Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/k0cqAWqX-HpR2fmZNoQpmmjHGdc.roa
File: k0cqAWqX-HpR2fmZNoQpmmjHGdc.roa (raw, json)
Hash identifier: d3374EZemdSxO7xQRfZ5IlgpCisdWEmRQXeUay3oM8M=
Subject key identifier: 93:47:2A:01:6A:97:F8:7A:51:D9:F9:99:36:84:29:9A:68:C7:19:D7
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D4DF501
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/k0cqAWqX-HpR2fmZNoQpmmjHGdc.roa
Signing time: Wed 18 May 2022 07:16:16 +0000
ROA not before: Wed 18 May 2022 07:16:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.163.71.0/24 maxlen: 24
194.233.49.0/24 maxlen: 24
212.224.6.0/24 maxlen: 24
195.180.176.0/24 maxlen: 24
195.180.188.0/24 maxlen: 24
195.180.189.0/24 maxlen: 24
194.233.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223212801 (0xd4df501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 18 07:16:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93472a016a97f87a51d9f9993684299a68c719d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:9f:bf:b7:04:e7:9f:fc:bf:75:53:8e:81:
85:bb:b3:77:3f:a6:71:36:e8:fb:40:a6:f0:29:6c:
b9:f5:61:4b:be:c5:8c:b7:46:7f:ce:95:ca:4c:f2:
79:ca:41:36:83:fe:d6:f2:79:1d:9d:2e:17:2f:6a:
4a:66:b6:fc:60:00:52:98:79:6f:a4:78:e6:30:7b:
b1:52:e1:21:f0:20:a4:2a:04:8b:20:ae:7e:6d:49:
93:9b:38:3e:9c:b7:3b:62:b4:6b:85:ab:57:7e:34:
50:b8:dd:2e:64:39:b3:c5:c3:df:dc:a0:a5:16:87:
85:59:da:f9:63:a7:6b:26:eb:f9:27:6f:45:21:cf:
1c:f3:d3:f4:c5:41:0d:92:ba:06:d3:cd:b3:f0:a8:
ca:8d:eb:e3:e4:58:62:1c:0f:ee:22:ba:73:1d:19:
32:82:aa:75:2a:0f:58:a9:dd:c5:90:e8:bf:2f:04:
5f:f5:3a:c0:af:4c:16:5e:3c:42:b5:d1:6d:dc:9f:
47:d4:0e:41:85:45:db:68:00:fb:53:99:f9:65:54:
00:d0:88:4c:cf:84:04:22:b5:43:4d:b8:e6:42:f8:
d3:22:52:0e:74:63:82:3a:36:87:09:47:1d:76:13:
fc:cf:63:53:6d:cd:7d:77:02:de:c4:93:58:63:fe:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:2A:01:6A:97:F8:7A:51:D9:F9:99:36:84:29:9A:68:C7:19:D7
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/k0cqAWqX-HpR2fmZNoQpmmjHGdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.71.0/24
194.233.5.0/24
194.233.49.0/24
195.180.176.0/24
195.180.188.0/23
212.224.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:eb:2b:d6:53:40:00:ba:f3:01:da:7c:c8:d1:39:f8:15:4e:
d3:98:f6:88:3f:f0:ca:72:08:cf:d6:16:64:dc:42:3b:62:08:
61:0f:13:12:79:4b:93:c7:f7:a3:71:26:9c:57:28:20:47:ac:
b4:da:fc:ec:6e:d5:51:84:b4:0a:f4:84:52:e7:f6:07:24:f5:
e5:b8:17:7d:5b:f4:49:c6:c1:54:98:0e:97:20:bc:42:f2:f7:
af:65:59:f4:28:41:24:a2:a8:3c:dc:cd:7a:4c:28:3f:8d:8c:
a8:f2:ca:1c:39:e4:d7:51:3d:e1:f1:29:9f:b9:82:39:b7:7f:
80:6c:81:c1:33:96:e6:1f:61:07:f9:1d:ec:e9:b8:83:63:23:
d8:47:a9:fd:d8:ad:3e:0f:d6:4b:03:de:33:b0:3f:b1:9a:f6:
e3:69:b8:2b:fc:2f:f0:c2:b9:d6:2e:1d:a7:46:07:21:42:85:
1a:d8:a6:84:7a:20:8f:d0:29:90:c7:75:f4:39:88:d3:b1:b9:
fb:c7:e2:99:cc:10:55:01:ff:72:00:f8:d1:b2:da:c2:4e:2e:
b2:64:01:05:4f:7e:db:be:6a:9f:d0:6f:48:b4:fc:0c:45:0d:
9a:7f:40:cf:d5:35:53:18:a8:dd:87:85:46:92:21:55:51:f9:
76:3a:c3:90
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEDU31ATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDUx
ODA3MTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTM0NzJhMDE2YTk3
Zjg3YTUxZDlmOTk5MzY4NDI5OWE2OGM3MTlkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI5Hn7+3BOef/L91U46Bhbuzdz+mcTbo+0Cm8ClsufVhS77F
jLdGf86VykzyecpBNoP+1vJ5HZ0uFy9qSma2/GAAUph5b6R45jB7sVLhIfAgpCoE
iyCufm1Jk5s4Ppy3O2K0a4WrV340ULjdLmQ5s8XD39ygpRaHhVna+WOnaybr+Sdv
RSHPHPPT9MVBDZK6BtPNs/Coyo3r4+RYYhwP7iK6cx0ZMoKqdSoPWKndxZDovy8E
X/U6wK9MFl48QrXRbdyfR9QOQYVF22gA+1OZ+WVUANCITM+EBCK1Q0245kL40yJS
DnRjgjo2hwlHHXYT/M9jU23NfXcC3sSTWGP+8TUCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBSTRyoBapf4elHZ+Zk2hCmaaMcZ1zAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L2swY3FBV3FYLUhwUjJmbVpOb1FwbW1qSEdkYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAMKjRwMEAMLpBQMEAMLpMQMEAMO0
sAMEAcO0vAMEANTgBjANBgkqhkiG9w0BAQsFAAOCAQEALOsr1lNAALrzAdp8yNE5
+BVO05j2iD/wynIIz9YWZNxCO2IIYQ8TEnlLk8f3o3EmnFcoIEestNr87G7VUYS0
CvSEUuf2ByT15bgXfVv0ScbBVJgOlyC8QvL3r2VZ9ChBJKKoPNzNekwoP42MqPLK
HDnk11E94fEpn7mCObd/gGyBwTOW5h9hB/kd7Om4g2Mj2Eep/ditPg/WSwPeM7A/
sZr242m4K/wv8MK51i4dp0YHIUKFGtimhHogj9ApkMd19DmI07G5+8fimcwQVQH/
cgD40bLawk4usmQBBU9+275qn9BvSLT8DEUNmn9Az9U1Uxio3YeFRpIhVVH5djrD
kA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:30 2023 by rpki-client on console-ams.rpki-client.org