Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3kP0aVpIfByYqe5pQ4BPvWiJzho.roa
File: 3kP0aVpIfByYqe5pQ4BPvWiJzho.roa (raw, json)
Hash identifier: J0LJTK2svUbmj/sNU6SLFYQarblv4fx8316jZ4N1kQM=
Subject key identifier: DE:43:F4:69:5A:48:7C:1C:98:A9:EE:69:43:80:4F:BD:68:89:CE:1A
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 01838826E4C79C8F06EF063AF90FD748A617
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3kP0aVpIfByYqe5pQ4BPvWiJzho.roa
Signing time: Thu 29 Sep 2022 07:29:53 +0000
ROA not before: Thu 29 Sep 2022 07:29:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61275
IP address blocks: 188.93.184.0/21 maxlen: 21
185.24.188.0/22 maxlen: 22
85.93.224.0/19 maxlen: 19
178.248.96.0/21 maxlen: 21
91.135.48.0/21 maxlen: 21
91.135.58.0/24 maxlen: 24
5.100.176.0/21 maxlen: 21
91.135.56.0/23 maxlen: 23
77.223.164.0/22 maxlen: 22
77.223.161.0/24 maxlen: 24
185.3.0.0/22 maxlen: 22
77.223.162.0/23 maxlen: 23
77.223.172.0/22 maxlen: 22
5.100.184.0/22 maxlen: 22
91.135.60.0/22 maxlen: 22
77.223.168.0/22 maxlen: 22
91.135.59.0/24 maxlen: 24
77.223.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:26:e4:c7:9c:8f:06:ef:06:3a:f9:0f:d7:48:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Sep 29 07:29:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de43f4695a487c1c98a9ee6943804fbd6889ce1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:b8:62:46:03:af:57:3b:f8:42:71:3b:bb:
b1:c1:91:42:14:9b:b1:08:53:af:3c:32:52:19:55:
66:bd:c1:4a:38:55:e2:b6:3c:ce:7d:82:a3:38:c9:
22:5c:12:86:58:73:d9:35:6c:52:ec:92:01:92:1b:
56:9b:7b:9d:17:fb:dc:aa:34:43:f0:24:66:3b:a5:
85:ae:d1:00:24:66:fa:71:d8:29:c2:a1:72:25:82:
cd:6e:61:64:03:19:2b:fd:56:4d:35:53:6c:31:f3:
67:87:5f:fa:e2:44:e6:a6:06:e9:8a:8b:da:3f:1c:
39:0f:c9:f7:ba:25:f1:e3:a8:ce:64:a0:98:30:b5:
7f:bf:db:58:7a:bd:41:3f:4f:76:db:27:27:3e:8d:
5a:ea:bf:03:a5:fb:d4:a5:7a:e4:f9:80:ee:86:ef:
16:06:35:96:1c:05:84:65:59:03:14:16:6b:d2:cd:
53:6d:63:ee:11:91:9a:86:b1:3a:c3:4e:51:a5:4d:
9c:18:e6:77:6a:24:a1:ff:26:00:4d:83:d3:12:53:
de:12:13:54:bd:86:a1:72:b3:fc:6c:81:4d:3a:a3:
80:0b:de:c1:75:6a:de:72:2b:17:d8:25:29:b5:21:
56:b5:50:42:dd:e0:23:72:fc:80:99:73:5a:bc:25:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:43:F4:69:5A:48:7C:1C:98:A9:EE:69:43:80:4F:BD:68:89:CE:1A
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3kP0aVpIfByYqe5pQ4BPvWiJzho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.176.0-5.100.187.255
