Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/yU_sCjC7lPYVFHhSZj-UdtQhUpI.roa
File: yU_sCjC7lPYVFHhSZj-UdtQhUpI.roa (raw, json)
Hash identifier: aQSd2KRexiQImo6PdFPnisFqn1Spm+ab2l5J0tdDPV8=
Subject key identifier: C9:4F:EC:0A:30:BB:94:F6:15:14:78:52:66:3F:94:76:D4:21:52:92
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 0181EC050ED8DD4B86507951F87ADC40748B
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/yU_sCjC7lPYVFHhSZj-UdtQhUpI.roa
Signing time: Mon 11 Jul 2022 06:49:23 +0000
ROA not before: Mon 11 Jul 2022 06:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43541
IP address blocks: 46.243.48.0/21 maxlen: 21
185.14.252.0/22 maxlen: 22
217.16.176.0/20 maxlen: 20
178.251.184.0/21 maxlen: 21
185.64.216.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
78.24.8.0/21 maxlen: 21
185.115.2.0/24 maxlen: 24
185.115.1.0/24 maxlen: 24
93.185.96.0/20 maxlen: 20
2a02:5420:627::/48 maxlen: 48
2a00:1ed0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:05:0e:d8:dd:4b:86:50:79:51:f8:7a:dc:40:74:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jul 11 06:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c94fec0a30bb94f615147852663f9476d4215292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:06:dd:82:d0:18:cc:13:42:8d:8a:e2:b8:
88:18:2d:f5:e6:a6:18:5a:77:18:2a:3e:90:de:d3:
d8:c1:e1:11:10:b2:3e:72:70:20:64:1e:df:d1:7b:
49:d1:2d:7b:71:1c:58:6a:03:c1:a3:04:70:5c:4c:
c0:11:aa:0c:79:34:c5:e1:72:b8:5c:9a:61:15:64:
0c:7f:6f:69:7a:e5:aa:8e:7c:9e:d6:73:d9:a8:84:
09:9d:40:c3:d7:f4:d2:27:b3:ac:82:7a:42:a5:b6:
c3:05:53:bb:4d:a1:ef:33:04:b9:05:44:fc:1e:22:
35:b1:c0:b1:ec:c3:29:f8:d9:c3:23:f8:61:6b:fc:
59:e2:76:c7:0b:c3:f8:27:84:fa:5b:91:c5:cb:7c:
80:1b:01:c5:24:f8:14:46:5c:b3:c4:20:e4:d1:44:
42:5d:e3:77:1c:6c:cb:63:c2:28:4c:f7:7d:1d:25:
28:9c:01:55:39:90:2c:e0:fc:d9:2c:c7:e3:10:6f:
70:ed:74:c5:56:ad:3b:00:3b:b1:c7:a8:ac:70:1a:
aa:bf:b8:20:85:e4:77:02:41:2f:d9:7b:10:56:57:
c1:5a:94:28:89:9e:f4:4c:0e:56:e9:13:7f:94:8c:
8a:80:a6:d0:db:50:73:93:70:27:09:c9:9b:0d:53:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4F:EC:0A:30:BB:94:F6:15:14:78:52:66:3F:94:76:D4:21:52:92
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/yU_sCjC7lPYVFHhSZj-UdtQhUpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0/21
78.24.8.0/21
93.185.96.0/20
178.251.184.0/21
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::/32
2a02:5420:627::/48
Signature Algorithm: sha256WithRSAEncryption
33:fd:97:a3:12:9f:b2:2c:b1:9e:54:0a:8f:d8:34:b4:9b:ad:
8a:8e:e0:ec:41:a5:88:86:22:ea:bc:5b:6d:87:bf:75:d6:f4:
2f:94:b2:2d:5c:c2:a3:b6:39:b9:5f:8a:ea:1a:e4:dd:5c:42:
84:89:e0:b3:8d:61:93:c8:c4:b6:eb:21:ed:93:eb:ee:a1:a0:
10:58:ec:f7:e5:d0:f2:74:6d:1b:7c:ac:57:91:bb:f5:2d:ab:
a2:55:b5:b6:fc:70:c8:ad:6e:0f:81:4c:db:3d:66:9b:76:96:
a4:a8:e7:36:b6:94:6c:56:fc:b0:c3:e6:2c:83:74:71:fc:50:
e1:11:b2:d6:67:53:c8:43:19:8c:bb:ac:ba:b7:c3:aa:af:59:
33:2d:88:73:4d:ba:84:b4:d6:a1:4f:23:95:14:2a:e0:75:3b:
a2:2d:1b:68:10:16:ad:47:97:aa:6a:c7:e8:d7:93:56:5b:1a:
6a:0e:97:36:8e:67:3d:a0:66:d9:1b:d7:34:50:aa:74:e1:ef:
84:40:f1:a5:1e:2f:b4:f0:e6:f5:98:e3:2b:51:ad:57:6c:27:
17:a9:d6:f7:18:10:aa:a2:4b:20:f8:9b:dd:ea:0f:a4:e3:e3:
c5:e3:10:d2:62:67:9c:76:ea:14:a7:f4:ef:b9:49:7b:24:86:
aa:46:aa:f9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYHsBQ7Y3UuGUHlR+HrcQHSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjIwNzExMDY0OTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTRmZWMwYTMwYmI5NGY2MTUxNDc4NTI2NjNmOTQ3NmQ0MjE1MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnwG3YLQGMwTQo2K4riIGC315qYY
WncYKj6Q3tPYweERELI+cnAgZB7f0XtJ0S17cRxYagPBowRwXEzAEaoMeTTF4XK4
XJphFWQMf29peuWqjnye1nPZqIQJnUDD1/TSJ7OsgnpCpbbDBVO7TaHvMwS5BUT8
HiI1scCx7MMp+NnDI/hha/xZ4nbHC8P4J4T6W5HFy3yAGwHFJPgURlyzxCDk0URC
XeN3HGzLY8IoTPd9HSUonAFVOZAs4PzZLMfjEG9w7XTFVq07ADuxx6iscBqqv7gg
heR3AkEv2XsQVlfBWpQoiZ70TA5W6RN/lIyKgKbQ21Bzk3AnCcmbDVMQUQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFMlP7Aowu5T2FRR4UmY/lHbUIVKSMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEveVVfc0NqQzdsUFlWRkhoU1pqLVVkdFFoVXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBEBAIAATA+AwQDLvMwAwQD
ThgIAwQEXblgAwQDsvu4AwQCuQ78AwQCuTvQAwQCuUDYMAwDBAC5cwEDBAC5cwID
BATZELAwFgQCAAIwEAMFACoAHtADBwAqAlQgBicwDQYJKoZIhvcNAQELBQADggEB
ADP9l6MSn7IssZ5UCo/YNLSbrYqO4OxBpYiGIuq8W22Hv3XW9C+Usi1cwqO2Oblf
iuoa5N1cQoSJ4LONYZPIxLbrIe2T6+6hoBBY7Pfl0PJ0bRt8rFeRu/Utq6JVtbb8
cMitbg+BTNs9Zpt2lqSo5za2lGxW/LDD5iyDdHH8UOERstZnU8hDGYy7rLq3w6qv
WTMtiHNNuoS01qFPI5UUKuB1O6ItG2gQFq1Hl6pqx+jXk1ZbGmoOlzaOZz2gZtkb
1zRQqnTh74RA8aUeL7Tw5vWY4ytRrVdsJxep1vcYEKqiSyD4m93qD6Tj48XjENJi
Z5x26hSn9O+5SXskhqpGqvk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:02 2024 by rpki-client on console-ams.rpki-client.org