Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/kbPh2uVSMMVstAXEA1LlY261RcE.roa
File: kbPh2uVSMMVstAXEA1LlY261RcE.roa (raw, json)
Hash identifier: PihXMhgbnKDztX5IBQg3R6W/z1pWmHuTE6eUIFTLlPM=
Subject key identifier: 91:B3:E1:DA:E5:52:30:C5:6C:B4:05:C4:03:52:E5:63:6E:B5:45:C1
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 1532BD91
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/kbPh2uVSMMVstAXEA1LlY261RcE.roa
Signing time: Sat 01 Jan 2022 07:52:38 +0000
ROA not before: Sat 01 Jan 2022 07:52:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34373
IP address blocks: 185.56.52.0/22 maxlen: 22
185.97.228.0/22 maxlen: 22
193.105.233.0/24 maxlen: 24
185.165.68.0/22 maxlen: 22
185.69.204.0/22 maxlen: 22
91.219.76.0/22 maxlen: 22
185.116.40.0/22 maxlen: 23
217.61.253.0/24 maxlen: 24
2a0b:ec00::/29 maxlen: 29
2a06:7bc0::/29 maxlen: 29
2a06:900::/29 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355646865 (0x1532bd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Jan 1 07:52:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91b3e1dae55230c56cb405c40352e5636eb545c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:d5:c2:b2:6b:43:49:c0:ca:9a:ed:f1:8e:
32:96:9f:8d:86:2c:64:22:aa:89:1a:fa:8d:2e:2c:
c2:c2:2f:09:60:ee:c0:f4:e8:ad:ed:d6:96:c2:ad:
1b:02:61:10:50:f3:75:25:15:b6:6e:f5:0c:32:f1:
3f:05:c1:35:47:c3:62:2e:14:7d:75:cd:5a:31:8b:
e5:e2:86:f9:39:6d:03:5a:9c:17:13:0c:bf:dd:44:
38:d2:5f:e0:66:1a:80:fc:41:0d:00:48:e7:68:7b:
11:94:52:43:70:ee:28:1c:48:54:81:e6:1d:c4:81:
e8:01:58:1e:f6:74:4d:f6:97:c5:c1:75:33:7a:0e:
76:e1:6d:91:c3:b1:e5:e2:98:83:50:b0:0b:b2:62:
43:b6:c5:c4:e9:91:5c:de:ab:bc:53:27:1e:af:ac:
96:84:c4:7a:e9:84:00:aa:4a:5e:1a:10:6a:f4:20:
22:af:83:1e:d4:4b:c1:98:9b:30:7f:ae:6c:99:28:
69:e9:66:f3:30:72:48:48:fd:91:ad:1a:b6:62:ed:
d3:03:6a:d9:fb:6b:78:da:67:72:40:a8:ae:aa:bc:
f9:0d:9d:4b:bb:c5:30:99:68:71:27:cc:a2:31:a5:
ff:ae:c7:6e:72:e4:f1:2d:47:33:51:56:bd:79:fb:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:E1:DA:E5:52:30:C5:6C:B4:05:C4:03:52:E5:63:6E:B5:45:C1
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/kbPh2uVSMMVstAXEA1LlY261RcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.76.0/22
185.56.52.0/22
185.69.204.0/22
185.97.228.0/22
185.116.40.0/22
185.165.68.0/22
193.105.233.0/24
217.61.253.0/24
IPv6:
2a06:900::/29
2a06:7bc0::/29
2a0b:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
12:f4:8e:1f:38:ef:b9:93:b3:00:35:17:ec:bf:4d:af:b3:17:
f5:96:22:8d:d0:6f:fa:a5:7b:aa:2e:6f:ed:7f:78:96:a2:69:
d9:97:1b:08:47:1e:dd:ac:a8:58:11:f5:9b:ce:0f:ba:c5:38:
13:84:2d:f2:46:de:7c:9c:cb:c5:b5:00:ba:03:1c:b2:4e:d4:
9e:d1:38:87:0d:11:6a:d4:f1:91:d0:55:be:fa:61:5b:f8:9a:
6f:24:76:55:d0:15:06:a9:c9:b7:a3:0e:a8:20:5c:e8:68:e4:
33:39:32:e2:d8:ab:f3:78:73:26:d6:75:cf:61:ff:b3:4c:dc:
77:a8:ae:3a:a0:d3:8f:3f:45:c3:5a:88:9f:0f:64:b1:3b:6f:
1b:05:1a:c8:d1:d3:89:d2:74:51:57:77:3b:ef:9d:02:9b:95:
32:81:f1:88:e5:d4:53:69:ad:6c:4a:7f:c4:5e:9f:77:d3:f1:
09:e2:67:be:8d:52:ae:a6:c8:9d:aa:8f:b6:49:3e:42:23:a8:
2b:44:82:4c:17:2b:3f:2d:ea:1a:bd:96:93:7a:7d:9b:50:fa:
d5:ae:05:d3:bd:21:9b:94:8f:1c:fd:64:a6:d3:c4:eb:59:98:
29:0e:28:b0:cb:63:c2:3d:e0:2b:32:5a:d5:fd:5f:f9:7e:cd:
39:3a:f3:c0
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIEFTK9kTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YmVhODFhYTliMjE5N2Q5MTI3YjQ0MjUyNTEwMGZmYWEzNmUwZDUyMB4XDTIyMDEw
MTA3NTIzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTFiM2UxZGFlNTUy
MzBjNTZjYjQwNWM0MDM1MmU1NjM2ZWI1NDVjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKaj1cKya0NJwMqa7fGOMpafjYYsZCKqiRr6jS4swsIvCWDu
wPTore3WlsKtGwJhEFDzdSUVtm71DDLxPwXBNUfDYi4UfXXNWjGL5eKG+TltA1qc
FxMMv91EONJf4GYagPxBDQBI52h7EZRSQ3DuKBxIVIHmHcSB6AFYHvZ0TfaXxcF1
M3oOduFtkcOx5eKYg1CwC7JiQ7bFxOmRXN6rvFMnHq+sloTEeumEAKpKXhoQavQg
Iq+DHtRLwZibMH+ubJkoaelm8zBySEj9ka0atmLt0wNq2ftreNpnckCorqq8+Q2d
S7vFMJlocSfMojGl/67HbnLk8S1HM1FWvXn72AsCAwEAAaOCAlAwggJMMB0GA1Ud
DgQWBBSRs+Ha5VIwxWy0BcQDUuVjbrVFwTAfBgNVHSMEGDAWgBRb6oGqmyGX2RJ7
RCUlEA/6o24NUjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ctcUJxcHNobDlrU2UwUWxKUkFQLXFOdURWSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvMjI0MTU1LTNjYTQtNGZmNy1hOTY0LWZjMGRkOTI1MmM5YS8x
L2tiUGgydVZTTU1Wc3RBWEVBMUxsWTI2MVJjRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
MjI0MTU1LTNjYTQtNGZmNy1hOTY0LWZjMGRkOTI1MmM5YS8xL1ctcUJxcHNobDlr
U2UwUWxKUkFQLXFOdURWSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBm
BggrBgEFBQcBBwEB/wRXMFUwNgQCAAEwMAMEAlvbTAMEArk4NAMEArlFzAMEArlh
5AMEArl0KAMEArmlRAMEAMFp6QMEANk9/TAbBAIAAjAVAwUDKgYJAAMFAyoGe8AD
BQMqC+wAMA0GCSqGSIb3DQEBCwUAA4IBAQAS9I4fOO+5k7MANRfsv02vsxf1liKN
0G/6pXuqLm/tf3iWomnZlxsIRx7drKhYEfWbzg+6xTgThC3yRt58nMvFtQC6Axyy
TtSe0TiHDRFq1PGR0FW++mFb+JpvJHZV0BUGqcm3ow6oIFzoaOQzOTLi2KvzeHMm
1nXPYf+zTNx3qK46oNOPP0XDWoifD2SxO28bBRrI0dOJ0nRRV3c7750Cm5UygfGI
5dRTaa1sSn/EXp930/EJ4me+jVKupsidqo+2ST5CI6grRIJMFys/LeoavZaTen2b
UPrVrgXTvSGblI8c/WSm08TrWZgpDiiwy2PCPeArMlrV/V/5fs05OvPA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org