Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/ymUinSaWDFv2OPYWqZCJ70-5RcA.roa
File: ymUinSaWDFv2OPYWqZCJ70-5RcA.roa (raw, json)
Hash identifier: ctcbq0VFO2VeTDQcx+3ZeucL6lEfSNuuSCazv0K54DE=
Subject key identifier: CA:65:22:9D:26:96:0C:5B:F6:38:F6:16:A9:90:89:EF:4F:B9:45:C0
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0A90CE8D
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/ymUinSaWDFv2OPYWqZCJ70-5RcA.roa
Signing time: Sat 01 Jan 2022 16:05:32 +0000
ROA not before: Sat 01 Jan 2022 16:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202539
IP address blocks: 185.174.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177262221 (0xa90ce8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 1 16:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca65229d26960c5bf638f616a99089ef4fb945c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:43:b8:24:22:aa:5a:4f:95:05:9b:d7:18:
05:2a:ba:d7:7d:1b:87:1a:b6:b7:4c:aa:98:b4:0e:
59:fc:e2:9e:fa:0f:df:78:f3:da:e3:c5:c5:95:46:
ae:3d:2a:01:87:b1:d2:0b:c8:f5:4e:fd:17:30:2f:
79:bb:37:48:0e:e2:82:d0:e4:ca:f1:b5:68:e6:85:
46:da:2e:4e:c9:cb:d1:7d:2d:d2:c9:ce:24:f1:b4:
26:9a:12:48:63:c9:f9:bb:c2:1e:d3:6d:f9:cf:55:
91:a9:5f:12:f1:cd:12:6f:2d:31:1d:c1:c1:66:04:
e2:2c:2a:1d:70:fb:8e:8e:5d:3b:93:b4:16:98:2e:
dc:ea:50:57:01:89:bd:6f:fa:0d:15:54:3e:21:ad:
81:37:8b:4b:f1:dd:be:79:9c:bb:a6:40:2f:d0:1f:
e8:13:5e:7d:d7:5f:25:60:ae:2a:74:35:c8:f5:41:
e2:df:29:bc:cb:b0:24:fc:f5:00:dc:e0:74:19:a3:
d7:83:e2:16:ff:42:14:6d:e6:f0:8a:b2:bd:c8:22:
be:27:d8:e0:f2:20:ca:da:5c:77:39:f3:02:2e:75:
c4:24:17:3a:2e:5b:41:b5:cb:80:b6:39:27:2f:d3:
a2:69:e6:5e:92:7f:7a:13:2c:50:10:08:5c:73:fd:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:22:9D:26:96:0C:5B:F6:38:F6:16:A9:90:89:EF:4F:B9:45:C0
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/ymUinSaWDFv2OPYWqZCJ70-5RcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.40.0/24
Signature Algorithm: sha256WithRSAEncryption
36:52:65:74:5a:ee:d2:fe:1f:8e:43:c9:3f:2e:58:05:d1:08:
33:33:a9:69:b6:9b:8e:a4:7a:07:79:9c:9b:4e:d8:71:06:a8:
92:76:bf:93:f5:4e:f5:8d:2a:51:d6:50:e7:2d:62:1f:b9:23:
b3:bf:b8:76:14:ae:78:02:70:28:46:21:0b:58:0f:9b:a8:a4:
ef:41:b1:a8:dc:89:84:f6:4f:e9:6a:47:8e:56:6d:44:2e:72:
e9:2c:2e:05:db:ac:e9:2a:0d:73:28:34:7b:7c:1b:94:6a:e6:
c2:a4:88:b9:12:a7:6a:6a:9d:37:5c:37:fa:fb:9b:77:29:3d:
ec:b4:84:ca:44:bf:11:3c:46:77:1c:95:8b:f1:e6:02:10:40:
61:83:e8:e1:72:ad:fa:ba:20:a0:5d:4f:74:85:06:7c:79:d5:
82:ec:3f:ac:de:f8:87:4b:8f:f3:2d:cf:73:6b:8e:e2:fb:88:
00:6e:6f:13:a8:bf:0a:3a:07:c1:9d:63:fa:63:4c:84:b8:24:
67:f3:30:84:96:de:0b:8f:50:9d:8d:95:9e:4e:fb:5e:8f:51:
58:2d:75:0b:37:6e:40:c6:34:bf:18:d8:76:d7:3f:79:17:b1:
2c:5b:ee:8d:27:61:27:46:89:ee:4b:bb:c1:0d:d0:50:dd:13:
ec:20:51:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECpDOjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OWNlNTY5YTE0YzJkYjM3NzJmMjMxODdjZTY4ZTY1NDFlYzAwNDhlMB4XDTIyMDEw
MTE2MDUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2E2NTIyOWQyNjk2
MGM1YmY2MzhmNjE2YTk5MDg5ZWY0ZmI5NDVjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJdaQ7gkIqpaT5UFm9cYBSq6130bhxq2t0yqmLQOWfzinvoP
33jz2uPFxZVGrj0qAYex0gvI9U79FzAvebs3SA7igtDkyvG1aOaFRtouTsnL0X0t
0snOJPG0JpoSSGPJ+bvCHtNt+c9VkalfEvHNEm8tMR3BwWYE4iwqHXD7jo5dO5O0
Fpgu3OpQVwGJvW/6DRVUPiGtgTeLS/Hdvnmcu6ZAL9Af6BNefddfJWCuKnQ1yPVB
4t8pvMuwJPz1ANzgdBmj14PiFv9CFG3m8IqyvcgivifY4PIgytpcdznzAi51xCQX
Oi5bQbXLgLY5Jy/TomnmXpJ/ehMsUBAIXHP9P8ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTKZSKdJpYMW/Y49hapkInvT7lFwDAfBgNVHSMEGDAWgBSZzlaaFMLbN3Ly
MYfOaOZUHsAEjjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21jNVdtaFRDMnpkeThqR0h6bWptVkI3QUJJNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvY2M2ZTk5LTZlNWYtNDAxYi05MTJkLTEwOTU1NDRjNmM1MC8x
L3ltVWluU2FXREZ2Mk9QWVdxWkNKNzAtNVJjQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
Y2M2ZTk5LTZlNWYtNDAxYi05MTJkLTEwOTU1NDRjNmM1MC8xL21jNVdtaFRDMnpk
eThqR0h6bWptVkI3QUJJNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmuKDANBgkqhkiG9w0BAQsFAAOC
AQEANlJldFru0v4fjkPJPy5YBdEIMzOpababjqR6B3mcm07YcQaokna/k/VO9Y0q
UdZQ5y1iH7kjs7+4dhSueAJwKEYhC1gPm6ik70GxqNyJhPZP6WpHjlZtRC5y6Swu
Bdus6SoNcyg0e3wblGrmwqSIuRKnamqdN1w3+vubdyk97LSEykS/ETxGdxyVi/Hm
AhBAYYPo4XKt+rogoF1PdIUGfHnVguw/rN74h0uP8y3Pc2uO4vuIAG5vE6i/CjoH
wZ1j+mNMhLgkZ/MwhJbeC49QnY2Vnk77Xo9RWC11CzduQMY0vxjYdtc/eRexLFvu
jSdhJ0aJ7ku7wQ3QUN0T7CBR+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:27 2024 by rpki-client on console-fra.rpki-client.org