Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/XsszHaGlTeZh683RuDypRPRDf4Q.roa
File: XsszHaGlTeZh683RuDypRPRDf4Q.roa (raw, json)
Hash identifier: SOJuEKNt8fzsLTivZJjgynkm2Ma6y76fxh89fENytwY=
Subject key identifier: 5E:CB:33:1D:A1:A5:4D:E6:61:EB:CD:D1:B8:3C:A9:44:F4:43:7F:84
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 013C24
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/XsszHaGlTeZh683RuDypRPRDf4Q.roa
Signing time: Fri 04 Mar 2022 16:27:02 +0000
ROA not before: Fri 04 Mar 2022 16:27:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 85.208.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80932 (0x13c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Mar 4 16:27:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ecb331da1a54de661ebcdd1b83ca944f4437f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:32:0c:54:44:35:ce:cc:3d:44:09:a4:1b:
36:b3:ca:f5:0a:8d:16:3f:94:57:7f:60:46:ab:cb:
2f:27:58:c1:dd:09:28:4a:5a:69:e2:dc:17:1d:db:
86:f7:1d:34:36:9c:97:d3:f1:2a:16:f1:a8:ab:77:
48:b8:89:65:7e:ee:91:43:49:31:2e:c7:f1:ac:9f:
dd:87:ba:2c:f4:a6:43:76:c8:7c:9b:9d:ff:1f:c9:
5f:2a:77:06:0f:89:2e:ee:14:c6:f8:fc:dd:4a:1d:
6d:15:df:32:b3:ee:40:b5:6e:e1:66:be:c4:12:a7:
30:20:80:2e:db:48:15:02:3a:3b:4f:18:79:8f:8a:
3b:e6:17:b6:38:03:2c:39:f5:fa:15:62:4b:db:1d:
8f:7d:f6:f8:9b:56:9e:09:1c:eb:67:9f:dc:fa:dc:
ac:a8:8c:b0:b8:7d:4b:d3:98:93:a8:00:37:52:fe:
e2:d2:c2:95:7b:1f:3b:ea:69:45:50:24:88:ea:ba:
29:ad:88:d9:c9:6b:40:4d:0f:35:cc:26:07:37:bf:
89:76:3a:66:1f:50:b8:14:47:26:bf:fb:07:c0:17:
c8:b6:85:ce:59:d4:07:e9:90:a4:c0:dd:5f:f0:f3:
13:cc:2f:49:4f:b5:8a:68:cc:15:55:31:9d:c9:cc:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:33:1D:A1:A5:4D:E6:61:EB:CD:D1:B8:3C:A9:44:F4:43:7F:84
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/XsszHaGlTeZh683RuDypRPRDf4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:87:25:ae:96:61:f5:01:c6:54:a3:d0:86:26:d0:98:50:bd:
e8:91:d9:f3:0f:aa:8c:19:41:b6:36:57:42:9d:1d:80:2e:d8:
2d:37:45:c3:a1:95:e2:90:5a:75:0f:52:cf:70:25:4d:66:23:
a3:ca:62:db:c2:da:df:03:7d:af:23:b8:c9:7e:8c:23:85:68:
cd:15:72:59:24:4e:c6:42:fa:19:4f:35:53:50:1f:85:5f:df:
69:a5:62:59:09:87:60:84:f7:67:fb:92:f0:c3:aa:d3:85:e8:
96:e6:90:49:df:33:8b:19:be:bb:ff:a4:33:da:77:0d:72:6c:
fe:2a:17:e7:ff:f9:40:61:d8:22:5d:ac:d5:0d:64:1c:ca:3b:
9b:10:54:19:eb:fa:40:87:d9:fc:6b:5c:62:5d:4c:8b:c2:01:
32:f5:b6:e9:30:7a:fe:d5:76:f7:b7:6f:4d:06:04:2a:5d:54:
a0:59:33:96:1f:d8:f9:9e:d4:c5:1b:10:20:45:de:75:1a:bd:
de:6d:e5:0f:3f:88:d7:eb:67:47:96:38:24:40:f8:9d:5f:06:
88:fe:a5:52:e8:ae:cf:bf:7b:a0:2a:33:2d:8e:fd:b4:d8:69:
d7:d6:d1:ab:30:b1:a3:7b:8d:df:0f:44:35:c0:c2:a8:ba:2e:
5b:55:58:b7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDATwkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM5
OWRjMTM2MTlhYWJhN2YyMjJjZWFjYjA1ZjFiYmFjNTliZDNhOWEwHhcNMjIwMzA0
MTYyNzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1ZWNiMzMxZGExYTU0
ZGU2NjFlYmNkZDFiODNjYTk0NGY0NDM3Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjisyDFRENc7MPUQJpBs2s8r1Co0WP5RXf2BGq8svJ1jB3Qko
Slpp4twXHduG9x00NpyX0/EqFvGoq3dIuIllfu6RQ0kxLsfxrJ/dh7os9KZDdsh8
m53/H8lfKncGD4ku7hTG+PzdSh1tFd8ys+5AtW7hZr7EEqcwIIAu20gVAjo7Txh5
j4o75he2OAMsOfX6FWJL2x2Pffb4m1aeCRzrZ5/c+tysqIywuH1L05iTqAA3Uv7i
0sKVex876mlFUCSI6roprYjZyWtATQ81zCYHN7+JdjpmH1C4FEcmv/sHwBfItoXO
WdQH6ZCkwN1f8PMTzC9JT7WKaMwVVTGdycwa8QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFF7LMx2hpU3mYevN0bg8qUT0Q3+EMB8GA1UdIwQYMBaAFDmdwTYZqrp/Iizq
ywXxu6xZvTqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
T1ozQk5obXF1bjhpTE9yTEJmRzdyRm05T3BvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zZC9lZmEyMjUtMTZkYy00ZjQzLWFhZTktMDAzMmZkYzU0NTBiLzEv
WHNzekhhR2xUZVpoNjgzUnVEeXBSUFJEZjRRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9l
ZmEyMjUtMTZkYy00ZjQzLWFhZTktMDAzMmZkYzU0NTBiLzEvT1ozQk5obXF1bjhp
TE9yTEJmRzdyRm05T3BvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdDBMA0GCSqGSIb3DQEBCwUAA4IB
AQAehyWulmH1AcZUo9CGJtCYUL3okdnzD6qMGUG2NldCnR2ALtgtN0XDoZXikFp1
D1LPcCVNZiOjymLbwtrfA32vI7jJfowjhWjNFXJZJE7GQvoZTzVTUB+FX99ppWJZ
CYdghPdn+5Lww6rTheiW5pBJ3zOLGb67/6Qz2ncNcmz+Khfn//lAYdgiXazVDWQc
yjubEFQZ6/pAh9n8a1xiXUyLwgEy9bbpMHr+1Xb3t29NBgQqXVSgWTOWH9j5ntTF
GxAgRd51Gr3ebeUPP4jX62dHljgkQPidXwaI/qVS6K7Pv3ugKjMtjv202GnX1tGr
MLGje43fD0Q1wMKoui5bVVi3
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:06 2023 by rpki-client on console.sobornost.net