Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/c7qEpQB5tFftIS_VRMZnn0yMc-Y.roa
File: c7qEpQB5tFftIS_VRMZnn0yMc-Y.roa (raw, json)
Hash identifier: +YIvPoz85GKr/qGRRPP04MaEib2v1G56Ztm2TI+w2kM=
Subject key identifier: 73:BA:84:A5:00:79:B4:57:ED:21:2F:D5:44:C6:67:9F:4C:8C:73:E6
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 018234ABFE9643390A305E95F70DDBA192B3
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/c7qEpQB5tFftIS_VRMZnn0yMc-Y.roa
Signing time: Mon 25 Jul 2022 09:24:23 +0000
ROA not before: Mon 25 Jul 2022 09:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 130.255.16.0/22 maxlen: 22
130.255.16.0/23 maxlen: 23
185.17.44.0/22 maxlen: 22
130.255.18.0/24 maxlen: 24
130.255.20.0/24 maxlen: 24
130.255.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:ab:fe:96:43:39:0a:30:5e:95:f7:0d:db:a1:92:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Jul 25 09:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73ba84a50079b457ed212fd544c6679f4c8c73e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:16:44:ee:6a:9f:f7:33:dd:88:40:2a:53:
15:9e:82:89:40:b7:51:5b:92:45:2c:9f:79:fa:fa:
6f:4e:4c:d6:1e:c4:06:f4:1f:b5:ad:2f:29:4e:19:
fd:95:b5:3d:a5:e6:46:fa:9f:35:fa:54:54:92:f3:
22:c1:f4:8e:58:be:a2:16:4d:1c:72:5f:70:3b:46:
4f:ad:2b:44:05:3d:92:ad:fe:ad:9f:ca:b7:5d:32:
32:c2:41:b5:f5:f7:e7:ac:6c:cb:88:15:2c:2a:df:
06:8f:8b:f0:07:e4:d4:ee:1e:17:9c:3f:74:e8:d5:
8f:79:12:17:3f:61:8e:33:a8:db:74:43:5d:57:68:
67:72:d2:3c:bb:5f:a5:8d:49:4e:2d:ef:2b:1f:ba:
98:f5:4a:86:0e:79:0c:3f:73:3b:fb:1f:66:a2:ee:
99:7f:58:1d:80:a8:df:7b:0c:2f:c7:8d:51:06:57:
cc:55:8b:dd:f4:a5:b4:f4:42:6e:77:7e:8c:af:18:
24:34:a9:86:5d:f2:50:00:a2:44:12:e2:ab:b8:1f:
0e:14:ad:76:57:10:16:55:d2:cf:9d:f3:a4:84:64:
0d:ff:2f:1c:a5:97:fd:a1:80:bb:94:48:a7:5a:2b:
28:81:fe:06:7e:40:8c:e9:5b:cd:b3:45:c1:53:c1:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BA:84:A5:00:79:B4:57:ED:21:2F:D5:44:C6:67:9F:4C:8C:73:E6
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/c7qEpQB5tFftIS_VRMZnn0yMc-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.16.0-130.255.20.255
130.255.27.0/24
185.17.44.0/22
Signature Algorithm: sha256WithRSAEncryption
55:7a:37:ad:a4:b2:22:9b:d6:1d:5e:d9:da:17:78:71:db:cc:
96:78:d3:58:34:44:5e:fb:5a:19:af:78:f0:ab:70:5d:64:08:
cf:aa:43:0c:a3:03:a0:b4:17:ea:40:e1:1a:a4:27:c6:0c:3b:
56:ed:bd:cd:71:f4:5e:f7:12:b3:44:74:9a:70:c2:e6:de:37:
97:25:78:87:77:79:83:d2:f5:ea:06:d0:8d:39:56:85:13:c5:
24:6d:72:d3:43:5a:79:42:82:00:ff:32:0c:eb:0f:d8:9d:f3:
24:0a:b6:96:93:46:44:7a:22:0c:8d:40:bf:3c:c8:91:2f:f5:
d5:64:eb:a5:98:26:86:43:f6:8d:00:32:e1:cd:fc:57:51:c5:
d3:87:11:2a:65:42:e7:c2:ec:a1:3f:95:c4:90:da:50:cc:20:
cb:f4:c7:f5:15:00:d1:c2:63:71:80:28:f1:2a:e0:e0:5a:5d:
cd:e0:f9:a6:22:1d:0d:1c:03:b4:ab:f4:20:4d:e4:94:f9:a4:
1a:58:b2:09:1c:3c:69:05:3f:e3:f2:11:50:1d:26:e3:65:04:
51:ff:67:87:eb:25:e5:1d:a5:7e:dd:a3:01:e3:c0:3d:f8:bc:
08:15:e3:31:46:5c:af:e1:a5:96:ea:a9:06:45:f6:e9:72:62:
e9:eb:33:c7
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYI0q/6WQzkKMF6V9w3boZKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDIxZGZiMjRmN2Q4Y2UyMzExYmE0MDc2Nzc1NDc0YmQ1
MGJlNjQwHhcNMjIwNzI1MDkyNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2JhODRhNTAwNzliNDU3ZWQyMTJmZDU0NGM2Njc5ZjRjOGM3M2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoooWRO5qn/cz3YhAKlMVnoKJQLdR
W5JFLJ95+vpvTkzWHsQG9B+1rS8pThn9lbU9peZG+p81+lRUkvMiwfSOWL6iFk0c
cl9wO0ZPrStEBT2Srf6tn8q3XTIywkG19ffnrGzLiBUsKt8Gj4vwB+TU7h4XnD90
6NWPeRIXP2GOM6jbdENdV2hnctI8u1+ljUlOLe8rH7qY9UqGDnkMP3M7+x9mou6Z
f1gdgKjfewwvx41RBlfMVYvd9KW09EJud36MrxgkNKmGXfJQAKJEEuKruB8OFK12
VxAWVdLPnfOkhGQN/y8cpZf9oYC7lEinWisogf4GfkCM6VvNs0XBU8HyowIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHO6hKUAebRX7SEv1UTGZ59MjHPmMB8GA1UdIwQY
MBaAFBvSHfsk99jOIxG6QHZ3VHS9UL5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQt
Zjg3YTMyMmE3Nzc2LzEvYzdxRXBRQjV0RmZ0SVNfVlJNWm5uMHlNYy1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQtZjg3YTMyMmE3Nzc2
LzEvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBASC/xAD
BACC/xQDBACC/xsDBAK5ESwwDQYJKoZIhvcNAQELBQADggEBAFV6N62ksiKb1h1e
2doXeHHbzJZ401g0RF77WhmvePCrcF1kCM+qQwyjA6C0F+pA4RqkJ8YMO1btvc1x
9F73ErNEdJpwwubeN5cleId3eYPS9eoG0I05VoUTxSRtctNDWnlCggD/MgzrD9id
8yQKtpaTRkR6IgyNQL88yJEv9dVk66WYJoZD9o0AMuHN/FdRxdOHESplQufC7KE/
lcSQ2lDMIMv0x/UVANHCY3GAKPEq4OBaXc3g+aYiHQ0cA7Sr9CBN5JT5pBpYsgkc
PGkFP+PyEVAdJuNlBFH/Z4frJeUdpX7dowHjwD34vAgV4zFGXK/hpZbqqQZF9uly
YunrM8c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-ams.rpki-client.org