Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sCTdH72kUgy5iUEzaq73o-kRjXU.roa
File: sCTdH72kUgy5iUEzaq73o-kRjXU.roa (raw, json)
Hash identifier: JBv0RDf2jwTTVPUAS3A/0//QY+GeZ/Bn0Re4qrYHFXM=
Subject key identifier: B0:24:DD:1F:BD:A4:52:0C:B9:89:41:33:6A:AE:F7:A3:E9:11:8D:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018220E702F8B8F4B88D89BB5CDE1502F43E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sCTdH72kUgy5iUEzaq73o-kRjXU.roa
Signing time: Thu 21 Jul 2022 13:16:26 +0000
ROA not before: Thu 21 Jul 2022 13:16:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393398
IP address blocks: 81.161.237.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
82.115.208.0/22 maxlen: 24
193.42.35.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:e7:02:f8:b8:f4:b8:8d:89:bb:5c:de:15:02:f4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 21 13:16:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b024dd1fbda4520cb98941336aaef7a3e9118d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:1f:d8:d0:50:c0:d2:8b:99:81:0a:88:c5:
cf:40:a8:68:a0:49:fc:27:75:cd:3e:66:eb:a8:06:
83:29:bd:5c:dc:84:28:59:6f:46:1d:1e:72:4c:52:
49:c0:62:93:fb:00:94:21:45:f7:c8:15:a2:86:01:
4b:00:6d:8a:fd:b0:8d:b6:69:a9:e9:29:2b:02:86:
a3:7a:9f:0f:bc:8c:a8:00:2e:f9:a1:29:81:9c:de:
46:01:51:9a:03:c4:44:8c:dd:12:0e:ba:b0:91:df:
a1:a9:c5:93:14:90:bf:c5:41:b7:a5:78:bb:20:78:
29:b6:33:64:e1:70:c7:b4:9c:92:53:0d:96:2b:7c:
fc:0d:e0:8f:3a:a0:16:af:83:3d:f6:0f:41:6c:b2:
84:b0:1b:2b:05:f6:4f:3e:fa:78:33:83:c7:59:48:
c5:e3:9a:2f:69:41:27:4a:04:62:45:89:46:64:24:
83:c1:87:01:5c:01:05:35:6c:a2:a2:de:2a:aa:9f:
82:2d:04:cf:75:c9:8b:e6:57:f1:58:9a:e9:db:9a:
48:6d:9e:ae:b4:2a:ed:f9:d7:0f:2e:38:8a:73:e0:
d4:13:be:68:8f:ad:1a:37:3d:2e:2e:21:01:6c:85:
b5:4d:2b:5c:5a:32:ad:c5:2a:34:e5:71:62:db:fb:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:24:DD:1F:BD:A4:52:0C:B9:89:41:33:6A:AE:F7:A3:E9:11:8D:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sCTdH72kUgy5iUEzaq73o-kRjXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
82.115.208.0/22
193.42.33.0-193.42.35.255
193.58.121.0-193.58.123.255
Signature Algorithm: sha256WithRSAEncryption
80:d0:d7:1e:22:6e:82:97:83:ef:00:6b:57:a8:57:af:f9:f5:
a5:7b:86:99:53:1d:cf:e9:11:bb:54:4e:ea:b4:07:89:6a:ee:
ed:64:d2:cd:cc:9c:d9:c9:7e:31:e7:ca:67:19:c8:f3:28:50:
28:49:42:66:21:f7:bf:96:f2:23:6f:7e:51:d6:ea:15:e9:c0:
c9:21:47:25:b2:db:a5:8b:8e:b5:cd:1d:2d:e9:87:52:7a:c9:
95:81:4e:5c:83:1b:bf:9a:58:7a:7b:4b:2e:c2:8a:96:97:0e:
fb:2f:df:10:03:56:a2:e3:00:38:ee:fa:7f:a9:6b:77:0b:cc:
3e:29:4b:69:e1:f6:2c:28:cd:a9:82:fd:a4:37:2f:69:f7:2c:
e4:3c:8a:40:ad:f3:a1:e6:14:ac:1c:0a:6d:21:4e:af:09:1a:
48:a4:ff:8b:4c:5c:8a:c3:31:0c:82:a7:4b:c7:3f:bd:23:50:
d3:e8:5c:56:98:e8:c1:23:9d:41:72:94:b2:04:f9:87:2d:99:
2f:33:d5:47:fa:70:f7:5a:f9:31:b2:95:57:43:72:d5:3e:bb:
be:4e:39:77:3b:04:ab:05:95:bd:92:66:b7:d6:bc:c0:97:7a:
4c:c6:80:9a:ab:78:e5:aa:e0:1d:ad:87:47:2a:10:60:10:c2:
37:27:e9:69
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYIg5wL4uPS4jYm7XN4VAvQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwNzIxMTMxNjI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDI0ZGQxZmJkYTQ1MjBjYjk4OTQxMzM2YWFlZjdhM2U5MTE4ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIUf2NBQwNKLmYEKiMXPQKhooEn8
J3XNPmbrqAaDKb1c3IQoWW9GHR5yTFJJwGKT+wCUIUX3yBWihgFLAG2K/bCNtmmp
6SkrAoajep8PvIyoAC75oSmBnN5GAVGaA8REjN0SDrqwkd+hqcWTFJC/xUG3pXi7
IHgptjNk4XDHtJySUw2WK3z8DeCPOqAWr4M99g9BbLKEsBsrBfZPPvp4M4PHWUjF
45ovaUEnSgRiRYlGZCSDwYcBXAEFNWyiot4qqp+CLQTPdcmL5lfxWJrp25pIbZ6u
tCrt+dcPLjiKc+DUE75oj60aNz0uLiEBbIW1TStcWjKtxSo05XFi2/tGvwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFLAk3R+9pFIMuYlBM2qu96PpEY11MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvc0NUZEg3MmtVZ3k1aVVFemFxNzNvLWtSalhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAUaHtAwQC
UnPQMAwDBADBKiEDBALBKiAwDAMEAME6eQMEAsE6eDANBgkqhkiG9w0BAQsFAAOC
AQEAgNDXHiJugpeD7wBrV6hXr/n1pXuGmVMdz+kRu1RO6rQHiWru7WTSzcyc2cl+
MefKZxnI8yhQKElCZiH3v5byI29+UdbqFenAySFHJbLbpYuOtc0dLemHUnrJlYFO
XIMbv5pYentLLsKKlpcO+y/fEANWouMAOO76f6lrdwvMPilLaeH2LCjNqYL9pDcv
afcs5DyKQK3zoeYUrBwKbSFOrwkaSKT/i0xcisMxDIKnS8c/vSNQ0+hcVpjowSOd
QXKUsgT5hy2ZLzPVR/pw91r5MbKVV0Ny1T67vk45dzsEqwWVvZJmt9a8wJd6TMaA
mqt45argHa2HRyoQYBDCNyfpaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org