Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/DfD3Wqcez5FnAKr1gXjNGaeecgY.roa
File: DfD3Wqcez5FnAKr1gXjNGaeecgY.roa (raw, json)
Hash identifier: L3Za+vkfW3zLckgmi+HN3jcAp9lpTte+5RIAnRMsSj8=
Subject key identifier: 0D:F0:F7:5A:A7:1E:CF:91:67:00:AA:F5:81:78:CD:19:A7:9E:72:06
Certificate issuer: /CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
Certificate serial: 0183CD73B7C8E8AD2D0F8DA38CCAA276D83A
Authority key identifier: E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/DfD3Wqcez5FnAKr1gXjNGaeecgY.roa
Signing time: Wed 12 Oct 2022 18:27:36 +0000
ROA not before: Wed 12 Oct 2022 18:27:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207192
IP address blocks: 185.161.48.0/22 maxlen: 24
185.161.51.0/24 maxlen: 24
185.161.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:73:b7:c8:e8:ad:2d:0f:8d:a3:8c:ca:a2:76:d8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
Validity
Not Before: Oct 12 18:27:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0df0f75aa71ecf916700aaf58178cd19a79e7206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:a8:03:ca:cc:5c:38:bd:c1:15:49:34:b3:
9d:d6:40:d1:36:e7:e6:bb:35:e4:b2:5b:69:00:f8:
a7:4b:78:0c:8d:21:36:08:32:86:0c:61:e8:ae:34:
20:73:ad:34:45:64:ab:a0:ba:77:b6:8f:0d:8e:d8:
3b:27:01:d0:76:73:fa:22:86:9d:b9:3b:8d:d0:31:
67:42:b8:84:d2:59:28:fe:67:b8:2f:3a:b1:91:83:
a6:eb:5f:03:51:95:25:d5:f6:e0:db:ad:1a:8d:1b:
f1:c8:da:f1:dd:56:0a:ec:23:41:17:65:53:cb:05:
ce:e6:85:4a:6f:09:d0:14:51:12:ef:b8:aa:e5:61:
1f:c9:fc:4e:12:c5:6a:3a:4f:55:0e:d6:59:3b:e3:
46:89:b6:fd:bb:9a:29:b7:87:8f:fe:ca:63:ab:c8:
40:08:10:92:9f:5b:b2:ad:10:0f:62:bc:ee:19:10:
aa:1a:65:2d:f4:1a:17:24:fc:97:b9:a2:4c:30:40:
8b:64:42:d5:0b:df:db:d3:9c:00:b1:60:43:47:8a:
30:18:3a:4d:3c:51:4d:f9:b6:ad:49:fc:cf:ef:87:
34:70:5a:de:1d:ab:06:1a:76:86:36:43:ab:5b:53:
d6:4a:34:72:a6:b8:2d:81:b0:c4:12:38:6c:10:39:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:F7:5A:A7:1E:CF:91:67:00:AA:F5:81:78:CD:19:A7:9E:72:06
X509v3 Authority Key Identifier:
keyid:E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/DfD3Wqcez5FnAKr1gXjNGaeecgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:37:5b:e2:71:3d:7b:c5:bd:45:d2:b9:82:d9:c2:cc:c1:9f:
0e:f8:89:37:aa:1e:5d:5d:07:2e:6d:cd:3d:31:5c:b3:86:d9:
32:7c:eb:43:86:0a:88:be:d0:60:a5:c7:26:e2:96:3f:0b:99:
7a:a2:55:e8:a7:e3:3f:24:e2:3c:af:69:8e:75:80:34:7f:e1:
64:68:9f:e0:1c:10:d0:c6:a7:63:61:7c:d2:f1:7d:81:92:03:
93:ee:a8:7c:92:ef:2e:91:53:c5:aa:20:e4:60:27:19:0e:76:
28:05:fb:5c:10:42:4e:15:e7:58:0c:e5:0a:77:13:1d:56:26:
5e:d5:14:ff:95:af:08:9f:be:59:04:7f:c1:4f:a6:2f:ee:18:
a1:fb:36:29:59:eb:83:49:3a:53:a3:e7:12:bd:02:c1:32:0d:
06:95:1c:dc:fe:8a:38:99:3d:12:14:37:d3:7b:70:90:13:16:
a2:52:05:86:4c:5f:7b:db:ac:fe:ce:d5:46:57:86:1b:13:6d:
c9:d9:bf:07:ba:36:a2:a8:03:46:8e:c3:db:d9:fb:8d:b0:92:
6b:03:be:60:61:b6:61:e6:ab:62:a5:e3:58:61:80:02:01:fe:
90:9a:a6:2d:df:0e:36:25:ed:68:31:a7:da:50:bc:42:8f:19:
ef:23:f9:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPNc7fI6K0tD42jjMqidtg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmFiZTI2MTJkNjdhNDNkNjgyOGQ1YjM0NDE4ZjVmMzRi
NmE4MjQwHhcNMjIxMDEyMTgyNzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGYwZjc1YWE3MWVjZjkxNjcwMGFhZjU4MTc4Y2QxOWE3OWU3MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroqoA8rMXDi9wRVJNLOd1kDRNufm
uzXksltpAPinS3gMjSE2CDKGDGHorjQgc600RWSroLp3to8Njtg7JwHQdnP6Ioad
uTuN0DFnQriE0lko/me4LzqxkYOm618DUZUl1fbg260ajRvxyNrx3VYK7CNBF2VT
ywXO5oVKbwnQFFES77iq5WEfyfxOEsVqOk9VDtZZO+NGibb9u5opt4eP/spjq8hA
CBCSn1uyrRAPYrzuGRCqGmUt9BoXJPyXuaJMMECLZELVC9/b05wAsWBDR4owGDpN
PFFN+batSfzP74c0cFreHasGGnaGNkOrW1PWSjRyprgtgbDEEjhsEDnNPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3w91qnHs+RZwCq9YF4zRmnnnIGMB8GA1UdIwQY
MBaAFOAqviYS1npD1oKNWzRBj180tqgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNENxLUpoTFdla1BXZ28xYk5FR1BYelMycUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81ZDY4ODUtMzlmZC00NjVmLTkzYjQt
MzE3MGZkNWMzZTE3LzEvRGZEM1dxY2V6NUZuQUtyMWdYak5HYWVlY2dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi81ZDY4ODUtMzlmZC00NjVmLTkzYjQtMzE3MGZkNWMzZTE3
LzEvNENxLUpoTFdla1BXZ28xYk5FR1BYelMycUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaEwMA0G
CSqGSIb3DQEBCwUAA4IBAQArN1vicT17xb1F0rmC2cLMwZ8O+Ik3qh5dXQcubc09
MVyzhtkyfOtDhgqIvtBgpccm4pY/C5l6olXop+M/JOI8r2mOdYA0f+FkaJ/gHBDQ
xqdjYXzS8X2BkgOT7qh8ku8ukVPFqiDkYCcZDnYoBftcEEJOFedYDOUKdxMdViZe
1RT/la8In75ZBH/BT6Yv7hih+zYpWeuDSTpTo+cSvQLBMg0GlRzc/oo4mT0SFDfT
e3CQExaiUgWGTF9726z+ztVGV4YbE23J2b8HujaiqANGjsPb2fuNsJJrA75gYbZh
5qtipeNYYYACAf6QmqYt3w42Je1oMafaULxCjxnvI/lq
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org