Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/4XAGqJoct46D06gNP1cVvao2-74.roa
File: 4XAGqJoct46D06gNP1cVvao2-74.roa (raw, json)
Hash identifier: dAbpYO7qZMfvLh2nXU881CJIE3oRYr6Dr+AaGKq9yBE=
Subject key identifier: E1:70:06:A8:9A:1C:B7:8E:83:D3:A8:0D:3F:57:15:BD:AA:36:FB:BE
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 0F15CE4C
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/4XAGqJoct46D06gNP1cVvao2-74.roa
Signing time: Sat 01 Jan 2022 12:05:46 +0000
ROA not before: Sat 01 Jan 2022 12:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16211
IP address blocks: 176.57.32.0/21 maxlen: 21
62.193.32.0/19 maxlen: 19
95.141.96.0/20 maxlen: 20
78.109.240.0/20 maxlen: 20
185.41.4.0/22 maxlen: 22
2a01:4e00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253087308 (0xf15ce4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 1 12:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e17006a89a1cb78e83d3a80d3f5715bdaa36fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:80:84:36:e6:14:85:c0:a3:89:3f:42:3e:
42:13:6c:c3:6a:b9:9f:34:d0:6b:2d:04:a1:2e:26:
47:8c:f3:7c:d8:bc:14:f5:fa:15:27:33:74:68:e5:
a2:ca:66:80:c7:fd:c2:68:0a:5e:7e:26:6c:21:af:
60:92:cb:20:a5:c9:a2:4e:e1:0e:22:81:41:e7:e3:
df:91:7e:08:24:43:5f:41:4f:28:95:21:d5:9b:d0:
7d:b7:65:58:e0:53:77:98:2c:79:ee:76:45:26:b5:
4f:a7:ce:0c:47:45:88:3b:59:e1:d3:8c:ab:b6:73:
c2:6b:e8:9d:47:13:67:e2:f3:06:8f:e0:30:33:3c:
67:33:d9:fc:f5:b1:ff:bf:09:29:a7:db:b8:53:72:
a2:08:33:35:94:38:c1:fc:23:69:6c:2f:0c:72:7b:
d9:88:0b:85:b6:48:b6:73:1b:c2:ac:90:c5:5d:f1:
24:71:37:2a:a7:62:ea:b4:95:71:05:35:74:3e:15:
32:e9:ee:16:ab:6b:51:7d:a2:be:0e:83:64:aa:24:
b0:06:40:83:37:dd:c8:45:12:94:55:db:0e:ab:6a:
10:0e:f7:da:c0:b3:98:ec:bb:23:11:2e:9b:66:8e:
d9:c0:1e:0c:78:03:a5:64:eb:d2:52:f9:4d:3d:fe:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:70:06:A8:9A:1C:B7:8E:83:D3:A8:0D:3F:57:15:BD:AA:36:FB:BE
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/4XAGqJoct46D06gNP1cVvao2-74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.32.0/19
78.109.240.0/20
95.141.96.0/20
176.57.32.0/21
185.41.4.0/22
IPv6:
2a01:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
0e:0b:ee:46:40:4f:ad:98:e8:4a:5b:11:48:a2:8c:30:58:76:
7c:27:f2:ce:0d:b9:97:11:aa:fc:04:22:44:28:b8:f0:b2:f2:
84:1e:80:3e:98:f1:46:bb:27:b2:b4:02:b0:01:58:16:fb:49:
d6:63:1a:5e:79:83:2d:0f:a6:6e:91:70:ec:bf:b1:b0:43:ef:
