Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/V2buL2uHFwILkVrpZuuf_bU4kvI.roa
File: V2buL2uHFwILkVrpZuuf_bU4kvI.roa (raw, json)
Hash identifier: mLF/kfPGKdh0rYOcrzHsTMMcqi8TXDIfXqXO67ZClg0=
Subject key identifier: 57:66:EE:2F:6B:87:17:02:0B:91:5A:E9:66:EB:9F:FD:B5:38:92:F2
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 01850C416F671DEBA6A1E02101504B4AFF3B
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/V2buL2uHFwILkVrpZuuf_bU4kvI.roa
Signing time: Tue 13 Dec 2022 16:11:32 +0000
ROA not before: Tue 13 Dec 2022 16:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48945
IP address blocks: 93.186.144.0/24 maxlen: 24
93.186.145.0/24 maxlen: 24
93.186.147.0/24 maxlen: 24
93.186.152.0/23 maxlen: 23
93.186.148.0/22 maxlen: 22
93.186.146.0/24 maxlen: 24
93.186.154.0/24 maxlen: 24
93.186.156.0/22 maxlen: 22
93.186.155.0/24 maxlen: 24
185.11.36.0/22 maxlen: 22
2a03:7e84::/30 maxlen: 30
2a03:7e80::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:41:6f:67:1d:eb:a6:a1:e0:21:01:50:4b:4a:ff:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Dec 13 16:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5766ee2f6b8717020b915ae966eb9ffdb53892f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:de:7b:f1:bd:e1:77:56:06:32:8c:74:cb:4f:
29:aa:0f:15:57:3e:2c:3e:e5:ae:ea:dc:04:d1:c4:
82:2d:ba:e3:bb:af:2e:9e:5d:ef:c8:d0:12:75:3d:
2e:11:83:e6:ff:8c:96:36:98:b8:93:af:1e:82:86:
fe:9d:73:07:c3:a4:44:41:b2:27:9a:09:47:10:9c:
e5:08:3f:90:0f:8c:7e:90:26:12:fd:26:ac:78:d5:
64:80:07:66:3f:42:cb:c5:af:27:16:72:80:44:48:
e6:b5:5b:62:f4:11:52:72:2e:29:4d:92:aa:b0:76:
bd:4e:76:1c:8c:f5:92:3c:c2:e1:32:d2:49:81:a7:
b2:c6:10:bd:47:9c:36:9c:14:07:2a:0a:5b:61:5b:
18:e3:0b:b7:69:6c:9a:b0:7d:a6:93:7d:2e:d4:c7:
47:70:5d:0a:cd:9d:de:d4:69:4e:ea:d3:c4:51:e0:
5c:5b:44:f4:37:c4:08:b6:19:34:07:24:b0:22:0a:
5d:95:16:2a:4b:43:ec:0b:89:f9:28:65:55:a2:a6:
ed:77:f5:e0:07:0f:35:37:67:6b:d9:2b:86:26:1a:
22:ac:11:c2:e6:b6:02:30:b3:05:9e:f4:29:da:44:
0b:7c:ba:eb:d1:8f:7a:09:55:56:a4:0f:7e:6f:9a:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:EE:2F:6B:87:17:02:0B:91:5A:E9:66:EB:9F:FD:B5:38:92:F2
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/V2buL2uHFwILkVrpZuuf_bU4kvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.144.0/20
185.11.36.0/22
IPv6:
2a03:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:8d:29:14:0c:6e:45:1c:38:ce:2e:1a:a6:f4:13:bc:a2:ec:
