Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/pAqryLStiV4eMJ2zVUxIz7qOeF0.roa
File: pAqryLStiV4eMJ2zVUxIz7qOeF0.roa (raw, json)
Hash identifier: dSPtsrNqyA4FwUoI8nKrWlBpIYqmnvdi/Ldde/iHvfo=
Subject key identifier: A4:0A:AB:C8:B4:AD:89:5E:1E:30:9D:B3:55:4C:48:CF:BA:8E:78:5D
Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial: 02CF22C3
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/pAqryLStiV4eMJ2zVUxIz7qOeF0.roa
Signing time: Sat 01 Jan 2022 04:51:20 +0000
ROA not before: Sat 01 Jan 2022 04:51:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31726
IP address blocks: 185.90.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47129283 (0x2cf22c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Validity
Not Before: Jan 1 04:51:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a40aabc8b4ad895e1e309db3554c48cfba8e785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:05:ca:46:c4:67:cd:2a:d6:54:47:ab:3b:
f1:d5:e3:1a:54:6a:3a:35:8b:93:7a:20:09:0b:11:
33:19:4d:b8:c2:02:9a:6d:7f:96:18:30:da:d3:42:
33:ac:72:51:af:a7:68:b4:57:4c:21:78:72:65:cf:
91:72:1d:d7:93:80:39:df:a4:7d:02:af:8f:2c:cc:
3a:1f:68:51:4a:0b:2f:62:ca:2b:9f:84:48:90:f1:
08:36:f7:5a:c7:f1:2c:b5:4c:59:7c:bc:9c:a6:c0:
76:21:fe:e4:f7:fa:13:9f:58:a4:2e:66:16:c1:79:
14:a5:51:3c:b6:f2:b1:3c:78:89:fb:60:13:37:4f:
0f:48:47:b3:04:1d:2d:13:ad:4d:81:2b:86:63:81:
95:a0:76:6e:78:21:ba:0e:0a:b6:fb:1e:20:09:a4:
dd:13:48:39:d4:db:f5:2b:d1:cc:f6:26:f5:ae:6d:
bd:26:3b:13:39:f0:0c:b2:4e:36:8b:89:20:ef:73:
11:5e:5c:f4:11:57:eb:df:f8:33:1e:10:2f:d7:68:
e7:af:25:93:2a:fc:1d:13:00:73:df:bf:f9:e7:58:
c1:07:53:a0:66:7f:a8:d0:cb:ce:3f:0e:1c:3a:96:
93:90:01:f6:bb:df:04:bc:d3:27:5e:49:3a:a8:cd:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:AB:C8:B4:AD:89:5E:1E:30:9D:B3:55:4C:48:CF:BA:8E:78:5D
X509v3 Authority Key Identifier:
keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/pAqryLStiV4eMJ2zVUxIz7qOeF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.180.0/22
Signature Algorithm: sha256WithRSAEncryption
22:6d:08:bf:a6:a3:a6:74:e1:20:1c:82:73:99:00:38:ec:25:
1d:d6:55:0f:48:b6:23:36:0c:96:a1:d6:69:07:6d:80:f9:08:
7a:11:cb:b4:d7:c7:38:ae:e6:f9:aa:d5:51:80:db:fc:00:a0:
00:4a:1a:ae:5a:3a:35:9d:ce:67:5e:24:b4:f8:9c:59:f3:b8:
7d:07:a9:aa:a4:9c:cf:00:ad:f8:60:9b:cd:4b:23:5f:fb:b8:
ec:74:4b:b1:1c:94:ba:81:0a:d3:48:15:79:1d:d4:b4:34:40:
70:f0:e1:7b:be:83:be:db:07:49:32:c2:41:11:34:a5:56:f3:
e6:d9:a8:74:5b:3a:90:36:1f:af:2c:58:eb:ed:78:0a:f3:d2:
38:5e:3e:a1:48:cc:3c:d0:34:02:5d:4c:90:6c:e1:03:79:9f:
58:72:e1:a2:1c:39:de:81:23:b9:39:e8:81:5f:9f:0e:27:cc:
c2:ff:69:99:d2:27:fb:83:25:00:93:ac:0d:8d:78:57:32:1d:
32:09:83:11:28:9e:1b:51:ad:e7:fd:0d:71:88:73:35:ce:4d:
44:6a:60:a3:ad:d4:58:67:d0:b3:2f:1f:46:4a:a4:77:6d:00:
95:41:b7:23:fa:14:3c:93:77:d6:e3:14:72:ac:8a:7a:de:a0:
aa:83:b6:38
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAs8iwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MjJmOTg3OWNjZmFkZWU1ZDA0YTlhOTk3M2Y1YjI3OTUyOTcxYmZiMB4XDTIyMDEw
MTA0NTEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQwYWFiYzhiNGFk
ODk1ZTFlMzA5ZGIzNTU0YzQ4Y2ZiYThlNzg1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyyBcpGxGfNKtZUR6s78dXjGlRqOjWLk3ogCQsRMxlNuMIC
mm1/lhgw2tNCM6xyUa+naLRXTCF4cmXPkXId15OAOd+kfQKvjyzMOh9oUUoLL2LK
K5+ESJDxCDb3WsfxLLVMWXy8nKbAdiH+5Pf6E59YpC5mFsF5FKVRPLbysTx4iftg
EzdPD0hHswQdLROtTYErhmOBlaB2bnghug4KtvseIAmk3RNIOdTb9SvRzPYm9a5t
vSY7EznwDLJONouJIO9zEV5c9BFX69/4Mx4QL9do568lkyr8HRMAc9+/+edYwQdT
oGZ/qNDLzj8OHDqWk5AB9rvfBLzTJ15JOqjNoGcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSkCqvItK2JXh4wnbNVTEjPuo54XTAfBgNVHSMEGDAWgBRSL5h5zPre5dBK
mplz9bJ5Upcb+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VpLVllY3o2M3VYUVNwcVpjX1d5ZVZLWEdfcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvZmFkNGYxLTkxZjAtNDdlMS1iMzcwLWVlNTA5ZmJkODBlMS8x
L3BBcXJ5TFN0aVY0ZU1KMnpWVXhJejdxT2VGMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
ZmFkNGYxLTkxZjAtNDdlMS1iMzcwLWVlNTA5ZmJkODBlMS8xL1VpLVllY3o2M3VY
UVNwcVpjX1d5ZVZLWEdfcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlatDANBgkqhkiG9w0BAQsFAAOC
AQEAIm0Iv6ajpnThIByCc5kAOOwlHdZVD0i2IzYMlqHWaQdtgPkIehHLtNfHOK7m
+arVUYDb/ACgAEoarlo6NZ3OZ14ktPicWfO4fQepqqSczwCt+GCbzUsjX/u47HRL
sRyUuoEK00gVeR3UtDRAcPDhe76DvtsHSTLCQRE0pVbz5tmodFs6kDYfryxY6+14
CvPSOF4+oUjMPNA0Al1MkGzhA3mfWHLhohw53oEjuTnogV+fDifMwv9pmdIn+4Ml
AJOsDY14VzIdMgmDESieG1Gt5/0NcYhzNc5NRGpgo63UWGfQsy8fRkqkd20AlUG3
I/oUPJN31uMUcqyKet6gqoO2OA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:31 2025 by rpki-client