Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/LEnzc20kMl3jjBLmvfEq0Q_8qxo.roa
File: LEnzc20kMl3jjBLmvfEq0Q_8qxo.roa (raw, json)
Hash identifier: 3FYDdZKXB2gzomrDFHQfoz/HGRmS27bbCrcqhTs3+WA=
Subject key identifier: 2C:49:F3:73:6D:24:32:5D:E3:8C:12:E6:BD:F1:2A:D1:0F:FC:AB:1A
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 017D7FED
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/LEnzc20kMl3jjBLmvfEq0Q_8qxo.roa
Signing time: Sat 01 Jan 2022 15:58:29 +0000
ROA not before: Sat 01 Jan 2022 15:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60532
IP address blocks: 88.218.228.0/22 maxlen: 22
185.23.190.0/23 maxlen: 23
185.23.189.0/24 maxlen: 24
2a04:26c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25001965 (0x17d7fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Jan 1 15:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c49f3736d24325de38c12e6bdf12ad10ffcab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:1e:a4:c7:f5:a7:4c:d6:f1:ae:96:c1:a3:
8e:11:4a:13:92:25:d5:5d:69:98:58:5e:8c:cc:d3:
3e:54:8d:4f:1e:90:72:cc:a6:19:04:40:e7:bb:ee:
ff:04:56:51:c6:c8:5b:9f:cb:61:de:e0:81:74:a8:
da:79:8d:e6:91:ab:1b:2d:e7:a9:cf:6a:37:74:7f:
17:55:33:ba:69:11:38:de:1c:cb:02:a9:8e:d4:f0:
32:aa:dc:15:ae:60:57:1e:03:aa:47:72:f7:f9:0b:
19:79:69:6a:1f:2f:b9:f0:33:e0:55:2b:12:9e:0c:
f3:36:ca:bb:46:ae:c3:c6:32:d5:3c:02:9b:33:6a:
15:d0:52:6d:52:51:0c:d0:33:f1:b6:86:a9:a9:13:
c9:c6:17:fd:1c:52:da:bd:62:a7:1a:52:c0:f7:7f:
fe:29:54:50:77:ea:8c:dd:07:64:d3:56:7a:b1:56:
fb:dd:20:47:aa:24:2d:89:4e:19:2e:b5:59:30:46:
b5:31:36:9f:23:33:6b:e9:e3:dd:76:8b:50:77:06:
38:e6:24:b2:f1:2f:19:db:a9:c0:70:60:a5:0e:43:
05:57:8c:db:c2:76:3a:8a:23:00:ca:f7:22:43:64:
ab:0e:ad:bb:37:22:1c:0c:5a:15:b2:80:15:9a:e0:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:F3:73:6D:24:32:5D:E3:8C:12:E6:BD:F1:2A:D1:0F:FC:AB:1A
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/LEnzc20kMl3jjBLmvfEq0Q_8qxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.228.0/22
185.23.189.0-185.23.191.255
IPv6:
2a04:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:a4:75:fb:9a:5c:52:d7:0d:09:7b:47:1d:e1:1b:27:ef:c7:
ff:61:a8:c0:2c:f5:a0:3b:e1:cb:5c:63:8a:c8:97:70:b4:f4:
56:cd:5b:6a:2b:ed:53:48:e7:51:f7:e9:17:79:07:92:20:18:
d9:b4:c7:f9:aa:f0:4b:56:dd:70:81:26:66:b1:60:d8:1a:dc:
c3:d1:5f:51:50:65:4e:70:66:dd:a6:3a:4c:47:45:57:6f:db:
60:75:29:e2:47:83:25:78:cb:f8:b4:3c:82:bc:2b:09:cd:20:
36:04:c5:9d:33:7e:74:19:59:e5:68:13:dd:00:bc:06:52:bb:
e3:09:38:62:f9:3b:93:f7:e8:2f:3d:f1:5b:c1:d6:59:1b:18:
c9:d4:ae:1c:30:05:aa:ab:a1:5c:09:b9:4d:11:3a:4a:91:ab:
f3:95:8a:ad:6e:27:19:46:d5:8d:2c:ae:c0:cf:cb:c4:a2:1b:
38:cc:2b:8d:0d:30:c8:92:ee:21:cc:e4:7d:c3:68:ae:1e:d8:
b1:9d:0d:14:24:1a:5c:ef:34:e8:c4:ce:00:86:25:90:1e:2a:
c7:50:8c:46:b3:69:01:ce:4b:92:81:7e:9e:5c:b3:73:d5:f9:
b8:a7:88:41:bc:39:6d:ea:6c:bb:05:27:4f:ff:54:a7:84:1f:
e6:76:5a:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEAX1/7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YzZkNDdiNDdlMDViMTNkMDU4YjFjYjQyNTI5YTdjMTg2NmRjZGYyMB4XDTIyMDEw
MTE1NTgyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmM0OWYzNzM2ZDI0
MzI1ZGUzOGMxMmU2YmRmMTJhZDEwZmZjYWIxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKazHqTH9adM1vGulsGjjhFKE5Il1V1pmFhejMzTPlSNTx6Q
csymGQRA57vu/wRWUcbIW5/LYd7ggXSo2nmN5pGrGy3nqc9qN3R/F1UzumkRON4c
ywKpjtTwMqrcFa5gVx4Dqkdy9/kLGXlpah8vufAz4FUrEp4M8zbKu0auw8Yy1TwC
mzNqFdBSbVJRDNAz8baGqakTycYX/RxS2r1ipxpSwPd//ilUUHfqjN0HZNNWerFW
+90gR6okLYlOGS61WTBGtTE2nyMza+nj3XaLUHcGOOYksvEvGdupwHBgpQ5DBVeM
28J2OoojAMr3IkNkqw6tuzciHAxaFbKAFZrgbGsCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBQsSfNzbSQyXeOMEua98SrRD/yrGjAfBgNVHSMEGDAWgBTsbUe0fgWxPQWL
HLQlKafBhm3N8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdHMUh0SDRGc1QwRml4eTBKU21ud1ladHpmSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMmE1OTFjLTNjNGEtNDI4OC1iZTkxLWMzOWFkYjk4ZjQyOS8x
L0xFbnpjMjBrTWwzampCTG12ZkVxMFFfOHF4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MmE1OTFjLTNjNGEtNDI4OC1iZTkxLWMzOWFkYjk4ZjQyOS8xLzdHMUh0SDRGc1Qw
Rml4eTBKU21ud1ladHpmSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFAMEAlja5DAMAwQAuRe9AwQGuReAMA0E
AgACMAcDBQMqBCbAMA0GCSqGSIb3DQEBCwUAA4IBAQCupHX7mlxS1w0Je0cd4Rsn
78f/YajALPWgO+HLXGOKyJdwtPRWzVtqK+1TSOdR9+kXeQeSIBjZtMf5qvBLVt1w
gSZmsWDYGtzD0V9RUGVOcGbdpjpMR0VXb9tgdSniR4MleMv4tDyCvCsJzSA2BMWd
M350GVnlaBPdALwGUrvjCThi+TuT9+gvPfFbwdZZGxjJ1K4cMAWqq6FcCblNETpK
kavzlYqtbicZRtWNLK7Az8vEohs4zCuNDTDIku4hzOR9w2iuHtixnQ0UJBpc7zTo
xM4AhiWQHirHUIxGs2kBzkuSgX6eXLNz1fm4p4hBvDlt6my7BSdP/1SnhB/mdlrX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:04 2024 by rpki-client on console-ams.rpki-client.org