Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X5mCOLo8xdJJ2cxTtTkuM_f-8mU.roa
File: X5mCOLo8xdJJ2cxTtTkuM_f-8mU.roa (raw, json)
Hash identifier: MLuwRhK7fEat+ZvN5QjJ8Fgfm+f5QGS6TToIxytIkQY=
Subject key identifier: 5F:99:82:38:BA:3C:C5:D2:49:D9:CC:53:B5:39:2E:33:F7:FE:F2:65
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184C470F4DF51FE85A346D423FDB178546F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X5mCOLo8xdJJ2cxTtTkuM_f-8mU.roa
Signing time: Tue 29 Nov 2022 17:30:47 +0000
ROA not before: Tue 29 Nov 2022 17:30:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 193.148.56.0/22 maxlen: 24
185.147.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:70:f4:df:51:fe:85:a3:46:d4:23:fd:b1:78:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 17:30:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f998238ba3cc5d249d9cc53b5392e33f7fef265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:df:3c:7a:25:79:dd:5c:4a:0c:3e:13:6b:
cc:cf:3e:5d:61:63:87:8a:5d:a4:74:45:60:1b:8e:
25:0b:0f:8c:06:02:5f:d3:11:08:13:89:bc:54:6b:
95:9e:58:35:08:8b:22:72:f4:13:a1:73:59:e0:03:
dc:b4:37:cd:de:9e:5e:f0:1b:aa:aa:a5:34:2d:6f:
98:58:8f:0b:25:84:c7:42:cd:01:4c:4b:9d:68:8a:
7b:0b:e5:5c:c6:93:7b:42:62:f3:fb:78:0a:8e:f8:
b7:f0:27:d6:19:5e:6a:d5:8f:48:c7:6e:1c:5a:95:
3d:be:6c:28:cf:f7:5c:c2:2a:5f:fc:2b:69:1a:74:
60:fc:b8:46:ae:22:d5:a3:82:c5:3c:72:0d:1a:4d:
1c:cd:e6:cc:0e:60:bb:ac:19:12:2a:e2:f1:34:f8:
a9:7e:ce:e7:12:f3:9e:29:03:e8:77:ad:e7:6b:56:
ce:62:12:2c:ef:99:b4:13:25:a2:cc:9b:e6:f2:fc:
0d:1c:6c:a0:4a:3c:39:05:99:27:f2:be:3c:9f:8d:
16:51:c1:fd:0d:df:9a:d7:3f:dd:65:b7:3e:0d:cc:
bc:82:43:31:a2:15:e5:07:a4:13:31:ac:c4:3c:6c:
00:26:42:61:7c:4e:d4:15:90:d1:ec:23:bb:18:b0:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:82:38:BA:3C:C5:D2:49:D9:CC:53:B5:39:2E:33:F7:FE:F2:65
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X5mCOLo8xdJJ2cxTtTkuM_f-8mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.100.0/22
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
63:7c:6c:7e:84:93:5a:ef:c6:79:3d:b7:d4:5b:2a:29:41:f5:
7c:87:0e:fa:c9:42:34:1e:d2:76:88:dd:3e:02:9b:26:a9:e9:
ce:62:b0:7e:0f:4d:7d:85:80:a6:f8:26:0e:ac:60:62:5c:1b:
57:cd:e1:15:d1:38:48:1b:0e:ce:28:20:e7:6b:b2:cb:70:97:
b6:0c:46:1e:ab:5c:a3:fc:10:3e:f6:4e:87:dc:f4:72:7f:42:
19:c8:49:47:4c:dc:3e:13:f0:ea:cb:78:d3:e6:2b:99:b9:44:
67:55:74:00:3d:d4:8a:09:ee:4c:48:c9:39:02:25:67:79:d6:
37:65:82:4e:5a:12:4e:58:2e:3b:8c:ac:46:c8:7e:0c:e9:22:
c3:8a:ea:6d:6e:1b:35:96:c2:5b:d2:e0:f5:fc:87:3a:d4:d4:
8e:64:39:34:7f:0f:56:fe:08:2d:73:9d:f0:45:74:7f:d8:ce:
9c:ad:ff:0a:60:de:d0:aa:a0:60:33:87:84:a2:13:e3:c9:40:
7f:94:cc:46:39:1f:6c:a7:bf:e3:67:91:56:c8:7a:7e:df:9a:
88:95:31:4e:64:d2:82:ad:0d:a6:1c:d5:45:2d:8b:9e:f5:94:
ea:51:50:1a:ae:be:81:76:fe:b7:c6:3e:72:b3:6e:a9:84:58:
28:3d:e2:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTEcPTfUf6Fo0bUI/2xeFRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMTI5MTczMDQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjk5ODIzOGJhM2NjNWQyNDlkOWNjNTNiNTM5MmUzM2Y3ZmVmMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun/fPHoled1cSgw+E2vMzz5dYWOH
il2kdEVgG44lCw+MBgJf0xEIE4m8VGuVnlg1CIsicvQToXNZ4APctDfN3p5e8Buq
qqU0LW+YWI8LJYTHQs0BTEudaIp7C+VcxpN7QmLz+3gKjvi38CfWGV5q1Y9Ix24c
WpU9vmwoz/dcwipf/CtpGnRg/LhGriLVo4LFPHINGk0czebMDmC7rBkSKuLxNPip
fs7nEvOeKQPod63na1bOYhIs75m0EyWizJvm8vwNHGygSjw5BZkn8r48n40WUcH9
Dd+a1z/dZbc+Dcy8gkMxohXlB6QTMazEPGwAJkJhfE7UFZDR7CO7GLD3GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF+Zgji6PMXSSdnMU7U5LjP3/vJlMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWDVtQ09Mbzh4ZEpKMmN4VHRUa3VNX2YtOG1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZNkAwQC
wZQ4MA0GCSqGSIb3DQEBCwUAA4IBAQBjfGx+hJNa78Z5PbfUWyopQfV8hw76yUI0
HtJ2iN0+ApsmqenOYrB+D019hYCm+CYOrGBiXBtXzeEV0ThIGw7OKCDna7LLcJe2
DEYeq1yj/BA+9k6H3PRyf0IZyElHTNw+E/Dqy3jT5iuZuURnVXQAPdSKCe5MSMk5
AiVnedY3ZYJOWhJOWC47jKxGyH4M6SLDiuptbhs1lsJb0uD1/Ic61NSOZDk0fw9W
/ggtc53wRXR/2M6crf8KYN7QqqBgM4eEohPjyUB/lMxGOR9sp7/jZ5FWyHp+35qI
lTFOZNKCrQ2mHNVFLYue9ZTqUVAarr6Bdv63xj5ys26phFgoPeJ1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org