Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/iGndvLVd3kOnN6bMT0T3EIVBIDA.roa
File: iGndvLVd3kOnN6bMT0T3EIVBIDA.roa (raw, json)
Hash identifier: +IdTHBpoLN1SdUxjsc9oBdLHQShOwixDSpRGALIettc=
Subject key identifier: 88:69:DD:BC:B5:5D:DE:43:A7:37:A6:CC:4F:44:F7:10:85:41:20:30
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 0184EC0F5D38C2A317EF24319CB36E303388
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/iGndvLVd3kOnN6bMT0T3EIVBIDA.roa
Signing time: Wed 07 Dec 2022 10:09:00 +0000
ROA not before: Wed 07 Dec 2022 10:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29467
IP address blocks: 178.251.160.0/21 maxlen: 24
185.97.244.0/22 maxlen: 24
185.4.124.0/22 maxlen: 24
5.149.112.0/21 maxlen: 24
185.123.216.0/22 maxlen: 24
185.123.218.72/30 maxlen: 30
2a03:2f00::/32 maxlen: 32
2a02:70c0::/32 maxlen: 32
2a03:92e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:0f:5d:38:c2:a3:17:ef:24:31:9c:b3:6e:30:33:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Dec 7 10:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8869ddbcb55dde43a737a6cc4f44f71085412030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:eb:33:46:32:b8:0e:5a:e9:60:58:f1:73:9a:
9d:bb:ff:df:33:fc:51:50:92:6f:6e:06:00:4b:df:
cc:97:45:cf:9c:f4:0a:10:fd:17:b6:f0:59:a2:e3:
a4:77:91:9d:1c:5c:8a:18:06:88:46:e1:3a:24:d0:
00:47:b1:41:de:d9:8e:58:4a:c1:26:1a:16:f8:30:
fb:fb:2a:c1:34:34:e7:71:b3:7f:6a:82:cf:b4:7c:
15:3f:81:44:a4:40:c1:73:46:73:2b:1f:9c:de:f4:
94:48:99:1f:a6:0d:61:8e:a4:aa:d7:56:f0:78:8a:
87:83:bf:53:15:42:2b:68:c1:3c:2b:34:7f:97:a4:
a3:46:6a:0f:62:87:4a:05:f3:4f:ed:f0:c2:b1:a2:
6f:ba:6f:c8:82:17:b6:1b:5e:75:8e:65:37:2e:7a:
d4:e6:1c:16:ad:ba:76:7b:09:23:b0:02:73:f0:31:
a9:3e:fd:82:85:c2:44:95:37:c9:05:aa:78:1e:7d:
35:26:44:5e:e1:f2:31:43:8c:b4:54:23:6d:49:e1:
5a:50:64:a0:79:52:15:82:45:cd:8b:56:00:70:af:
2c:02:2b:35:56:63:ae:8d:1f:6b:bf:80:e9:ed:a2:
68:0f:ed:0a:58:7c:90:e4:fe:30:13:1f:21:d7:3d:
c2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:DD:BC:B5:5D:DE:43:A7:37:A6:CC:4F:44:F7:10:85:41:20:30
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/iGndvLVd3kOnN6bMT0T3EIVBIDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.112.0/21
178.251.160.0/21
185.4.124.0/22
185.97.244.0/22
185.123.216.0/22
IPv6:
2a02:70c0::/32
2a03:2f00::/32
2a03:92e0::/32
Signature Algorithm: sha256WithRSAEncryption
