Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/1-SnzBPPlorw-Se1Gn3X57Xh5rHA.roa
File: 1-SnzBPPlorw-Se1Gn3X57Xh5rHA.roa (raw, json)
Hash identifier: Chy4X4lLPnOu9TF/F3oc+kjw76X6uJ0MihbnAaFOdZc=
Subject key identifier: F9:29:F3:04:F3:E5:A2:BC:3E:49:ED:46:9F:75:F9:ED:78:79:AC:70
Certificate issuer: /CN=ed536c19a691c2f544220a9521474a8765e59cf1
Certificate serial: 0271A1F6
Authority key identifier: ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/1-SnzBPPlorw-Se1Gn3X57Xh5rHA.roa
Signing time: Sat 01 Jan 2022 05:03:58 +0000
ROA not before: Sat 01 Jan 2022 05:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210021
IP address blocks: 185.206.81.0/24 maxlen: 24
185.206.83.0/24 maxlen: 24
185.206.80.0/24 maxlen: 24
185.206.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41001462 (0x271a1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed536c19a691c2f544220a9521474a8765e59cf1
Validity
Not Before: Jan 1 05:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f929f304f3e5a2bc3e49ed469f75f9ed7879ac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:1d:c1:5f:cc:53:a3:6d:04:d1:04:78:6e:
e4:41:e5:93:8e:02:75:fe:e3:4a:11:20:be:66:70:
44:1f:d9:a4:df:3d:52:fe:8f:5c:fa:52:01:a8:1b:
86:a6:97:c9:94:18:fd:a3:b6:9a:94:42:a6:53:9b:
e6:6a:b3:67:28:e4:39:1c:d8:13:23:a6:20:74:9f:
25:ba:da:4b:a5:0d:f8:d3:44:e5:ed:e5:fa:4d:69:
76:a7:5d:f4:0a:67:ed:65:db:c1:ff:51:67:2b:76:
8d:73:a4:bf:4f:02:0b:ab:f7:17:d4:e6:9a:f5:d9:
44:6c:22:de:57:6d:fe:b3:a3:d0:a8:1d:c2:b2:e3:
52:99:49:0a:93:76:11:4e:d3:6e:9d:eb:39:f7:3c:
fa:27:73:cf:db:89:5f:da:a6:58:59:24:16:eb:fe:
88:44:58:8f:0a:d2:6c:4a:e0:b9:60:c9:a0:3c:82:
c0:b0:dd:2f:bf:21:30:17:ab:cd:9f:f5:9a:6b:4a:
0f:12:48:1b:ad:2f:6c:a7:ef:67:10:54:d7:67:47:
08:b8:2d:73:05:b3:af:45:d1:4c:d6:88:df:95:c7:
fb:a0:77:b1:44:28:c4:6c:e4:4b:99:45:75:c2:fa:
9e:5a:2a:c8:98:0a:d9:c1:7a:d6:99:78:d2:c3:21:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:F3:04:F3:E5:A2:BC:3E:49:ED:46:9F:75:F9:ED:78:79:AC:70
X509v3 Authority Key Identifier:
keyid:ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/1-SnzBPPlorw-Se1Gn3X57Xh5rHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.80.0/22
Signature Algorithm: sha256WithRSAEncryption
33:54:ea:f7:12:d5:6a:f7:1a:f9:3b:ed:f2:48:95:0d:65:06:
13:ba:7c:ba:18:8b:f2:6f:cd:2f:3d:f7:c0:8b:a7:01:34:d2:
45:a4:4b:51:10:4a:ac:c9:2e:61:5d:1f:32:53:f2:48:61:cb:
