Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/XWmRxw6b1XbcarU0lGj1HypEeIs.roa
File: XWmRxw6b1XbcarU0lGj1HypEeIs.roa (raw, json)
Hash identifier: v5GlGwOFPG5KzXrLv1gg1aXZAGwTDt5+R7knI9b8eko=
Subject key identifier: 5D:69:91:C7:0E:9B:D5:76:DC:6A:B5:34:94:68:F5:1F:2A:44:78:8B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 0848C666
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/XWmRxw6b1XbcarU0lGj1HypEeIs.roa
Signing time: Sat 01 Jan 2022 16:02:54 +0000
ROA not before: Sat 01 Jan 2022 16:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199571
IP address blocks: 37.9.136.0/21 maxlen: 21
185.219.228.0/22 maxlen: 22
2a02:e640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138987110 (0x848c666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Jan 1 16:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d6991c70e9bd576dc6ab5349468f51f2a44788b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:14:a0:f3:51:d8:fd:5f:78:b4:9f:17:f0:
e9:97:cf:67:4e:eb:72:c2:5b:d4:08:91:2e:e2:22:
d0:08:8f:be:7d:22:87:12:f6:20:87:da:e4:98:75:
d6:55:5d:a8:de:38:de:a2:40:eb:9f:3d:7c:8a:6c:
04:02:3f:e6:ac:68:cd:9e:9e:b3:6b:24:e2:a1:fa:
29:85:87:0a:89:5d:13:8d:f1:29:aa:c0:5d:83:aa:
f1:90:48:b3:30:d7:a3:8e:96:89:22:f8:53:d9:bf:
18:1a:f4:fd:21:07:f4:8a:0f:df:00:41:e3:72:0b:
af:6e:bf:05:4b:c6:90:f8:50:aa:c8:d6:1d:91:7f:
21:74:39:36:1e:53:4d:ab:08:e1:01:ef:fc:bd:f7:
da:9a:27:a2:21:f2:a9:2d:5b:b6:16:9b:c8:6b:91:
4e:b7:3e:23:21:62:e3:2b:b9:13:c9:98:bc:c2:11:
7a:c3:89:d5:3c:11:e3:05:f5:e6:2a:90:06:84:65:
55:9f:63:13:d5:6d:19:c4:59:bb:78:dc:28:0f:ee:
4e:8c:5c:e7:ca:64:24:db:e6:63:92:fa:bf:03:4c:
22:e4:f0:62:f5:2d:91:57:6e:ce:67:25:26:ed:70:
c1:ac:de:e2:21:46:8c:be:fc:4f:3a:1e:7f:ce:34:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:91:C7:0E:9B:D5:76:DC:6A:B5:34:94:68:F5:1F:2A:44:78:8B
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/XWmRxw6b1XbcarU0lGj1HypEeIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.136.0/21
185.219.228.0/22
IPv6:
2a02:e640::/29
Signature Algorithm: sha256WithRSAEncryption
79:37:b0:6c:9c:72:ca:10:1d:61:7a:1b:6b:cf:8d:6a:6c:a8:
4b:0c:31:56:d1:a9:56:0e:63:3d:88:22:8e:99:0e:45:b3:7c:
1d:8a:0c:53:4f:50:14:ea:6a:b7:27:d8:22:2c:12:22:76:2a:
48:d5:a7:cf:e9:ed:34:98:ba:b9:e4:1e:e0:77:92:be:43:4c:
c8:b9:ad:20:36:ef:46:10:e4:c0:3b:15:ff:0e:c7:8b:9f:d3:
a5:5f:dd:16:cc:8a:c4:00:a5:f8:1b:5c:6b:4f:96:69:f2:87:
6c:74:0e:6c:c4:ba:79:41:0c:81:bf:02:38:4b:79:e9:c0:30:
f3:22:5e:7a:41:a3:31:ff:2a:51:6c:1e:fa:22:d4:50:49:e9:
59:5b:a6:42:9a:33:d7:80:a4:37:4c:ea:47:2d:ad:65:31:b9:
0d:d9:42:0d:e1:6e:63:88:a0:a6:78:bf:12:f0:dd:d3:ae:f6:
a9:7f:24:a4:23:d1:42:08:de:98:e5:e1:48:f9:16:79:30:32:
63:af:2d:a9:48:f1:61:60:70:0e:e0:e8:ef:0f:94:01:53:2f:
70:e1:73:55:07:54:98:8d:99:60:58:15:2e:51:29:3e:16:e0:
12:f0:dc:84:bb:49:d8:72:e3:f4:06:f2:1d:cb:6c:87:8c:c2:
87:f9:b1:63
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECEjGZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Y2EzM2M5NmYwMmE5ZjBiZWYyNWNkMzgwNmEyNDY3Y2ExNjU2MzdiMB4XDTIyMDEw
MTE2MDI1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWQ2OTkxYzcwZTli
ZDU3NmRjNmFiNTM0OTQ2OGY1MWYyYTQ0Nzg4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzEFKDzUdj9X3i0nxfw6ZfPZ07rcsJb1AiRLuIi0AiPvn0i
hxL2IIfa5Jh11lVdqN443qJA6589fIpsBAI/5qxozZ6es2sk4qH6KYWHColdE43x
KarAXYOq8ZBIszDXo46WiSL4U9m/GBr0/SEH9IoP3wBB43ILr26/BUvGkPhQqsjW
HZF/IXQ5Nh5TTasI4QHv/L332ponoiHyqS1bthabyGuRTrc+IyFi4yu5E8mYvMIR
esOJ1TwR4wX15iqQBoRlVZ9jE9VtGcRZu3jcKA/uToxc58pkJNvmY5L6vwNMIuTw
YvUtkVduzmclJu1wwaze4iFGjL78Tzoef8407f8CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRdaZHHDpvVdtxqtTSUaPUfKkR4izAfBgNVHSMEGDAWgBTsozyW8CqfC+8l
zTgGokZ8oWVjezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdLTThsdkFxbnd2dkpjMDRCcUpHZktGbFkzcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNDlhZTQyLTBlOWEtNGUyNC1iYTE1LTI1ZWYyOTkwZjE2Ni8x
L1hXbVJ4dzZiMVhiY2FyVTBsR2oxSHlwRWVJcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NDlhZTQyLTBlOWEtNGUyNC1iYTE1LTI1ZWYyOTkwZjE2Ni8xLzdLTThsdkFxbnd2
dkpjMDRCcUpHZktGbFkzcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAyUJiAMEArnb5DANBAIAAjAHAwUD
KgLmQDANBgkqhkiG9w0BAQsFAAOCAQEAeTewbJxyyhAdYXoba8+NamyoSwwxVtGp
Vg5jPYgijpkORbN8HYoMU09QFOpqtyfYIiwSInYqSNWnz+ntNJi6ueQe4HeSvkNM
yLmtIDbvRhDkwDsV/w7Hi5/TpV/dFsyKxACl+Btca0+WafKHbHQObMS6eUEMgb8C
OEt56cAw8yJeekGjMf8qUWwe+iLUUEnpWVumQpoz14CkN0zqRy2tZTG5DdlCDeFu
Y4igpni/EvDd0672qX8kpCPRQgjemOXhSPkWeTAyY68tqUjxYWBwDuDo7w+UAVMv
cOFzVQdUmI2ZYFgVLlEpPhbgEvDchLtJ2HLj9AbyHctsh4zCh/mxYw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org