Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/XLVO3PRP-2evaop9qvFlZbeEV1Y.roa
File: XLVO3PRP-2evaop9qvFlZbeEV1Y.roa (raw, json)
Hash identifier: tZ4Vofn1Dp/zI6kydBJv8rP6crOgA10IXozs2ojNH/k=
Subject key identifier: 5C:B5:4E:DC:F4:4F:FB:67:AF:6A:8A:7D:AA:F1:65:65:B7:84:57:56
Certificate issuer: /CN=71199c17d385154086e3b703dd449322dddeb483
Certificate serial: 01621D
Authority key identifier: 71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/XLVO3PRP-2evaop9qvFlZbeEV1Y.roa
Signing time: Tue 25 Jan 2022 18:23:02 +0000
ROA not before: Tue 25 Jan 2022 18:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.155.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90653 (0x1621d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71199c17d385154086e3b703dd449322dddeb483
Validity
Not Before: Jan 25 18:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cb54edcf44ffb67af6a8a7daaf16565b7845756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2e:ae:32:fb:d2:3e:ce:e4:bd:d0:46:4a:ff:
5e:0b:cf:e2:12:d2:0f:12:6e:b6:30:ad:00:c5:ab:
06:cb:b3:7c:c5:af:2e:20:b4:23:cc:cf:01:3b:a0:
27:4f:93:3f:6e:5c:34:18:bf:07:4d:71:1f:b4:6b:
9f:43:ca:a7:e6:93:35:ab:49:32:b1:01:cb:4c:fd:
60:d8:25:0f:a1:b7:09:73:ba:91:7e:7e:bc:af:7f:
79:05:d6:f3:28:69:c7:27:06:d9:81:2b:72:af:d6:
7b:fc:56:4a:6d:80:15:9c:45:00:04:84:51:de:51:
8b:4d:d6:41:76:d1:b2:5e:79:20:a0:5d:76:72:9b:
b2:bf:23:a1:ef:4b:ea:58:6b:fc:ea:4b:f9:c1:5b:
bc:9d:dd:3e:ba:84:b4:11:a7:88:d0:1e:97:03:bb:
cb:a7:70:19:ab:b3:1f:99:14:e9:cb:7e:e1:78:ab:
d1:98:14:2b:4e:9f:32:13:9b:2d:c0:30:4e:39:c3:
fb:6b:c6:11:0e:01:b3:07:ba:93:a3:4a:f1:97:8d:
1e:c0:4a:52:1f:1d:0a:f3:97:01:a5:13:b7:28:5c:
3c:04:29:d7:09:66:9d:d9:30:dd:0a:88:0c:12:67:
24:ad:80:8d:84:dc:9a:d4:d4:6c:ce:e2:8b:64:95:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:4E:DC:F4:4F:FB:67:AF:6A:8A:7D:AA:F1:65:65:B7:84:57:56
X509v3 Authority Key Identifier:
keyid:71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/XLVO3PRP-2evaop9qvFlZbeEV1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.101.0/24
Signature Algorithm: sha256WithRSAEncryption
42:17:99:5d:39:25:c1:d8:bb:70:90:d1:c5:24:ef:96:19:cc:
d2:b7:65:24:a9:2f:7e:ea:d7:1f:16:62:49:e6:46:e0:36:28:
30:85:10:0e:81:a8:ec:62:7f:66:36:53:f3:2f:d1:a6:66:74:
dc:db:dd:88:55:a4:93:59:46:fe:61:0c:f4:78:e0:c9:df:bb:
d4:0f:e6:3f:91:1b:68:6c:4b:90:79:79:6c:57:ff:31:18:b3:
c9:f3:13:9e:13:0a:25:58:77:f1:48:03:72:13:34:5d:12:d9:
23:07:21:33:fa:d4:57:42:ac:5d:cc:07:de:6b:f7:ab:b1:88:
d2:8e:07:5e:ee:bc:ef:d9:7e:4f:98:52:15:53:04:ef:3c:80:
76:3c:05:ec:bf:4a:dd:86:b6:4a:ef:61:01:d4:61:d0:2f:dc:
5b:60:2d:6a:69:00:fd:e3:c0:a1:4e:90:a9:0b:19:65:d6:19:
41:bc:00:f4:45:00:12:03:d8:f1:67:71:ae:6e:3e:a7:48:8b:
b9:68:2e:f0:55:2d:82:8a:23:3e:75:0a:3c:4e:e5:fc:5b:f8:
e6:70:0d:c4:f8:4e:08:36:db:ff:c4:de:70:18:fc:7d:81:c9:
35:8a:68:e6:d8:02:e4:c7:99:d7:ba:fd:49:2b:39:b8:c5:ec:
b5:87:92:21
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAWIdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
MTk5YzE3ZDM4NTE1NDA4NmUzYjcwM2RkNDQ5MzIyZGRkZWI0ODMwHhcNMjIwMTI1
MTgyMzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1Y2I1NGVkY2Y0NGZm
YjY3YWY2YThhN2RhYWYxNjU2NWI3ODQ1NzU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8i6uMvvSPs7kvdBGSv9eC8/iEtIPEm62MK0AxasGy7N8xa8u
ILQjzM8BO6AnT5M/blw0GL8HTXEftGufQ8qn5pM1q0kysQHLTP1g2CUPobcJc7qR
fn68r395BdbzKGnHJwbZgStyr9Z7/FZKbYAVnEUABIRR3lGLTdZBdtGyXnkgoF12
cpuyvyOh70vqWGv86kv5wVu8nd0+uoS0EaeI0B6XA7vLp3AZq7MfmRTpy37heKvR
mBQrTp8yE5stwDBOOcP7a8YRDgGzB7qTo0rxl40ewEpSHx0K85cBpRO3KFw8BCnX
CWad2TDdCogMEmckrYCNhNya1NRszuKLZJWGSwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFy1Ttz0T/tnr2qKfarxZWW3hFdWMB8GA1UdIwQYMBaAFHEZnBfThRVAhuO3
A91EkyLd3rSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Y1JtY0Y5T0ZGVUNHNDdjRDNVU1RJdDNldElNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Mi82YWYzZmMtMzNkMi00ZTYzLWFmOWUtM2QxNzE5NTc2MjUzLzEv
WExWTzNQUlAtMmV2YW9wOXF2RmxaYmVFVjFZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82
YWYzZmMtMzNkMi00ZTYzLWFmOWUtM2QxNzE5NTc2MjUzLzEvY1JtY0Y5T0ZGVUNH
NDdjRDNVU1RJdDNldElNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZtlMA0GCSqGSIb3DQEBCwUAA4IB
AQBCF5ldOSXB2LtwkNHFJO+WGczSt2UkqS9+6tcfFmJJ5kbgNigwhRAOgajsYn9m
NlPzL9GmZnTc292IVaSTWUb+YQz0eODJ37vUD+Y/kRtobEuQeXlsV/8xGLPJ8xOe
EwolWHfxSANyEzRdEtkjByEz+tRXQqxdzAfea/ersYjSjgde7rzv2X5PmFIVUwTv
PIB2PAXsv0rdhrZK72EB1GHQL9xbYC1qaQD948ChTpCpCxll1hlBvAD0RQASA9jx
Z3Gubj6nSIu5aC7wVS2CiiM+dQo8TuX8W/jmcA3E+E4INtv/xN5wGPx9gck1imjm
2ALkx5nXuv1JKzm4xey1h5Ih
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:23 2023 by rpki-client on console.sobornost.net