3d:0b:c0:a0:d4:d6:88:95:a2:0e:40:92:b7:35:c5:e5:b5:9d:
59:03:14:5e:6b:ba:96:9d:d5:92:f3:ff:92:b6:ad:1a:93:a0:
49:a4:56:3c:5b:da:f0:6b:11:37:ef:24:60:04:b6:f7:0b:0f:
e0:d3:0d:c7:f7:42:ab:af:bc:32:a8:7c:de:d4:d2:dd:be:73:
c5:60:29:98:5c:c5:5b:ed:a3:01:92:55:50:87:4f:f4:45:ff:
9a:53:23:48:b2:4c:4f:b7:25:5e:bb:4a:ca:10:6a:d1:26:d3:
86:c8:fc:69:79:c5:fc:16:48:09:e4:e6:28:8c:46:42:8b:23:
10:05:7a:25:32:fa:b9:bd:65:25:13:2c:18:8d:77:ef:cb:23:
8d:05:cd:22:fb:bc:38:a0:3b:d6:2b:08:ea:9d:05:a4:b8:1f:
d5:3f:e5:99:67:81:37:9c:b8:ea:6e:be:90:d6:94:e1:85:64:
aa:5e:f4:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEDxXOTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTdjNTA4ZDIzYjM4MzE1YmJmNDViNzI2ZDIyMDUwYTQ2MTI3YjhjMB4XDTIyMDEw
MTEyMDU0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTE3MDA2YTg5YTFj
Yjc4ZTgzZDNhODBkM2Y1NzE1YmRhYTM2ZmJiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOysgIQ25hSFwKOJP0I+QhNsw2q5nzTQay0EoS4mR4zzfNi8
FPX6FSczdGjlospmgMf9wmgKXn4mbCGvYJLLIKXJok7hDiKBQefj35F+CCRDX0FP
KJUh1ZvQfbdlWOBTd5gsee52RSa1T6fODEdFiDtZ4dOMq7ZzwmvonUcTZ+LzBo/g
MDM8ZzPZ/PWx/78JKafbuFNyoggzNZQ4wfwjaWwvDHJ72YgLhbZItnMbwqyQxV3x
JHE3Kqdi6rSVcQU1dD4VMunuFqtrUX2ivg6DZKoksAZAgzfdyEUSlFXbDqtqEA73
2sCzmOy7IxEum2aO2cAeDHgDpWTr0lL5TT3+J9sCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBThcAaomhy3joPTqA0/VxW9qjb7vjAfBgNVHSMEGDAWgBQpfFCNI7ODFbv0
W3JtIgUKRhJ7jDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tYeFFqU096Z3hXNzlGdHliU0lGQ2tZU2U0dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvOGFiZWVkLWY1M2ItNDc3Ni1hOGUyLTM2ZTlhNzliZDk1MC8x
LzRYQUdxSm9jdDQ2RDA2Z05QMWNWdmFvMi03NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
OGFiZWVkLWY1M2ItNDc3Ni1hOGUyLTM2ZTlhNzliZDk1MC8xL0tYeFFqU096Z3hX
NzlGdHliU0lGQ2tZU2U0dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBT7BIAMEBE5t8AMEBF+NYAMEA7A5
IAMEArkpBDANBAIAAjAHAwUAKgFOADANBgkqhkiG9w0BAQsFAAOCAQEADgvuRkBP
rZjoSlsRSKKMMFh2fCfyzg25lxGq/AQiRCi48LLyhB6APpjxRrsnsrQCsAFYFvtJ
1mMaXnmDLQ+mbpFw7L+xsEPvPQvAoNTWiJWiDkCStzXF5bWdWQMUXmu6lp3VkvP/
kratGpOgSaRWPFva8GsRN+8kYAS29wsP4NMNx/dCq6+8Mqh83tTS3b5zxWApmFzF
W+2jAZJVUIdP9EX/mlMjSLJMT7clXrtKyhBq0SbThsj8aXnF/BZICeTmKIxGQosj
EAV6JTL6ub1lJRMsGI1378sjjQXNIvu8OKA71isI6p0FpLgf1T/lmWeBN5y46m6+
kNaU4YVkql70Xw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:51 2023 by rpki-client on console-fra.rpki-client.org