Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/dNM60DMd_7quwY9PZ8NMPX72Vrc.roa
File: dNM60DMd_7quwY9PZ8NMPX72Vrc.roa (raw, json)
Hash identifier: EY6K79IAXq3Py/kLz9S3NFDMK5D90BwOOsykyvU4Edg=
Subject key identifier: 74:D3:3A:D0:33:1D:FF:BA:AE:C1:8F:4F:67:C3:4C:3D:7E:F6:56:B7
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 037FFEB1
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/dNM60DMd_7quwY9PZ8NMPX72Vrc.roa
Signing time: Sat 01 Jan 2022 02:58:34 +0000
ROA not before: Sat 01 Jan 2022 02:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197113
IP address blocks: 185.242.152.0/23 maxlen: 24
185.242.154.0/23 maxlen: 24
46.174.224.0/21 maxlen: 21
2a0c:ce80:60::/44 maxlen: 44
2a0c:ce80:50::/44 maxlen: 44
2a0c:ce80:40::/44 maxlen: 44
2a0c:ce80:30::/44 maxlen: 44
2a0c:ce80:20::/44 maxlen: 44
2a0c:ce80:10::/44 maxlen: 44
2a0c:ce80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58719921 (0x37ffeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Jan 1 02:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74d33ad0331dffbaaec18f4f67c34c3d7ef656b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:f5:c4:89:c1:82:b7:b3:f4:3e:05:79:e1:
c2:fe:32:87:f2:b6:3c:b7:ea:fb:80:0e:a2:aa:f1:
ad:b3:1a:c4:a3:7e:5c:fa:cc:c4:04:1b:8a:ad:3a:
60:36:d0:be:74:0d:ca:48:a9:29:57:26:08:4f:29:
ca:f2:9c:ce:44:3f:8d:73:02:0b:54:1b:a3:c5:55:
e8:85:55:45:da:53:89:41:9e:96:b1:ae:ef:54:67:
15:d7:26:68:98:ad:fa:d3:22:c8:a4:65:db:ca:d8:
16:e8:2b:34:bc:30:4e:ad:67:8f:c1:b9:10:e2:12:
32:ea:ce:0c:2a:98:90:37:b3:ab:66:81:a8:9a:33:
35:5f:fe:65:43:52:9a:43:5a:1c:15:7d:1e:24:ca:
b4:02:0f:6c:02:0e:ef:60:de:07:ed:ed:d6:f0:85:
08:eb:80:9d:02:27:e2:fe:cf:38:47:51:0a:8a:6e:
7b:37:ab:66:b9:c8:31:42:f4:c6:ae:a2:8f:d8:45:
82:05:84:41:41:fb:81:78:7b:ab:89:79:1a:96:d7:
78:4b:57:c1:84:fe:c5:0a:2f:69:3e:7d:ea:0d:6a:
db:1d:61:9c:24:8b:c1:b1:0f:8c:e1:81:f3:b3:56:
8e:55:67:03:58:32:ce:63:ca:0a:e1:fe:74:ee:16:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:3A:D0:33:1D:FF:BA:AE:C1:8F:4F:67:C3:4C:3D:7E:F6:56:B7
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/dNM60DMd_7quwY9PZ8NMPX72Vrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.224.0/21
185.242.152.0/22
IPv6:
2a0c:ce80::/48
2a0c:ce80:10::-2a0c:ce80:6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:bb:91:c3:90:fa:fd:8a:d9:ea:f0:31:f1:37:8c:73:1f:f2:
33:2c:9a:4d:5d:d0:57:ad:df:94:86:7f:92:58:4e:4d:32:f2:
85:3a:f8:ed:12:3a:25:c5:26:e4:ec:50:4a:ef:b0:77:c0:aa:
