Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/auiBf19tEcwsVeybvpo2EUYpWdM.roa
File: auiBf19tEcwsVeybvpo2EUYpWdM.roa (raw, json)
Hash identifier: VUgLmghWGIBIwDUxZetHTJ7mRPc6kChhtJWOFivdaN8=
Subject key identifier: 6A:E8:81:7F:5F:6D:11:CC:2C:55:EC:9B:BE:9A:36:11:46:29:59:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184A98E61A4B848CC2ED839B83648C89523
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/auiBf19tEcwsVeybvpo2EUYpWdM.roa
Signing time: Thu 24 Nov 2022 12:13:11 +0000
ROA not before: Thu 24 Nov 2022 12:13:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
194.48.248.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:8e:61:a4:b8:48:cc:2e:d8:39:b8:36:48:c8:95:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 24 12:13:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ae8817f5f6d11cc2c55ec9bbe9a3611462959d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:15:fb:81:b8:8d:ac:19:ce:54:09:c7:d5:
68:27:79:49:f6:27:1e:13:f2:0c:e4:4a:df:8e:a0:
b0:ff:43:49:c4:a7:6e:03:a1:6b:0e:29:29:66:e4:
e5:42:14:16:11:a8:3f:ac:7f:94:ab:9a:a5:33:ba:
cf:7f:fd:a8:71:52:da:73:40:a6:96:1b:ca:fe:47:
cb:1f:fa:62:1a:43:07:95:b4:a5:81:a0:e1:2b:bf:
2c:61:42:7f:b1:42:1d:54:ab:5e:e6:5f:34:48:75:
ad:d9:b5:61:94:b9:2c:2b:c3:f4:cf:a7:c0:79:5f:
09:57:18:16:bf:52:35:4c:af:be:8e:a7:13:b6:74:
be:92:85:3c:e2:b0:ac:7c:b1:20:4e:d5:b0:61:d8:
dc:3e:38:d1:64:16:1f:4c:d9:63:bf:74:61:3a:dc:
fc:23:66:7e:5d:87:04:58:e4:a8:18:93:10:55:30:
2e:d1:be:d0:b4:20:6c:69:9e:6e:c9:dc:6b:3a:2e:
55:b7:0c:f5:d7:cb:be:2d:ee:5d:e1:02:1f:31:6d:
27:8d:4a:73:df:76:76:72:9a:d0:21:56:19:d1:05:
a6:28:f4:f0:88:65:7e:ba:6e:91:ff:82:72:f3:13:
1b:c5:4a:59:aa:06:74:04:38:68:0d:f3:63:b1:90:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:81:7F:5F:6D:11:CC:2C:55:EC:9B:BE:9A:36:11:46:29:59:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/auiBf19tEcwsVeybvpo2EUYpWdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.49.0/24
87.121.124.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
185.218.137.0/24
185.218.139.0/24
185.219.126.0/24
193.222.98.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3b:8a:c0:71:b2:ce:b9:8c:b1:11:9f:bb:d8:ff:cd:82:a2:
f2:3e:b0:22:7c:99:1f:1f:cc:96:79:ab:65:13:36:06:60:77:
56:d8:7f:46:3a:94:c0:a5:e9:12:e0:49:ed:05:50:5a:bb:04:
30:a5:b3:3d:bc:f3:f9:b9:d2:40:b4:3a:e7:07:b9:a7:a1:69:
74:dc:61:6d:17:9e:0a:95:69:44:d1:5f:b8:02:ee:24:ad:aa:
cc:53:90:5a:56:3a:94:05:b1:c8:a7:df:2c:3a:54:5a:fb:d5:
1b:ee:98:74:04:6c:19:62:8b:43:ff:21:0e:f4:17:75:d4:0a:
ea:a6:5d:8c:b0:b9:88:93:40:03:19:14:2a:c7:d8:a5:a5:be:
a9:46:d8:d4:1f:99:09:90:55:cd:ee:83:ab:e9:ca:72:9d:78:
5c:51:64:d4:56:26:4d:a7:6a:66:0b:f6:13:fe:03:f9:28:0f:
12:93:45:18:1b:39:d0:e1:c9:a9:4f:5e:f0:13:ba:45:bd:5f:
20:3a:30:db:15:df:37:a9:2e:2b:d0:d2:d6:97:aa:16:d8:b0:
2c:04:cb:bb:58:ca:ac:dc:d3:d3:91:0a:5d:5a:3f:72:60:a8:
b7:90:02:37:19:10:e4:42:f5:d1:bb:31:bd:f3:b6:6e:9d:37:
9e:c2:64:e6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYSpjmGkuEjMLtg5uDZIyJUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMTI0MTIxMzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWU4ODE3ZjVmNmQxMWNjMmM1NWVjOWJiZTlhMzYxMTQ2Mjk1OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEcV+4G4jawZzlQJx9VoJ3lJ9ice
E/IM5ErfjqCw/0NJxKduA6FrDikpZuTlQhQWEag/rH+Uq5qlM7rPf/2ocVLac0Cm
lhvK/kfLH/piGkMHlbSlgaDhK78sYUJ/sUIdVKte5l80SHWt2bVhlLksK8P0z6fA
eV8JVxgWv1I1TK++jqcTtnS+koU84rCsfLEgTtWwYdjcPjjRZBYfTNljv3RhOtz8
I2Z+XYcEWOSoGJMQVTAu0b7QtCBsaZ5uydxrOi5Vtwz118u+Le5d4QIfMW0njUpz
33Z2cprQIVYZ0QWmKPTwiGV+um6R/4Jy8xMbxUpZqgZ0BDhoDfNjsZBh/wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFGrogX9fbRHMLFXsm76aNhFGKVnTMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYXVpQmYxOXRFY3dzVmV5YnZwbzJFVVlwV2RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAUEwxAwQB
V3l8MAwDBABemqEDBAJemqADBACkKLkDBAC52okDBAC52osDBAC5234DBADB3mID
BADCMPgwDQYJKoZIhvcNAQELBQADggEBAJI7isBxss65jLERn7vY/82CovI+sCJ8
mR8fzJZ5q2UTNgZgd1bYf0Y6lMCl6RLgSe0FUFq7BDClsz288/m50kC0OucHuaeh
aXTcYW0XngqVaUTRX7gC7iStqsxTkFpWOpQFscin3yw6VFr71RvumHQEbBlii0P/
IQ70F3XUCuqmXYywuYiTQAMZFCrH2KWlvqlG2NQfmQmQVc3ug6vpynKdeFxRZNRW
Jk2namYL9hP+A/koDxKTRRgbOdDhyalPXvATukW9XyA6MNsV3zepLivQ0taXqhbY
sCwEy7tYyqzc09ORCl1aP3JgqLeQAjcZEORC9dG7Mb3ztm6dN57CZOY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org