Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RGiCcsxJ2n3Zq4w-pZEVA4nZS1o.roa
File: RGiCcsxJ2n3Zq4w-pZEVA4nZS1o.roa (raw, json)
Hash identifier: GPvp6A3xifUhMW9mWTJA4Zqyyy2iMSp02oLRJo/xrjA=
Subject key identifier: 44:68:82:72:CC:49:DA:7D:D9:AB:8C:3E:A5:91:15:03:89:D9:4B:5A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1AFFAACD
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RGiCcsxJ2n3Zq4w-pZEVA4nZS1o.roa
Signing time: Thu 05 May 2022 12:16:04 +0000
ROA not before: Thu 05 May 2022 12:16:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8751
IP address blocks: 193.226.85.0/24 maxlen: 32
81.180.224.0/24 maxlen: 32
193.231.169.0/24 maxlen: 32
81.181.146.0/24 maxlen: 32
80.96.28.0/24 maxlen: 32
85.120.250.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452963021 (0x1affaacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 5 12:16:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44688272cc49da7dd9ab8c3ea591150389d94b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:6f:45:1b:11:2b:9f:ec:d7:37:ec:b6:65:
c6:3f:b1:9d:f3:cf:72:e4:20:de:8c:19:6c:a1:6f:
a2:17:db:3d:a4:ff:eb:f3:16:78:f1:93:45:46:0b:
7a:30:bc:d0:b1:c2:7d:26:38:cc:f7:b7:74:c5:58:
b4:ff:ee:b0:5d:f7:59:b1:77:cb:b0:bf:6b:a6:02:
43:35:df:be:35:84:f2:7b:e5:b7:a4:75:e9:f5:fe:
ee:3e:c0:88:44:cd:ea:1b:11:88:b4:ff:88:e5:e1:
79:56:1a:45:53:f1:04:6e:d8:ea:b7:6f:5e:10:34:
25:ae:dc:29:22:8e:42:aa:e3:98:c4:81:1b:f7:cd:
67:bb:ea:b3:ab:00:25:6d:0e:97:ac:a3:1a:e0:37:
95:06:63:42:28:2b:98:f6:3f:12:ae:56:0c:ff:78:
71:8f:b7:0d:57:f4:67:6f:7d:78:aa:6c:a4:62:3c:
9d:ab:fa:db:d8:32:78:fa:fc:6b:e7:58:54:57:71:
7f:99:0d:50:89:75:fa:11:06:4d:b3:cd:b4:6a:ae:
15:82:48:79:fb:fb:f2:f6:44:99:af:5e:14:d7:74:
84:4b:ad:6c:84:4d:84:64:41:99:1d:ff:a8:fd:20:
22:c2:d8:e1:e2:fd:58:0c:32:01:63:1e:30:08:3d:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:82:72:CC:49:DA:7D:D9:AB:8C:3E:A5:91:15:03:89:D9:4B:5A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RGiCcsxJ2n3Zq4w-pZEVA4nZS1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.28.0/24
81.180.224.0/24
81.181.146.0/24
85.120.250.0/24
193.226.85.0/24
193.231.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:01:90:6e:a8:fc:9b:2d:94:30:c2:4d:02:04:74:f3:c5:59:
80:2a:99:03:25:65:ea:77:b4:04:9e:44:20:7d:c3:49:e5:e8:
d8:06:73:81:3b:c5:19:72:50:2e:c3:ae:20:95:07:4f:37:96:
54:4d:f4:93:41:2f:d2:69:26:f9:93:9e:d4:97:51:39:38:8d:
6f:10:4f:76:28:0d:58:80:a0:39:76:db:fc:3b:c3:52:f0:bc:
ad:e6:3a:bc:40:dd:ea:e7:87:85:f4:fd:c1:49:c4:e0:f4:a6:
ab:66:f2:3a:78:e9:01:bd:26:b3:2a:c3:94:65:fe:56:39:e2:
72:26:4f:3b:a7:6d:86:57:b3:51:17:28:5b:9b:fb:6a:ee:ee:
d5:0d:84:60:17:b0:7e:34:ee:7c:99:ca:31:cb:6f:49:9b:fe:
2e:82:fb:c7:ae:ae:b1:0f:85:f9:59:ee:ad:bc:66:42:ca:bf:
90:01:47:bd:90:5d:67:2e:5f:4a:79:68:81:bf:14:43:3a:3f:
42:a3:19:14:cd:2a:c3:03:bb:54:7f:aa:02:1a:8d:01:9e:62:
39:e9:12:65:55:d3:8a:e8:94:c9:36:02:f6:d8:d4:46:01:8e:
9b:b4:fd:a6:26:18:75:af:2d:41:4d:58:3f:ee:0f:82:1d:22:
4d:fe:2f:23
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEGv+qzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDUw
NTEyMTYwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQ2ODgyNzJjYzQ5
ZGE3ZGQ5YWI4YzNlYTU5MTE1MDM4OWQ5NGI1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMe6b0UbESuf7Nc37LZlxj+xnfPPcuQg3owZbKFvohfbPaT/
6/MWePGTRUYLejC80LHCfSY4zPe3dMVYtP/usF33WbF3y7C/a6YCQzXfvjWE8nvl
t6R16fX+7j7AiETN6hsRiLT/iOXheVYaRVPxBG7Y6rdvXhA0Ja7cKSKOQqrjmMSB
G/fNZ7vqs6sAJW0Ol6yjGuA3lQZjQigrmPY/Eq5WDP94cY+3DVf0Z299eKpspGI8
nav629gyePr8a+dYVFdxf5kNUIl1+hEGTbPNtGquFYJIefv78vZEma9eFNd0hEut
bIRNhGRBmR3/qP0gIsLY4eL9WAwyAWMeMAg96j0CAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBREaIJyzEnafdmrjD6lkRUDidlLWjAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L1JHaUNjc3hKMm4zWnE0dy1wWkVWQTRuWlMxby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFBgHAMEAFG04AMEAFG1kgMEAFV4
+gMEAMHiVQMEAMHnqTANBgkqhkiG9w0BAQsFAAOCAQEAagGQbqj8my2UMMJNAgR0
88VZgCqZAyVl6ne0BJ5EIH3DSeXo2AZzgTvFGXJQLsOuIJUHTzeWVE30k0Ev0mkm
+ZOe1JdROTiNbxBPdigNWICgOXbb/DvDUvC8reY6vEDd6ueHhfT9wUnE4PSmq2by
OnjpAb0msyrDlGX+VjniciZPO6dthlezURcoW5v7au7u1Q2EYBewfjTufJnKMctv
SZv+LoL7x66usQ+F+VnurbxmQsq/kAFHvZBdZy5fSnlogb8UQzo/QqMZFM0qwwO7
VH+qAhqNAZ5iOekSZVXTiuiUyTYC9tjURgGOm7T9piYYda8tQU1YP+4Pgh0iTf4v
Iw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org