Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/e2DLzT7vFKPqTiJ68Mzbtvuny24.roa
File: e2DLzT7vFKPqTiJ68Mzbtvuny24.roa (raw, json)
Hash identifier: XOP+I3DtEMFWgd/8Ox64aPhRdQy5+L/wy5iJ4DmG2GI=
Subject key identifier: 7B:60:CB:CD:3E:EF:14:A3:EA:4E:22:7A:F0:CC:DB:B6:FB:A7:CB:6E
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01843324F3344B2497F7A16C2BB4374612AE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/e2DLzT7vFKPqTiJ68Mzbtvuny24.roa
Signing time: Tue 01 Nov 2022 12:22:50 +0000
ROA not before: Tue 01 Nov 2022 12:22:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.44.0/22 maxlen: 22
194.64.172.0/22 maxlen: 22
195.180.140.0/22 maxlen: 22
194.163.72.0/22 maxlen: 22
195.179.80.0/22 maxlen: 22
212.224.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:24:f3:34:4b:24:97:f7:a1:6c:2b:b4:37:46:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Nov 1 12:22:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b60cbcd3eef14a3ea4e227af0ccdbb6fba7cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:9a:59:d3:e7:41:58:75:85:74:71:41:e5:
78:67:79:13:94:ab:36:2f:d9:72:95:fd:4e:5f:ea:
f8:a0:ae:a6:08:01:9d:59:88:a9:a5:fe:d7:51:78:
d8:f1:86:7b:9d:96:b6:4f:7b:98:10:88:26:2c:ec:
f7:55:49:66:f7:28:c7:6e:11:53:1b:df:f2:d9:11:
42:4e:96:b1:4f:4d:07:3c:40:97:e7:f3:8b:73:9b:
b9:83:01:10:62:75:8b:f5:d3:7d:33:03:60:e4:01:
2b:61:1f:1e:b6:39:e6:89:25:95:34:3b:42:c2:5a:
5b:86:eb:e5:38:40:b6:7f:06:7d:bc:4f:e0:8d:2e:
99:64:20:9b:d7:7e:f9:6f:7c:50:12:ad:0e:43:f4:
0d:c1:51:a6:40:3d:e2:ff:5f:9a:3a:84:8f:41:a4:
1a:c7:c1:e5:0f:ab:db:6c:25:b0:16:de:b7:18:54:
be:ad:a5:08:81:27:b0:c8:1c:8b:ff:2b:0c:c9:c8:
fb:6f:27:50:7b:ae:09:43:88:d8:be:ef:d8:f0:75:
dc:c1:88:57:1a:a2:c4:79:1e:1d:1b:31:2c:54:b9:
8f:18:9d:2e:86:b1:6c:47:23:7d:ac:80:97:68:11:
32:71:23:6d:cb:91:33:5f:be:7b:ad:23:83:92:27:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:CB:CD:3E:EF:14:A3:EA:4E:22:7A:F0:CC:DB:B6:FB:A7:CB:6E
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/e2DLzT7vFKPqTiJ68Mzbtvuny24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.172.0/22
194.163.72.0/22
195.179.44.0/22
195.179.80.0/22
195.180.140.0/22
212.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
88:38:2c:29:20:76:53:1f:b4:a0:31:40:0c:62:55:a3:0d:3b:
62:e0:88:80:99:16:4a:21:ea:e1:10:d2:4c:6e:38:7f:36:fd:
54:d3:7b:49:c5:79:8f:e6:cc:3a:2a:41:1c:3f:2e:10:3f:36:
8f:7e:bc:42:a0:96:a8:cf:f4:1e:09:2f:1f:4f:9c:f2:16:87:
17:65:e1:f8:27:0e:c9:4d:20:87:d5:a3:fd:d7:bc:92:46:b8:
4a:d4:a8:0a:5a:9b:a1:a3:45:6c:4b:71:41:6e:22:d6:d5:3e:
35:c3:35:81:07:62:7d:35:a2:52:3e:56:d5:e7:c4:fa:72:76:
31:54:46:d6:0c:c5:13:48:e1:35:83:a5:b9:bb:04:84:ae:ec:
e4:7c:82:0a:7a:0a:d9:d6:82:1d:e9:95:f4:c4:66:b1:7d:83:
81:00:10:bd:e3:81:67:b5:71:ae:ad:29:e8:2e:76:8b:d5:7e:
f7:7f:d2:22:06:76:d7:8f:32:7c:ce:65:0d:5e:ed:db:15:8a:
57:06:e6:34:42:ca:ed:9d:db:dc:9b:20:9e:8d:53:01:1b:fe:
00:c9:c9:bf:70:14:30:96:89:ef:57:cf:e3:b6:82:6b:7b:72:
8f:3a:a7:e2:a9:71:0c:74:a2:f3:5b:9d:c5:11:b8:2e:5f:9a:
cf:49:77:f4
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYQzJPM0SySX96FsK7Q3RhKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjIxMTAxMTIyMjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjYwY2JjZDNlZWYxNGEzZWE0ZTIyN2FmMGNjZGJiNmZiYTdjYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwWaWdPnQVh1hXRxQeV4Z3kTlKs2
L9lylf1OX+r4oK6mCAGdWYippf7XUXjY8YZ7nZa2T3uYEIgmLOz3VUlm9yjHbhFT
G9/y2RFCTpaxT00HPECX5/OLc5u5gwEQYnWL9dN9MwNg5AErYR8etjnmiSWVNDtC
wlpbhuvlOEC2fwZ9vE/gjS6ZZCCb1375b3xQEq0OQ/QNwVGmQD3i/1+aOoSPQaQa
x8HlD6vbbCWwFt63GFS+raUIgSewyByL/ysMycj7bydQe64JQ4jYvu/Y8HXcwYhX
GqLEeR4dGzEsVLmPGJ0uhrFsRyN9rICXaBEycSNty5EzX757rSODkicINQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHtgy80+7xSj6k4ievDM27b7p8tuMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvZTJETHpUN3ZGS1BxVGlKNjhNemJ0dnVueTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCwkCsAwQC
wqNIAwQCw7MsAwQCw7NQAwQCw7SMAwQC1OAAMA0GCSqGSIb3DQEBCwUAA4IBAQCI
OCwpIHZTH7SgMUAMYlWjDTti4IiAmRZKIerhENJMbjh/Nv1U03tJxXmP5sw6KkEc
Py4QPzaPfrxCoJaoz/QeCS8fT5zyFocXZeH4Jw7JTSCH1aP917ySRrhK1KgKWpuh
o0VsS3FBbiLW1T41wzWBB2J9NaJSPlbV58T6cnYxVEbWDMUTSOE1g6W5uwSEruzk
fIIKegrZ1oId6ZX0xGaxfYOBABC944FntXGurSnoLnaL1X73f9IiBnbXjzJ8zmUN
Xu3bFYpXBuY0QsrtndvcmyCejVMBG/4Aycm/cBQwlonvV8/jtoJre3KPOqfiqXEM
dKLzW53FEbguX5rPSXf0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org