Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/KdfqoVgpIl-vtP2dS8KafJ1bQV4.roa
File: KdfqoVgpIl-vtP2dS8KafJ1bQV4.roa (raw, json)
Hash identifier: Kb/wxThOTidt/FaJftehDuqdgZIzoHCdZjYLn/NXDlg=
Subject key identifier: 29:D7:EA:A1:58:29:22:5F:AF:B4:FD:9D:4B:C2:9A:7C:9D:5B:41:5E
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 0EEB7846
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/KdfqoVgpIl-vtP2dS8KafJ1bQV4.roa
Signing time: Sat 01 Jan 2022 14:59:33 +0000
ROA not before: Sat 01 Jan 2022 14:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8972
IP address blocks: 185.201.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250312774 (0xeeb7846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Jan 1 14:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29d7eaa15829225fafb4fd9d4bc29a7c9d5b415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:ff:71:5e:55:06:5f:8b:52:3a:7e:97:a7:
28:26:3f:a7:c4:54:68:99:32:a2:de:b6:1d:e2:fc:
f1:2f:ed:92:0d:ec:90:2f:74:3a:ec:40:a8:76:de:
97:f2:94:69:49:65:81:d7:d8:d9:1c:9f:0b:7c:46:
c5:31:29:bb:12:0f:8e:a1:89:9f:27:12:b1:36:d6:
d4:fb:da:62:b4:26:e4:b8:e3:30:5f:bf:2a:30:bd:
10:aa:a1:73:4c:aa:73:8f:19:4c:59:31:81:06:27:
03:a9:6d:81:d4:26:d6:31:05:8b:07:bd:cb:61:cc:
3c:6d:47:72:f7:18:6c:68:38:3c:f2:08:6f:cb:b8:
dc:d7:dd:17:8a:ef:6b:61:9c:5b:56:21:db:8d:2e:
3a:0a:52:41:ab:34:5a:a7:22:c6:f1:a6:07:5f:cb:
cb:ca:b4:3b:49:e8:51:78:41:94:ee:c5:bc:5f:de:
d5:92:e1:4d:6a:65:5e:c4:be:31:a1:2c:9b:fd:11:
59:92:d2:9b:86:8b:51:d0:33:2d:79:4e:29:55:13:
6c:b8:71:f9:26:37:3b:2c:25:66:a1:9b:d2:7b:c6:
aa:2f:6d:87:dd:e8:74:47:31:d5:80:e2:bc:30:c4:
c4:09:44:0b:2e:2e:78:74:46:40:af:37:16:88:42:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:EA:A1:58:29:22:5F:AF:B4:FD:9D:4B:C2:9A:7C:9D:5B:41:5E
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/KdfqoVgpIl-vtP2dS8KafJ1bQV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.16.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fb:26:47:ba:2e:e8:dd:9e:44:0f:cb:66:f8:99:a5:b9:49:
6f:4b:1e:ba:f9:06:84:b2:84:94:0c:c6:12:cd:ae:56:af:4e:
82:46:d5:ff:8f:ac:32:c0:75:5c:e5:59:c2:f2:24:30:06:82:
0d:e6:19:c3:db:ea:44:2b:48:4a:88:fe:aa:a5:9a:ca:18:2f:
c8:28:fe:ad:35:ed:78:cf:95:5f:35:4b:fc:f9:68:3f:00:3b:
c1:6d:27:28:ff:7b:24:23:8f:94:2f:7f:fa:25:19:09:af:14:
68:74:a5:ce:f5:6a:6a:05:e0:5b:0d:94:f2:96:1d:b5:95:8d:
a7:85:ad:12:67:8c:f1:37:d9:6c:25:b6:db:b5:05:69:8d:a6:
d4:fa:06:2a:e8:6b:7b:77:19:94:bc:88:a0:69:e2:04:34:0a:
6c:73:52:93:d9:30:5d:40:b7:fb:8c:79:f3:7f:61:d9:ad:ab:
d5:fe:3c:96:47:04:a9:e0:ab:17:02:62:03:e5:5e:ba:7b:b5:
89:23:43:3e:98:4a:3a:42:51:24:14:8c:e4:d5:1c:b1:60:09:
ad:7f:97:43:7a:35:70:15:c7:3f:88:f2:2a:7c:9e:ca:da:49:
87:2e:73:0d:73:8c:a1:c1:38:54:08:d5:ba:cd:ec:ad:44:d9:
6d:46:46:b2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDut4RjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmVlMjAxYzY1ZDY1NWVlOWNmZTI1MWY5NTFlYTkxYmJhMTU0NTY3MB4XDTIyMDEw
MTE0NTkzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjlkN2VhYTE1ODI5
MjI1ZmFmYjRmZDlkNGJjMjlhN2M5ZDViNDE1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAImw/3FeVQZfi1I6fpenKCY/p8RUaJkyot62HeL88S/tkg3s
kC90OuxAqHbel/KUaUllgdfY2RyfC3xGxTEpuxIPjqGJnycSsTbW1PvaYrQm5Ljj
MF+/KjC9EKqhc0yqc48ZTFkxgQYnA6ltgdQm1jEFiwe9y2HMPG1HcvcYbGg4PPII
b8u43NfdF4rva2GcW1Yh240uOgpSQas0WqcixvGmB1/Ly8q0O0noUXhBlO7FvF/e
1ZLhTWplXsS+MaEsm/0RWZLSm4aLUdAzLXlOKVUTbLhx+SY3OywlZqGb0nvGqi9t
h93odEcx1YDivDDExAlECy4ueHRGQK83FohCHVECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQp1+qhWCkiX6+0/Z1Lwpp8nVtBXjAfBgNVHSMEGDAWgBSG7iAcZdZV7pz+
JR+VHqkbuhVFZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2h1NGdIR1hXVmU2Y19pVWZsUjZwRzdvVlJXYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvMTNhNzM1LTNiMWMtNGQ5Yy04Y2ZhLWE4Y2E4ZTRjN2U3Ny8x
L0tkZnFvVmdwSWwtdnRQMmRTOEthZkoxYlFWNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
MTNhNzM1LTNiMWMtNGQ5Yy04Y2ZhLWE4Y2E4ZTRjN2U3Ny8xL2h1NGdIR1hXVmU2
Y19pVWZsUjZwRzdvVlJXYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnJEDANBgkqhkiG9w0BAQsFAAOC
AQEAlvsmR7ou6N2eRA/LZviZpblJb0seuvkGhLKElAzGEs2uVq9OgkbV/4+sMsB1
XOVZwvIkMAaCDeYZw9vqRCtISoj+qqWayhgvyCj+rTXteM+VXzVL/PloPwA7wW0n
KP97JCOPlC9/+iUZCa8UaHSlzvVqagXgWw2U8pYdtZWNp4WtEmeM8TfZbCW227UF
aY2m1PoGKuhre3cZlLyIoGniBDQKbHNSk9kwXUC3+4x5839h2a2r1f48lkcEqeCr
FwJiA+Veunu1iSNDPphKOkJRJBSM5NUcsWAJrX+XQ3o1cBXHP4jyKnyeytpJhy5z
DXOMocE4VAjVus3srUTZbUZGsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:18 2024 by rpki-client on console-fra.rpki-client.org