1f:0e:4f:67:1e:32:e4:bb:bf:c6:09:84:e2:3f:85:88:46:7c:
81:07:70:15:be:b9:a3:65:d1:94:7c:f1:95:69:6b:eb:68:bf:
ec:7d:3a:12:5d:a7:54:61:28:b1:28:7b:be:3c:5e:51:56:51:
bd:d1:8a:d4:11:e5:25:6d:da:0a:fa:3a:14:55:2f:f9:4f:47:
c7:a1:84:e8:17:55:90:c7:a7:97:59:68:08:5f:4c:1f:45:5a:
da:60:fd:9b:1d:7a:1f:68:54:60:4e:17:b5:25:66:f5:b3:f4:
00:52:8b:1b:27:93:04:ba:e5:95:19:37:1b:c7:bd:9f:09:ab:
ad:6a:89:d0:e7:ba:44:75:f8:58:41:83:4b:1b:e0:ae:db:a2:
de:7e:0e:47:05:13:bf:bf:48:b0:ec:26:50:d5:7c:3c:44:88:
b6:49:34:de:52:34:65:c5:82:dd:ce:b0:74:39:7b:f4:ce:52:
0a:9e:57:97:57:4e:45:5e:b0:1e:06:28:0e:30:75:7c:73:e5:
b1:fb:1e:74
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIEA3/+sTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDVlZmQ2YzQ3NzgwNmJkNmI0NTI2NzU1OGQ2ODI4ZmVlYzYxZWE2MB4XDTIyMDEw
MTAyNTgzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzRkMzNhZDAzMzFk
ZmZiYWFlYzE4ZjRmNjdjMzRjM2Q3ZWY2NTZiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSz9cSJwYK3s/Q+BXnhwv4yh/K2PLfq+4AOoqrxrbMaxKN+
XPrMxAQbiq06YDbQvnQNykipKVcmCE8pyvKczkQ/jXMCC1Qbo8VV6IVVRdpTiUGe
lrGu71RnFdcmaJit+tMiyKRl28rYFugrNLwwTq1nj8G5EOISMurODCqYkDezq2aB
qJozNV/+ZUNSmkNaHBV9HiTKtAIPbAIO72DeB+3t1vCFCOuAnQIn4v7POEdRCopu
ezerZrnIMUL0xq6ij9hFggWEQUH7gXh7q4l5GpbXeEtXwYT+xQovaT596g1q2x1h
nCSLwbEPjOGB87NWjlVnA1gyzmPKCuH+dO4WTkcCAwEAAaOCAjQwggIwMB0GA1Ud
DgQWBBR00zrQMx3/uq7Bj09nw0w9fvZWtzAfBgNVHSMEGDAWgBSUXv1sR3gGvWtF
JnVY1oKP7sYepjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xGNzliRWQ0QnIxclJTWjFXTmFDai03R0hxWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvMzI4ZmFiLTRlYmMtNGUxZi04NDBlLWJjNDI0MzQ5YTE2ZS8x
L2ROTTYwRE1kXzdxdXdZOVBaOE5NUFg3MlZyYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
MzI4ZmFiLTRlYmMtNGUxZi04NDBlLWJjNDI0MzQ5YTE2ZS8xL2xGNzliRWQ0QnIx
clJTWjFXTmFDai03R0hxWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBK
BggrBgEFBQcBBwEB/wQ7MDkwEgQCAAEwDAMEAy6u4AMEArnymDAjBAIAAjAdAwcA
KgzOgAAAMBIDBwQqDM6AABADBwQqDM6AAGAwDQYJKoZIhvcNAQELBQADggEBAF27
kcOQ+v2K2erwMfE3jHMf8jMsmk1d0Fet35SGf5JYTk0y8oU6+O0SOiXFJuTsUErv
sHfAqh8OT2ceMuS7v8YJhOI/hYhGfIEHcBW+uaNl0ZR88ZVpa+tov+x9OhJdp1Rh
KLEoe748XlFWUb3RitQR5SVt2gr6OhRVL/lPR8ehhOgXVZDHp5dZaAhfTB9FWtpg
/Zsdeh9oVGBOF7UlZvWz9ABSixsnkwS65ZUZNxvHvZ8Jq61qidDnukR1+FhBg0sb
4K7bot5+DkcFE7+/SLDsJlDVfDxEiLZJNN5SNGXFgt3OsHQ5e/TOUgqeV5dXTkVe
sB4GKA4wdXxz5bH7HnQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-ams.rpki-client.org