Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/9WxT3XRdxDC_0nM8sDftPFAUVuA.roa
File: 9WxT3XRdxDC_0nM8sDftPFAUVuA.roa (raw, json)
Hash identifier: wRS3H4PtKIskn+1E5IyTgz6Y6Cc49/v3QMtiitLarK4=
Subject key identifier: F5:6C:53:DD:74:5D:C4:30:BF:D2:73:3C:B0:37:ED:3C:50:14:56:E0
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 0184ED327E624D4B5F216C4B057B8D19BEE8
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/9WxT3XRdxDC_0nM8sDftPFAUVuA.roa
Signing time: Wed 07 Dec 2022 15:27:00 +0000
ROA not before: Wed 07 Dec 2022 15:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29467
IP address blocks: 178.251.160.0/21 maxlen: 24
185.97.244.0/22 maxlen: 24
185.4.124.0/22 maxlen: 24
5.149.112.112/30 maxlen: 30
5.149.112.0/21 maxlen: 24
185.123.216.0/22 maxlen: 24
185.123.218.72/30 maxlen: 30
2a03:2f00::/32 maxlen: 32
2a02:70c0::/32 maxlen: 32
2a03:92e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:32:7e:62:4d:4b:5f:21:6c:4b:05:7b:8d:19:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Dec 7 15:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f56c53dd745dc430bfd2733cb037ed3c501456e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:1e:c4:b9:ab:d0:ab:bb:36:1a:a2:9d:da:
25:11:48:b2:06:30:e8:25:57:de:2a:39:5b:cf:e9:
3f:e2:9e:ce:08:77:cb:b7:a5:77:5a:bc:88:b4:de:
a3:52:f2:42:a3:a5:3f:be:f8:ef:4c:e2:93:02:c1:
6d:22:f9:ee:ea:18:7d:34:3a:5d:41:6e:d2:48:bc:
5c:59:fc:9d:1d:72:56:69:5d:d9:4e:cd:18:ab:16:
b5:9e:5e:41:03:db:aa:d5:c3:35:fc:c1:c6:7b:68:
31:8f:85:a1:0e:11:92:af:12:da:57:7b:7d:02:72:
3a:e5:cd:ff:70:cc:92:e0:a4:1b:3a:2c:2a:fb:bf:
c5:1c:60:b5:4d:90:7b:89:10:22:b7:d1:19:83:e2:
36:40:c5:6e:80:7f:5d:d6:7a:e7:7d:73:b4:69:a8:
db:c9:6f:c4:82:87:15:3b:dd:d8:96:cc:e4:36:34:
37:0b:40:5a:24:5b:48:dc:c5:ff:d0:07:9a:62:8f:
03:e9:34:fa:3b:a0:b7:87:3b:f4:b4:69:ad:cf:e9:
d4:82:03:ea:f9:66:78:41:c6:2f:fb:97:6d:88:92:
6a:6f:71:d9:31:c4:f2:7b:22:0c:12:4d:2d:0e:48:
d3:15:31:41:82:69:7d:98:76:81:22:e8:f3:5f:75:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:53:DD:74:5D:C4:30:BF:D2:73:3C:B0:37:ED:3C:50:14:56:E0
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/9WxT3XRdxDC_0nM8sDftPFAUVuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.112.0/21
178.251.160.0/21
185.4.124.0/22
185.97.244.0/22
185.123.216.0/22
IPv6:
2a02:70c0::/32
2a03:2f00::/32
2a03:92e0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:e6:9e:e5:31:8f:ae:53:76:2b:5f:38:e3:7b:84:3e:b4:a3:
