Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/2u-S0LEZuz-ozPlOCVzR05UdphQ.roa
File: 2u-S0LEZuz-ozPlOCVzR05UdphQ.roa (raw, json)
Hash identifier: iDwf8WiUZEhHkOw04SVKtlYlL2oGu1f/pUJ1IMP4YGk=
Subject key identifier: DA:EF:92:D0:B1:19:BB:3F:A8:CC:F9:4E:09:5C:D1:D3:95:1D:A6:14
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 080D418C
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/2u-S0LEZuz-ozPlOCVzR05UdphQ.roa
Signing time: Sat 01 Jan 2022 06:59:44 +0000
ROA not before: Sat 01 Jan 2022 06:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.166.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135086476 (0x80d418c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Jan 1 06:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daef92d0b119bb3fa8ccf94e095cd1d3951da614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:c3:65:6f:f0:a9:ab:70:80:06:06:67:9d:
30:b0:e6:7f:5d:01:a0:38:6c:2b:23:72:3a:73:c2:
6f:e0:a9:75:3f:11:23:5a:ae:be:9e:83:32:5f:a0:
74:b6:00:c7:6a:72:eb:43:8d:b5:8b:89:de:b0:ee:
91:4f:b8:9e:70:78:15:a6:84:06:91:a3:2b:3f:49:
cb:02:e9:7c:a8:ce:93:9b:32:a3:79:40:b9:26:b1:
46:2c:7b:48:40:ae:35:21:6a:1f:bd:5b:db:c4:32:
3d:2e:d0:b6:a7:48:1f:79:8c:7b:c7:ad:47:cf:f4:
37:dd:9e:d5:69:1c:24:3a:fe:ca:19:db:2a:e6:5f:
ea:0a:83:8b:7f:89:18:ec:8a:89:9c:57:cf:37:cf:
e7:54:29:d9:cd:34:f3:a2:06:cb:62:0e:f9:e6:00:
54:fb:04:80:79:2b:43:f4:e7:32:40:13:6b:f9:8f:
1e:db:6d:40:41:61:a0:93:fa:ba:43:90:d3:d0:4d:
1c:e4:92:f2:6c:49:ae:ce:f2:64:b9:de:b4:2d:4e:
81:21:84:81:2e:88:97:eb:58:a9:9d:e2:ad:28:b4:
00:12:e0:a8:c1:b7:e7:d7:6c:55:1d:a9:b4:d9:92:
af:8b:c2:bf:75:e7:1a:fd:a3:fa:8c:86:27:a9:be:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:92:D0:B1:19:BB:3F:A8:CC:F9:4E:09:5C:D1:D3:95:1D:A6:14
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/2u-S0LEZuz-ozPlOCVzR05UdphQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:30:cc:93:54:05:72:e8:81:69:c6:7a:84:03:18:73:63:78:
a3:41:02:56:93:7b:cb:32:41:3d:4d:df:8e:8a:44:94:6c:62:
81:9a:98:9c:7a:c8:38:1f:53:67:67:16:22:46:b3:28:89:a9:
96:2c:d5:e3:01:d6:79:b0:6c:dd:e8:93:dc:76:e1:d0:42:61:
7c:67:d7:0b:35:4d:47:c6:7e:44:c7:0f:d3:e4:5c:f2:dc:92:
2d:51:cb:17:77:cd:e9:27:5f:b6:5f:64:c6:1e:b0:cf:ba:42:
71:b0:e1:d4:73:91:59:ab:92:99:17:0d:cb:53:fb:41:e1:5a:
e1:a7:56:53:c7:31:04:01:fd:fa:a3:d6:79:52:35:c5:94:68:
cd:80:c7:3d:83:b0:98:1a:7d:06:7a:b1:00:53:7f:03:e1:9a:
86:5a:d0:d0:e4:68:13:0d:6c:5d:98:5e:ca:f4:87:b4:49:54:
f5:f4:63:4b:d3:62:19:67:0c:b6:1b:40:0a:51:e2:b5:9a:3f:
2e:20:de:11:a0:d6:7d:c7:19:bb:8a:78:06:2e:90:2c:e1:9e:
86:91:56:6e:a2:c8:ce:75:37:9a:b6:e0:c1:4f:87:18:ea:20:
6f:e7:f2:4d:2c:20:cf:92:e4:38:42:61:c4:e2:19:cd:46:86:
86:71:b3:fe
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECA1BjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YzliZTRlZDRlNTRiNjAxZTZiNmE0MmQwYmEwNGNmYjdhYjJjM2JmMB4XDTIyMDEw
MTA2NTk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGFlZjkyZDBiMTE5
YmIzZmE4Y2NmOTRlMDk1Y2QxZDM5NTFkYTYxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJm7w2Vv8KmrcIAGBmedMLDmf10BoDhsKyNyOnPCb+CpdT8R
I1quvp6DMl+gdLYAx2py60ONtYuJ3rDukU+4nnB4FaaEBpGjKz9JywLpfKjOk5sy
o3lAuSaxRix7SECuNSFqH71b28QyPS7QtqdIH3mMe8etR8/0N92e1WkcJDr+yhnb
KuZf6gqDi3+JGOyKiZxXzzfP51Qp2c0086IGy2IO+eYAVPsEgHkrQ/TnMkATa/mP
HtttQEFhoJP6ukOQ09BNHOSS8mxJrs7yZLnetC1OgSGEgS6Il+tYqZ3irSi0ABLg
qMG359dsVR2ptNmSr4vCv3XnGv2j+oyGJ6m+ozcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTa75LQsRm7P6jM+U4JXNHTlR2mFDAfBgNVHSMEGDAWgBT8m+TtTlS2Aea2
pC0LoEz7erLDvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19Kdms3VTVVdGdIbXRxUXRDNkJNLTNxeXc3OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDEvMzYzNjJhLWQ5MWMtNGFkNC05MmM3LTFkMjUxMzMwOGQyMS8x
LzJ1LVMwTEVadXotb3pQbE9DVnpSMDVVZHBoUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEv
MzYzNjJhLWQ5MWMtNGFkNC05MmM3LTFkMjUxMzMwOGQyMS8xL19Kdms3VTVVdGdI
bXRxUXRDNkJNLTNxeXc3OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmmajANBgkqhkiG9w0BAQsFAAOC
AQEAqzDMk1QFcuiBacZ6hAMYc2N4o0ECVpN7yzJBPU3fjopElGxigZqYnHrIOB9T
Z2cWIkazKImplizV4wHWebBs3eiT3Hbh0EJhfGfXCzVNR8Z+RMcP0+Rc8tySLVHL
F3fN6Sdftl9kxh6wz7pCcbDh1HORWauSmRcNy1P7QeFa4adWU8cxBAH9+qPWeVI1
xZRozYDHPYOwmBp9BnqxAFN/A+GahlrQ0ORoEw1sXZheyvSHtElU9fRjS9NiGWcM
thtAClHitZo/LiDeEaDWfccZu4p4Bi6QLOGehpFWbqLIznU3mrbgwU+HGOogb+fy
TSwgz5LkOEJhxOIZzUaGhnGz/g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:22 2023 by rpki-client on console.sobornost.net