Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/sYLqwykskLtFuj29XSYardeA_G4.roa
File: sYLqwykskLtFuj29XSYardeA_G4.roa (raw, json)
Hash identifier: T8XAgZ91UQO/0Oemn4PTDzu5NsStX7lDTAkLZ0lZ1K4=
Subject key identifier: B1:82:EA:C3:29:2C:90:BB:45:BA:3D:BD:5D:26:1A:AD:D7:80:FC:6E
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01836068B3D6983928B9863B66977761FA0F
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/sYLqwykskLtFuj29XSYardeA_G4.roa
Signing time: Wed 21 Sep 2022 14:16:57 +0000
ROA not before: Wed 21 Sep 2022 14:16:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8312
IP address blocks: 185.213.0.0/24 maxlen: 24
185.213.3.0/24 maxlen: 24
185.213.2.0/24 maxlen: 24
185.213.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:68:b3:d6:98:39:28:b9:86:3b:66:97:77:61:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Sep 21 14:16:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b182eac3292c90bb45ba3dbd5d261aadd780fc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:57:26:c4:10:05:0e:9a:46:57:be:ed:dc:
78:c4:f8:96:7c:3a:90:db:12:62:ce:cc:9c:34:b4:
8e:1f:84:6e:4b:b9:09:af:9c:ce:57:bf:5a:38:d9:
71:d3:f3:bb:0c:df:90:46:09:b5:12:69:c0:be:6f:
76:9a:bc:07:49:41:0f:66:1f:96:80:8b:5b:bd:a6:
e7:b7:6f:5b:f5:d6:ae:92:30:1f:ec:0a:a4:8b:65:
b7:70:b2:2f:66:4a:f4:cc:c3:53:6b:40:f1:b3:1d:
8a:8d:ee:de:b7:b6:ac:e8:d7:33:63:3a:e4:ff:e4:
8c:35:1f:a0:c1:08:8c:df:93:17:5d:46:1a:65:25:
59:83:a8:af:eb:97:01:59:e7:88:fa:46:d0:e0:dc:
ff:0b:6f:e8:eb:47:16:35:88:14:95:c2:6b:5a:70:
8f:67:f2:31:5d:5c:66:2f:8e:cb:22:ee:b1:66:ff:
88:53:6b:8e:82:e2:32:af:e5:26:8a:0a:32:5f:dc:
aa:6f:a3:43:bd:67:c2:ca:80:7c:64:55:d0:79:9a:
74:3e:2d:4c:51:ce:46:d8:53:e7:59:fe:24:b1:f4:
da:a0:d7:bd:89:52:82:81:56:4a:24:4d:2d:96:10:
37:ff:64:78:21:5e:7a:57:47:52:64:e2:ff:ab:73:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:EA:C3:29:2C:90:BB:45:BA:3D:BD:5D:26:1A:AD:D7:80:FC:6E
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/sYLqwykskLtFuj29XSYardeA_G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.0.0/22
Signature Algorithm: sha256WithRSAEncryption
35:14:ab:44:a5:c1:4d:12:1e:a7:cb:9c:7d:fd:06:f1:04:8b:
8b:8e:1b:37:4f:3b:ad:b1:3b:51:1c:2d:9c:ef:04:04:ec:2c:
38:64:4a:aa:e1:a6:a1:bc:28:c6:14:f9:bc:9c:47:18:26:b6:
21:d4:c0:ab:f0:24:55:73:57:2a:66:c7:0d:f5:78:78:b9:4b:
79:a1:8b:13:cb:e5:bf:31:a3:6e:22:dd:9c:d4:e7:59:7b:35:
95:d5:44:2b:d7:54:5b:a4:38:05:1e:1c:52:30:ba:b5:9b:87:
cc:15:b6:0a:d1:ec:6b:e9:2d:19:fd:ec:ab:b5:42:24:18:f7:
c6:53:5a:ff:a8:68:aa:09:90:58:af:9d:d7:0d:36:75:b1:22:
c6:81:fa:ea:7b:17:a4:9b:99:4c:a7:f4:cd:9f:4d:97:d4:de:
af:7e:10:b0:0d:af:07:a5:a1:5a:77:83:f9:7a:b0:12:73:5c:
03:70:d7:da:fe:bd:0b:8f:8a:18:c8:03:dc:2a:f4:11:56:e3:
5a:3a:42:ce:3d:a9:97:d4:b0:80:19:1a:d7:c5:04:95:63:df:
5e:c1:fd:5f:ed:df:b3:fd:56:fb:33:98:b7:3b:59:9e:c3:fc:
f2:66:d1:c4:4c:21:8d:d2:e8:8f:bb:13:7a:e9:f3:c0:e0:77:
e6:d9:43:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNgaLPWmDkouYY7Zpd3YfoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk
OTI2YWEwHhcNMjIwOTIxMTQxNjU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTgyZWFjMzI5MmM5MGJiNDViYTNkYmQ1ZDI2MWFhZGQ3ODBmYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT9XJsQQBQ6aRle+7dx4xPiWfDqQ
2xJizsycNLSOH4RuS7kJr5zOV79aONlx0/O7DN+QRgm1EmnAvm92mrwHSUEPZh+W
gItbvabnt29b9daukjAf7Aqki2W3cLIvZkr0zMNTa0Dxsx2Kje7et7as6NczYzrk
/+SMNR+gwQiM35MXXUYaZSVZg6iv65cBWeeI+kbQ4Nz/C2/o60cWNYgUlcJrWnCP
Z/IxXVxmL47LIu6xZv+IU2uOguIyr+UmigoyX9yqb6NDvWfCyoB8ZFXQeZp0Pi1M
Uc5G2FPnWf4ksfTaoNe9iVKCgVZKJE0tlhA3/2R4IV56V0dSZOL/q3N7RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGC6sMpLJC7Rbo9vV0mGq3XgPxuMB8GA1UdIwQY
MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt
ZmM1MzkzYzU3ODg3LzEvc1lMcXd5a3NrTHRGdWoyOVhTWWFyZGVBX0c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3
LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudUAMA0G
CSqGSIb3DQEBCwUAA4IBAQA1FKtEpcFNEh6ny5x9/QbxBIuLjhs3TzutsTtRHC2c
7wQE7Cw4ZEqq4aahvCjGFPm8nEcYJrYh1MCr8CRVc1cqZscN9Xh4uUt5oYsTy+W/
MaNuIt2c1OdZezWV1UQr11RbpDgFHhxSMLq1m4fMFbYK0exr6S0Z/eyrtUIkGPfG
U1r/qGiqCZBYr53XDTZ1sSLGgfrqexekm5lMp/TNn02X1N6vfhCwDa8HpaFad4P5
erASc1wDcNfa/r0Lj4oYyAPcKvQRVuNaOkLOPamX1LCAGRrXxQSVY99ewf1f7d+z
/Vb7M5i3O1mew/zyZtHETCGN0uiPuxN66fPA4Hfm2UN9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:31 2023 by rpki-client on console-ams.rpki-client.org