Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/b1xt1sdW8rXMBskuPhMPRBtMZEM.roa
File: b1xt1sdW8rXMBskuPhMPRBtMZEM.roa (raw, json)
Hash identifier: FJzRCPwj4HTf6h7jwJ2RhRIv2cnOhvleHHM2tOp3k3o=
Subject key identifier: 6F:5C:6D:D6:C7:56:F2:B5:CC:06:C9:2E:3E:13:0F:44:1B:4C:64:43
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 06D354FC
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/b1xt1sdW8rXMBskuPhMPRBtMZEM.roa
Signing time: Sat 01 Jan 2022 11:58:43 +0000
ROA not before: Sat 01 Jan 2022 11:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29399
IP address blocks: 185.49.128.0/22 maxlen: 27
178.250.88.0/21 maxlen: 27
195.149.85.0/24 maxlen: 27
170.84.252.0/23 maxlen: 27
195.137.222.0/23 maxlen: 27
2a03:5d00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114513148 (0x6d354fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Jan 1 11:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f5c6dd6c756f2b5cc06c92e3e130f441b4c6443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:89:11:d9:6f:57:05:58:24:6f:85:ab:02:
60:56:75:77:27:d7:89:ff:79:ed:f0:fe:eb:86:30:
9c:cd:dd:dd:5e:0f:8a:ce:2c:16:12:6a:ea:e4:d9:
10:d0:d4:e8:a2:3e:3d:68:99:0c:02:ce:29:f6:cf:
f9:1b:ad:67:6f:fd:0c:e6:6c:df:13:32:20:cd:dc:
1a:ea:9e:6f:a7:66:1d:8a:28:03:71:c3:7d:5f:14:
e1:46:65:cc:3a:98:c4:4c:05:a4:59:35:ea:d9:95:
33:d5:02:3d:0b:9b:63:98:98:2d:66:ae:93:5b:4d:
a9:e9:3f:25:8e:eb:e0:0a:cd:1e:da:ca:81:ea:c1:
70:0c:9c:9c:a1:e9:3f:fa:7b:a8:40:61:9f:e0:0d:
13:cc:97:11:cc:0f:1f:d9:8d:1a:5c:9f:33:97:d1:
16:9e:03:92:43:c4:1b:d0:e3:f1:b8:37:b7:65:1a:
c0:fa:6e:66:b5:eb:70:95:2d:91:9f:39:81:97:e4:
4e:76:ab:89:58:a2:af:f1:36:51:77:73:00:ae:32:
70:78:c5:6d:a4:79:65:3e:97:2d:3a:37:74:d3:d6:
2d:c9:cb:75:a1:da:a1:ed:36:60:aa:10:4d:b1:a0:
0f:4d:a5:b1:9f:ba:4a:c2:c3:2a:23:4f:45:ef:e3:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:6D:D6:C7:56:F2:B5:CC:06:C9:2E:3E:13:0F:44:1B:4C:64:43
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/b1xt1sdW8rXMBskuPhMPRBtMZEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.252.0/23
178.250.88.0/21
185.49.128.0/22
195.137.222.0/23
195.149.85.0/24
IPv6:
2a03:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
b0:f1:53:b4:4a:05:39:dd:ea:ee:e2:ee:7d:7d:c8:8c:4c:fa:
b2:4e:fb:4a:aa:5e:d2:9b:e2:bc:ce:1a:8c:1c:11:77:d1:34:
87:3a:65:4d:12:56:43:68:00:65:d5:bc:45:50:1a:67:da:a3:
94:d4:53:4b:6e:e4:7f:03:fa:45:b5:6c:25:47:19:67:a2:60:
fe:80:db:b1:de:99:82:1b:6f:e1:77:2a:63:4e:27:bf:53:6a:
05:52:c0:26:aa:1a:19:d5:a9:76:ab:8f:ea:ad:95:e1:f6:41:
69:30:24:63:27:8a:5d:b9:b8:78:f8:ae:41:4b:20:a4:3a:8d:
b4:8c:8c:de:3a:63:10:23:6f:de:b2:db:2d:d9:ae:b3:6c:49:
8b:0f:b7:fc:a6:fa:65:06:a5:be:2f:ba:c2:ea:3e:cd:99:58:
18:b0:00:ae:7b:78:fd:cd:df:38:b0:de:1e:56:3a:23:bf:c1:
96:fe:6d:ec:85:e1:7a:c6:29:a9:de:6f:86:ad:38:44:0c:ee:
0b:06:a2:4b:6d:19:c7:e8:64:bf:05:a7:52:12:b7:49:b8:ba:
3e:37:dc:d6:d5:db:a1:db:e0:c7:93:87:51:eb:01:f6:c9:ff:
ee:1a:4d:f6:7a:4d:9b:15:76:ac:2d:d3:b6:39:1f:5c:a1:fa:
fd:1a:7c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEBtNU/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NDU2NmMxYTI4M2Q1NTNlZjNmNjU2ZjU3MjIzOTg0ZGRhN2MzNTVmMB4XDTIyMDEw
MTExNTg0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmY1YzZkZDZjNzU2
ZjJiNWNjMDZjOTJlM2UxMzBmNDQxYjRjNjQ0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJWUiRHZb1cFWCRvhasCYFZ1dyfXif957fD+64YwnM3d3V4P
is4sFhJq6uTZENDU6KI+PWiZDALOKfbP+RutZ2/9DOZs3xMyIM3cGuqeb6dmHYoo
A3HDfV8U4UZlzDqYxEwFpFk16tmVM9UCPQubY5iYLWauk1tNqek/JY7r4ArNHtrK
gerBcAycnKHpP/p7qEBhn+ANE8yXEcwPH9mNGlyfM5fRFp4DkkPEG9Dj8bg3t2Ua
wPpuZrXrcJUtkZ85gZfkTnariViir/E2UXdzAK4ycHjFbaR5ZT6XLTo3dNPWLcnL
daHaoe02YKoQTbGgD02lsZ+6SsLDKiNPRe/jcT8CAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBRvXG3Wx1bytcwGyS4+Ew9EG0xkQzAfBgNVHSMEGDAWgBREVmwaKD1VPvP2
VvVyI5hN2nw1XzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JGWnNHaWc5VlQ3ejlsYjFjaU9ZVGRwOE5WOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvZWViODEzLWYyNGMtNDE3NS04MjhiLTlkNThjZTIyMTg0My8x
L2IxeHQxc2RXOHJYTUJza3VQaE1QUkJ0TVpFTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
ZWViODEzLWYyNGMtNDE3NS04MjhiLTlkNThjZTIyMTg0My8xL1JGWnNHaWc5VlQ3
ejlsYjFjaU9ZVGRwOE5WOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAapU/AMEA7L6WAMEArkxgAMEAcOJ
3gMEAMOVVTANBAIAAjAHAwUDKgNdADANBgkqhkiG9w0BAQsFAAOCAQEAsPFTtEoF
Od3q7uLufX3IjEz6sk77Sqpe0pvivM4ajBwRd9E0hzplTRJWQ2gAZdW8RVAaZ9qj
lNRTS27kfwP6RbVsJUcZZ6Jg/oDbsd6Zghtv4XcqY04nv1NqBVLAJqoaGdWpdquP
6q2V4fZBaTAkYyeKXbm4ePiuQUsgpDqNtIyM3jpjECNv3rLbLdmus2xJiw+3/Kb6
ZQalvi+6wuo+zZlYGLAArnt4/c3fOLDeHlY6I7/Blv5t7IXhesYpqd5vhq04RAzu
CwaiS20Zx+hkvwWnUhK3Sbi6Pjfc1tXbodvgx5OHUesB9sn/7hpN9npNmxV2rC3T
tjkfXKH6/Rp8xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:50 2024 by rpki-client on console-ams.rpki-client.org