b7:a0:11:74:d4:ca:5d:30:63:ef:2f:7a:aa:70:b2:ae:cf:0a:
4a:50:c4:43:43:b3:dc:b4:f0:46:78:8d:e9:93:82:02:f1:49:
58:91:8d:70:52:66:d6:b6:3c:c4:d9:f1:45:14:2f:a4:63:9f:
7a:bd:96:71:e3:8e:76:64:a5:53:54:a9:ba:9b:d7:cf:31:68:
49:cb:31:79:a1:3b:7a:bd:09:27:e0:f6:4e:e3:ff:71:d7:07:
62:0c:61:f6:e2:08:bc:70:61:49:2e:a8:f7:5d:ed:93:d3:cc:
4e:8e:14:f0:af:74:72:56:eb:1c:a0:76:2f:e5:c3:02:ea:f9:
e9:2a:e3:d0:68:55:10:2c:34:c4:b4:33:7c:59:3e:ee:50:f7:
63:d4:47:cb:75:fb:b9:06:12:aa:c2:47:99:f6:bd:28:90:2f:
a4:f2:c9:11:74:89:d9:7b:93:2e:f3:44:63:3e:b7:1f:f4:69:
91:51:b7:6f:61:7d:dc:5f:03:a9:ee:ab:42:fb:83:a3:39:e0:
b4:37:70:c2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAnGh9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZDUzNmMxOWE2OTFjMmY1NDQyMjBhOTUyMTQ3NGE4NzY1ZTU5Y2YxMB4XDTIyMDEw
MTA1MDM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjkyOWYzMDRmM2U1
YTJiYzNlNDllZDQ2OWY3NWY5ZWQ3ODc5YWM3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ/nHcFfzFOjbQTRBHhu5EHlk44Cdf7jShEgvmZwRB/ZpN89
Uv6PXPpSAagbhqaXyZQY/aO2mpRCplOb5mqzZyjkORzYEyOmIHSfJbraS6UN+NNE
5e3l+k1pdqdd9Apn7WXbwf9RZyt2jXOkv08CC6v3F9TmmvXZRGwi3ldt/rOj0Kgd
wrLjUplJCpN2EU7Tbp3rOfc8+idzz9uJX9qmWFkkFuv+iERYjwrSbErguWDJoDyC
wLDdL78hMBerzZ/1mmtKDxJIG60vbKfvZxBU12dHCLgtcwWzr0XRTNaI35XH+6B3
sUQoxGzkS5lFdcL6nloqyJgK2cF61pl40sMh6PUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5KfME8+WivD5J7UafdfnteHmscDAfBgNVHSMEGDAWgBTtU2wZppHC9UQi
CpUhR0qHZeWc8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdWTnNHYWFSd3ZWRUlncVZJVWRLaDJYbG5QRS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvNmUyMGNhLWExZWYtNGFlOC1hZWYxLWU0NTA5ZmI5Y2YyMC8x
LzEtU256QlBQbG9ydy1TZTFHbjNYNTdYaDVySEEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Zi
LzZlMjBjYS1hMWVmLTRhZTgtYWVmMS1lNDUwOWZiOWNmMjAvMS83Vk5zR2FhUnd2
VkVJZ3FWSVVkS2gyWGxuUEUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5zlAwDQYJKoZIhvcNAQELBQAD
ggEBADNU6vcS1Wr3Gvk77fJIlQ1lBhO6fLoYi/JvzS8998CLpwE00kWkS1EQSqzJ
LmFdHzJT8khhy7egEXTUyl0wY+8veqpwsq7PCkpQxENDs9y08EZ4jemTggLxSViR
jXBSZta2PMTZ8UUUL6Rjn3q9lnHjjnZkpVNUqbqb188xaEnLMXmhO3q9CSfg9k7j
/3HXB2IMYfbiCLxwYUkuqPdd7ZPTzE6OFPCvdHJW6xygdi/lwwLq+ekq49BoVRAs
NMS0M3xZPu5Q92PUR8t1+7kGEqrCR5n2vSiQL6TyyRF0idl7ky7zRGM+tx/0aZFR
t29hfdxfA6nuq0L7g6M54LQ3cMI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-fra.rpki-client.org