Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/0Lk1FqVyONqZRqGZfOLcExUCf_w.roa
File: 0Lk1FqVyONqZRqGZfOLcExUCf_w.roa (raw, json)
Hash identifier: GMtJhufQt0+OoQ5lkX6sK7Ztk/saOy/MeYuPvCqdMHE=
Subject key identifier: D0:B9:35:16:A5:72:38:DA:99:46:A1:99:7C:E2:DC:13:15:02:7F:FC
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 0184A4B154BAA75725BF00D1532991BF3146
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/0Lk1FqVyONqZRqGZfOLcExUCf_w.roa
Signing time: Wed 23 Nov 2022 13:33:15 +0000
ROA not before: Wed 23 Nov 2022 13:33:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.190.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:b1:54:ba:a7:57:25:bf:00:d1:53:29:91:bf:31:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Nov 23 13:33:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0b93516a57238da9946a1997ce2dc1315027ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:6c:cf:4a:91:ac:a7:3f:cb:4a:40:90:a5:
6a:7d:a1:bb:2d:f4:79:ca:49:fb:57:b3:56:44:95:
54:de:1b:f4:5e:98:52:17:be:a7:78:56:7b:09:ca:
de:b1:ab:9d:da:a7:fb:4f:00:6e:61:3c:0c:d2:b8:
a8:a3:13:03:af:78:f6:a7:bf:b3:c7:ff:41:f5:2a:
2a:fa:49:b2:76:26:88:a9:9d:d7:5f:e2:6b:82:97:
21:dd:5a:ca:ed:15:de:bd:3f:2e:74:b5:ee:ae:df:
50:f9:fb:c7:ea:40:ea:16:16:04:21:fc:e3:2b:0a:
29:50:9d:05:d1:2f:f7:41:c7:88:3b:77:c7:92:47:
20:ad:b0:ae:c8:96:24:e4:07:6f:86:fe:3d:28:a9:
1d:f5:e3:f7:92:81:66:b4:a5:db:c8:27:99:c2:e4:
46:55:af:65:ca:9a:60:9a:1c:43:95:ff:9d:bc:ef:
ab:c6:65:63:17:a5:a5:c1:de:6b:78:79:77:7b:0e:
b4:82:52:46:1b:ae:89:1e:04:9c:af:05:23:30:d7:
cc:90:7e:ea:7b:0e:1f:39:91:1d:45:3d:e1:7d:3a:
f5:cf:94:5f:d6:34:d8:7b:9a:f8:3e:46:e4:9b:0e:
16:27:e5:a2:ba:40:8a:fb:70:55:c5:69:27:b5:c1:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:35:16:A5:72:38:DA:99:46:A1:99:7C:E2:DC:13:15:02:7F:FC
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/0Lk1FqVyONqZRqGZfOLcExUCf_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.44.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:63:4a:09:f1:41:8d:41:2e:ad:82:98:7a:16:d7:0c:9b:f7:
c9:58:96:f1:07:45:c9:97:aa:7c:29:a8:6c:e9:f8:11:2d:51:
db:05:c4:0d:e8:f5:0b:e4:73:22:ae:ad:0f:af:4b:cf:dd:8b:
d3:12:39:a3:b1:51:08:23:a6:3b:8c:bf:c1:ae:61:e8:ff:bb:
1b:cd:85:b3:64:89:57:c0:29:7a:23:57:07:78:1c:4f:82:db:
84:4c:d2:2d:45:55:c2:aa:6e:c8:81:4c:49:29:24:20:c3:0f:
40:41:71:ff:7c:da:e1:b7:1d:61:a4:cd:ca:e2:8e:2f:0c:a6:
93:61:00:3d:18:3c:21:42:34:42:43:4a:e5:45:79:6e:00:a1:
c0:51:6f:6f:2a:8c:9c:0c:18:a9:23:b6:57:b0:91:ab:cd:f6:
26:05:60:0b:d8:f7:40:60:99:4b:c0:d0:bd:c3:4e:80:44:7a:
b9:0e:1b:58:44:1c:71:9d:d0:6f:90:f0:c4:39:f1:55:a1:5e:
93:aa:ed:63:29:aa:51:e5:bd:ed:22:94:87:28:03:95:5b:57:
75:52:43:11:26:d4:87:89:fb:22:2b:2e:60:f3:0c:fb:15:12:
62:ae:ac:d7:60:88:f9:b5:cb:26:8c:c3:75:9f:29:8a:8d:3d:
36:fe:e1:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSksVS6p1clvwDRUymRvzFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1
ODY5MWEwHhcNMjIxMTIzMTMzMzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGI5MzUxNmE1NzIzOGRhOTk0NmExOTk3Y2UyZGMxMzE1MDI3ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWBsz0qRrKc/y0pAkKVqfaG7LfR5
ykn7V7NWRJVU3hv0XphSF76neFZ7Ccresaud2qf7TwBuYTwM0riooxMDr3j2p7+z
x/9B9Soq+kmydiaIqZ3XX+Jrgpch3VrK7RXevT8udLXurt9Q+fvH6kDqFhYEIfzj
KwopUJ0F0S/3QceIO3fHkkcgrbCuyJYk5Advhv49KKkd9eP3koFmtKXbyCeZwuRG
Va9lyppgmhxDlf+dvO+rxmVjF6Wlwd5reHl3ew60glJGG66JHgScrwUjMNfMkH7q
ew4fOZEdRT3hfTr1z5Rf1jTYe5r4Pkbkmw4WJ+WiukCK+3BVxWkntcEiKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNC5NRalcjjamUahmXzi3BMVAn/8MB8GA1UdIwQY
MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt
NzkwMjQ0NTA4ZGY0LzEvMExrMUZxVnlPTnFaUnFHWmZPTGNFeFVDZl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0
LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4sMA0G
CSqGSIb3DQEBCwUAA4IBAQBKY0oJ8UGNQS6tgph6FtcMm/fJWJbxB0XJl6p8Kahs
6fgRLVHbBcQN6PUL5HMirq0Pr0vP3YvTEjmjsVEII6Y7jL/BrmHo/7sbzYWzZIlX
wCl6I1cHeBxPgtuETNItRVXCqm7IgUxJKSQgww9AQXH/fNrhtx1hpM3K4o4vDKaT
YQA9GDwhQjRCQ0rlRXluAKHAUW9vKoycDBipI7ZXsJGrzfYmBWAL2PdAYJlLwNC9
w06ARHq5DhtYRBxxndBvkPDEOfFVoV6Tqu1jKapR5b3tIpSHKAOVW1d1UkMRJtSH
ifsiKy5g8wz7FRJirqzXYIj5tcsmjMN1nymKjT02/uHu
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net