77.223.161.0-77.223.191.255
85.93.224.0/19
91.135.48.0/20
178.248.96.0/21
185.3.0.0/22
185.24.188.0/22
188.93.184.0/21
Signature Algorithm: sha256WithRSAEncryption
57:52:77:00:ea:14:f8:e4:4b:a4:64:c2:7b:fd:11:57:3c:56:
27:c0:44:f2:b0:44:d6:33:96:0e:6e:f8:59:7f:b6:b9:44:db:
75:43:76:d4:08:f3:66:35:72:e2:e0:23:de:c2:b7:c6:d2:54:
ef:dd:87:b9:b4:30:b7:8d:12:0c:07:06:c4:82:7e:a0:ce:53:
1e:f6:60:c7:62:b9:25:22:07:bb:9c:45:3b:2d:ad:88:cc:c1:
87:44:19:53:78:85:ee:14:c4:6c:fe:3c:39:55:b6:e1:d7:bd:
16:e7:b7:f5:4c:77:9f:d7:d5:66:ce:9a:2a:9b:e0:f7:17:6c:
7a:b7:93:c8:71:2d:83:a3:ca:0b:14:94:a6:b5:57:20:00:f1:
1f:4b:1f:3b:ba:72:44:ee:74:99:d5:1c:38:2f:e3:59:99:c4:
ff:63:37:e6:97:72:f7:ec:dd:0a:c0:4b:24:a9:b8:4a:fd:7a:
e7:82:e0:14:44:07:4a:a3:c5:87:7f:2d:8e:5b:e1:83:c1:c2:
e5:c4:44:32:8f:a7:9a:11:69:54:86:c5:58:3a:b8:50:6e:9c:
18:f2:30:6e:62:32:08:e5:9b:6c:f2:ce:fc:c6:3d:83:87:a6:
e7:9f:62:e0:66:25:6c:e7:98:aa:85:90:32:20:f8:97:12:44:
ae:f6:58:14
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYOIJuTHnI8G7wY6+Q/XSKYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk
YzExMTIwHhcNMjIwOTI5MDcyOTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTQzZjQ2OTVhNDg3YzFjOThhOWVlNjk0MzgwNGZiZDY4ODljZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziy4YkYDr1c7+EJxO7uxwZFCFJux
CFOvPDJSGVVmvcFKOFXitjzOfYKjOMkiXBKGWHPZNWxS7JIBkhtWm3udF/vcqjRD
8CRmO6WFrtEAJGb6cdgpwqFyJYLNbmFkAxkr/VZNNVNsMfNnh1/64kTmpgbpiova
Pxw5D8n3uiXx46jOZKCYMLV/v9tYer1BP0922ycnPo1a6r8DpfvUpXrk+YDuhu8W
BjWWHAWEZVkDFBZr0s1TbWPuEZGahrE6w05RpU2cGOZ3aiSh/yYATYPTElPeEhNU
vYahcrP8bIFNOqOAC97BdWrecisX2CUptSFWtVBC3eAjcvyAmXNavCVYywIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFN5D9GlaSHwcmKnuaUOAT71oic4aMB8GA1UdIwQY
MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt
ZmZlNDNhNTJkM2Y2LzEvM2tQMGFWcElmQnlZcWU1cFE0QlB2V2lKemhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2
LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAQFZLAD
BAIFZLgwDAMEAE3foQMEBk3fgAMEBVVd4AMEBFuHMAMEA7L4YAMEArkDAAMEArkY
vAMEA7xduDANBgkqhkiG9w0BAQsFAAOCAQEAV1J3AOoU+ORLpGTCe/0RVzxWJ8BE
8rBE1jOWDm74WX+2uUTbdUN21AjzZjVy4uAj3sK3xtJU792HubQwt40SDAcGxIJ+
oM5THvZgx2K5JSIHu5xFOy2tiMzBh0QZU3iF7hTEbP48OVW24de9Fue39Ux3n9fV
Zs6aKpvg9xdsereTyHEtg6PKCxSUprVXIADxH0sfO7pyRO50mdUcOC/jWZnE/2M3
5pdy9+zdCsBLJKm4Sv1654LgFEQHSqPFh38tjlvhg8HC5cREMo+nmhFpVIbFWDq4
UG6cGPIwbmIyCOWbbPLO/MY9g4em559i4GYlbOeYqoWQMiD4lxJErvZYFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org