Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/vq8-VAgY-Qv4GnbfLKJMYnTCxqc.roa
File: vq8-VAgY-Qv4GnbfLKJMYnTCxqc.roa (raw, json)
Hash identifier: Gm+Zk3qfamlT0MVJD8bSqfoQMc4bYWiFi4Qcdq6FEgU=
Subject key identifier: BE:AF:3E:54:08:18:F9:0B:F8:1A:76:DF:2C:A2:4C:62:74:C2:C6:A7
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0B4AAE86
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/vq8-VAgY-Qv4GnbfLKJMYnTCxqc.roa
Signing time: Sat 01 Jan 2022 09:01:31 +0000
ROA not before: Sat 01 Jan 2022 09:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204299
IP address blocks: 185.254.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189443718 (0xb4aae86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Jan 1 09:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beaf3e540818f90bf81a76df2ca24c6274c2c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:4f:d1:2a:a6:07:0d:2a:d2:c7:44:dc:4b:
0d:b0:65:d5:1a:37:c5:94:01:e3:46:04:e0:96:bb:
7c:4d:5b:ca:87:9f:58:d4:b9:1a:9c:08:98:dc:47:
fc:d2:7c:01:17:f4:50:9b:e0:3f:b0:d3:91:03:bc:
85:f9:09:21:76:8e:cc:8c:f9:47:cd:3f:c3:8e:5a:
5a:a0:97:ac:37:8b:18:99:a2:26:d5:fa:11:75:3a:
3f:79:2a:13:79:f1:84:c3:40:34:d8:1f:2f:98:a1:
0a:3c:a8:98:e7:0a:63:15:a4:c0:a0:20:73:ee:bf:
c0:b0:44:8c:d9:c2:03:ef:fc:1e:12:a6:bc:db:88:
d0:ca:9a:66:6a:8d:37:37:6a:87:aa:af:94:a9:4f:
4c:59:f9:9b:c6:29:04:ba:a7:98:c0:8c:7f:79:be:
09:c1:b7:d7:ea:e0:ad:d4:dc:b7:a0:6f:2f:8d:f4:
8a:bf:73:5e:03:b3:75:43:86:04:48:68:01:6b:c0:
f3:a0:27:27:18:7e:68:b7:85:ed:71:32:34:e9:3f:
51:f0:ed:f9:98:77:9d:72:26:f8:15:48:3e:62:41:
aa:e2:f9:5d:ae:65:6b:a6:8f:e2:38:a9:b4:5c:5e:
6c:84:ef:aa:eb:13:7e:9a:b7:0f:68:c8:8f:5a:47:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:3E:54:08:18:F9:0B:F8:1A:76:DF:2C:A2:4C:62:74:C2:C6:A7
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/vq8-VAgY-Qv4GnbfLKJMYnTCxqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.20.0/22
Signature Algorithm: sha256WithRSAEncryption
33:7c:f0:49:c0:c5:e1:45:e5:aa:24:af:c3:9d:05:00:bf:a9:
00:c8:e8:62:a8:97:8e:ee:bf:fb:26:76:71:32:cc:52:2b:ff:
b3:bf:61:f2:c5:24:7d:40:83:a5:02:04:f6:42:38:82:d3:d3:
55:4d:22:41:68:b7:30:37:47:79:43:e6:b9:65:5f:6e:f3:35:
2c:4b:ef:eb:3c:05:30:dd:37:69:f7:18:bb:06:a6:7a:7d:f1:
c0:b3:2a:17:38:e1:42:7a:21:6b:b6:dc:dc:0d:66:69:be:ec:
ac:1b:f1:e8:52:17:8b:53:00:e3:bd:c2:9c:90:6e:78:ac:9c:
5b:65:5d:0c:c4:55:7b:52:ad:80:44:4a:e3:13:9f:8f:eb:29:
c5:a8:c7:3d:56:95:d3:08:34:4c:4a:a9:63:95:9e:ed:b5:ea:
cd:e9:ff:10:0a:57:b7:1b:b1:00:ed:bd:28:8f:d9:78:6e:7a:
c9:4c:d8:38:63:8c:05:7b:74:8b:27:cc:4b:ef:34:70:47:52:
8d:bb:ac:34:2c:6a:83:0d:02:40:fe:c3:7b:15:cf:fa:36:1d:
5d:48:8e:66:f1:66:af:9e:e7:79:40:04:3f:3d:bc:bf:8c:30:
d3:95:61:e9:f6:65:c1:85:96:40:df:2b:f4:33:54:32:4a:8f:
95:1a:34:1d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC0quhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZTAyYTk2MWIwMzc1ZDcyMTkxYmQ5NzA4MTVkNmIxNWY0MjdkMDczMB4XDTIyMDEw
MTA5MDEzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmVhZjNlNTQwODE4
ZjkwYmY4MWE3NmRmMmNhMjRjNjI3NGMyYzZhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANpyT9EqpgcNKtLHRNxLDbBl1Ro3xZQB40YE4Ja7fE1byoef
WNS5GpwImNxH/NJ8ARf0UJvgP7DTkQO8hfkJIXaOzIz5R80/w45aWqCXrDeLGJmi
JtX6EXU6P3kqE3nxhMNANNgfL5ihCjyomOcKYxWkwKAgc+6/wLBEjNnCA+/8HhKm
vNuI0MqaZmqNNzdqh6qvlKlPTFn5m8YpBLqnmMCMf3m+CcG31+rgrdTct6BvL430
ir9zXgOzdUOGBEhoAWvA86AnJxh+aLeF7XEyNOk/UfDt+Zh3nXIm+BVIPmJBquL5
Xa5la6aP4jiptFxebITvqusTfpq3D2jIj1pHPOkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+rz5UCBj5C/gadt8sokxidMLGpzAfBgNVHSMEGDAWgBR+AqlhsDddchkb
2XCBXWsV9CfQczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZnS3BZYkEzWFhJWkc5bHdnVjFyRmZRbjBITS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzEvM2U2ODQyLTcyMjktNDIxMi1iMmQ0LWNjNDdjMWRlMDFiZC8x
L3ZxOC1WQWdZLVF2NEduYmZMS0pNWW5UQ3hxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEv
M2U2ODQyLTcyMjktNDIxMi1iMmQ0LWNjNDdjMWRlMDFiZC8xL2ZnS3BZYkEzWFhJ
Wkc5bHdnVjFyRmZRbjBITS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn+FDANBgkqhkiG9w0BAQsFAAOC
AQEAM3zwScDF4UXlqiSvw50FAL+pAMjoYqiXju6/+yZ2cTLMUiv/s79h8sUkfUCD
pQIE9kI4gtPTVU0iQWi3MDdHeUPmuWVfbvM1LEvv6zwFMN03afcYuwamen3xwLMq
FzjhQnoha7bc3A1mab7srBvx6FIXi1MA473CnJBueKycW2VdDMRVe1KtgERK4xOf
j+spxajHPVaV0wg0TEqpY5We7bXqzen/EApXtxuxAO29KI/ZeG56yUzYOGOMBXt0
iyfMS+80cEdSjbusNCxqgw0CQP7DexXP+jYdXUiOZvFmr57neUAEPz28v4ww05Vh
6fZlwYWWQN8r9DNUMkqPlRo0HQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net