Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/IyTjz_XR2iKFYvirttqN5tuWMaw.roa
File: IyTjz_XR2iKFYvirttqN5tuWMaw.roa (raw, json)
Hash identifier: OwGgayW2IVCRg+qaShkScTAE1F1QpIHJ+ceyLkyIEqk=
Subject key identifier: 23:24:E3:CF:F5:D1:DA:22:85:62:F8:AB:B6:DA:8D:E6:DB:96:31:AC
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 0FCCA77A
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/IyTjz_XR2iKFYvirttqN5tuWMaw.roa
Signing time: Sat 01 Jan 2022 12:07:08 +0000
ROA not before: Sat 01 Jan 2022 12:07:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199727
IP address blocks: 185.189.173.0/24 maxlen: 24
185.189.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265070458 (0xfcca77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Jan 1 12:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2324e3cff5d1da228562f8abb6da8de6db9631ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:f3:d0:6b:5d:43:9b:42:9d:07:61:8d:09:
ae:85:96:d2:22:a0:93:af:11:4d:f1:94:c7:50:83:
6b:72:8b:d1:08:75:10:62:c4:4c:f0:a9:1a:ce:24:
d4:ac:74:65:4f:e5:01:6c:fb:2d:43:39:99:8c:9d:
95:51:1d:e2:7e:ae:dc:f2:cf:b2:d2:c7:de:0e:76:
77:be:ce:69:70:93:4a:66:7e:c9:d9:5f:b9:15:fa:
cc:ab:e7:7d:aa:e6:88:05:01:63:7e:1b:11:43:d0:
9e:c1:63:8a:db:f1:d3:12:55:fa:e3:5c:1d:4c:5a:
5a:88:0e:23:be:f1:11:59:33:9e:9e:18:45:fc:3a:
2d:09:59:49:8a:f5:f2:fa:75:d8:21:33:15:ae:1a:
0f:9f:c1:c6:3b:6f:ca:52:db:19:cf:8e:4b:d5:31:
d6:95:95:59:52:e4:78:7d:0f:5a:79:56:07:d2:c5:
22:88:1f:8c:51:17:bc:f7:9a:11:5c:7b:9a:ac:59:
e5:27:82:0b:02:e4:0f:5e:0e:6b:a4:ed:3d:d3:98:
7b:f5:8d:c1:84:c0:af:c6:45:68:1d:81:39:57:49:
fb:36:b3:e5:4a:d8:6f:00:be:77:67:8d:c6:e2:bf:
07:f9:ef:13:7e:d8:eb:08:c2:ba:5a:33:07:00:bc:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:24:E3:CF:F5:D1:DA:22:85:62:F8:AB:B6:DA:8D:E6:DB:96:31:AC
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/IyTjz_XR2iKFYvirttqN5tuWMaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.172.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:eb:22:b7:60:54:3c:63:f9:26:ef:6d:95:80:0c:14:85:62:
8f:6c:9b:91:e1:d4:cf:5c:7c:19:e3:1b:a5:a9:a0:b5:5f:b0:
e2:eb:18:0b:35:7d:56:21:a3:a2:9f:d8:5b:6b:ce:20:8e:9d:
ce:7f:19:86:be:42:05:b7:34:5f:af:82:41:c6:7b:9d:04:8f:
e9:ab:0a:19:59:49:d6:08:ec:45:f2:77:d2:d2:c2:b2:b6:d2:
d1:e9:7b:d7:26:08:7a:8e:3a:56:0a:d1:dd:f4:61:93:cb:cc:
22:32:5c:62:09:b6:c7:14:20:08:ba:9b:16:b2:61:13:ac:ae:
99:7c:e4:26:b0:a6:65:6a:5b:29:a9:92:72:ef:41:04:a3:48:
1a:57:fe:62:27:66:2c:be:9a:4b:04:ef:f1:ba:c0:17:5f:a6:
4c:3c:ed:69:9b:c4:06:bd:68:d0:cc:be:d0:29:3f:91:d5:e4:
da:96:ce:44:61:5d:30:a0:bf:af:10:60:f5:d6:34:89:22:ae:
c6:c1:08:2d:17:17:81:79:e3:ac:14:7b:c2:47:4f:70:27:ae:
d5:47:30:75:96:35:a0:bb:c4:c6:6f:7d:d0:b4:aa:63:48:36:
0b:0a:8a:cd:41:aa:bc:ca:58:be:6a:1a:3b:2c:62:38:b7:31:
63:37:ee:7c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED8ynejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTEwMzU2ZGMwYTUyMTg5NWNlNjFmODU0OTVlMDZkYWY3YTEyYjNiMB4XDTIyMDEw
MTEyMDcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjMyNGUzY2ZmNWQx
ZGEyMjg1NjJmOGFiYjZkYThkZTZkYjk2MzFhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8p89BrXUObQp0HYY0JroWW0iKgk68RTfGUx1CDa3KL0Qh1
EGLETPCpGs4k1Kx0ZU/lAWz7LUM5mYydlVEd4n6u3PLPstLH3g52d77OaXCTSmZ+
ydlfuRX6zKvnfarmiAUBY34bEUPQnsFjitvx0xJV+uNcHUxaWogOI77xEVkznp4Y
Rfw6LQlZSYr18vp12CEzFa4aD5/BxjtvylLbGc+OS9Ux1pWVWVLkeH0PWnlWB9LF
IogfjFEXvPeaEVx7mqxZ5SeCCwLkD14Oa6TtPdOYe/WNwYTAr8ZFaB2BOVdJ+zaz
5UrYbwC+d2eNxuK/B/nvE37Y6wjCulozBwC80mkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQjJOPP9dHaIoVi+Ku22o3m25YxrDAfBgNVHSMEGDAWgBSlEDVtwKUhiVzm
H4VJXgba96ErOzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BSQTFiY0NsSVlsYzVoLUZTVjRHMnZlaEt6cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvM2M3YzdjLTQzMjYtNDE4NC04MzU2LTAxMTgyZjg0MDc4OS8x
L0l5VGp6X1hSMmlLRll2aXJ0dHFONXR1V01hdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
M2M3YzdjLTQzMjYtNDE4NC04MzU2LTAxMTgyZjg0MDc4OS8xL3BSQTFiY0NsSVls
YzVoLUZTVjRHMnZlaEt6cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbm9rDANBgkqhkiG9w0BAQsFAAOC
AQEAPusit2BUPGP5Ju9tlYAMFIVij2ybkeHUz1x8GeMbpamgtV+w4usYCzV9ViGj
op/YW2vOII6dzn8Zhr5CBbc0X6+CQcZ7nQSP6asKGVlJ1gjsRfJ30tLCsrbS0el7
1yYIeo46VgrR3fRhk8vMIjJcYgm2xxQgCLqbFrJhE6yumXzkJrCmZWpbKamScu9B
BKNIGlf+YidmLL6aSwTv8brAF1+mTDztaZvEBr1o0My+0Ck/kdXk2pbORGFdMKC/
rxBg9dY0iSKuxsEILRcXgXnjrBR7wkdPcCeu1UcwdZY1oLvExm990LSqY0g2CwqK
zUGqvMpYvmoaOyxiOLcxYzfufA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net