Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/x3VD1VVwcNlO7ddydoOGEWr7uTA.roa
File: x3VD1VVwcNlO7ddydoOGEWr7uTA.roa (raw, json)
Hash identifier: kiUs3MFKVQfo8jk1T012NwmIILz+uWSttR86ATch72o=
Subject key identifier: C7:75:43:D5:55:70:70:D9:4E:ED:D7:72:76:83:86:11:6A:FB:B9:30
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CF32EAC
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/x3VD1VVwcNlO7ddydoOGEWr7uTA.roa
Signing time: Wed 20 Apr 2022 07:26:31 +0000
ROA not before: Wed 20 Apr 2022 07:26:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 212.40.181.0/24 maxlen: 24
194.64.88.0/24 maxlen: 24
194.233.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217263788 (0xcf32eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 20 07:26:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c77543d5557070d94eedd772768386116afbb930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:db:18:79:f1:7b:ce:b6:98:a1:6c:2f:b4:
14:df:fd:bd:74:37:cf:a3:50:e3:00:b2:db:07:59:
a8:d6:06:50:9b:9f:a6:58:cf:ff:b9:99:1c:ba:98:
ec:dc:df:e1:d8:8b:68:00:79:f8:c2:40:af:25:b9:
66:aa:ef:a7:29:ac:10:80:5c:e0:f3:79:4f:a0:d4:
7c:44:9b:b5:c7:ff:10:e7:49:cb:cd:0a:b3:06:8c:
20:ae:7e:93:9c:48:1a:f2:fc:7f:a9:bf:0f:06:98:
04:45:94:26:a4:02:59:8f:53:64:97:7a:1e:3a:d2:
b0:6e:6c:f5:9a:94:02:fd:39:bd:7d:b8:72:50:e5:
c8:0b:00:df:9d:15:da:f2:0d:b8:73:54:bd:61:8d:
1b:9d:e7:a2:69:85:ab:cf:ad:29:27:dd:7f:ba:66:
82:b3:51:30:b5:88:3e:40:bd:b2:ea:ef:03:eb:18:
00:8b:e1:2e:09:47:2c:f1:83:35:da:4f:76:47:c1:
1a:94:67:78:5a:6e:c4:08:4f:52:a2:e5:37:e1:d0:
82:b9:ff:b5:aa:94:84:e5:44:80:62:5a:a1:07:57:
9a:f5:26:49:0e:bd:16:f8:76:6d:42:f5:48:06:4f:
02:21:a5:ab:d3:8d:e7:00:db:fa:ec:35:17:1a:79:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:43:D5:55:70:70:D9:4E:ED:D7:72:76:83:86:11:6A:FB:B9:30
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/x3VD1VVwcNlO7ddydoOGEWr7uTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.88.0/24
194.233.8.0/22
212.40.181.0/24
Signature Algorithm: sha256WithRSAEncryption
52:98:71:4e:40:ed:57:98:ae:97:26:35:03:28:fc:27:98:ae:
dc:d7:e0:0b:ea:ed:01:53:c0:0d:4a:9f:2b:e9:52:51:85:f6:
30:9a:97:66:dc:32:38:91:a3:05:ad:55:b4:ce:01:2e:b2:ad:
b0:42:a1:f1:aa:28:1d:46:b0:ed:76:63:eb:7c:ba:e5:9b:95:
d1:f4:10:fa:72:f4:a0:c5:23:60:b4:6b:02:e1:22:d9:81:36:
3d:4a:16:a6:ff:9a:e2:4e:23:2f:d2:49:e8:a0:cf:7d:c5:66:
cd:7b:01:cd:17:ad:5a:c7:71:b6:d0:21:4e:bd:da:32:fb:1b:
0c:d8:59:e5:88:6b:c1:a1:75:25:fc:d2:be:7a:60:f9:0f:cb:
2f:0a:31:d4:01:b9:b7:11:0a:4d:71:96:32:cb:e1:87:bb:80:
29:e0:61:b5:2a:00:20:96:6d:6c:65:8f:4d:07:2b:dc:61:7f:
d3:69:e6:2d:7a:d8:5c:80:97:d2:f8:09:05:f2:ce:87:b1:c7:
5b:28:cb:24:da:56:7f:fa:13:46:17:25:b2:f1:be:0f:be:fa:
09:fa:db:23:55:bb:38:fd:33:67:d2:ab:06:35:4f:aa:37:8b:
b4:b0:f2:9e:15:27:60:5c:0e:70:64:62:f4:f1:d6:db:38:34:
fc:7a:86:ca
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEDPMurDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDQy
MDA3MjYzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzc3NTQzZDU1NTcw
NzBkOTRlZWRkNzcyNzY4Mzg2MTE2YWZiYjkzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANne2xh58XvOtpihbC+0FN/9vXQ3z6NQ4wCy2wdZqNYGUJuf
pljP/7mZHLqY7Nzf4diLaAB5+MJAryW5ZqrvpymsEIBc4PN5T6DUfESbtcf/EOdJ
y80KswaMIK5+k5xIGvL8f6m/DwaYBEWUJqQCWY9TZJd6HjrSsG5s9ZqUAv05vX24
clDlyAsA350V2vINuHNUvWGNG53nommFq8+tKSfdf7pmgrNRMLWIPkC9survA+sY
AIvhLglHLPGDNdpPdkfBGpRneFpuxAhPUqLlN+HQgrn/taqUhOVEgGJaoQdXmvUm
SQ69Fvh2bUL1SAZPAiGlq9ON5wDb+uw1Fxp50McCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTHdUPVVXBw2U7t13J2g4YRavu5MDAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L3gzVkQxVlZ3Y05sTzdkZHlkb09HRVdyN3VUQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMJAWAMEAsLpCAMEANQotTANBgkq
hkiG9w0BAQsFAAOCAQEAUphxTkDtV5iulyY1Ayj8J5iu3NfgC+rtAVPADUqfK+lS
UYX2MJqXZtwyOJGjBa1VtM4BLrKtsEKh8aooHUaw7XZj63y65ZuV0fQQ+nL0oMUj
YLRrAuEi2YE2PUoWpv+a4k4jL9JJ6KDPfcVmzXsBzRetWsdxttAhTr3aMvsbDNhZ
5YhrwaF1JfzSvnpg+Q/LLwox1AG5txEKTXGWMsvhh7uAKeBhtSoAIJZtbGWPTQcr
3GF/02nmLXrYXICX0vgJBfLOh7HHWyjLJNpWf/oTRhclsvG+D776CfrbI1W7OP0z
Z9KrBjVPqjeLtLDynhUnYFwOcGRi9PHW2zg0/HqGyg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:14 2025 by rpki-client