0d:63:2b:00:59:c0:21:20:1e:ea:c0:b0:77:79:49:43:5c:fa:
f8:b0:fa:a9:8a:98:a1:43:c5:1f:25:70:c2:0f:cb:f5:16:84:
a9:48:ab:04:56:0a:c9:8e:45:4b:62:ab:95:0e:eb:83:77:e7:
d8:06:dd:b4:0e:f2:8b:94:22:17:04:fa:f4:bf:c1:cb:5b:19:
39:8e:a2:db:50:c8:0f:4b:ab:b0:25:d6:a0:5b:88:67:59:e6:
d9:04:52:56:3b:9a:97:3c:25:7f:2a:2a:cd:e2:a1:4b:5c:45:
90:74:99:14:bf:2e:54:dc:b3:ac:47:07:0c:3d:ee:0e:1c:60:
a6:3f:6e:ea:8a:64:4d:ea:61:a5:95:ef:c5:af:97:ce:03:00:
b0:91:4c:70:71:79:ad:bf:75:37:71:fd:9a:73:cb:87:02:bb:
81:43:41:3c:6e:b2:db:ea:77:2f:8f:82:ff:0c:b6:32:19:45:
39:d3:86:80:66:8f:9f:b7:29:b4:5d:d1:fb:f5:30:d9:f1:c8:
db:20:94:ac:e4:bb:6d:35:b3:37:a5:ef:88:b6:fa:5f:15:56:
a1:94:f7:c7:1e:dd:6e:18:f3:ee:ed:aa:5b:25:4a:bd:e8:fe:
25:62:4f:69
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYUMQW9nHeumoeAhAVBLSv87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYmQ1ZjU0OTA1ZWU4ZTRkMjgzMGM2Y2Y1MGY2MGQyNjQy
MDFhOTMwHhcNMjIxMjEzMTYxMTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzY2ZWUyZjZiODcxNzAyMGI5MTVhZTk2NmViOWZmZGI1Mzg5MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t578b3hd1YGMox0y08pqg8VVz4s
PuWu6twE0cSCLbrju68unl3vyNASdT0uEYPm/4yWNpi4k68egob+nXMHw6REQbIn
mglHEJzlCD+QD4x+kCYS/SaseNVkgAdmP0LLxa8nFnKAREjmtVti9BFSci4pTZKq
sHa9TnYcjPWSPMLhMtJJgaeyxhC9R5w2nBQHKgpbYVsY4wu3aWyasH2mk30u1MdH
cF0KzZ3e1GlO6tPEUeBcW0T0N8QIthk0BySwIgpdlRYqS0PsC4n5KGVVoqbtd/Xg
Bw81N2dr2SuGJhoirBHC5rYCMLMFnvQp2kQLfLrr0Y96CVVWpA9+b5q0jwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFdm7i9rhxcCC5Fa6Wbrn/21OJLyMB8GA1UdIwQY
MBaAFA69X1SQXujk0oMMbPUPYNJkIBqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMt
NjRhMjdlOTc3ZmQ5LzEvVjJidUwydUhGd0lMa1ZycFp1dWZfYlU0a3ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMtNjRhMjdlOTc3ZmQ5
LzEvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXbqQAwQC
uQskMA0EAgACMAcDBQMqA36AMA0GCSqGSIb3DQEBCwUAA4IBAQBPjSkUDG5FHDjO
Lhqm9BO8ouwNYysAWcAhIB7qwLB3eUlDXPr4sPqpipihQ8UfJXDCD8v1FoSpSKsE
VgrJjkVLYquVDuuDd+fYBt20DvKLlCIXBPr0v8HLWxk5jqLbUMgPS6uwJdagW4hn
WebZBFJWO5qXPCV/KirN4qFLXEWQdJkUvy5U3LOsRwcMPe4OHGCmP27qimRN6mGl
le/Fr5fOAwCwkUxwcXmtv3U3cf2ac8uHAruBQ0E8brLb6ncvj4L/DLYyGUU504aA
Zo+ftym0XdH79TDZ8cjbIJSs5LttNbM3pe+ItvpfFVahlPfHHt1uGPPu7apbJUq9
6P4lYk9p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:40 2024 by rpki-client on console-fra.rpki-client.org