Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/8YcrzzmT3tgbO2xIv-a01Y3LGd8.roa
File: 8YcrzzmT3tgbO2xIv-a01Y3LGd8.roa (raw, json)
Hash identifier: ugDxagHtbxIItvGhAUwyYzz6e35xaGyzbwZDkjAzK0Q=
Subject key identifier: F1:87:2B:CF:39:93:DE:D8:1B:3B:6C:48:BF:E6:B4:D5:8D:CB:19:DF
Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial: 07F3F6CB
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/8YcrzzmT3tgbO2xIv-a01Y3LGd8.roa
Signing time: Sat 01 Jan 2022 01:56:35 +0000
ROA not before: Sat 01 Jan 2022 01:56:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51918
IP address blocks: 83.151.224.0/22 maxlen: 22
83.151.224.0/19 maxlen: 19
83.151.228.0/22 maxlen: 22
83.151.232.0/22 maxlen: 22
83.151.236.0/22 maxlen: 22
83.151.240.0/22 maxlen: 22
83.151.244.0/22 maxlen: 22
83.151.248.0/22 maxlen: 22
83.151.252.0/22 maxlen: 22
46.37.32.0/22 maxlen: 22
46.37.32.0/19 maxlen: 19
46.37.36.0/22 maxlen: 22
46.37.40.0/22 maxlen: 22
46.37.44.0/22 maxlen: 22
46.37.48.0/22 maxlen: 22
46.37.52.0/22 maxlen: 22
46.37.56.0/22 maxlen: 22
46.37.60.0/22 maxlen: 22
185.14.208.0/22 maxlen: 22
2a01:5d00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133428939 (0x7f3f6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Validity
Not Before: Jan 1 01:56:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1872bcf3993ded81b3b6c48bfe6b4d58dcb19df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:88:03:39:15:d5:b7:0e:a9:a4:6f:40:78:
1e:a4:3a:69:9a:b5:bf:be:e7:6b:90:25:b8:ec:7f:
11:99:9f:04:6a:da:2e:9d:7b:86:b1:61:00:ec:d7:
82:8e:0f:73:27:5a:1e:ce:30:52:0f:1d:cc:e5:67:
c9:42:92:52:17:d2:a6:6b:b7:9a:96:20:d8:db:03:
e9:5f:42:51:c8:51:1a:9e:f1:42:13:71:e0:93:88:
6e:c2:a6:1d:74:c9:f7:23:e1:81:aa:dc:de:70:5a:
d7:9c:20:89:e9:2d:9a:62:95:ab:71:de:83:72:ee:
9b:03:92:d3:3e:ec:9f:00:b0:90:ae:b6:c1:31:ea:
5c:b5:26:c7:ef:a8:ca:12:bf:7a:60:03:f2:7e:92:
8f:8e:fe:b2:14:59:4b:05:62:ae:66:46:4b:40:37:
b1:fa:81:ab:ab:ee:48:9e:b4:e5:21:7a:ca:5c:89:
86:10:ac:f1:71:57:9e:20:4e:f8:2d:00:97:36:73:
be:35:f5:19:69:c1:5f:1c:46:0e:79:5b:f3:cb:cf:
3b:93:04:98:00:37:73:bc:fc:6c:e3:6a:b2:e5:6c:
ae:17:94:a6:06:bc:aa:4c:01:d1:e4:11:28:cf:76:
25:6c:25:52:c0:72:1e:f1:ca:e9:30:de:7c:0a:b9:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:2B:CF:39:93:DE:D8:1B:3B:6C:48:BF:E6:B4:D5:8D:CB:19:DF
X509v3 Authority Key Identifier:
keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/8YcrzzmT3tgbO2xIv-a01Y3LGd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.32.0/19
83.151.224.0/19
185.14.208.0/22
IPv6:
2a01:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
