Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/CVgDTbQDYulTgaxHMzSuBETu1_M.roa
File: CVgDTbQDYulTgaxHMzSuBETu1_M.roa (raw, json)
Hash identifier: +FW4Jm5tpVlaPikWds8tpue5HIaLlslwwkOW8GvVp2o=
Subject key identifier: 09:58:03:4D:B4:03:62:E9:53:81:AC:47:33:34:AE:04:44:EE:D7:F3
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01853E0024D3840D77CAECAAEC0D637BBC55
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/CVgDTbQDYulTgaxHMzSuBETu1_M.roa
Signing time: Fri 23 Dec 2022 08:01:14 +0000
ROA not before: Fri 23 Dec 2022 08:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207691
IP address blocks: 185.43.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:00:24:d3:84:0d:77:ca:ec:aa:ec:0d:63:7b:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Dec 23 08:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0958034db40362e95381ac473334ae0444eed7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:4b:e5:7f:6b:96:5a:ce:de:8c:bf:af:24:
c0:d5:cb:c3:18:2e:56:2b:ec:8e:cc:bf:80:bc:bb:
8b:20:25:90:7b:79:35:ee:67:18:d8:15:fd:41:c7:
70:ec:6b:4d:44:cb:0f:0e:92:07:05:db:4d:51:ef:
46:06:ab:70:cf:0f:02:8f:a3:c1:e3:2e:a0:ff:d2:
2e:fa:53:7f:40:a5:3a:ba:e3:d6:3a:52:0c:cf:f7:
60:4e:5c:de:fe:a6:30:00:58:95:80:3b:53:cc:16:
75:d1:69:40:7d:02:fc:ff:44:e3:22:60:f6:1c:df:
4f:04:9c:8b:d6:3a:70:bd:5c:77:22:61:b9:4a:15:
37:fa:19:8d:c4:3a:75:69:0e:e0:2f:a2:30:1a:7c:
30:7a:e0:ef:a8:1a:17:82:15:51:ad:ef:43:6a:a2:
89:4c:d3:74:21:42:1c:54:45:e6:ca:1f:d2:82:c2:
c0:f0:29:51:49:25:bd:c5:7b:2a:a6:7b:49:59:3a:
db:34:91:14:ce:9b:ed:75:1d:a4:c0:14:0b:99:c0:
1a:01:ea:31:7f:ae:f7:37:32:79:20:48:a5:94:a5:
73:9b:81:a2:04:46:5e:cd:41:97:85:64:90:a5:8d:
00:e9:52:b2:24:c5:27:ed:bb:88:d8:79:74:6f:9c:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:03:4D:B4:03:62:E9:53:81:AC:47:33:34:AE:04:44:EE:D7:F3
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/CVgDTbQDYulTgaxHMzSuBETu1_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.56.0/23
Signature Algorithm: sha256WithRSAEncryption
20:17:63:02:0c:1f:de:c8:41:f7:87:35:96:ed:bd:3d:5e:7d:
94:f3:01:f8:d2:a3:36:89:b3:12:61:1d:e0:fd:79:2d:c9:fd:
58:fc:00:3b:f6:57:f8:36:78:2e:dc:ab:9a:2d:6f:aa:4a:d0:
f9:ad:13:bc:b0:e0:12:d9:fa:a5:5d:65:d4:02:56:2c:ef:6d:
08:e2:66:17:a0:17:e8:47:ff:dd:6c:5e:52:2b:55:e6:c4:09:
3b:14:63:5c:5b:38:85:bf:6b:0f:c7:dc:7b:9a:37:1c:3f:c7:
0b:81:da:64:66:57:62:02:0a:e1:52:52:9d:91:cb:5e:c9:a8:
c7:30:49:69:7f:7a:c2:e3:a1:77:1c:51:5e:15:36:cc:d7:5f:
c0:03:2b:2a:28:82:58:c6:b8:47:34:dc:3a:a1:db:8a:9a:85:
93:70:ce:99:16:b1:3d:4b:81:83:96:7d:d5:d9:08:2f:bc:da:
47:55:d9:89:05:62:5d:60:76:08:33:42:9b:ae:bc:e2:2e:73:
0f:33:20:45:32:a4:7b:c9:60:92:33:b4:df:07:80:45:bb:04:
14:52:9f:a8:d6:87:6d:eb:e1:6a:05:72:fc:3e:6e:9d:91:7c:
84:1d:c1:c5:e3:b7:d6:6a:6e:58:c7:b5:77:b0:1b:91:34:83:
7b:7e:0b:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU+ACTThA13yuyq7A1je7xVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjIxMjIzMDgwMTE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTU4MDM0ZGI0MDM2MmU5NTM4MWFjNDczMzM0YWUwNDQ0ZWVkN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN9L5X9rllrO3oy/ryTA1cvDGC5W
K+yOzL+AvLuLICWQe3k17mcY2BX9Qcdw7GtNRMsPDpIHBdtNUe9GBqtwzw8Cj6PB
4y6g/9Iu+lN/QKU6uuPWOlIMz/dgTlze/qYwAFiVgDtTzBZ10WlAfQL8/0TjImD2
HN9PBJyL1jpwvVx3ImG5ShU3+hmNxDp1aQ7gL6IwGnwweuDvqBoXghVRre9DaqKJ
TNN0IUIcVEXmyh/SgsLA8ClRSSW9xXsqpntJWTrbNJEUzpvtdR2kwBQLmcAaAeox
f673NzJ5IEillKVzm4GiBEZezUGXhWSQpY0A6VKyJMUn7buI2Hl0b5y4fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAlYA020A2LpU4GsRzM0rgRE7tfzMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvQ1ZnRFRiUURZdWxUZ2F4SE16U3VCRVR1MV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSs4MA0G
CSqGSIb3DQEBCwUAA4IBAQAgF2MCDB/eyEH3hzWW7b09Xn2U8wH40qM2ibMSYR3g
/Xktyf1Y/AA79lf4Nngu3KuaLW+qStD5rRO8sOAS2fqlXWXUAlYs720I4mYXoBfo
R//dbF5SK1XmxAk7FGNcWziFv2sPx9x7mjccP8cLgdpkZldiAgrhUlKdkcteyajH
MElpf3rC46F3HFFeFTbM11/AAysqKIJYxrhHNNw6oduKmoWTcM6ZFrE9S4GDln3V
2QgvvNpHVdmJBWJdYHYIM0KbrrziLnMPMyBFMqR7yWCSM7TfB4BFuwQUUp+o1odt
6+FqBXL8Pm6dkXyEHcHF47fWam5Yx7V3sBuRNIN7fgu9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org