Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/e_0HkRKG4A5gqiTRweOskJx7y-I.roa
File: e_0HkRKG4A5gqiTRweOskJx7y-I.roa (raw, json)
Hash identifier: CrIVdkykf7BtyU1LFpW1tUJ980YLuD2oZ5ZXwA0Y+EU=
Subject key identifier: 7B:FD:07:91:12:86:E0:0E:60:AA:24:D1:C1:E3:AC:90:9C:7B:CB:E2
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 03250EBE
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/e_0HkRKG4A5gqiTRweOskJx7y-I.roa
Signing time: Fri 15 Apr 2022 12:44:57 +0000
ROA not before: Fri 15 Apr 2022 12:44:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398772
IP address blocks: 185.174.88.0/23 maxlen: 23
185.168.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52760254 (0x3250ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Apr 15 12:44:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bfd07911286e00e60aa24d1c1e3ac909c7bcbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:c1:7d:ab:0b:15:61:94:b7:51:65:ba:62:
56:01:e5:db:d2:ae:56:54:f3:ba:f4:03:96:48:51:
fc:36:bf:0f:c6:6d:2c:4d:60:c6:6b:6b:07:36:ce:
47:3b:49:f6:55:76:24:01:a0:7f:c5:6b:57:3f:b0:
20:b8:24:8d:7f:bc:aa:4d:d1:c8:0f:9e:ea:5b:ba:
fe:fb:63:1f:39:27:e1:43:1f:8c:0f:3d:11:4d:6e:
2f:c2:82:30:9b:8b:f9:86:6d:01:9a:6e:4a:61:5d:
d9:e4:89:fe:a9:d8:45:7d:3c:67:ef:d8:37:0a:f2:
3d:6a:c3:65:74:d4:7f:28:4d:cf:d1:12:fe:a5:fc:
d9:50:5a:b0:f8:1e:20:a8:82:3c:ea:90:32:d0:73:
6a:da:2e:66:cb:4c:37:24:fa:bb:95:dd:d7:2c:99:
d3:b9:19:fd:6a:8a:41:c2:2f:8b:7b:da:15:5c:3d:
59:3b:8d:2f:04:1f:d2:75:c0:47:ab:9f:dd:b1:5c:
d7:74:6c:25:80:e2:e9:81:3a:10:20:4f:a1:04:27:
3f:39:e7:54:86:06:6b:6c:ad:47:d9:ae:c7:40:c1:
e9:83:a1:cd:ef:94:31:94:a9:5b:09:ae:5a:78:79:
7d:a6:fe:62:3e:87:e1:13:f4:70:a7:d0:87:65:14:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:07:91:12:86:E0:0E:60:AA:24:D1:C1:E3:AC:90:9C:7B:CB:E2
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/e_0HkRKG4A5gqiTRweOskJx7y-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.156.0/24
185.174.88.0/23
Signature Algorithm: sha256WithRSAEncryption
27:a9:6f:00:de:4e:11:e7:2f:22:24:e4:df:07:dc:bd:57:99:
60:b7:db:5f:c9:6a:eb:65:16:31:ef:49:c8:6f:63:b3:cc:e2:
98:0c:6a:88:82:8d:24:c2:2b:52:32:7f:da:66:ea:08:92:f6:
3e:91:c4:c0:3d:4f:c8:af:a8:2e:f6:f4:f5:80:5e:1e:de:e8:
6d:cf:33:98:9f:a6:41:eb:62:eb:12:8f:39:77:71:8d:af:78:
68:34:99:43:f4:50:90:be:95:01:08:1a:a9:9a:f3:eb:e1:a8:
78:9d:bf:26:4d:bc:04:e0:d9:01:ef:4a:4d:d0:63:26:4b:b2:
13:1c:84:44:95:80:53:41:24:a6:58:e4:cc:42:23:43:33:0d:
e7:70:de:4f:f4:0a:ea:9d:81:d6:aa:ba:9a:ea:bd:c1:f9:57:
1f:90:8b:c4:e2:21:25:0a:bb:f7:83:8f:71:e0:19:e3:07:1a:
0e:e1:d9:18:08:02:d9:77:bf:7b:3c:94:5e:17:ae:88:07:92:
eb:76:fc:6b:5d:bb:81:65:0c:a2:4d:78:7c:37:f9:94:79:95:
b0:88:44:13:4b:dd:37:35:8e:46:99:64:2e:d8:b7:15:4c:e7:
d5:2c:0c:33:0b:7f:72:60:85:f9:4b:75:a0:e9:77:06:b8:ec:
55:aa:92:12
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAyUOvjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZTk1OGYxODFmYjUwN2EwYTJhODIxODU2YjhiZTBkNTRiMTE4Yjg1MB4XDTIyMDQx
NTEyNDQ1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JmZDA3OTExMjg2
ZTAwZTYwYWEyNGQxYzFlM2FjOTA5YzdiY2JlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDiwX2rCxVhlLdRZbpiVgHl29KuVlTzuvQDlkhR/Da/D8Zt
LE1gxmtrBzbORztJ9lV2JAGgf8VrVz+wILgkjX+8qk3RyA+e6lu6/vtjHzkn4UMf
jA89EU1uL8KCMJuL+YZtAZpuSmFd2eSJ/qnYRX08Z+/YNwryPWrDZXTUfyhNz9ES
/qX82VBasPgeIKiCPOqQMtBzatouZstMNyT6u5Xd1yyZ07kZ/WqKQcIvi3vaFVw9
WTuNLwQf0nXAR6uf3bFc13RsJYDi6YE6ECBPoQQnPznnVIYGa2ytR9mux0DB6YOh
ze+UMZSpWwmuWnh5fab+Yj6H4RP0cKfQh2UUBKECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR7/QeREobgDmCqJNHB46yQnHvL4jAfBgNVHSMEGDAWgBTOlY8YH7UHoKKo
IYVri+DVSxGLhTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pwV1BHQi0xQjZDaXFDR0ZhNHZnMVVzUmk0VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvM2Q5YmZhLWNmZDAtNDRhOC04NDJlLTBkYmIzYjhkYjE1Zi8x
L2VfMEhrUktHNEE1Z3FpVFJ3ZU9za0p4N3ktSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
M2Q5YmZhLWNmZDAtNDRhOC04NDJlLTBkYmIzYjhkYjE1Zi8xL3pwV1BHQi0xQjZD
aXFDR0ZhNHZnMVVzUmk0VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALmonAMEAbmuWDANBgkqhkiG9w0B
AQsFAAOCAQEAJ6lvAN5OEecvIiTk3wfcvVeZYLfbX8lq62UWMe9JyG9js8zimAxq
iIKNJMIrUjJ/2mbqCJL2PpHEwD1PyK+oLvb09YBeHt7obc8zmJ+mQeti6xKPOXdx
ja94aDSZQ/RQkL6VAQgaqZrz6+GoeJ2/Jk28BODZAe9KTdBjJkuyExyERJWAU0Ek
pljkzEIjQzMN53DeT/QK6p2B1qq6muq9wflXH5CLxOIhJQq794OPceAZ4wcaDuHZ
GAgC2Xe/ezyUXheuiAeS63b8a127gWUMok14fDf5lHmVsIhEE0vdNzWORplkLti3
FUzn1SwMMwt/cmCF+Ut1oOl3BrjsVaqSEg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:37 2023 by rpki-client on console-ams.rpki-client.org