Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/gNld4RqMmjDlvxkN2xs48ljnV-I.roa
File: gNld4RqMmjDlvxkN2xs48ljnV-I.roa (raw, json)
Hash identifier: fWtlVQaPqrAB3ef2ryhCJdNH15FYK3aF5U4Bk9Zhh2E=
Subject key identifier: 80:D9:5D:E1:1A:8C:9A:30:E5:BF:19:0D:DB:1B:38:F2:58:E7:57:E2
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0C591235
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/gNld4RqMmjDlvxkN2xs48ljnV-I.roa
Signing time: Sat 01 Jan 2022 14:04:02 +0000
ROA not before: Sat 01 Jan 2022 14:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206611
IP address blocks: 185.181.52.0/24 maxlen: 24
185.181.55.0/24 maxlen: 24
185.181.53.0/24 maxlen: 24
185.181.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207163957 (0xc591235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jan 1 14:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80d95de11a8c9a30e5bf190ddb1b38f258e757e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:57:b5:f8:80:b3:92:f4:1a:ac:43:f5:1a:
be:4d:51:c3:76:e5:9c:b3:ad:84:41:02:cf:78:b6:
d1:da:22:22:7d:ce:e9:7e:df:92:6b:20:32:86:b5:
52:79:96:c0:34:bd:05:e3:01:d6:b5:31:c9:48:a8:
8a:be:1d:16:97:b4:c6:25:e8:78:54:82:ed:b6:41:
ac:00:66:7d:ef:62:43:00:e2:c7:79:47:a4:b5:18:
0f:4d:8b:b9:d6:5f:ef:a8:1f:dc:b3:cf:4e:d9:0e:
0f:e2:fc:89:bf:1c:a5:76:d1:ab:f8:e5:e1:14:c4:
51:01:3b:37:d9:48:b3:fc:91:d5:cc:d9:79:71:c2:
5b:09:04:fd:45:f4:ac:96:9d:38:f1:d4:87:25:8d:
a8:ac:49:1d:cf:66:12:2c:67:6f:d2:f0:8c:9d:5b:
b8:2a:d7:29:03:0d:88:4d:a4:f2:2e:03:93:6a:86:
24:70:01:00:39:59:81:66:ac:16:0b:44:23:a9:34:
d1:05:61:23:de:ed:72:79:69:fe:c8:6d:e7:24:f9:
25:6c:66:28:90:ad:6d:92:62:22:1c:f3:dc:fa:9a:
26:43:3a:1a:2d:73:be:8a:bc:d1:3b:9a:ad:a9:b6:
8f:8f:ad:71:e2:fe:ff:e7:61:a6:c7:2c:71:f5:ca:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:5D:E1:1A:8C:9A:30:E5:BF:19:0D:DB:1B:38:F2:58:E7:57:E2
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/gNld4RqMmjDlvxkN2xs48ljnV-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.52.0/22
Signature Algorithm: sha256WithRSAEncryption
00:9a:80:48:a2:8b:fa:13:62:51:8e:92:6a:10:d5:e3:32:98:
c7:e8:37:45:40:84:b8:3d:1d:32:f6:0d:bf:a8:c6:f9:7c:62:
63:4d:c5:b4:ab:01:2f:af:17:60:d8:08:4e:f3:33:cc:1a:57:
4e:53:08:26:f2:ad:b0:1f:c1:42:0f:99:b6:11:57:40:7d:f5:
c8:9b:4c:28:24:82:86:94:2a:86:ee:3d:5f:83:3a:c7:c4:cb:
67:48:19:51:a6:68:fe:30:2f:10:66:53:f6:3f:39:4e:9d:c5:
fb:86:4c:06:51:1f:46:f9:51:0c:dd:59:c9:f1:85:b8:1e:f5:
2f:ee:fc:43:ca:fa:b5:3d:bb:f6:9d:ff:0a:02:31:a3:8a:2b:
5a:30:87:bf:ba:66:96:b6:ca:40:de:ec:2a:3a:5e:f7:94:d0:
6d:cb:40:15:7b:e5:46:6f:e6:74:a1:f7:19:88:5c:4b:9a:8d:
63:0f:81:ed:87:01:8f:58:50:35:c6:52:d1:c7:56:93:a2:54:
b0:1d:e1:20:d0:5a:3b:33:13:03:01:d6:85:01:08:6f:3b:5c:
af:23:29:96:fd:5f:51:29:13:ea:26:9e:ee:e0:81:96:f9:80:
f8:7f:a2:f6:0d:6b:e9:f0:69:bb:99:ad:27:af:1d:b1:9c:cd:
47:62:8f:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDFkSNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YmQ0NzE5ZDcyZDI4OGE3MzIxOGQ4YzFhNDk4ODIzMzMzMjk3ZTI1MB4XDTIyMDEw
MTE0MDQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODBkOTVkZTExYThj
OWEzMGU1YmYxOTBkZGIxYjM4ZjI1OGU3NTdlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGuV7X4gLOS9BqsQ/Uavk1Rw3blnLOthEECz3i20doiIn3O
6X7fkmsgMoa1UnmWwDS9BeMB1rUxyUioir4dFpe0xiXoeFSC7bZBrABmfe9iQwDi
x3lHpLUYD02LudZf76gf3LPPTtkOD+L8ib8cpXbRq/jl4RTEUQE7N9lIs/yR1czZ
eXHCWwkE/UX0rJadOPHUhyWNqKxJHc9mEixnb9LwjJ1buCrXKQMNiE2k8i4Dk2qG
JHABADlZgWasFgtEI6k00QVhI97tcnlp/sht5yT5JWxmKJCtbZJiIhzz3PqaJkM6
Gi1zvoq80Tuaram2j4+tceL+/+dhpscscfXKpCUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSA2V3hGoyaMOW/GQ3bGzjyWOdX4jAfBgNVHSMEGDAWgBTL1HGdctKIpzIY
2MGkmIIzMyl+JTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3k5UnhuWExTaUtjeUdOakJwSmlDTXpNcGZpVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvZGM4YzBkLWY4YzMtNDA2Yy1iNzllLWI0OTJkNmZmNDgzZi8x
L2dObGQ0UnFNbWpEbHZ4a04yeHM0OGxqblYtSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
ZGM4YzBkLWY4YzMtNDA2Yy1iNzllLWI0OTJkNmZmNDgzZi8xL3k5UnhuWExTaUtj
eUdOakJwSmlDTXpNcGZpVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm1NDANBgkqhkiG9w0BAQsFAAOC
AQEAAJqASKKL+hNiUY6SahDV4zKYx+g3RUCEuD0dMvYNv6jG+XxiY03FtKsBL68X
YNgITvMzzBpXTlMIJvKtsB/BQg+ZthFXQH31yJtMKCSChpQqhu49X4M6x8TLZ0gZ
UaZo/jAvEGZT9j85Tp3F+4ZMBlEfRvlRDN1ZyfGFuB71L+78Q8r6tT279p3/CgIx
o4orWjCHv7pmlrbKQN7sKjpe95TQbctAFXvlRm/mdKH3GYhcS5qNYw+B7YcBj1hQ
NcZS0cdWk6JUsB3hINBaOzMTAwHWhQEIbztcryMplv1fUSkT6iae7uCBlvmA+H+i
9g1r6fBpu5mtJ68dsZzNR2KP4w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net