roa (raw, json)
Hash identifier: NA6ipUHz4twLgNvdxlKkviaO9+4xO999cSFFMVeeCjo=
Subject key identifier: 20:D8:86:CB:9A:80:6C:44:F4:5A:EF:98:5E:C7:FB:1F:BE:9E:2B:E8
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 036CE904
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/INiGy5qAbET0Wu-YXsf7H76eK-g.roa
Signing time: Sat 01 Jan 2022 00:57:47 +0000
ROA not before: Sat 01 Jan 2022 00:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.241.138.0/24 maxlen: 24
185.241.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57469188 (0x36ce904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Jan 1 00:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20d886cb9a806c44f45aef985ec7fb1fbe9e2be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:cd:a7:e8:49:1a:bc:94:9b:96:b5:8e:0f:
ec:67:3e:15:b7:62:9e:50:9a:38:05:34:b9:25:fd:
e6:ae:3e:6c:bf:45:95:10:07:7e:79:48:66:f6:23:
39:c4:02:38:dd:f9:c9:3c:02:d9:2f:5f:0c:ed:91:
fc:8a:1a:62:5b:c1:43:f9:c2:48:8d:67:96:2b:d7:
99:e0:80:27:46:fd:ad:c7:ac:8e:ab:9f:1c:0f:fb:
4d:14:03:bb:52:20:04:3c:cb:c0:0d:0b:49:0c:7f:
66:da:7e:b0:17:38:f5:22:ff:0d:07:c9:e4:9f:ee:
ad:c9:b0:c8:41:c6:dc:3d:53:4c:32:b1:d9:3a:6e:
f9:22:3d:e2:e5:34:eb:52:74:eb:28:2a:cf:dd:97:
b6:55:c5:13:13:72:67:3f:29:b1:5d:f0:7c:fe:a8:
db:76:3d:ce:92:9c:43:11:ac:45:22:b0:59:9d:7a:
95:90:67:5b:78:d5:d9:dd:3c:79:d8:b1:73:2f:67:
77:7b:7e:f5:cd:e9:b1:c7:67:82:4e:ed:95:d9:3a:
1f:4c:24:e1:c1:7a:18:25:b6:18:e3:f6:c7:af:f1:
2a:63:5a:8b:61:bb:2c:4e:d8:06:54:5f:52:ff:34:
e2:68:fc:c2:b2:c1:e6:e7:a1:75:37:92:49:5c:09:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:86:CB:9A:80:6C:44:F4:5A:EF:98:5E:C7:FB:1F:BE:9E:2B:E8
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/INiGy5qAbET0Wu-YXsf7H76eK-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.138.0/23
Signature Algorithm: sha256WithRSAEncryption
71:3f:a9:e6:fb:2d:28:87:27:34:f7:80:4f:2b:d4:fe:24:82:
f8:18:0e:dd:6f:6f:ab:6e:e7:1e:91:7f:97:fa:ad:1c:65:b7:
f7:93:59:83:4d:11:7e:c7:3c:4c:c3:e4:c3:cb:df:7f:9e:18:
cc:09:2b:56:3c:c2:9b:7a:52:fb:ec:d8:e5:6f:95:f7:5d:b9:
b1:01:87:a0:e7:94:1f:1f:4d:98:58:23:5c:01:40:8e:79:96:
32:fc:c2:e0:20:c0:be:4f:38:9b:a7:ef:13:11:a6:0d:c5:40:
fa:fd:a7:63:f6:b6:8e:29:be:41:5a:7f:16:26:01:6f:e0:62:
4d:bf:72:7b:0a:3c:fa:7f:96:80:e2:7a:26:64:f0:33:ba:65:
29:ef:95:2b:a1:53:d5:bd:28:bd:7f:52:8b:ae:e9:f8:cf:d5:
7c:3b:22:c2:9a:7e:81:6d:b0:9d:e7:3e:54:75:30:09:6d:44:
e5:04:ae:b3:d2:41:8d:c9:3f:ed:d1:25:bc:2f:94:f0:27:14:
19:2a:b3:72:c6:de:d2:d1:c4:9b:fc:c2:d4:80:d2:04:8d:23:
3c:13:57:a9:50:5c:4d:ba:93:4e:68:b8:10:d4:bd:89:8b:7b:
99:93:58:e3:08:07:94:10:e9:85:c4:b1:55:cf:d4:57:6e:49:
58:80:2f:01
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA2zpBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
M2UyMTYxZDdmMDFmYTZmZDA4NDJjMjExMDgwNjMzZjNlZDM2YmE1MB4XDTIyMDEw
MTAwNTc0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjBkODg2Y2I5YTgw
NmM0NGY0NWFlZjk4NWVjN2ZiMWZiZTllMmJlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL72zafoSRq8lJuWtY4P7Gc+FbdinlCaOAU0uSX95q4+bL9F
lRAHfnlIZvYjOcQCON35yTwC2S9fDO2R/IoaYlvBQ/nCSI1nlivXmeCAJ0b9rces
jqufHA/7TRQDu1IgBDzLwA0LSQx/Ztp+sBc49SL/DQfJ5J/urcmwyEHG3D1TTDKx
2Tpu+SI94uU061J06ygqz92XtlXFExNyZz8psV3wfP6o23Y9zpKcQxGsRSKwWZ16
lZBnW3jV2d08edixcy9nd3t+9c3pscdngk7tldk6H0wk4cF6GCW2GOP2x6/xKmNa
i2G7LE7YBlRfUv804mj8wrLB5uehdTeSSVwJy3MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQg2IbLmoBsRPRa75hex/sfvp4r6DAfBgNVHSMEGDAWgBSj4hYdfwH6b9CE
LCEQgGM/PtNrpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L28tSVdIWDhCLW1fUWhDd2hFSUJqUHo3VGE2VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWYvNmE2NGVhLTlmMWUtNGI0My1iZjJhLTdlMDM0MGVjOTY2Ny8x
L0lOaUd5NXFBYkVUMFd1LVlYc2Y3SDc2ZUstZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYv
NmE2NGVhLTlmMWUtNGI0My1iZjJhLTdlMDM0MGVjOTY2Ny8xL28tSVdIWDhCLW1f
UWhDd2hFSUJqUHo3VGE2VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnxijANBgkqhkiG9w0BAQsFAAOC
AQEAcT+p5vstKIcnNPeATyvU/iSC+BgO3W9vq27nHpF/l/qtHGW395NZg00Rfsc8
TMPkw8vff54YzAkrVjzCm3pS++zY5W+V9125sQGHoOeUHx9NmFgjXAFAjnmWMvzC
4CDAvk84m6fvExGmDcVA+v2nY/a2jim+QVp/FiYBb+BiTb9yewo8+n+WgOJ6JmTw
M7plKe+VK6FT1b0ovX9Si67p+M/VfDsiwpp+gW2wnec+VHUwCW1E5QSus9JBjck/
7dElvC+U8CcUGSqzcsbe0tHEm/zC1IDSBI0jPBNXqVBcTbqTTmi4ENS9iYt7mZNY
4wgHlBDphcSxVc/UV25JWIAvAQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:00 2023 by rpki-client on console-ams.rpki-client.org