Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/8XASoyhZYmpaMK8m8rxuOu5C45A.roa
File: 8XASoyhZYmpaMK8m8rxuOu5C45A.roa (raw, json)
Hash identifier: IWwrL+tMa8KHCTM01NE5RtCbNHcsrhcjQzV3Z/0eOm0=
Subject key identifier: F1:70:12:A3:28:59:62:6A:5A:30:AF:26:F2:BC:6E:3A:EE:42:E3:90
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 09CA8369
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/8XASoyhZYmpaMK8m8rxuOu5C45A.roa
Signing time: Wed 15 Jun 2022 05:50:45 +0000
ROA not before: Wed 15 Jun 2022 05:50:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47596
IP address blocks: 185.120.57.0/24 maxlen: 24
185.120.56.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164266857 (0x9ca8369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jun 15 05:50:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f17012a32859626a5a30af26f2bc6e3aee42e390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:88:5a:2e:70:eb:fe:2c:a9:09:44:68:26:
a6:b7:e3:f7:9e:a8:65:67:a9:27:b6:31:00:20:47:
0c:ff:83:08:e1:3d:d1:b9:f1:f4:73:9b:ef:d5:1d:
59:80:86:99:45:1e:8d:a6:d9:a5:fd:b1:d6:d2:a2:
13:1f:26:bf:36:cb:c7:8a:90:e2:dc:15:f7:85:f1:
d8:ef:f2:db:48:1f:18:1d:c6:7c:4e:c4:3c:fa:d1:
d9:5d:19:d5:cc:08:3a:43:4e:b7:a1:1a:f5:69:f9:
be:11:c8:67:50:02:2e:64:2f:a1:d0:94:ca:97:d7:
fa:9d:62:ad:87:e1:b4:2f:e4:f2:93:31:54:9c:2a:
2b:f2:a9:db:6f:df:d1:27:6b:6b:27:33:79:4e:46:
3f:3c:e3:a5:02:3a:16:a1:45:1c:fc:77:f5:ba:cc:
06:03:d9:40:94:76:c7:74:02:2e:7d:3f:83:8d:ed:
a0:e1:2e:09:32:50:2a:6b:67:f6:d7:09:34:f0:92:
f6:e5:94:93:c7:c1:b6:db:c4:c2:3a:fe:d7:21:fc:
4d:c2:55:ff:dc:10:8e:77:cd:1b:61:44:e8:7c:82:
f6:70:34:cf:61:78:22:65:ac:fa:3c:89:ce:7a:79:
62:d9:9a:39:66:a7:cc:83:de:fa:b9:e7:54:ed:29:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:12:A3:28:59:62:6A:5A:30:AF:26:F2:BC:6E:3A:EE:42:E3:90
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/8XASoyhZYmpaMK8m8rxuOu5C45A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
43:d9:4e:3d:6c:70:31:e3:ca:56:55:f8:5e:00:c9:db:60:ff:
0f:a9:b8:a8:fc:84:f2:ff:d8:cb:f0:49:ac:71:69:f6:7c:87:
c0:f5:ae:ea:c9:1e:b7:90:1d:f1:4f:74:e1:b9:09:0e:75:65:
af:4c:11:2f:92:7a:ba:52:bb:75:aa:53:23:de:2c:50:75:c4:
6d:e5:46:6a:a4:03:08:48:fd:31:e8:d4:8d:5f:4b:86:e4:7f:
50:51:db:25:8b:9e:c4:bc:88:97:7b:1d:4f:aa:86:58:1d:49:
ae:0c:e7:6e:04:0d:f5:45:3c:58:57:d4:c1:18:e9:b4:2a:7c:
32:fd:61:81:17:08:7d:d8:c6:8e:f0:1f:71:4b:2c:6c:65:d3:
f3:dd:42:08:21:59:2e:83:b9:85:a0:1c:c3:4e:a3:f7:fd:67:
13:e4:78:82:32:39:42:6a:35:4a:37:a9:9a:fa:f9:9f:08:12:
1d:5c:8c:47:0d:85:9b:34:f4:00:67:0b:2a:42:c4:3a:70:cc:
a6:22:2e:ae:ef:a4:6c:30:d8:f2:19:0a:04:01:2b:4a:92:69:
8f:0d:89:32:22:e5:4f:c7:19:0e:25:e0:20:d3:d6:bd:c1:2a:
72:70:ab:84:76:73:1f:0a:29:22:94:ed:7a:f7:f2:a8:e8:30:
94:8a:b4:5b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIECcqDaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDYzNjUzNTViNjY1NTY0YTIxMGMzNThjNjhhMDExN2I3ZmJlYjlhMB4XDTIyMDYx
NTA1NTA0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjE3MDEyYTMyODU5
NjI2YTVhMzBhZjI2ZjJiYzZlM2FlZTQyZTM5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3OiFoucOv+LKkJRGgmprfj956oZWepJ7YxACBHDP+DCOE9
0bnx9HOb79UdWYCGmUUejabZpf2x1tKiEx8mvzbLx4qQ4twV94Xx2O/y20gfGB3G
fE7EPPrR2V0Z1cwIOkNOt6Ea9Wn5vhHIZ1ACLmQvodCUypfX+p1irYfhtC/k8pMx
VJwqK/Kp22/f0SdrayczeU5GPzzjpQI6FqFFHPx39brMBgPZQJR2x3QCLn0/g43t
oOEuCTJQKmtn9tcJNPCS9uWUk8fBttvEwjr+1yH8TcJV/9wQjnfNG2FE6HyC9nA0
z2F4ImWs+jyJznp5YtmaOWanzIPe+rnnVO0pE/MCAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBTxcBKjKFlialowrybyvG467kLjkDAfBgNVHSMEGDAWgBR0Y2U1W2ZVZKIQ
w1jGigEXt/vrmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RHTmxOVnRtVldTaUVNTll4b29CRjdmNzY1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvYWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8x
LzhYQVNveWhaWW1wYU1LOG04cnh1T3U1QzQ1QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
YWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8xL2RHTmxOVnRtVldT
aUVNTll4b29CRjdmNzY1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwHgQCAAEwGAMEArl4OAMEAbn/sgMEANQWQAMEANQW
TTAPBAIAAjAJAwcAKgbDwAABMA0GCSqGSIb3DQEBCwUAA4IBAQBD2U49bHAx48pW
VfheAMnbYP8Pqbio/ITy/9jL8EmscWn2fIfA9a7qyR63kB3xT3ThuQkOdWWvTBEv
knq6Urt1qlMj3ixQdcRt5UZqpAMISP0x6NSNX0uG5H9QUdsli57EvIiXex1PqoZY
HUmuDOduBA31RTxYV9TBGOm0Knwy/WGBFwh92MaO8B9xSyxsZdPz3UIIIVkug7mF
oBzDTqP3/WcT5HiCMjlCajVKN6ma+vmfCBIdXIxHDYWbNPQAZwsqQsQ6cMymIi6u
76RsMNjyGQoEAStKkmmPDYkyIuVPxxkOJeAg09a9wSpycKuEdnMfCikilO169/Ko
6DCUirRb
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org