9b:41:b0:1c:a4:fa:db:32:9e:bc:b4:fa:42:40:93:2c:0b:80:
6d:f2:3b:05:1c:bb:5b:53:c3:47:0d:07:e0:f2:c7:5c:0e:33:
1b:85:b4:10:c2:92:26:f6:77:d9:68:1c:c4:82:d7:fc:0d:13:
f7:b0:37:6d:6a:ee:98:68:3b:92:9f:d9:ad:5e:b3:bf:af:cc:
78:69:27:15:04:21:7b:69:ac:d6:8f:e7:6e:ce:b1:94:68:6b:
97:9f:2e:f0:fd:8b:25:b8:f2:06:1f:7c:47:a6:87:73:6f:71:
f3:3a:ce:2d:4b:71:c2:5b:c5:bb:c9:ff:61:b2:43:70:3e:7d:
e2:0f:09:00:8d:fc:c2:a8:63:61:0e:f5:ec:8b:ae:ff:bd:2d:
2a:b0:81:53:7b:fb:4f:2c:c9:03:48:ab:32:b0:13:f1:56:89:
00:8e:e1:96:ed:dd:a9:70:cb:86:29:88:bc:e7:84:97:26:86:
fe:29:f2:18:6c:32:bb:6b:84:b7:25:5e:72:72:4a:09:32:5e:
6e:60:c5:d5:16:80:5b:5d:23:33:bc:ce:66:6c:3b:70:e7:f3:
cf:0e:e1:2b:79:e1:5f:e0:06:46:6c:24:f8:2b:85:d4:9a:1f:
ad:11:9c:1b:5b:df:96:70:40:b4:32:55:aa:0e:ad:52:15:fc:
1d:66:f5:64
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEB/P2yzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTBhMjEyM2Y1NDkyNjRlN2NiYjlmYTIxZDJjNTEzNzcyMTQ4NmU0MB4XDTIyMDEw
MTAxNTYzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjE4NzJiY2YzOTkz
ZGVkODFiM2I2YzQ4YmZlNmI0ZDU4ZGNiMTlkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdWiAM5FdW3Dqmkb0B4HqQ6aZq1v77na5AluOx/EZmfBGra
Lp17hrFhAOzXgo4PcydaHs4wUg8dzOVnyUKSUhfSpmu3mpYg2NsD6V9CUchRGp7x
QhNx4JOIbsKmHXTJ9yPhgarc3nBa15wgiektmmKVq3Heg3LumwOS0z7snwCwkK62
wTHqXLUmx++oyhK/emAD8n6Sj47+shRZSwVirmZGS0A3sfqBq6vuSJ605SF6ylyJ
hhCs8XFXniBO+C0AlzZzvjX1GWnBXxxGDnlb88vPO5MEmAA3c7z8bONqsuVsrheU
pga8qkwB0eQRKM92JWwlUsByHvHK6TDefAq5BBECAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTxhyvPOZPe2Bs7bEi/5rTVjcsZ3zAfBgNVHSMEGDAWgBTBCiEj9UkmTny7
n6IdLFE3chSG5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dRb2hJX1ZKSms1OHU1LWlIU3hSTjNJVWh1US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvZjc1ZDE2LTQwMzktNDZjYS04YjFlLWFkYjMwMGY3MjI1YS8x
LzhZY3J6em1UM3RnYk8yeEl2LWEwMVkzTEdkOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
Zjc1ZDE2LTQwMzktNDZjYS04YjFlLWFkYjMwMGY3MjI1YS8xL3dRb2hJX1ZKSms1
OHU1LWlIU3hSTjNJVWh1US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBS4lIAMEBVOX4AMEArkO0DANBAIA
AjAHAwUAKgFdADANBgkqhkiG9w0BAQsFAAOCAQEAm0GwHKT62zKevLT6QkCTLAuA
bfI7BRy7W1PDRw0H4PLHXA4zG4W0EMKSJvZ32WgcxILX/A0T97A3bWrumGg7kp/Z
rV6zv6/MeGknFQQhe2ms1o/nbs6xlGhrl58u8P2LJbjyBh98R6aHc29x8zrOLUtx
wlvFu8n/YbJDcD594g8JAI38wqhjYQ717Iuu/70tKrCBU3v7TyzJA0irMrAT8VaJ
AI7hlu3dqXDLhimIvOeElyaG/inyGGwyu2uEtyVecnJKCTJebmDF1RaAW10jM7zO
Zmw7cOfzzw7hK3nhX+AGRmwk+CuF1JofrRGcG1vflnBAtDJVqg6tUhX8HWb1ZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:42 2024 by rpki-client on console-ams.rpki-client.org