Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa
File: PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa (raw, json)
Hash identifier: rxbx2C37Olq5ExFuamu2laBaj2ET9Fd5NY8jFVQIC8Q=
Subject key identifier: 3D:6A:E2:0B:6A:F3:E4:57:FE:5C:03:86:B7:86:CD:69:00:57:E0:BE
Certificate issuer: /CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
Certificate serial: 4BAD
Authority key identifier: 1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa
Signing time: Tue 01 Feb 2022 09:46:49 +0000
ROA not before: Tue 01 Feb 2022 09:46:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49321
IP address blocks: 185.128.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19373 (0x4bad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
Validity
Not Before: Feb 1 09:46:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d6ae20b6af3e457fe5c0386b786cd690057e0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:cf:8d:57:d3:53:0d:31:93:f1:d7:45:d9:
11:6d:f8:09:a1:79:f8:87:34:a9:0e:b8:47:80:ee:
79:2e:23:ef:87:a9:07:ab:4a:4d:f8:59:22:45:17:
fd:0c:9b:88:62:93:8f:cc:d0:0a:c0:e3:11:af:72:
24:2b:6d:f3:0c:3e:9f:4c:53:14:2a:82:06:24:02:
47:5d:62:6d:2e:21:86:e5:c5:2a:aa:43:ef:9b:29:
f8:7b:e9:48:30:8e:c7:75:c6:ff:2f:d5:7c:48:5b:
a4:42:3a:f5:f5:7a:9e:69:92:a4:7d:b9:24:ed:44:
48:4a:0e:b8:d9:33:a0:4a:5f:46:02:8b:6e:2e:44:
84:68:0b:0d:29:2d:fb:c9:2d:c6:73:21:7b:b4:eb:
f8:2b:9a:e1:71:85:c3:cc:54:59:21:63:57:ff:7f:
80:88:9a:e3:7d:de:8c:a5:f2:92:05:47:5a:1b:4a:
33:ad:01:c6:ac:9d:45:a5:f3:e5:aa:cf:b4:2c:36:
51:bc:d4:5c:fa:6c:d2:12:a0:ea:b2:67:05:34:30:
dc:c1:82:90:cd:8d:83:e9:29:7b:08:d8:6c:53:ba:
c2:d3:9f:57:e2:27:97:11:c5:00:ac:61:98:8e:ed:
cc:00:1a:2e:6f:37:a3:1c:0a:61:7b:1d:75:ee:96:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:E2:0B:6A:F3:E4:57:FE:5C:03:86:B7:86:CD:69:00:57:E0:BE
X509v3 Authority Key Identifier:
keyid:1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.225.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7a:c2:a9:d4:82:04:b1:1b:de:41:48:8a:d8:39:2e:61:65:
53:cd:d9:c1:49:50:df:9e:8c:75:42:35:58:1e:8a:08:3f:b8:
f5:af:58:66:3c:81:ba:c8:31:c1:96:35:6c:88:06:0d:8b:55:
17:5c:a6:4c:46:f4:4b:72:14:92:28:82:ae:10:03:00:8e:cc:
53:bd:a6:e6:94:e7:cd:4f:5b:8f:69:ad:36:b5:73:83:07:fc:
40:33:6c:bc:74:6c:b4:66:63:cc:01:ac:cc:47:ff:5b:58:ad:
a6:b3:ac:d0:7a:f5:b5:8b:d0:3e:b3:af:f0:54:47:db:59:dc:
30:66:4e:9a:e9:8e:6a:30:75:af:0f:da:a0:35:4a:bc:08:56:
55:f5:e9:96:84:ca:ac:36:31:b7:01:b7:cd:2f:a9:0c:8e:53:
e7:ea:86:8a:b9:ea:3f:9a:2b:85:c1:84:0f:a7:dd:01:7e:91:
9e:50:62:b6:4f:32:7f:51:90:31:0a:8a:a9:f8:d9:29:47:f9:
c2:75:bc:c3:35:a2:56:64:44:63:31:9d:2a:b1:a1:86:8b:70:
95:31:d1:73:45:b6:43:fe:73:b6:26:50:a8:3a:66:13:69:eb:
77:db:7b:55:8a:93:4a:e0:67:95:d6:cc:5e:ac:9f:e6:25:ed:
9c:ab:1a:27
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICS60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMWFm
MTZhM2NmODExNjcyMWFmYWQ4YzFlNWIzZTgzYTI5NTljZWI5OTAeFw0yMjAyMDEw
OTQ2NDlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDNkNmFlMjBiNmFmM2U0
NTdmZTVjMDM4NmI3ODZjZDY5MDA1N2UwYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOKc+NV9NTDTGT8ddF2RFt+AmhefiHNKkOuEeA7nkuI++HqQer
Sk34WSJFF/0Mm4hik4/M0ArA4xGvciQrbfMMPp9MUxQqggYkAkddYm0uIYblxSqq
Q++bKfh76Ugwjsd1xv8v1XxIW6RCOvX1ep5pkqR9uSTtREhKDrjZM6BKX0YCi24u
RIRoCw0pLfvJLcZzIXu06/grmuFxhcPMVFkhY1f/f4CImuN93oyl8pIFR1obSjOt
AcasnUWl8+Wqz7QsNlG81Fz6bNISoOqyZwU0MNzBgpDNjYPpKXsI2GxTusLTn1fi
J5cRxQCsYZiO7cwAGi5vN6McCmF7HXXulvX1AgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUPWriC2rz5Ff+XAOGt4bNaQBX4L4wHwYDVR0jBBgwFoAUGvFqPPgRZyGvrYwe
Wz6DopWc65kwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9H
dkZxUFBnUlp5R3ZyWXdlV3o2RG9wV2M2NWsuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2RjLzdhNWZkMy1mYWFlLTQxMjAtYTRhOC0xZGMyYTUyMzY4YzEvMS9Q
V3JpQzJyejVGZi1YQU9HdDRiTmFRQlg0TDQucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzdh
NWZkMy1mYWFlLTQxMjAtYTRhOC0xZGMyYTUyMzY4YzEvMS9HdkZxUFBnUlp5R3Zy
WXdlV3o2RG9wV2M2NWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5gOEwDQYJKoZIhvcNAQELBQADggEB
AEl6wqnUggSxG95BSIrYOS5hZVPN2cFJUN+ejHVCNVgeigg/uPWvWGY8gbrIMcGW
NWyIBg2LVRdcpkxG9EtyFJIogq4QAwCOzFO9puaU581PW49prTa1c4MH/EAzbLx0
bLRmY8wBrMxH/1tYraazrNB69bWL0D6zr/BUR9tZ3DBmTprpjmowda8P2qA1SrwI
VlX16ZaEyqw2MbcBt80vqQyOU+fqhoq56j+aK4XBhA+n3QF+kZ5QYrZPMn9RkDEK
iqn42SlH+cJ1vMM1olZkRGMxnSqxoYaLcJUx0XNFtkP+c7YmUKg6ZhNp63fbe1WK
k0rgZ5XWzF6sn+Yl7ZyrGic=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net