55:80:15:8a:e8:91:e0:81:d9:87:9b:c7:fd:df:4e:94:bc:fe:
48:54:cc:44:50:92:40:cf:22:52:48:fb:e3:a2:a0:d4:2b:37:
7a:ce:8a:1e:ad:0c:ee:de:e2:d1:62:86:1f:33:5b:d4:58:ae:
db:6e:96:0f:79:94:16:3f:4d:71:a4:e3:fb:b6:80:91:44:cb:
55:b5:ea:9a:48:85:7d:8c:18:56:15:a0:c7:7d:9a:8e:a5:bf:
59:2d:75:76:6e:77:20:a5:8f:55:bc:a8:4d:00:c8:d9:29:ea:
ee:95:d7:38:1d:72:66:64:f8:e8:c2:e8:91:0f:d2:eb:a3:96:
d9:76:36:36:a4:4c:0b:1a:09:29:5f:aa:6a:bd:fd:58:c9:27:
f8:6a:88:8c:e6:aa:7a:a8:76:da:73:c7:6f:a3:6a:ba:21:50:
98:2f:3a:fb:d5:bb:c9:d3:8c:74:05:4a:ea:5c:2f:0c:ca:aa:
3d:5c:2c:84:69:de:7f:60:60:d2:5a:60:88:fd:af:ce:71:c2:
2a:f1:04:f1:4f:65:13:bd:ef:87:ad:d0:cb:9e:f2:31:0c:c1:
66:95:57:9f:da:95:48:2e:f2:47:b8:05:a3:0e:9e:4f:7c:ea:
cf:3b:9d:90:60:38:38:69:26:cc:a8:15:b3:99:0e:33:fa:1b:
f8:62:6f:ef
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYTsD104wqMX7yQxnLNuMDOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzlmNWYwMjg4OTg1YWJkZTA5ODI3ZTAzZDc4N2E1MjE0
OWU3ZWMwHhcNMjIxMjA3MTAwOTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODY5ZGRiY2I1NWRkZTQzYTczN2E2Y2M0ZjQ0ZjcxMDg1NDEyMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguszRjK4DlrpYFjxc5qdu//fM/xR
UJJvbgYAS9/Ml0XPnPQKEP0XtvBZouOkd5GdHFyKGAaIRuE6JNAAR7FB3tmOWErB
JhoW+DD7+yrBNDTncbN/aoLPtHwVP4FEpEDBc0ZzKx+c3vSUSJkfpg1hjqSq11bw
eIqHg79TFUIraME8KzR/l6SjRmoPYodKBfNP7fDCsaJvum/Ighe2G151jmU3LnrU
5hwWrbp2ewkjsAJz8DGpPv2ChcJElTfJBap4Hn01JkRe4fIxQ4y0VCNtSeFaUGSg
eVIVgkXNi1YAcK8sAis1VmOujR9rv4Dp7aJoD+0KWHyQ5P4wEx8h1z3CXwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFIhp3by1Xd5DpzemzE9E9xCFQSAwMB8GA1UdIwQY
MBaAFPd59fAoiYWr3gmCfgPXh6UhSefsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMt
ZmU3OTYzYmVjN2QzLzEvaUduZHZMVmQza09uTjZiTVQwVDNFSVZCSURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMtZmU3OTYzYmVjN2Qz
LzEvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQDBZVwAwQD
svugAwQCuQR8AwQCuWH0AwQCuXvYMBsEAgACMBUDBQAqAnDAAwUAKgMvAAMFACoD
kuAwDQYJKoZIhvcNAQELBQADggEBAFWAFYrokeCB2Yebx/3fTpS8/khUzERQkkDP
IlJI++OioNQrN3rOih6tDO7e4tFihh8zW9RYrttulg95lBY/TXGk4/u2gJFEy1W1
6ppIhX2MGFYVoMd9mo6lv1ktdXZudyClj1W8qE0AyNkp6u6V1zgdcmZk+OjC6JEP
0uujltl2NjakTAsaCSlfqmq9/VjJJ/hqiIzmqnqodtpzx2+jarohUJgvOvvVu8nT
jHQFSupcLwzKqj1cLIRp3n9gYNJaYIj9r85xwirxBPFPZRO974et0Mue8jEMwWaV
V5/alUgu8ke4BaMOnk986s87nZBgODhpJsyoFbOZDjP6G/hib+8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org