Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xQr7a2nnXETXin3ncZFd54VQLZc.roa
File: xQr7a2nnXETXin3ncZFd54VQLZc.roa (raw, json)
Hash identifier: Hnxf8hCuRIWuR/ZboIZpjBtLOPHcUqKCfMtx8aK8HrI=
Subject key identifier: C5:0A:FB:6B:69:E7:5C:44:D7:8A:7D:E7:71:91:5D:E7:85:50:2D:97
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 447BEBB3
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xQr7a2nnXETXin3ncZFd54VQLZc.roa
Signing time: Sat 01 Jan 2022 03:58:28 +0000
ROA not before: Sat 01 Jan 2022 03:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24954
IP address blocks: 194.3.206.0/24 maxlen: 24
194.3.205.0/24 maxlen: 24
194.3.207.0/24 maxlen: 24
195.25.80.0/24 maxlen: 24
195.25.79.0/24 maxlen: 24
194.3.124.0/24 maxlen: 24
194.3.125.0/24 maxlen: 24
62.160.252.0/24 maxlen: 24
62.160.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148971955 (0x447bebb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c50afb6b69e75c44d78a7de771915de785502d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:92:86:3a:de:96:f4:53:80:93:fb:fc:0c:
26:32:81:71:16:ba:c6:a2:27:24:de:78:e4:7f:a6:
9d:22:33:e0:79:ab:f6:21:e9:ff:e3:d8:a0:d9:f2:
a6:1a:c5:ed:00:77:ec:a9:83:06:39:7d:eb:7f:5d:
b6:5a:fa:41:8d:c5:45:fc:4c:8f:2f:84:51:5e:f6:
bf:c0:02:1e:6c:4c:67:74:87:d1:d4:7d:10:ac:37:
ec:fb:d9:42:2c:6d:b8:de:26:59:8d:7b:d8:51:b9:
1a:ae:e7:6e:9f:ff:57:e2:e3:c0:f5:42:5a:e1:af:
28:e8:fa:ca:fd:7f:53:49:cd:36:43:d9:a3:f0:53:
39:25:5a:ce:2b:24:2e:03:e9:53:3d:d7:7a:4d:39:
ae:e6:cf:0e:d6:d9:e4:02:b9:84:bf:c7:48:93:1e:
3f:e0:7d:cb:44:cc:79:5b:71:11:5b:24:ed:e1:52:
dc:4f:15:1b:bc:8e:5a:ff:c5:af:33:66:ff:19:88:
b4:0a:a1:48:54:f6:d8:2e:0e:21:97:fc:d9:ca:1c:
ec:38:c5:b6:65:65:be:18:9c:6b:62:6f:20:a8:da:
92:3c:8c:7a:ae:05:c4:3d:1d:11:24:bf:f7:25:4c:
64:19:97:ad:b1:fd:26:6a:39:0a:6a:3d:e3:f6:a3:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:FB:6B:69:E7:5C:44:D7:8A:7D:E7:71:91:5D:E7:85:50:2D:97
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xQr7a2nnXETXin3ncZFd54VQLZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.160.251.0-62.160.252.255
194.3.124.0/23
194.3.205.0-194.3.207.255
195.25.79.0-195.25.80.255
Signature Algorithm: sha256WithRSAEncryption
36:c3:d6:03:58:0d:e4:c2:b3:15:19:87:f5:76:07:59:bd:ba:
f4:0b:cf:b0:1d:7b:8b:34:05:a2:4e:1f:bb:05:8d:43:b0:21:
fc:0a:94:de:bc:fc:53:23:46:83:bc:38:82:44:60:f1:5e:3b:
b0:33:f3:4a:4d:ac:37:59:9e:27:f1:b5:bb:61:55:39:ee:47:
aa:d5:db:6e:2c:9f:ed:c2:cb:a5:5a:5f:a0:61:2d:62:48:bb:
9a:23:63:a8:51:30:d0:6d:fb:e0:66:20:2a:8c:5c:27:8a:5e:
b2:69:0d:f3:e5:7b:b8:43:9f:34:e2:3c:2c:da:e3:ee:08:c2:
60:2c:6f:9d:d5:ac:47:34:fc:48:52:ed:15:fb:23:0b:c9:ad:
21:96:4f:aa:b1:66:15:81:52:11:48:cc:d5:82:0c:80:a5:14:
5c:02:da:d6:74:bc:10:8e:f4:e8:af:92:c5:a0:d4:e0:50:14:
08:6b:72:ec:ba:4b:b2:9c:b2:6c:2e:b6:8d:f7:ce:41:13:68:
80:f5:3c:72:45:d0:0b:ed:10:c8:0e:6a:53:9c:e0:cd:4f:42:
19:70:62:fb:d5:01:d8:ae:ba:90:73:77:df:b0:e0:0b:be:5b:
6c:6e:27:bd:b5:af:2d:a6:38:d6:6b:0b:13:a8:3c:7f:47:fd:
91:fe:8d:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIERHvrszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDEw
MTAzNTgyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzUwYWZiNmI2OWU3
NWM0NGQ3OGE3ZGU3NzE5MTVkZTc4NTUwMmQ5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIPkoY63pb0U4CT+/wMJjKBcRa6xqInJN545H+mnSIz4Hmr
9iHp/+PYoNnyphrF7QB37KmDBjl9639dtlr6QY3FRfxMjy+EUV72v8ACHmxMZ3SH
0dR9EKw37PvZQixtuN4mWY172FG5Gq7nbp//V+LjwPVCWuGvKOj6yv1/U0nNNkPZ
o/BTOSVaziskLgPpUz3Xek05rubPDtbZ5AK5hL/HSJMeP+B9y0TMeVtxEVsk7eFS
3E8VG7yOWv/FrzNm/xmItAqhSFT22C4OIZf82coc7DjFtmVlvhica2JvIKjakjyM
eq4FxD0dESS/9yVMZBmXrbH9Jmo5Cmo94/ajRUsCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBTFCvtraedcRNeKfedxkV3nhVAtlzAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
L3hRcjdhMm5uWEVUWGluM25jWkZkNTRWUUxaYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMDAMAwQAPqD7AwQAPqD8AwQBwgN8MAwD
BADCA80DBATCA8AwDAMEAMMZTwMEAMMZUDANBgkqhkiG9w0BAQsFAAOCAQEANsPW
A1gN5MKzFRmH9XYHWb269AvPsB17izQFok4fuwWNQ7Ah/AqU3rz8UyNGg7w4gkRg
8V47sDPzSk2sN1meJ/G1u2FVOe5HqtXbbiyf7cLLpVpfoGEtYki7miNjqFEw0G37
4GYgKoxcJ4pesmkN8+V7uEOfNOI8LNrj7gjCYCxvndWsRzT8SFLtFfsjC8mtIZZP
qrFmFYFSEUjM1YIMgKUUXALa1nS8EI706K+SxaDU4FAUCGty7LpLspyybC62jffO
QRNogPU8ckXQC+0QyA5qU5zgzU9CGXBi+9UB2K66kHN337DgC75bbG4nvbWvLaY4
1msLE6g8f0f9kf6NqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org