c6:dc:98:64:0d:62:b2:42:e3:c2:b2:fb:25:65:39:c5:4c:41:
e1:0f:a0:f5:c8:21:a5:d0:f1:f5:8f:d9:a0:a6:67:4e:fb:13:
dc:9e:72:4f:ca:5b:dd:84:11:60:da:5e:9a:c6:87:65:8c:db:
54:94:9c:2c:39:6d:39:84:20:b8:f6:01:04:17:e9:84:03:66:
e9:ac:d4:5a:a4:0f:f8:06:ab:91:ed:8b:95:4b:d4:9e:77:cc:
49:9e:5e:4c:55:99:e3:14:15:29:00:eb:0d:2a:80:b9:ed:07:
1a:2e:70:f8:93:8d:4f:54:2a:91:31:69:b3:83:8d:3b:8e:38:
32:b8:1e:a4:55:3f:92:03:87:aa:14:d8:67:65:b7:a8:5a:b4:
06:d4:c1:df:83:16:39:f0:71:a2:d7:d1:e1:c2:ab:01:47:17:
13:57:1b:a2:56:48:cd:f1:a5:ff:00:31:83:de:cc:94:55:cd:
dd:f4:fb:94:0f:01:0e:d7:e9:e8:c0:85:3e:27:9c:e0:6b:91:
57:71:4b:a0:42:da:81:42:e9:6d:5c:36:31:4b:e7:4d:36:c1:
98:69:3c:65:22:c1:40:f6:88:df:38:9c:e1:da:0a:90:c5:ab:
3d:97:f5:64
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYTtMn5iTUtfIWxLBXuNGb7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzlmNWYwMjg4OTg1YWJkZTA5ODI3ZTAzZDc4N2E1MjE0
OWU3ZWMwHhcNMjIxMjA3MTUyNzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTZjNTNkZDc0NWRjNDMwYmZkMjczM2NiMDM3ZWQzYzUwMTQ1NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAEexLmr0Ku7NhqindolEUiyBjDo
JVfeKjlbz+k/4p7OCHfLt6V3WryItN6jUvJCo6U/vvjvTOKTAsFtIvnu6hh9NDpd
QW7SSLxcWfydHXJWaV3ZTs0Yqxa1nl5BA9uq1cM1/MHGe2gxj4WhDhGSrxLaV3t9
AnI65c3/cMyS4KQbOiwq+7/FHGC1TZB7iRAit9EZg+I2QMVugH9d1nrnfXO0aajb
yW/EgocVO93YlszkNjQ3C0BaJFtI3MX/0AeaYo8D6TT6O6C3hzv0tGmtz+nUggPq
+WZ4QcYv+5dtiJJqb3HZMcTyeyIMEk0tDkjTFTFBgml9mHaBIujzX3XIrQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFPVsU910XcQwv9JzPLA37TxQFFbgMB8GA1UdIwQY
MBaAFPd59fAoiYWr3gmCfgPXh6UhSefsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMt
ZmU3OTYzYmVjN2QzLzEvOVd4VDNYUmR4RENfMG5NOHNEZnRQRkFVVnVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMtZmU3OTYzYmVjN2Qz
LzEvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQDBZVwAwQD
svugAwQCuQR8AwQCuWH0AwQCuXvYMBsEAgACMBUDBQAqAnDAAwUAKgMvAAMFACoD
kuAwDQYJKoZIhvcNAQELBQADggEBAKnmnuUxj65TditfOON7hD60o8bcmGQNYrJC
48Ky+yVlOcVMQeEPoPXIIaXQ8fWP2aCmZ077E9yeck/KW92EEWDaXprGh2WM21SU
nCw5bTmEILj2AQQX6YQDZums1FqkD/gGq5Hti5VL1J53zEmeXkxVmeMUFSkA6w0q
gLntBxoucPiTjU9UKpExabODjTuOODK4HqRVP5IDh6oU2Gdlt6hatAbUwd+DFjnw
caLX0eHCqwFHFxNXG6JWSM3xpf8AMYPezJRVzd30+5QPAQ7X6ejAhT4nnOBrkVdx
S6BC2oFC6W1cNjFL5002wZhpPGUiwUD2iN84nOHaCpDFqz2X9WQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org