Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/qCL9zH8a6sLYWTC-bKSkPq6Yt7c.roa
File: qCL9zH8a6sLYWTC-bKSkPq6Yt7c.roa (raw, json)
Hash identifier: FzADvyoK4aFCA9Ox5Wxll9LsPoQ2URP/7FccTaLAh3Y=
Subject key identifier: A8:22:FD:CC:7F:1A:EA:C2:D8:59:30:BE:6C:A4:A4:3E:AE:98:B7:B7
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0CF22417
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/qCL9zH8a6sLYWTC-bKSkPq6Yt7c.roa
Signing time: Sat 01 Jan 2022 12:57:59 +0000
ROA not before: Sat 01 Jan 2022 12:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62068
IP address blocks: 185.244.36.0/22 maxlen: 24
45.87.40.0/22 maxlen: 24
185.224.128.0/22 maxlen: 24
5.182.208.0/22 maxlen: 24
45.14.224.0/22 maxlen: 24
2a0d:2400::/29 maxlen: 39
2a0e:2000::/29 maxlen: 32
2a0d:2780::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217195543 (0xcf22417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 12:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a822fdcc7f1aeac2d85930be6ca4a43eae98b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:ae:74:3e:80:37:45:4d:3c:fd:a6:1a:27:
6a:d4:57:20:ab:72:01:6b:5a:b3:fe:57:65:ca:ce:
40:1d:3c:f1:e5:e2:38:90:03:90:95:0d:71:dc:f4:
71:69:d8:c5:66:83:45:73:d5:75:e2:c1:e0:f0:c8:
b7:79:8d:d6:c0:00:d1:0e:34:f2:4d:1e:f0:ae:2d:
e1:4b:5a:ce:52:b2:a3:a6:63:40:c7:cc:67:36:a8:
39:3a:7d:0b:da:bf:11:29:b1:f7:89:c3:24:d7:4d:
6d:40:f9:f1:ce:4c:11:8a:97:e3:ae:b5:3e:5b:c4:
ce:4b:59:8f:8c:e0:c8:46:9a:a4:57:68:d3:3e:a8:
99:38:5c:53:2e:4b:68:d5:b9:a2:d2:46:d2:80:62:
44:25:d5:ad:9b:eb:2a:b8:79:e3:26:a9:3a:26:75:
fb:99:bf:63:d5:17:e6:08:5d:cd:99:fa:7b:e6:bb:
20:b2:75:03:29:1e:74:2f:c5:e6:5b:0e:86:49:e4:
9d:21:eb:c8:be:5d:1e:19:36:12:06:30:5a:ce:b1:
ef:47:83:ba:c1:70:a7:b3:3e:f4:bb:10:05:37:b2:
19:48:6b:d6:c1:e7:37:2b:9f:2b:b5:3f:f8:b3:84:
53:1b:49:a2:cb:e8:ca:2a:8f:06:48:e1:b7:17:d3:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:FD:CC:7F:1A:EA:C2:D8:59:30:BE:6C:A4:A4:3E:AE:98:B7:B7
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/qCL9zH8a6sLYWTC-bKSkPq6Yt7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.40.0/22
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:2000::/29
Signature Algorithm: sha256WithRSAEncryption
9b:01:d0:b5:3a:69:22:22:c8:eb:73:af:48:e4:f6:62:cc:ac:
ea:11:60:2b:a2:5d:40:e6:e7:47:cd:53:44:54:67:cf:a4:8e:
6d:cd:0b:f0:da:16:79:b7:0d:a7:6b:34:1f:27:48:05:d1:7e:
