Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1IQEsPr8rFTblqhopEb2zBA6V7E.roa
File: 1IQEsPr8rFTblqhopEb2zBA6V7E.roa (raw, json)
Hash identifier: itG5bTCHvl8r0IFk0kaL+1JnDlNqg+VKxDQu/X4KXCc=
Subject key identifier: D4:84:04:B0:FA:FC:AC:54:DB:96:A8:68:A4:46:F6:CC:10:3A:57:B1
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0181D00511D61902309CEDF24855D0AB2AE2
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1IQEsPr8rFTblqhopEb2zBA6V7E.roa
Signing time: Tue 05 Jul 2022 20:20:01 +0000
ROA not before: Tue 05 Jul 2022 20:20:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 91.201.140.0/23 maxlen: 23
91.201.142.0/23 maxlen: 23
139.28.136.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
195.206.111.0/24 maxlen: 24
195.206.110.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d0:05:11:d6:19:02:30:9c:ed:f2:48:55:d0:ab:2a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jul 5 20:20:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d48404b0fafcac54db96a868a446f6cc103a57b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:e1:36:94:db:77:a8:95:81:50:d4:bf:24:
5a:46:90:b2:1f:c5:2a:c7:e4:e5:53:79:6a:82:0a:
4c:0f:a4:65:d7:44:13:b6:34:ed:f3:da:c1:4a:3e:
d1:54:ab:3f:3b:fc:e0:5b:1c:6d:eb:6d:ce:26:81:
63:25:13:c1:12:d4:77:be:d0:8d:49:a5:b1:1f:c8:
95:56:6a:bb:73:84:26:bd:8b:fd:0e:be:49:c2:1c:
62:41:8e:a7:26:ef:2b:3e:8a:de:f1:a0:0a:28:a5:
c1:38:8a:c2:e0:02:bc:55:71:c3:03:ff:09:8f:bd:
69:20:bf:19:fb:d9:3b:c7:c5:bf:3d:eb:48:52:d6:
ad:12:dd:d7:7a:cd:b7:cc:0e:94:42:e0:25:28:84:
52:72:26:6c:b0:18:62:c5:06:92:93:d8:f5:01:d1:
b1:4f:9a:6c:36:9b:49:bc:fe:b2:8d:e0:9f:cf:3f:
60:bd:af:a0:f8:de:5f:55:a6:46:66:d2:9b:8f:aa:
97:65:7d:1d:f2:0c:f7:bd:28:00:8a:8d:15:2b:44:
4b:2c:ff:c3:ac:85:f6:b0:b2:a9:4e:47:5c:09:46:
f5:28:19:f8:6e:61:66:52:cc:7b:cd:04:25:c1:83:
cd:5f:ff:d3:62:6d:a1:7a:ae:62:8a:72:7c:94:14:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:84:04:B0:FA:FC:AC:54:DB:96:A8:68:A4:46:F6:CC:10:3A:57:B1
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1IQEsPr8rFTblqhopEb2zBA6V7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.101.0/24
91.201.140.0/22
92.119.181.0/24
139.28.136.0/24
195.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:c9:6a:d1:71:78:26:49:57:43:db:fa:d1:56:3d:86:63:1c:
d2:4d:99:0c:59:54:15:91:7d:5c:8d:fa:9a:ff:4f:71:7b:bc:
13:74:a6:09:ad:b2:08:09:cb:e5:45:ea:b1:e5:9d:b9:2f:8e:
57:f8:7e:66:dc:82:4e:82:05:4c:fe:45:c9:39:44:a1:6f:96:
19:88:fe:da:15:83:54:d9:c1:71:cd:b9:02:47:53:9a:a4:ad:
14:7f:3b:e8:49:6a:ed:e6:90:5b:e1:20:36:d7:e8:2b:52:7c:
f7:c6:c0:f3:59:a5:dd:56:e9:80:84:fc:d2:ab:fb:06:d6:66:
38:95:64:3a:02:dc:43:35:54:10:6f:45:ff:bc:ef:a9:ca:a9:
4b:16:61:cd:01:25:71:bc:1e:fd:c7:f1:a7:88:83:7f:2c:ca:
5e:2f:dc:e7:65:91:23:f2:42:58:49:8b:c9:04:a4:28:92:cb:
5f:81:d2:51:05:be:24:9b:fc:cd:f4:ad:06:29:84:57:fd:19:
be:1e:d6:94:b3:f1:97:76:c0:49:5e:71:0f:67:0a:c0:0b:76:
42:ab:98:05:09:3d:db:1c:48:44:c6:f8:c9:57:f2:fa:d8:2f:
1c:56:47:8b:0e:d0:92:5f:f0:3d:c4:c5:af:a4:c2:1a:34:51:
b4:d4:c2:a8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYHQBRHWGQIwnO3ySFXQqyriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx
MTliZDcwHhcNMjIwNzA1MjAyMDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDg0MDRiMGZhZmNhYzU0ZGI5NmE4NjhhNDQ2ZjZjYzEwM2E1N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuvhNpTbd6iVgVDUvyRaRpCyH8Uq
x+TlU3lqggpMD6Rl10QTtjTt89rBSj7RVKs/O/zgWxxt623OJoFjJRPBEtR3vtCN
SaWxH8iVVmq7c4QmvYv9Dr5JwhxiQY6nJu8rPore8aAKKKXBOIrC4AK8VXHDA/8J
j71pIL8Z+9k7x8W/PetIUtatEt3Xes23zA6UQuAlKIRSciZssBhixQaSk9j1AdGx
T5psNptJvP6yjeCfzz9gva+g+N5fVaZGZtKbj6qXZX0d8gz3vSgAio0VK0RLLP/D
rIX2sLKpTkdcCUb1KBn4bmFmUsx7zQQlwYPNX//TYm2heq5iinJ8lBRSWwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNSEBLD6/KxU25aoaKRG9swQOlexMB8GA1UdIwQY
MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt
YjZmMmFjODZlZjI3LzEvMUlRRXNQcjhyRlRibHFob3BFYjJ6QkE2VjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3
LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbZlAwQC
W8mMAwQAXHe1AwQAixyIAwQBw85uMA0GCSqGSIb3DQEBCwUAA4IBAQCNyWrRcXgm
SVdD2/rRVj2GYxzSTZkMWVQVkX1cjfqa/09xe7wTdKYJrbIICcvlReqx5Z25L45X
+H5m3IJOggVM/kXJOUShb5YZiP7aFYNU2cFxzbkCR1OapK0UfzvoSWrt5pBb4SA2
1+grUnz3xsDzWaXdVumAhPzSq/sG1mY4lWQ6AtxDNVQQb0X/vO+pyqlLFmHNASVx
vB79x/GniIN/LMpeL9znZZEj8kJYSYvJBKQokstfgdJRBb4km/zN9K0GKYRX/Rm+
HtaUs/GXdsBJXnEPZwrAC3ZCq5gFCT3bHEhExvjJV/L62C8cVkeLDtCSX/A9xMWv
pMIaNFG01MKo
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org