Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/R46OL9VboeoqhfU8XiTMmwxlWyc.roa
File: R46OL9VboeoqhfU8XiTMmwxlWyc.roa (raw, json)
Hash identifier: 2XC2c8j75N+QXon3xaCdL2PBF12agtNvZ/yBuKn4nRk=
Subject key identifier: 47:8E:8E:2F:D5:5B:A1:EA:2A:85:F5:3C:5E:24:CC:9B:0C:65:5B:27
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18F4DBC3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/R46OL9VboeoqhfU8XiTMmwxlWyc.roa
Signing time: Mon 28 Feb 2022 23:19:19 +0000
ROA not before: Mon 28 Feb 2022 23:19:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418700227 (0x18f4dbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 28 23:19:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=478e8e2fd55ba1ea2a85f53c5e24cc9b0c655b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:f9:32:50:c9:4d:62:54:4a:31:b2:1e:ea:
67:4c:85:73:4a:71:9e:d0:2e:af:52:9e:07:40:5d:
93:09:6c:3b:ee:9c:2d:d9:59:84:56:77:fc:df:4b:
b0:5b:28:f4:c5:86:88:84:12:b8:fc:d6:50:49:e3:
05:cd:9e:be:a8:26:e0:1e:f0:a7:8b:b1:72:2d:73:
c6:88:bb:d1:9b:00:37:ba:a5:1b:59:1f:77:7c:7a:
fb:69:96:d4:e8:1f:50:1a:54:bd:26:96:e5:4e:d5:
c7:6c:02:d1:e4:82:2e:63:ae:48:f0:8e:09:63:30:
b6:38:dc:5d:0b:d1:27:2e:ef:dd:8b:34:91:b9:8a:
ae:74:e8:bb:60:00:5b:23:01:5d:7f:04:23:8c:77:
b7:02:58:ed:83:e8:0c:e3:49:97:15:e0:f0:10:92:
94:a0:d6:62:bc:89:59:5e:84:08:19:49:c6:f3:d6:
1e:20:38:67:bb:f7:14:a5:3d:64:ee:b6:ae:6b:e1:
9a:12:42:40:97:a3:63:e2:88:16:cf:a0:02:c9:a3:
ba:8f:9c:24:b8:b7:fa:c3:3a:4c:44:e1:c3:62:80:
78:66:65:05:f4:17:4b:cc:89:0f:b0:14:80:83:b8:
72:4f:76:ee:e2:dd:1b:b2:b6:27:a7:88:8a:05:c9:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:8E:2F:D5:5B:A1:EA:2A:85:F5:3C:5E:24:CC:9B:0C:65:5B:27
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/R46OL9VboeoqhfU8XiTMmwxlWyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
bd:3f:c4:36:75:86:96:53:a2:43:da:31:c8:a8:ad:f4:8f:c3:
c9:2f:54:82:b1:1e:15:c7:78:89:55:3b:8e:a1:e5:73:bc:7c:
bf:60:4b:4f:8e:e4:55:57:66:54:14:fd:ae:b8:c4:79:13:f2:
55:00:5a:33:e5:e2:75:e5:23:3f:b4:9a:7a:7a:7b:76:6a:bd:
ce:90:f4:69:07:65:80:92:6b:9f:ec:87:a4:5a:19:8b:68:d2:
df:63:ef:9b:20:0b:44:53:10:bd:a4:38:22:b6:cc:0a:36:b9:
a8:ba:c0:66:60:46:40:8f:e1:53:ec:a2:bd:aa:85:b3:87:f9:
e4:ad:48:8c:16:57:8d:c5:8b:8e:76:0a:ff:ee:78:c8:91:d5:
e4:e8:45:58:1f:61:fc:41:17:3a:52:f0:35:ce:a0:45:b9:61:
f3:6b:ff:d2:00:3d:c6:2a:9d:81:06:b1:c3:1c:76:97:60:ba:
a4:33:79:6c:b7:7e:7a:fe:7c:3c:65:62:c6:15:60:22:cf:2e:
7b:be:97:65:c2:b5:10:60:7f:cd:f2:7e:0d:de:ae:5a:a1:31:
19:ed:3f:93:d7:bf:d1:4d:53:c0:d2:c7:2c:d3:70:7b:f4:35:
41:66:0d:de:78:1c:77:73:eb:40:83:06:53:81:71:b6:30:85:
6c:0f:d7:fd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEGPTbwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDIy
ODIzMTkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDc4ZThlMmZkNTVi
YTFlYTJhODVmNTNjNWUyNGNjOWIwYzY1NWIyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQh+TJQyU1iVEoxsh7qZ0yFc0pxntAur1KeB0BdkwlsO+6c
LdlZhFZ3/N9LsFso9MWGiIQSuPzWUEnjBc2evqgm4B7wp4uxci1zxoi70ZsAN7ql
G1kfd3x6+2mW1OgfUBpUvSaW5U7Vx2wC0eSCLmOuSPCOCWMwtjjcXQvRJy7v3Ys0
kbmKrnTou2AAWyMBXX8EI4x3twJY7YPoDONJlxXg8BCSlKDWYryJWV6ECBlJxvPW
HiA4Z7v3FKU9ZO62rmvhmhJCQJejY+KIFs+gAsmjuo+cJLi3+sM6TEThw2KAeGZl
BfQXS8yJD7AUgIO4ck927uLdG7K2J6eIigXJ4tUCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBRHjo4v1Vuh6iqF9TxeJMybDGVbJzAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L1I0Nk9MOVZib2VvcWhmVThYaVRNbXd4bFd5Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEALl1FgMEArl6OAMEALmFwDAPBAIA
AjAJAwcAKgaCwgAAMA0GCSqGSIb3DQEBCwUAA4IBAQC9P8Q2dYaWU6JD2jHIqK30
j8PJL1SCsR4Vx3iJVTuOoeVzvHy/YEtPjuRVV2ZUFP2uuMR5E/JVAFoz5eJ15SM/
tJp6ent2ar3OkPRpB2WAkmuf7IekWhmLaNLfY++bIAtEUxC9pDgitswKNrmousBm
YEZAj+FT7KK9qoWzh/nkrUiMFleNxYuOdgr/7njIkdXk6EVYH2H8QRc6UvA1zqBF
uWHza//SAD3GKp2BBrHDHHaXYLqkM3lst356/nw8ZWLGFWAizy57vpdlwrUQYH/N
8n4N3q5aoTEZ7T+T17/RTVPA0scs03B79DVBZg3eeBx3c+tAgwZTgXG2MIVsD9f9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org