bb:11:47:1c:2f:36:11:90:7b:9c:c3:a4:9e:01:57:96:a2:2a:
71:ae:69:93:e1:28:67:bb:73:d4:d8:52:cd:e1:0e:82:24:6d:
c8:86:3c:2d:cc:d5:2a:6f:48:21:e2:96:59:59:13:2f:a3:30:
8a:6e:30:c6:0a:3e:9e:49:0b:62:5d:10:d2:1c:2e:f0:04:27:
96:20:22:8b:96:0c:a8:43:95:32:ca:ba:70:3b:3b:23:f6:59:
b6:82:98:13:a8:cd:2e:f5:66:07:2d:bd:7c:55:f7:4f:91:ab:
10:27:2c:c0:af:0a:16:ed:98:a6:51:42:a9:f1:97:c1:35:b7:
b6:de:27:58:4a:d4:b0:f0:c0:0f:4e:eb:09:eb:32:12:9c:2c:
89:4c:4e:d6:92:36:02:13:4a:9f:37:81:d2:dd:fe:17:33:b0:
12:45:84:fe:2e:ef:34:0d:ae:03:b1:b0:a1:8a:51:02:24:65:
9a:97:f4:b9:9a:50:57:87:ca:95:e0:95:1b:37:ab:6d:a8:76:
a6:a6:f7:63
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIEDPIkFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YzRmYjA2MWE5NDI2ZTRmYjI4ODVkODIyODY3NTcyYTFiNThhNGMwMB4XDTIyMDEw
MTEyNTc1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTgyMmZkY2M3ZjFh
ZWFjMmQ4NTkzMGJlNmNhNGE0M2VhZTk4YjdiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrJrnQ+gDdFTTz9phonatRXIKtyAWtas/5XZcrOQB088eXi
OJADkJUNcdz0cWnYxWaDRXPVdeLB4PDIt3mN1sAA0Q408k0e8K4t4UtazlKyo6Zj
QMfMZzaoOTp9C9q/ESmx94nDJNdNbUD58c5MEYqX4661PlvEzktZj4zgyEaapFdo
0z6omThcUy5LaNW5otJG0oBiRCXVrZvrKrh54yapOiZ1+5m/Y9UX5ghdzZn6e+a7
ILJ1AykedC/F5lsOhknknSHryL5dHhk2EgYwWs6x70eDusFwp7M+9LsQBTeyGUhr
1sHnNyufK7U/+LOEUxtJosvoyiqPBkjhtxfToXMCAwEAAaOCAj4wggI6MB0GA1Ud
DgQWBBSoIv3MfxrqwthZML5spKQ+rpi3tzAfBgNVHSMEGDAWgBTsT7BhqUJuT7KI
XYIoZ1cqG1ikwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdFLXdZYWxDYmsteWlGMkNLR2RYS2h0WXBNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvN2JjM2FiLWQ5YjYtNGFlNC1iY2QxLWNlNTcxNTA2OTVhOS8x
L3FDTDl6SDhhNnNMWVdUQy1iS1NrUHE2WXQ3Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
N2JjM2FiLWQ5YjYtNGFlNC1iY2QxLWNlNTcxNTA2OTVhOS8xLzdFLXdZYWxDYmst
eWlGMkNLR2RYS2h0WXBNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBU
BggrBgEFBQcBBwEB/wRFMEMwJAQCAAEwHgMEAgW20AMEAi0O4AMEAi1XKAMEArng
gAMEArn0JDAbBAIAAjAVAwUDKg0kAAMFAyoNJ4ADBQMqDiAAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbAdC1OmkiIsjrc69I5PZizKzqEWArol1A5udHzVNEVGfPpI5tzQvw
2hZ5tw2nazQfJ0gF0X67EUccLzYRkHucw6SeAVeWoipxrmmT4Shnu3PU2FLN4Q6C
JG3IhjwtzNUqb0gh4pZZWRMvozCKbjDGCj6eSQtiXRDSHC7wBCeWICKLlgyoQ5Uy
yrpwOzsj9lm2gpgTqM0u9WYHLb18VfdPkasQJyzArwoW7ZimUUKp8ZfBNbe23idY
StSw8MAPTusJ6zISnCyJTE7WkjYCE0qfN4HS3f4XM7ASRYT+Lu80Da4DsbChilEC
JGWal/S5mlBXh8qV4JUbN6ttqHampvdj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org