Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/n60l1YV9vBGoZ8vBqjMUfCvFm7k.roa
File: n60l1YV9vBGoZ8vBqjMUfCvFm7k.roa (raw, json)
Hash identifier: PUumNKNtYHZQmpgcYQBqu3NVqOMjm9nJw747PbvtwHo=
Subject key identifier: 9F:AD:25:D5:85:7D:BC:11:A8:67:CB:C1:AA:33:14:7C:2B:C5:9B:B9
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 01845668F598A2D12E9C88AD11253D538696
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/n60l1YV9vBGoZ8vBqjMUfCvFm7k.roa
Signing time: Tue 08 Nov 2022 08:43:49 +0000
ROA not before: Tue 08 Nov 2022 08:43:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198187
IP address blocks: 195.170.190.0/24 maxlen: 24
91.232.62.0/23 maxlen: 23
91.231.23.0/24 maxlen: 24
193.42.240.0/22 maxlen: 22
176.100.192.0/21 maxlen: 21
185.174.112.0/22 maxlen: 22
195.182.10.0/24 maxlen: 24
195.182.15.0/24 maxlen: 24
195.182.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:68:f5:98:a2:d1:2e:9c:88:ad:11:25:3d:53:86:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Nov 8 08:43:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fad25d5857dbc11a867cbc1aa33147c2bc59bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:aa:57:f6:cf:98:42:1e:3f:ad:a8:8b:26:
0c:fd:c8:c1:5b:3b:3c:14:74:51:31:5d:2b:a0:60:
0d:8b:b2:89:2c:8c:43:13:7f:ba:9b:06:d4:ef:4a:
4a:00:ee:f5:d2:bc:7e:89:2a:2c:06:04:0e:aa:c5:
2b:6f:0a:a3:ac:a7:79:f0:21:ec:cf:b8:17:a0:0e:
d5:5a:2a:bc:e1:12:fc:1b:4d:7d:86:d0:74:35:3b:
8e:4a:7f:10:90:c2:0c:11:9d:f6:29:ec:3b:d3:d2:
ed:10:d5:8a:27:ed:5f:99:1c:86:14:a2:f6:e1:a0:
e9:75:81:fc:1e:9f:87:7f:dc:a2:e5:82:5b:6c:af:
0f:2d:15:fc:86:79:7b:fe:a2:f5:cb:cf:42:c5:90:
15:e9:1b:7d:22:2d:06:45:58:fd:19:de:79:a1:3d:
08:16:ee:84:9b:7f:97:6e:70:ca:f5:e6:70:05:ee:
8d:1b:5e:14:77:8f:46:53:57:ce:e7:59:e9:9a:97:
95:c9:5f:fb:ed:1a:6b:2d:69:14:06:c6:0c:7e:64:
ae:10:4d:b9:69:16:b8:79:1f:e2:6f:fa:9b:9a:7e:
cd:ed:bd:04:6a:26:47:62:50:8d:06:d1:85:a2:a5:
55:11:71:24:10:8c:d9:1f:7f:79:4c:6a:9b:b6:95:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:25:D5:85:7D:BC:11:A8:67:CB:C1:AA:33:14:7C:2B:C5:9B:B9
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/n60l1YV9vBGoZ8vBqjMUfCvFm7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.23.0/24
91.232.62.0/23
176.100.192.0/21
185.174.112.0/22
193.42.240.0/22
195.170.190.0/24
195.182.10.0/24
195.182.15.0/24
195.182.19.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b3:b7:10:28:50:d8:3d:e1:c9:18:ee:a6:82:e3:f4:f9:3d:
0f:45:9f:8b:b3:66:8c:da:1b:91:c9:7f:77:fa:6f:66:ee:87:
94:1f:f2:8a:0e:1a:a8:63:53:71:21:04:34:3d:6a:11:23:40:
46:ed:8e:a5:ed:99:10:6d:b5:3f:38:db:a8:9c:cb:60:57:c6:
61:12:18:ae:d4:30:cf:e3:68:82:58:5d:b4:ec:fa:f8:66:89:
5d:23:cf:be:a6:c0:8e:a0:f1:97:3c:12:ac:b1:a6:3a:40:e4:
43:f5:c0:0f:0e:f4:37:d8:c2:00:65:46:f2:12:8b:78:54:bd:
dc:01:0a:7f:17:ab:28:01:7c:28:ab:95:8e:a6:9b:e3:ee:9d:
dc:50:34:ed:0e:32:3d:81:bf:f2:3e:f2:10:35:93:2e:9e:c5:
bb:4a:32:04:e8:4f:0d:89:da:c3:a1:1d:bb:ec:d1:f8:12:f5:
b3:25:47:c9:39:65:07:43:a8:19:65:fd:84:36:02:7e:95:44:
06:dd:da:98:96:f1:51:54:6b:0a:80:28:e7:63:fa:56:c5:b0:
cc:e9:06:ec:a1:2a:d9:45:66:fc:e7:cd:ef:66:d9:bf:df:70:
d5:79:fd:0f:1b:86:99:0c:6f:d3:97:d3:a2:db:56:a7:61:b6:
ea:f9:1e:41
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYRWaPWYotEunIitESU9U4aWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj
OWVlNWMwHhcNMjIxMTA4MDg0MzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmFkMjVkNTg1N2RiYzExYTg2N2NiYzFhYTMzMTQ3YzJiYzU5YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqKqV/bPmEIeP62oiyYM/cjBWzs8
FHRRMV0roGANi7KJLIxDE3+6mwbU70pKAO710rx+iSosBgQOqsUrbwqjrKd58CHs
z7gXoA7VWiq84RL8G019htB0NTuOSn8QkMIMEZ32Kew709LtENWKJ+1fmRyGFKL2
4aDpdYH8Hp+Hf9yi5YJbbK8PLRX8hnl7/qL1y89CxZAV6Rt9Ii0GRVj9Gd55oT0I
Fu6Em3+XbnDK9eZwBe6NG14Ud49GU1fO51npmpeVyV/77RprLWkUBsYMfmSuEE25
aRa4eR/ib/qbmn7N7b0EaiZHYlCNBtGFoqVVEXEkEIzZH395TGqbtpWWxQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFJ+tJdWFfbwRqGfLwaozFHwrxZu5MB8GA1UdIwQY
MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt
MjNhMjc2YTQyOGFiLzEvbjYwbDFZVjl2QkdvWjh2QnFqTVVmQ3ZGbTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi
LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAW+cXAwQB
W+g+AwQDsGTAAwQCua5wAwQCwSrwAwQAw6q+AwQAw7YKAwQAw7YPAwQAw7YTMA0G
CSqGSIb3DQEBCwUAA4IBAQB1s7cQKFDYPeHJGO6mguP0+T0PRZ+Ls2aM2huRyX93
+m9m7oeUH/KKDhqoY1NxIQQ0PWoRI0BG7Y6l7ZkQbbU/ONuonMtgV8ZhEhiu1DDP
42iCWF207Pr4ZoldI8++psCOoPGXPBKssaY6QORD9cAPDvQ32MIAZUbyEot4VL3c
AQp/F6soAXwoq5WOppvj7p3cUDTtDjI9gb/yPvIQNZMunsW7SjIE6E8NidrDoR27
7NH4EvWzJUfJOWUHQ6gZZf2ENgJ+lUQG3dqYlvFRVGsKgCjnY/pWxbDM6QbsoSrZ
RWb8583vZtm/33DVef0PG4aZDG/Tl9Oi21anYbbq+R5B
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:50 2024 by rpki-client on console-fra.rpki-client.org