Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/Xl4j37NZ1zkbqAEPWNF1H_kDlKQ.roa
File: Xl4j37NZ1zkbqAEPWNF1H_kDlKQ.roa (raw, json)
Hash identifier: 0HbAYF8aZbU1AiX228VSSb3Vv3zaTd0wCEaYUbo/Ypk=
Subject key identifier: 5E:5E:23:DF:B3:59:D7:39:1B:A8:01:0F:58:D1:75:1F:F9:03:94:A4
Certificate issuer: /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial: 8CA38C
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/Xl4j37NZ1zkbqAEPWNF1H_kDlKQ.roa
Signing time: Sat 01 Jan 2022 02:58:39 +0000
ROA not before: Sat 01 Jan 2022 02:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134835
IP address blocks: 185.239.224.0/22 maxlen: 24
185.239.225.0/24 maxlen: 24
185.239.226.0/24 maxlen: 24
185.239.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9216908 (0x8ca38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Validity
Not Before: Jan 1 02:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e5e23dfb359d7391ba8010f58d1751ff90394a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:1a:fd:6d:32:69:1f:a3:8a:87:3d:5d:28:
61:bc:41:e9:17:88:03:a8:fa:5d:81:b5:fc:f1:73:
88:51:f5:de:27:a9:16:cc:24:99:6c:ef:48:7b:40:
4d:4c:29:bb:30:63:68:cf:e4:3a:ae:10:bb:8c:15:
54:fc:07:af:d8:0a:9c:a3:44:e2:32:77:3c:b3:ae:
25:af:f6:55:0f:f7:74:fb:b4:01:91:b3:4f:2b:09:
49:e7:25:5b:d7:ed:f5:45:c0:7a:9d:77:e6:35:a7:
ac:d8:71:78:6f:a7:76:5f:fc:80:29:ec:a8:70:b7:
60:64:42:a5:7a:a5:91:3e:66:f8:d5:87:6e:c4:b7:
d4:34:13:1c:35:1d:ee:48:bb:46:5b:01:81:26:ac:
ce:15:0c:0c:c2:41:94:a0:5e:bc:af:07:cb:8a:e4:
6f:5d:3e:d7:75:25:4a:77:60:97:53:89:da:50:4b:
d9:ec:c1:8c:8e:9a:46:97:36:26:b4:a4:39:27:35:
68:7b:d1:9e:21:8f:39:f0:a9:6f:88:ad:bf:7a:7f:
0b:66:b1:e4:44:fc:22:35:f9:67:2c:44:15:56:63:
b1:ea:17:a8:13:47:e1:4a:6a:0c:fe:87:21:da:46:
25:05:b0:20:5d:83:ef:b7:f6:f8:e2:eb:43:40:24:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5E:23:DF:B3:59:D7:39:1B:A8:01:0F:58:D1:75:1F:F9:03:94:A4
X509v3 Authority Key Identifier:
keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/Xl4j37NZ1zkbqAEPWNF1H_kDlKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.224.0/22
Signature Algorithm: sha256WithRSAEncryption
65:71:82:1f:bd:13:17:a9:a2:5a:36:a3:f5:72:d2:85:43:77:
dd:a8:85:9c:97:d0:87:f8:de:2b:e6:12:ed:8b:86:96:c0:8d:
fc:f4:13:1b:f0:23:6b:32:6a:24:82:75:1f:ed:d2:6b:fd:a7:
3e:8d:66:c4:87:c9:5e:88:43:47:38:8d:1e:72:c6:0f:83:f6:
7f:bb:4c:01:80:76:09:0b:a3:b7:63:59:d1:eb:c0:1a:1d:c4:
c8:ad:03:4b:28:bb:d9:6e:d6:1b:10:12:43:ef:29:1c:9f:96:
2a:3f:5f:8b:e9:20:14:db:43:50:6f:ae:f5:dc:e0:0d:0e:02:
43:ee:43:69:23:44:bd:c4:79:86:d1:3b:cf:ec:c7:ad:81:40:
ff:28:83:e2:1f:38:26:09:3f:ca:14:7a:90:ea:ef:da:4e:71:
61:8b:22:bd:ed:c0:92:90:ab:c6:2d:d3:d1:a8:a6:d0:6a:71:
d2:c4:09:e2:30:ae:15:1d:1a:0f:cd:61:a7:bc:99:b0:55:a7:
02:cc:14:ff:49:82:8e:e8:93:95:85:6c:ec:82:b5:a5:95:03:
33:f9:8a:ce:22:ca:e3:8a:2a:6a:44:8c:1b:7c:07:65:98:3e:
71:bb:5d:98:8a:13:45:d2:9a:bf:29:bc:4d:6c:bd:54:35:36:
b2:59:1c:9a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIyjjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZDZmYTM3YTI0ODNjZjU3OWZhODYyNTAxMTlhYzAxMzM0NzVhYWQ4MB4XDTIyMDEw
MTAyNTgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWU1ZTIzZGZiMzU5
ZDczOTFiYTgwMTBmNThkMTc1MWZmOTAzOTRhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALyqGv1tMmkfo4qHPV0oYbxB6ReIA6j6XYG1/PFziFH13iep
FswkmWzvSHtATUwpuzBjaM/kOq4Qu4wVVPwHr9gKnKNE4jJ3PLOuJa/2VQ/3dPu0
AZGzTysJSeclW9ft9UXAep135jWnrNhxeG+ndl/8gCnsqHC3YGRCpXqlkT5m+NWH
bsS31DQTHDUd7ki7RlsBgSaszhUMDMJBlKBevK8Hy4rkb10+13UlSndgl1OJ2lBL
2ezBjI6aRpc2JrSkOSc1aHvRniGPOfCpb4itv3p/C2ax5ET8IjX5ZyxEFVZjseoX
qBNH4UpqDP6HIdpGJQWwIF2D77f2+OLrQ0AkQmMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBReXiPfs1nXORuoAQ9Y0XUf+QOUpDAfBgNVHSMEGDAWgBS9b6N6JIPPV5+o
YlARmsATNHWq2DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZXLWplaVNEejFlZnFHSlFFWnJBRXpSMXF0Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTEvZTNhZGEyLWM5ZGYtNDRlMi04YjBmLThmZjE2MTFlOGJiNC8x
L1hsNGozN05aMXprYnFBRVBXTkYxSF9rRGxLUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEv
ZTNhZGEyLWM5ZGYtNDRlMi04YjBmLThmZjE2MTFlOGJiNC8xL3ZXLWplaVNEejFl
ZnFHSlFFWnJBRXpSMXF0Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnv4DANBgkqhkiG9w0BAQsFAAOC
AQEAZXGCH70TF6miWjaj9XLShUN33aiFnJfQh/jeK+YS7YuGlsCN/PQTG/AjazJq
JIJ1H+3Sa/2nPo1mxIfJXohDRziNHnLGD4P2f7tMAYB2CQujt2NZ0evAGh3EyK0D
Syi72W7WGxASQ+8pHJ+WKj9fi+kgFNtDUG+u9dzgDQ4CQ+5DaSNEvcR5htE7z+zH
rYFA/yiD4h84Jgk/yhR6kOrv2k5xYYsive3AkpCrxi3T0aim0Gpx0sQJ4jCuFR0a
D81hp7yZsFWnAswU/0mCjuiTlYVs7IK1pZUDM/mKziLK44oqakSMG3wHZZg+cbtd
mIoTRdKavym8TWy9VDU2slkcmg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net