Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/qyXu5dgvV9lgZlPrZtZipNzJWyE.roa
File: qyXu5dgvV9lgZlPrZtZipNzJWyE.roa (raw, json)
Hash identifier: IhwxK+gsVlbBcjGfgfq9/4u5/KgAca8ETCdHGAaxnno=
Subject key identifier: AB:25:EE:E5:D8:2F:57:D9:60:66:53:EB:66:D6:62:A4:DC:C9:5B:21
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 0183ADED9AED79A489A231710D006037538C
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/qyXu5dgvV9lgZlPrZtZipNzJWyE.roa
Signing time: Thu 06 Oct 2022 15:32:53 +0000
ROA not before: Thu 06 Oct 2022 15:32:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61098
IP address blocks: 91.92.116.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
194.182.176.0/22 maxlen: 24
85.217.186.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
2a04:c47::/32 maxlen: 48
2a04:c41::/32 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:ed:9a:ed:79:a4:89:a2:31:71:0d:00:60:37:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Oct 6 15:32:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab25eee5d82f57d9606653eb66d662a4dcc95b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:94:e5:4f:67:f9:d0:a9:57:1d:d9:ff:73:
11:0b:88:3e:33:9c:61:12:65:8f:3f:5e:ad:c2:14:
f5:53:db:83:bd:1e:97:9a:49:96:93:b8:3a:26:33:
07:6e:15:d6:81:72:9c:0a:2c:0b:0f:6d:85:21:39:
a0:73:d3:db:d0:a6:f9:28:ca:a2:69:73:c0:9b:60:
61:1f:22:f0:89:93:21:24:87:0c:18:52:80:64:80:
8e:3c:8a:04:d9:ba:c3:40:b3:3a:97:a1:b4:da:ef:
73:a7:7e:20:f5:70:d1:38:2c:57:c6:2b:2b:7d:05:
f4:89:03:cf:55:57:4d:f1:58:4c:fa:e6:84:ec:2e:
30:68:e4:bc:b1:a9:fc:b7:05:58:90:ab:50:10:78:
45:58:d7:b8:08:0c:bc:47:06:4d:09:b7:db:04:6d:
8e:b4:12:24:cc:39:35:6d:45:ba:bc:45:11:30:19:
be:71:7d:d9:06:c0:08:a8:eb:20:64:69:0f:fc:4f:
14:4c:b7:21:ab:24:37:f0:54:08:ea:1c:17:a8:33:
cd:30:ba:c9:e1:f3:d9:fb:f1:22:ee:9b:f6:6c:69:
e6:45:99:3c:79:ca:f6:49:b7:3e:48:12:f5:b5:ad:
df:b7:65:2d:97:b5:7f:4c:c7:7b:d3:25:0a:60:1e:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:EE:E5:D8:2F:57:D9:60:66:53:EB:66:D6:62:A4:DC:C9:5B:21
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/qyXu5dgvV9lgZlPrZtZipNzJWyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.184.0/22
91.92.116.0/23
91.92.227.0/24
194.182.176.0/22
IPv6:
2a04:c41::/32
2a04:c47::/32
2a07:6cc0:60::/48
2a07:6cc1::/32
Signature Algorithm: sha256WithRSAEncryption
8e:79:02:73:db:3a:54:17:3c:df:8a:e0:4d:31:ba:24:21:11:
8b:df:f8:9a:99:49:d5:fe:e4:a2:b5:21:32:a6:73:6f:f0:6b:
62:35:a0:47:e0:48:f3:70:dd:6a:0f:81:b1:fa:6b:88:2d:42:
a8:e6:4d:fc:a6:db:5b:35:dc:63:e3:1d:46:88:91:09:33:1c:
4a:b4:84:f5:2f:9f:20:3e:7a:b6:a5:81:3a:f6:62:e8:3a:36:
86:8b:c4:5e:20:20:c9:7f:c8:4a:57:a8:35:23:5a:36:81:91:
83:6c:da:2a:2d:6a:48:42:4c:4c:09:38:d8:b2:cf:35:99:82:
45:50:15:d2:00:a5:df:c1:35:be:ec:18:db:1f:36:b9:e7:63:
00:6e:54:aa:4d:74:04:0e:e9:20:17:36:d6:25:bb:cb:46:2d:
8a:1e:a1:9f:f4:7d:10:f3:24:38:9b:09:7e:9c:29:9e:5b:64:
14:d3:1b:02:f6:bb:2e:ce:09:34:e1:19:7b:d6:f0:5b:d5:e6:
01:a5:8f:35:4f:66:3a:46:1e:0e:9e:41:ae:cf:4a:ba:00:5e:
d6:88:d6:31:bd:75:71:b4:e1:22:c9:f8:78:5e:ef:45:ac:0b:
5d:8a:c9:fc:1c:25:2f:2e:37:bf:5d:aa:79:4e:fc:df:be:7b:
24:45:a6:be
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYOt7ZrteaSJojFxDQBgN1OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjIxMDA2MTUzMjUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjI1ZWVlNWQ4MmY1N2Q5NjA2NjUzZWI2NmQ2NjJhNGRjYzk1YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzWU5U9n+dCpVx3Z/3MRC4g+M5xh
EmWPP16twhT1U9uDvR6XmkmWk7g6JjMHbhXWgXKcCiwLD22FITmgc9Pb0Kb5KMqi
aXPAm2BhHyLwiZMhJIcMGFKAZICOPIoE2brDQLM6l6G02u9zp34g9XDROCxXxisr
fQX0iQPPVVdN8VhM+uaE7C4waOS8san8twVYkKtQEHhFWNe4CAy8RwZNCbfbBG2O
tBIkzDk1bUW6vEURMBm+cX3ZBsAIqOsgZGkP/E8UTLchqyQ38FQI6hwXqDPNMLrJ
4fPZ+/Ei7pv2bGnmRZk8ecr2Sbc+SBL1ta3ft2Utl7V/TMd70yUKYB64MwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFKsl7uXYL1fZYGZT62bWYqTcyVshMB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvcXlYdTVkZ3ZWOWxnWmxQclp0WmlwTnpKV3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAeBAIAATAYAwQCVdm4AwQB
W1x0AwQAW1zjAwQCwrawMCQEAgACMB4DBQAqBAxBAwUAKgQMRwMHACoHbMAAYAMF
ACoHbMEwDQYJKoZIhvcNAQELBQADggEBAI55AnPbOlQXPN+K4E0xuiQhEYvf+JqZ
SdX+5KK1ITKmc2/wa2I1oEfgSPNw3WoPgbH6a4gtQqjmTfym21s13GPjHUaIkQkz
HEq0hPUvnyA+eralgTr2Yug6NoaLxF4gIMl/yEpXqDUjWjaBkYNs2iotakhCTEwJ
ONiyzzWZgkVQFdIApd/BNb7sGNsfNrnnYwBuVKpNdAQO6SAXNtYlu8tGLYoeoZ/0
fRDzJDibCX6cKZ5bZBTTGwL2uy7OCTThGXvW8FvV5gGljzVPZjpGHg6eQa7PSroA
XtaI1jG9dXG04SLJ+Hhe70WsC12KyfwcJS8uN79dqnlO/N++eyRFpr4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:46 2024 by rpki-client on console-ams.rpki-client.org