Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/8AIQ2q3Hy0kgBEfpJ8Vqfr_9Bx4.roa
File: 8AIQ2q3Hy0kgBEfpJ8Vqfr_9Bx4.roa (raw, json)
Hash identifier: H7Rm4TIpJ224pDy/z4XYCSYB6PQS4MheWl98brXn1yo=
Subject key identifier: F0:02:10:DA:AD:C7:CB:49:20:04:47:E9:27:C5:6A:7E:BF:FD:07:1E
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 054CF0DC
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/8AIQ2q3Hy0kgBEfpJ8Vqfr_9Bx4.roa
Signing time: Sat 01 Jan 2022 12:02:05 +0000
ROA not before: Sat 01 Jan 2022 12:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394434
IP address blocks: 185.194.138.0/23 maxlen: 24
185.194.136.0/23 maxlen: 24
2a0a:4bc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88928476 (0x54cf0dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jan 1 12:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f00210daadc7cb49200447e927c56a7ebffd071e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:27:1c:f6:e7:dc:b5:53:a2:77:42:66:9e:
10:f6:65:5e:3c:ee:5c:5e:a0:7f:fc:74:ef:f7:eb:
8f:39:48:d8:63:0f:21:eb:3a:a3:a8:cb:51:32:1e:
0f:d6:ec:de:e7:66:13:7e:f9:e5:50:7f:5d:1e:5e:
de:ce:69:37:08:da:e8:a8:5f:87:50:33:70:b0:e7:
06:50:67:a3:0b:08:9f:a5:5d:16:39:14:6b:61:ee:
1c:d2:45:d1:cf:ba:13:43:ab:b9:ac:7b:e7:09:bb:
84:0f:46:19:8b:87:8e:1d:93:17:6c:45:b9:fe:48:
0b:be:9d:16:1f:38:6b:20:1d:70:03:3f:88:bd:36:
a4:48:a0:76:f2:20:37:64:84:3d:c9:d1:b9:49:63:
d3:70:01:f5:a9:be:22:8c:e5:3e:81:4b:ab:59:d8:
ef:35:7f:9f:11:80:0d:85:51:cd:34:94:45:d1:62:
e4:fc:2f:38:34:e4:d6:a9:92:32:51:7a:f1:60:ea:
23:5e:bd:14:12:3c:f3:00:b3:67:f1:b4:0d:07:e1:
2e:bd:ed:e6:d2:b4:a8:ba:fe:82:2c:6d:84:b0:eb:
20:5b:12:95:89:20:71:65:7d:05:9b:d2:54:dc:58:
1a:2f:fe:d0:1e:08:8f:3d:46:ff:e5:78:20:e3:7f:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:10:DA:AD:C7:CB:49:20:04:47:E9:27:C5:6A:7E:BF:FD:07:1E
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/8AIQ2q3Hy0kgBEfpJ8Vqfr_9Bx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.136.0/22
IPv6:
2a0a:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:94:5b:17:a6:9a:78:2c:49:ba:e0:6d:13:74:31:18:db:8a:
9b:0f:28:00:3e:fc:e1:15:d1:1c:df:31:63:5b:8b:34:00:ba:
ac:ec:4d:7e:fa:6d:1f:57:65:42:c6:a0:4b:26:2d:1c:fb:8f:
15:46:f2:db:3a:dc:5a:4f:25:af:8a:42:bb:b9:75:04:38:e1:
79:74:0b:08:36:cb:6e:38:53:a1:43:81:63:f1:02:1d:52:bd:
a2:b4:e2:19:ab:75:33:0a:94:7d:4a:93:90:d6:5b:8d:ef:f2:
b0:37:1c:bd:9b:eb:97:dc:15:80:5c:aa:47:10:65:2a:50:04:
84:20:02:59:2c:f8:38:59:93:00:9e:b5:cd:f4:4e:cd:65:45:
c5:b8:9f:76:c7:5f:e3:af:aa:23:2d:04:76:3d:e3:4d:f6:0d:
e3:4a:39:81:e5:5b:93:98:fd:ee:f7:2a:99:d1:99:ec:d2:32:
96:fc:d4:d4:8b:62:0b:72:56:eb:b1:90:2c:49:6c:76:29:fc:
cb:d1:98:12:8c:de:e9:37:b5:5e:cc:80:f8:ec:f2:1e:f3:0f:
ec:41:82:86:b1:1f:8f:49:d9:0c:e5:4f:60:56:fe:cf:9e:d2:
99:e8:89:76:2e:4e:0a:2c:72:2a:3b:d4:e5:b4:65:51:a0:e0:
b1:54:2c:e9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBUzw3DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NDUwMTAxOTQ0NDBlZTQwZjVkZTQyZjBjMWIyYjNkMzcxYmNkODYzMB4XDTIyMDEw
MTEyMDIwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjAwMjEwZGFhZGM3
Y2I0OTIwMDQ0N2U5MjdjNTZhN2ViZmZkMDcxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrtJxz259y1U6J3QmaeEPZlXjzuXF6gf/x07/frjzlI2GMP
Ies6o6jLUTIeD9bs3udmE3755VB/XR5e3s5pNwja6Khfh1AzcLDnBlBnowsIn6Vd
FjkUa2HuHNJF0c+6E0Oruax75wm7hA9GGYuHjh2TF2xFuf5IC76dFh84ayAdcAM/
iL02pEigdvIgN2SEPcnRuUlj03AB9am+IozlPoFLq1nY7zV/nxGADYVRzTSURdFi
5PwvODTk1qmSMlF68WDqI169FBI88wCzZ/G0DQfhLr3t5tK0qLr+gixthLDrIFsS
lYkgcWV9BZvSVNxYGi/+0B4Ijz1G/+V4ION/pdsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTwAhDarcfLSSAER+knxWp+v/0HHjAfBgNVHSMEGDAWgBQEUBAZREDuQPXe
QvDBsrPTcbzYYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JGQVFHVVJBN2tEMTNrTHd3Ykt6MDNHODJHTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvNjgyNmY1LWY5N2UtNDM5ZS1iMTk5LWI3YmQxMGU0NDg5Zi8x
LzhBSVEycTNIeTBrZ0JFZnBKOFZxZnJfOUJ4NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
NjgyNmY1LWY5N2UtNDM5ZS1iMTk5LWI3YmQxMGU0NDg5Zi8xL0JGQVFHVVJBN2tE
MTNrTHd3Ykt6MDNHODJHTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnCiDANBAIAAjAHAwUDKgpLwDAN
BgkqhkiG9w0BAQsFAAOCAQEADZRbF6aaeCxJuuBtE3QxGNuKmw8oAD784RXRHN8x
Y1uLNAC6rOxNfvptH1dlQsagSyYtHPuPFUby2zrcWk8lr4pCu7l1BDjheXQLCDbL
bjhToUOBY/ECHVK9orTiGat1MwqUfUqTkNZbje/ysDccvZvrl9wVgFyqRxBlKlAE
hCACWSz4OFmTAJ61zfROzWVFxbifdsdf46+qIy0Edj3jTfYN40o5geVbk5j97vcq
mdGZ7NIylvzU1ItiC3JW67GQLElsdin8y9GYEoze6Te1XsyA+OzyHvMP7EGChrEf
j0nZDOVPYFb+z57SmeiJdi5OCixyKjvU5bRlUaDgsVQs6Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:31 2023 by rpki-client on console-ams.rpki-client.org