Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/YzN0nhyUFcB44uTy04uTpBPIpSE.roa
File: YzN0nhyUFcB44uTy04uTpBPIpSE.roa (raw, json)
Hash identifier: G5seszO8UmoWtuvfbdSbub4IZOo5mdkCnidyk3uQVQI=
Subject key identifier: 63:33:74:9E:1C:94:15:C0:78:E2:E4:F2:D3:8B:93:A4:13:C8:A5:21
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 0A24B0A8
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/YzN0nhyUFcB44uTy04uTpBPIpSE.roa
Signing time: Sat 01 Jan 2022 02:00:00 +0000
ROA not before: Sat 01 Jan 2022 02:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 185.220.160.0/22 maxlen: 24
2a0b:f940:1af2::/48 maxlen: 48
2a0b:f940:2af2::/48 maxlen: 48
2a0b:f940:3af2::/48 maxlen: 48
2a0b:f940:4af2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170176680 (0xa24b0a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jan 1 02:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6333749e1c9415c078e2e4f2d38b93a413c8a521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:58:10:94:c4:c4:48:95:46:6c:4b:81:70:
f5:bc:be:98:1e:fb:8d:a3:c1:85:3c:75:83:cd:fc:
4c:90:b3:cb:92:94:88:da:18:a8:83:92:89:5c:fd:
80:a3:ff:e0:8e:c6:8a:81:14:84:c4:ed:30:1e:c7:
d5:24:f7:b7:4f:e1:59:31:83:60:2c:2f:7f:3b:87:
87:4f:96:21:01:47:25:fe:29:2d:c9:d2:1a:2e:31:
f6:5e:07:b1:39:ae:a6:9d:b2:66:8c:c5:df:78:df:
b8:d2:19:f7:a9:00:13:51:4a:62:e4:42:04:91:ab:
0f:46:e9:17:c5:d4:f7:64:9c:87:1b:c7:36:24:eb:
7a:a5:ad:b6:9f:a3:4c:61:5c:7c:72:f5:ec:3a:f6:
cd:e2:cb:b0:f7:26:a9:d7:82:db:10:76:dc:f9:d7:
c5:9b:7c:f6:c0:7b:4e:48:22:a3:47:f7:54:c0:03:
0f:a1:cc:aa:db:e5:8b:4a:82:18:8b:04:f7:d6:b4:
6f:04:53:38:14:79:5d:1a:aa:99:a7:56:bc:b6:1b:
62:75:61:8c:59:e9:b9:55:87:1f:bc:d4:50:8b:a8:
50:6a:f5:4e:2a:01:f6:0d:f4:fe:20:2a:e9:43:c4:
86:be:8f:37:62:fa:46:d0:3a:65:56:81:08:ef:e7:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:33:74:9E:1C:94:15:C0:78:E2:E4:F2:D3:8B:93:A4:13:C8:A5:21
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/YzN0nhyUFcB44uTy04uTpBPIpSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.160.0/22
IPv6:
2a0b:f940:1af2::/48
2a0b:f940:2af2::/48
2a0b:f940:3af2::/48
2a0b:f940:4af2::/48
Signature Algorithm: sha256WithRSAEncryption
8b:b2:d6:4a:7a:f7:e6:51:17:63:75:dc:a9:2d:55:26:82:25:
ec:d6:c8:29:1c:48:eb:28:86:ed:82:d2:95:42:8e:51:61:f5:
57:1a:ae:7f:72:b0:a1:01:a0:67:0b:c6:7f:3c:62:5d:5c:e9:
51:fb:95:db:1c:4b:8c:0a:cf:06:90:3e:1b:da:7e:a7:0a:5f:
27:9c:8b:b1:39:a5:8c:b5:f5:21:e4:cd:8e:55:08:f6:0f:8f:
5e:b1:f8:31:6c:ff:f1:88:10:4c:40:9f:79:ba:c9:19:d5:77:
0c:60:82:51:01:29:4b:02:b0:bc:cc:5d:a3:e7:23:c3:68:b6:
be:cd:0a:01:fd:85:3f:77:0d:59:97:e3:60:a2:ae:51:7a:ca:
03:65:d3:62:a9:d1:05:dd:94:3a:c6:e3:38:dd:74:c1:e0:34:
47:41:40:ba:a9:42:40:97:49:0d:3b:b2:7b:d8:88:65:f2:a3:
23:62:78:7d:14:41:c2:c1:ba:1e:ba:16:d7:35:ca:51:82:6e:
9f:cf:6f:9e:69:80:74:2f:85:8f:bf:f0:9a:de:2c:aa:8d:99:
d9:02:0e:8c:b6:ad:4e:ef:66:83:86:13:12:92:2b:4c:01:7f:
c4:71:c9:6f:28:d3:e4:8f:c9:f8:25:44:90:16:1f:dd:c4:e8:
43:6a:83:20
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIECiSwqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
M2E4ODJiMTBmMWJhOWVhNGJhMWZhNzcwNmRiNjQ3NDdlNjJhNDEzMB4XDTIyMDEw
MTAyMDAwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjMzMzc0OWUxYzk0
MTVjMDc4ZTJlNGYyZDM4YjkzYTQxM2M4YTUyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMw+WBCUxMRIlUZsS4Fw9by+mB77jaPBhTx1g838TJCzy5KU
iNoYqIOSiVz9gKP/4I7GioEUhMTtMB7H1ST3t0/hWTGDYCwvfzuHh0+WIQFHJf4p
LcnSGi4x9l4HsTmupp2yZozF33jfuNIZ96kAE1FKYuRCBJGrD0bpF8XU92SchxvH
NiTreqWttp+jTGFcfHL17Dr2zeLLsPcmqdeC2xB23PnXxZt89sB7Tkgio0f3VMAD
D6HMqtvli0qCGIsE99a0bwRTOBR5XRqqmadWvLYbYnVhjFnpuVWHH7zUUIuoUGr1
TioB9g30/iAq6UPEhr6PN2L6RtA6ZVaBCO/nhf8CAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBRjM3SeHJQVwHji5PLTi5OkE8ilITAfBgNVHSMEGDAWgBTDqIKxDxup6kuh
+ncG22R0fmKkEzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3c2aUNzUThicWVwTG9mcDNCdHRrZEg1aXBCTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOTM2MjBlLTc1MjgtNGFhYy05MjEyLWM3ODU3YTAzMzk2Mi8x
L1l6TjBuaHlVRmNCNDR1VHkwNHVUcEJQSXBTRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OTM2MjBlLTc1MjgtNGFhYy05MjEyLWM3ODU3YTAzMzk2Mi8xL3c2aUNzUThicWVw
TG9mcDNCdHRrZEg1aXBCTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowDAQCAAEwBgMEArncoDAqBAIAAjAkAwcAKgv5QBry
AwcAKgv5QCryAwcAKgv5QDryAwcAKgv5QEryMA0GCSqGSIb3DQEBCwUAA4IBAQCL
stZKevfmURdjddypLVUmgiXs1sgpHEjrKIbtgtKVQo5RYfVXGq5/crChAaBnC8Z/
PGJdXOlR+5XbHEuMCs8GkD4b2n6nCl8nnIuxOaWMtfUh5M2OVQj2D49esfgxbP/x
iBBMQJ95uskZ1XcMYIJRASlLArC8zF2j5yPDaLa+zQoB/YU/dw1Zl+Ngoq5ResoD
ZdNiqdEF3ZQ6xuM43XTB4DRHQUC6qUJAl0kNO7J72Ihl8qMjYnh9FEHCwboeuhbX
NcpRgm6fz2+eaYB0L4WPv/Ca3iyqjZnZAg6Mtq1O72aDhhMSkitMAX/EcclvKNPk
j8n4JUSQFh/dxOhDaoMg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org