Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/L7qJ2IeHTFwOVeZTY51GRAxznZ8.roa
File: L7qJ2IeHTFwOVeZTY51GRAxznZ8.roa (raw, json)
Hash identifier: V/AB9YSZmft8i8avP6kgwXDgxL88vZpffnw3IAAUwwY=
Subject key identifier: 2F:BA:89:D8:87:87:4C:5C:0E:55:E6:53:63:9D:46:44:0C:73:9D:9F
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 151E50F7
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/L7qJ2IeHTFwOVeZTY51GRAxznZ8.roa
Signing time: Sat 01 Jan 2022 13:58:53 +0000
ROA not before: Sat 01 Jan 2022 13:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197726
IP address blocks: 185.112.14.0/23 maxlen: 23
185.112.12.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354308343 (0x151e50f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 13:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fba89d887874c5c0e55e653639d46440c739d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:f5:8a:ef:96:22:2a:bc:5e:20:58:9a:99:
09:34:74:ef:c8:34:3f:f8:9a:74:2a:df:03:dd:7f:
7a:47:a8:2c:ee:36:67:be:4c:76:60:84:cf:a0:ea:
2a:30:e8:74:5e:fe:cb:52:a6:8a:3a:9f:6a:44:44:
91:62:fa:1a:b5:b3:94:49:57:a1:ce:aa:b8:48:90:
02:87:3e:87:9d:30:3a:f1:64:f5:a0:3c:05:b1:3f:
86:7a:4e:76:19:ce:42:a3:1f:44:b1:06:f9:12:d8:
98:58:a2:60:70:60:11:65:39:a1:35:6e:eb:98:f0:
c5:6f:f6:f0:45:98:16:08:88:4c:aa:66:37:82:33:
71:ce:2a:64:7b:3d:c5:5d:72:40:60:85:8a:c5:9e:
1e:e7:45:47:2f:ec:96:00:21:d6:68:4b:8f:01:34:
03:6d:ad:69:5c:4a:f8:a5:8f:e4:76:19:77:cc:d9:
d6:8f:7b:7d:81:36:48:aa:85:a5:68:38:72:4c:f9:
15:ce:c8:b7:d8:79:1c:fa:39:00:52:b5:cb:14:7e:
4d:0b:08:b1:1d:eb:8a:43:36:50:86:19:d7:6e:a9:
06:99:0c:72:73:5f:fa:31:54:a6:61:69:ea:37:58:
51:28:d2:6d:f4:c5:a5:16:16:30:a1:a0:87:2d:c6:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BA:89:D8:87:87:4C:5C:0E:55:E6:53:63:9D:46:44:0C:73:9D:9F
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/L7qJ2IeHTFwOVeZTY51GRAxznZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:ee:ee:f0:e9:15:d3:51:4e:89:40:4f:86:44:19:5d:cf:49:
f9:fa:7b:f5:7c:03:6e:3d:9a:33:41:6f:56:e7:b7:e9:e6:1f:
c3:b8:1a:f1:95:38:59:f4:08:d1:33:6f:60:62:f2:e0:1c:a7:
40:19:63:41:a1:80:82:4f:37:71:ac:50:c1:16:67:3c:2e:ba:
bb:04:f1:ce:33:f9:79:c1:ad:cd:93:f5:0d:84:13:52:db:16:
64:f7:8e:3b:45:0a:1f:e3:f9:6d:94:09:68:d9:5f:e6:62:a7:
ec:cb:1a:eb:1b:08:b4:13:d7:d5:a8:94:02:e3:f3:f0:6d:c8:
cf:d5:66:af:6e:5d:8e:27:3b:bd:d6:2f:d4:5b:02:fc:7e:41:
9d:97:22:2d:d9:68:53:df:db:b2:53:e2:bc:1c:95:0b:1b:08:
23:c9:19:3c:e2:c6:a9:a6:69:d8:a6:19:bf:42:82:49:0f:d8:
f8:74:5c:f7:52:3f:22:e9:f7:a9:6d:4e:02:0c:fc:99:ec:94:
1f:41:43:dc:df:7c:8f:6f:45:f4:b8:ed:cd:4c:60:6e:92:4a:
f5:47:bd:38:eb:dd:e6:93:63:9e:68:65:38:64:76:ba:90:d5:
fa:2b:12:d7:12:25:40:c3:c4:35:ca:4c:6c:de:0d:4b:43:4f:
0f:2b:a2:2d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFR5Q9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MDU3NGMyODc4ZDZiNTM2MTM5Yjg5NWYwOGM5YzZkYjE4ZTEyYTliMB4XDTIyMDEw
MTEzNTg1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmZiYTg5ZDg4Nzg3
NGM1YzBlNTVlNjUzNjM5ZDQ2NDQwYzczOWQ5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN8o9YrvliIqvF4gWJqZCTR078g0P/iadCrfA91/ekeoLO42
Z75MdmCEz6DqKjDodF7+y1KmijqfakREkWL6GrWzlElXoc6quEiQAoc+h50wOvFk
9aA8BbE/hnpOdhnOQqMfRLEG+RLYmFiiYHBgEWU5oTVu65jwxW/28EWYFgiITKpm
N4Izcc4qZHs9xV1yQGCFisWeHudFRy/slgAh1mhLjwE0A22taVxK+KWP5HYZd8zZ
1o97fYE2SKqFpWg4ckz5Fc7It9h5HPo5AFK1yxR+TQsIsR3rikM2UIYZ126pBpkM
cnNf+jFUpmFp6jdYUSjSbfTFpRYWMKGghy3GfpsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQvuonYh4dMXA5V5lNjnUZEDHOdnzAfBgNVHSMEGDAWgBTgV0woeNa1NhOb
iV8IycbbGOEqmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRGZE1LSGpXdFRZVG00bGZDTW5HMnhqaEtwcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvMjhkNjAwLWE4NjktNGFiMS05YjJlLTQ0NjAxOTk2NmExOS8x
L0w3cUoySWVIVEZ3T1ZlWlRZNTFHUkF4em5aOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
MjhkNjAwLWE4NjktNGFiMS05YjJlLTQ0NjAxOTk2NmExOS8xLzRGZE1LSGpXdFRZ
VG00bGZDTW5HMnhqaEtwcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlwDDANBgkqhkiG9w0BAQsFAAOC
AQEAi+7u8OkV01FOiUBPhkQZXc9J+fp79XwDbj2aM0FvVue36eYfw7ga8ZU4WfQI
0TNvYGLy4BynQBljQaGAgk83caxQwRZnPC66uwTxzjP5ecGtzZP1DYQTUtsWZPeO
O0UKH+P5bZQJaNlf5mKn7Msa6xsItBPX1aiUAuPz8G3Iz9Vmr25djic7vdYv1FsC
/H5BnZciLdloU9/bslPivByVCxsII8kZPOLGqaZp2KYZv0KCSQ/Y+HRc91I/Iun3
qW1OAgz8meyUH0FD3N98j29F9LjtzUxgbpJK9Ue9OOvd5pNjnmhlOGR2upDV+isS
1xIlQMPENcpMbN4NS0NPDyuiLQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net