Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YVoNH6fQxXJ0TcItS2dMqqSmaNM.roa
File: YVoNH6fQxXJ0TcItS2dMqqSmaNM.roa (raw, json)
Hash identifier: DBnfTdjnWimIGjYvA4af5+RPZAMruaI0WzZXLTKY28I=
Subject key identifier: 61:5A:0D:1F:A7:D0:C5:72:74:4D:C2:2D:4B:67:4C:AA:A4:A6:68:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184374F8B174B4CF904878079AF6F369497
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YVoNH6fQxXJ0TcItS2dMqqSmaNM.roa
Signing time: Wed 02 Nov 2022 07:47:50 +0000
ROA not before: Wed 02 Nov 2022 07:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:4f:8b:17:4b:4c:f9:04:87:80:79:af:6f:36:94:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 2 07:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=615a0d1fa7d0c572744dc22d4b674caaa4a668d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:26:53:e5:7f:89:ea:aa:e3:84:6b:d2:8e:
3c:d0:3c:b2:d7:32:04:01:72:95:10:13:bf:11:03:
f9:73:16:7b:41:47:46:25:05:2e:5e:03:0c:7a:71:
4b:55:9f:52:86:82:8d:24:ed:84:71:c0:ca:a3:fc:
0b:a9:35:e0:75:44:08:94:0e:b0:0d:a5:e9:0c:80:
1b:b7:c8:65:1f:cf:6f:8c:a0:84:cb:08:ba:89:23:
04:02:72:7d:7b:b4:e6:a3:90:0f:bf:b8:c6:fe:89:
cd:a3:5b:cb:dd:cf:69:28:73:7c:ba:cd:73:8b:49:
5b:b9:36:92:b9:11:cd:55:7e:73:d9:17:21:95:b5:
59:0d:5b:40:76:a8:88:e7:c7:ab:57:e0:ac:c6:f4:
8f:0b:bb:3a:41:f7:eb:df:67:06:fa:29:c3:44:d7:
34:fe:a0:7e:16:d4:8d:0b:f7:24:f8:34:fa:32:84:
65:06:00:63:94:32:09:40:2b:db:22:9b:f4:16:75:
4b:73:6c:3b:63:86:4d:ef:45:7f:f2:f8:61:ea:ec:
e4:e1:7e:76:09:4f:14:d2:cc:45:2f:6d:98:84:ed:
ca:e9:62:6b:79:07:9a:05:9c:f4:7b:da:4f:cf:16:
23:5a:fa:fc:96:8f:7a:10:16:0e:b1:62:19:4c:d9:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:0D:1F:A7:D0:C5:72:74:4D:C2:2D:4B:67:4C:AA:A4:A6:68:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YVoNH6fQxXJ0TcItS2dMqqSmaNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.49.0/24
87.121.124.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
185.218.137.0/24
185.218.139.0/24
193.222.98.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d2:1f:d5:a6:c3:80:63:7a:4e:9d:2e:a9:aa:99:85:07:20:
4f:45:68:73:c7:3a:38:7f:c8:53:b8:7f:75:e8:1f:42:5b:25:
60:c0:a2:a4:7a:c9:d2:a5:49:62:75:7f:2d:55:85:72:45:aa:
be:dd:0f:83:2f:af:98:aa:16:a0:f6:bf:ad:0f:34:68:a9:c6:
81:76:d9:62:07:d0:12:7a:4e:08:96:4a:85:fc:92:ca:d7:a8:
4a:49:4d:37:d4:1d:2c:ef:81:cd:c7:ea:91:6d:ac:9b:6d:ac:
ef:0c:0d:b6:c0:2a:a5:3e:51:2c:73:d6:f0:b3:da:c2:8d:fb:
ad:4e:9f:05:4a:8e:d8:21:d0:58:59:49:f3:dc:2f:0d:af:33:
4f:01:c4:d3:da:02:73:06:fb:33:85:6c:ef:5d:4a:d0:68:c4:
ed:8a:d5:f9:5d:7d:11:f7:23:b5:8b:08:2e:0a:ad:af:c6:7b:
13:ef:cd:99:3a:0d:a0:29:87:26:bc:6d:e6:6c:79:fc:d4:48:
75:53:23:7a:c7:f6:b2:c7:b8:97:c7:4b:33:6e:00:ca:1d:a2:
1f:4d:03:cc:44:fd:b7:75:64:d9:34:31:dd:21:22:ec:7d:78:
bd:97:60:3e:fc:15:f8:84:28:d8:b4:42:09:cd:14:44:a1:e2:
1c:1a:b3:39
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYQ3T4sXS0z5BIeAea9vNpSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMTAyMDc0NzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTVhMGQxZmE3ZDBjNTcyNzQ0ZGMyMmQ0YjY3NGNhYWE0YTY2OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0MmU+V/ieqq44Rr0o480Dyy1zIE
AXKVEBO/EQP5cxZ7QUdGJQUuXgMMenFLVZ9ShoKNJO2EccDKo/wLqTXgdUQIlA6w
DaXpDIAbt8hlH89vjKCEywi6iSMEAnJ9e7Tmo5APv7jG/onNo1vL3c9pKHN8us1z
i0lbuTaSuRHNVX5z2RchlbVZDVtAdqiI58erV+CsxvSPC7s6Qffr32cG+inDRNc0
/qB+FtSNC/ck+DT6MoRlBgBjlDIJQCvbIpv0FnVLc2w7Y4ZN70V/8vhh6uzk4X52
CU8U0sxFL22YhO3K6WJreQeaBZz0e9pPzxYjWvr8lo96EBYOsWIZTNkDlQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFGFaDR+n0MVydE3CLUtnTKqkpmjTMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWVZvTkg2ZlF4WEowVGNJdFMyZE1xcVNtYU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAUEwxAwQB
V3l8MAwDBABemqEDBAJemqADBACkKLkDBAC52okDBAC52osDBADB3mIDBADCMPgw
DQYJKoZIhvcNAQELBQADggEBAJ3SH9Wmw4Bjek6dLqmqmYUHIE9FaHPHOjh/yFO4
f3XoH0JbJWDAoqR6ydKlSWJ1fy1VhXJFqr7dD4Mvr5iqFqD2v60PNGipxoF22WIH
0BJ6TgiWSoX8ksrXqEpJTTfUHSzvgc3H6pFtrJttrO8MDbbAKqU+USxz1vCz2sKN
+61OnwVKjtgh0FhZSfPcLw2vM08BxNPaAnMG+zOFbO9dStBoxO2K1fldfRH3I7WL
CC4Kra/GexPvzZk6DaAphya8beZsefzUSHVTI3rH9rLHuJfHSzNuAModoh9NA8xE
/bd1ZNk0Md0hIux9eL2XYD78FfiEKNi0QgnNFESh4hwaszk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org