Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/m5mGJDE_uEjIGn-7MxsAOMidHt8.roa
File: m5mGJDE_uEjIGn-7MxsAOMidHt8.roa (raw, json)
Hash identifier: 8kLOpJJw11BIW30OlgBl/nS7Qc4wxw+qXlpzLYNqg8s=
Subject key identifier: 9B:99:86:24:31:3F:B8:48:C8:1A:7F:BB:33:1B:00:38:C8:9D:1E:DF
Certificate issuer: /CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Certificate serial: AC3C
Authority key identifier: 85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/m5mGJDE_uEjIGn-7MxsAOMidHt8.roa
Signing time: Thu 27 Jan 2022 09:36:29 +0000
ROA not before: Thu 27 Jan 2022 09:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.214.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44092 (0xac3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Validity
Not Before: Jan 27 09:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b998624313fb848c81a7fbb331b0038c89d1edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:93:d8:d6:ba:17:c9:63:cd:4c:ce:62:f5:
a1:85:71:b7:bb:12:78:e0:03:9d:e6:8b:b8:0b:ad:
d8:a7:3b:ab:49:32:79:25:01:f7:12:93:3b:55:ea:
a3:0c:dd:3b:0e:e7:b8:a5:05:9c:8e:ea:9d:56:aa:
75:12:40:91:ae:60:48:cc:61:53:14:5a:e8:53:8d:
49:64:06:2e:25:1a:62:20:aa:ac:2b:81:3d:9e:cb:
ff:fb:57:79:0a:56:a9:f9:b2:99:be:c2:5a:52:e0:
dc:8e:4c:44:6f:fe:88:de:1b:51:67:5f:10:e9:5b:
8b:67:21:1f:97:cd:f0:be:08:fe:c8:12:e1:60:b6:
d5:cf:43:d4:c7:66:3e:9f:84:56:81:43:77:44:e5:
c6:45:9a:07:01:55:43:e7:4d:a7:a8:37:db:99:3c:
3b:b9:c8:fe:fe:9d:85:71:1a:25:ea:5a:ef:da:ae:
06:d8:a9:e8:bd:7e:32:0c:24:a5:dd:f3:b8:72:9e:
42:5c:27:5a:af:1e:96:1b:c8:b2:5d:fc:82:9a:4c:
2e:4a:d7:cc:fb:46:da:36:57:a4:56:a2:09:b7:61:
ae:51:b5:c7:f2:35:ac:10:81:96:d3:b0:bf:c0:05:
c6:47:69:33:0c:55:dd:bb:74:81:0f:f1:91:fe:1c:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:86:24:31:3F:B8:48:C8:1A:7F:BB:33:1B:00:38:C8:9D:1E:DF
X509v3 Authority Key Identifier:
keyid:85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/m5mGJDE_uEjIGn-7MxsAOMidHt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.164.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cf:0d:b5:80:47:fa:93:43:47:ee:12:8b:45:91:8e:45:fa:
b3:21:2b:6d:68:4f:8e:48:f9:3c:8a:6c:ba:04:d5:25:bd:01:
c4:d3:1d:ae:20:59:6d:82:6a:80:47:f8:60:36:5b:b5:5c:b4:
03:30:c3:58:38:f2:7b:b9:de:a0:bc:13:b6:49:d0:a1:6f:68:
88:eb:5a:f5:c9:f2:f7:4e:fe:bf:65:c2:46:54:be:86:57:6b:
07:39:a5:3f:19:7c:75:3f:17:6d:ee:d3:73:c1:c3:c1:45:4d:
54:15:27:b2:8e:2d:b6:d9:63:d0:09:60:b0:6d:a1:e9:07:ee:
83:3e:ff:18:88:66:d7:da:b5:f8:32:df:34:cb:cb:27:d7:b1:
27:18:2d:7b:cb:a1:d4:2d:82:3c:5e:3f:43:7a:1d:a5:3f:ad:
d8:20:ca:b2:fd:fc:91:6e:06:52:b8:1b:71:b3:c2:eb:75:15:
cd:c6:ef:5c:92:67:e3:86:c4:da:83:bd:86:a5:31:48:44:60:
43:d7:ca:65:5b:52:75:e5:0c:7d:2f:f5:1a:be:7b:9b:fc:bc:
fa:1e:96:f3:f4:fe:37:ac:a8:a0:a6:15:71:82:46:c2:ca:6d:
3f:ef:a2:d1:47:4f:37:3f:25:99:48:f0:f2:d8:8f:bb:60:a7:
52:c9:af:90
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAKw8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
NDlkOTJlMmRkOTdhNjE1MjQ0ZDU0OWNhM2Y1Y2M2MTU5MzJjM2MwHhcNMjIwMTI3
MDkzNjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5Yjk5ODYyNDMxM2Zi
ODQ4YzgxYTdmYmIzMzFiMDAzOGM4OWQxZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4jWT2Na6F8ljzUzOYvWhhXG3uxJ44AOd5ou4C63YpzurSTJ5
JQH3EpM7VeqjDN07Due4pQWcjuqdVqp1EkCRrmBIzGFTFFroU41JZAYuJRpiIKqs
K4E9nsv/+1d5Clap+bKZvsJaUuDcjkxEb/6I3htRZ18Q6VuLZyEfl83wvgj+yBLh
YLbVz0PUx2Y+n4RWgUN3ROXGRZoHAVVD502nqDfbmTw7ucj+/p2FcRol6lrv2q4G
2KnovX4yDCSl3fO4cp5CXCdarx6WG8iyXfyCmkwuStfM+0baNlekVqIJt2GuUbXH
8jWsEIGW07C/wAXGR2kzDFXdu3SBD/GR/hyQewIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJuZhiQxP7hIyBp/uzMbADjInR7fMB8GA1UdIwQYMBaAFIVJ2S4t2XphUkTV
Sco/XMYVkyw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aFVuWkxpM1plbUZTUk5WSnlqOWN4aFdUTER3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNC9jOGQ2MWItZTdkMC00NTY4LTk3NmMtOGUxY2E4NTYzMWQwLzEv
bTVtR0pERV91RWpJR24tN014c0FPTWlkSHQ4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9j
OGQ2MWItZTdkMC00NTY4LTk3NmMtOGUxY2E4NTYzMWQwLzEvaFVuWkxpM1plbUZT
Uk5WSnlqOWN4aFdUTER3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudakMA0GCSqGSIb3DQEBCwUAA4IB
AQCDzw21gEf6k0NH7hKLRZGORfqzISttaE+OSPk8imy6BNUlvQHE0x2uIFltgmqA
R/hgNlu1XLQDMMNYOPJ7ud6gvBO2SdChb2iI61r1yfL3Tv6/ZcJGVL6GV2sHOaU/
GXx1Pxdt7tNzwcPBRU1UFSeyji222WPQCWCwbaHpB+6DPv8YiGbX2rX4Mt80y8sn
17EnGC17y6HULYI8Xj9Deh2lP63YIMqy/fyRbgZSuBtxs8LrdRXNxu9ckmfjhsTa
g72GpTFIRGBD18plW1J15Qx9L/Uavnub/Lz6Hpbz9P43rKigphVxgkbCym0/76LR
R083PyWZSPDy2I+7YKdSya+Q
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net