Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/MQ3pdLSRxcvqJAx5F103Oj-Fwzw.roa
File: MQ3pdLSRxcvqJAx5F103Oj-Fwzw.roa (raw, json)
Hash identifier: CAxDsVElATu4yAAz+qv1uHUEi11mHtnxWJm6CnHMaiA=
Subject key identifier: 31:0D:E9:74:B4:91:C5:CB:EA:24:0C:79:17:5D:37:3A:3F:85:C3:3C
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 32B12F20
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/MQ3pdLSRxcvqJAx5F103Oj-Fwzw.roa
Signing time: Sat 01 Jan 2022 06:56:47 +0000
ROA not before: Sat 01 Jan 2022 06:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.146.118.0/24 maxlen: 24
194.59.190.0/24 maxlen: 24
193.42.155.0/24 maxlen: 24
62.69.146.0/23 maxlen: 23
194.9.117.0/24 maxlen: 24
2001:7f8:8:10::/64 maxlen: 64
2001:7f8:8:5::/64 maxlen: 64
2001:7f8:8::/64 maxlen: 64
2001:7f8:2c:1000::/64 maxlen: 64
2001:7f8:8:20::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850472736 (0x32b12f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 06:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=310de974b491c5cbea240c79175d373a3f85c33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:90:05:8b:26:41:7e:2d:17:97:dd:21:cf:
c0:ce:01:e6:5f:84:c8:39:4c:5d:7d:ed:b8:d2:81:
1a:0b:f7:1d:1b:52:53:6b:c9:ec:16:6f:7b:53:29:
41:c1:59:ca:f7:c9:ba:10:61:63:94:51:b8:d4:a0:
18:e8:03:36:1a:91:ee:fb:19:da:7d:49:ec:b1:ff:
47:74:ec:65:d6:92:94:19:6e:f4:9d:b7:fd:97:2b:
cb:13:7b:9c:34:04:ed:70:cf:52:f0:62:85:33:94:
3e:28:c3:8c:cf:15:2e:7c:3c:e3:56:fd:fa:24:21:
79:10:5a:3c:9c:49:08:51:9d:83:88:d3:63:bf:62:
a1:4f:33:1b:69:38:6f:c8:ae:b2:b2:71:53:46:55:
96:50:aa:29:fc:2c:05:b4:1f:6a:65:f9:82:ac:83:
91:9c:43:4c:7c:f5:b2:d1:ee:8d:58:f1:d2:7e:a9:
3b:ce:52:d5:7d:b6:6c:72:00:de:4c:0a:29:46:ab:
33:4c:01:77:2a:64:00:62:20:84:c8:50:17:18:f4:
9b:e1:f3:b7:be:21:4a:e8:30:a3:36:62:ed:b9:44:
aa:3c:37:62:18:c1:0d:34:8b:6d:cd:6b:8a:92:f5:
47:7f:6f:9b:80:33:a0:bd:f5:cd:b4:58:0a:0f:91:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:E9:74:B4:91:C5:CB:EA:24:0C:79:17:5D:37:3A:3F:85:C3:3C
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/MQ3pdLSRxcvqJAx5F103Oj-Fwzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.146.0/23
193.42.155.0/24
194.9.117.0/24
194.59.190.0/24
194.146.118.0/24
IPv6:
2001:7f8:8::/64
2001:7f8:8:5::/64
2001:7f8:8:10::/64
2001:7f8:8:20::/64
2001:7f8:2c:1000::/64
Signature Algorithm: sha256WithRSAEncryption
48:99:54:13:07:6b:89:1b:07:86:27:8c:c0:9e:80:63:45:53:
22:be:da:36:d0:04:7f:d3:37:55:eb:a5:f7:b5:54:e0:5b:82:
a5:ea:98:18:a6:79:14:eb:25:f7:f6:1c:71:cf:07:2f:56:ef:
ca:3e:f0:cd:d8:78:33:72:18:fe:f8:f6:df:95:b4:9d:56:5d:
67:6c:a0:02:3d:ec:e0:6e:0b:06:fb:f5:bc:e1:a0:34:32:13:
ab:44:7a:a9:6b:55:f4:56:84:7f:4e:bf:4a:02:0d:ff:2b:5e:
cf:45:a6:3c:07:a3:7e:d4:7e:25:ee:67:18:f7:db:54:f8:4c:
9d:09:4a:80:7d:f8:17:fd:de:a4:0c:8e:c0:d5:92:88:42:fd:
07:1f:eb:7b:6f:1b:1a:af:87:f0:9d:d4:e8:8a:c3:63:bb:46:
8c:6f:0f:29:b1:66:bc:73:f1:6c:05:e6:5c:e7:d1:84:93:94:
07:7d:a6:f7:41:85:26:b2:6b:46:b6:41:24:4d:28:40:e7:63:
3a:c8:a6:81:9a:54:16:47:2b:49:b9:af:02:12:5f:3c:31:d8:
af:0c:68:54:b9:c8:e2:2e:b3:f1:77:a2:d7:1d:97:33:a2:aa:
a6:fe:d2:63:2b:5c:c7:db:9a:f2:ae:75:e6:9a:1a:1b:01:46:
6d:03:ed:0a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIEMrEvIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZjIxNTIxYTcxMjcxNTdmN2RhZjBhZDA5MTM5NGFkNWExY2NlNzc5MB4XDTIyMDEw
MTA2NTY0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzEwZGU5NzRiNDkx
YzVjYmVhMjQwYzc5MTc1ZDM3M2EzZjg1YzMzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK4RkAWLJkF+LReX3SHPwM4B5l+EyDlMXX3tuNKBGgv3HRtS
U2vJ7BZve1MpQcFZyvfJuhBhY5RRuNSgGOgDNhqR7vsZ2n1J7LH/R3TsZdaSlBlu
9J23/ZcryxN7nDQE7XDPUvBihTOUPijDjM8VLnw841b9+iQheRBaPJxJCFGdg4jT
Y79ioU8zG2k4b8iusrJxU0ZVllCqKfwsBbQfamX5gqyDkZxDTHz1stHujVjx0n6p
O85S1X22bHIA3kwKKUarM0wBdypkAGIghMhQFxj0m+Hzt74hSugwozZi7blEqjw3
YhjBDTSLbc1ripL1R39vm4AzoL31zbRYCg+RryMCAwEAAaOCAmAwggJcMB0GA1Ud
DgQWBBQxDel0tJHFy+okDHkXXTc6P4XDPDAfBgNVHSMEGDAWgBQPIVIacScVf32v
CtCROUrVoczneTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0R5RlNHbkVuRlg5OXJ3clFrVGxLMWFITTUzay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvZTgzMWIxLTllYzAtNDZmMi04NjBkLWZhZDVmZDc5NzBiYS8x
L01RM3BkTFNSeGN2cUpBeDVGMTAzT2otRnd6dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
ZTgzMWIxLTllYzAtNDZmMi04NjBkLWZhZDVmZDc5NzBiYS8xL0R5RlNHbkVuRlg5
OXJ3clFrVGxLMWFITTUzay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB2
BggrBgEFBQcBBwEB/wRnMGUwJAQCAAEwHgMEAT5FkgMEAMEqmwMEAMIJdQMEAMI7
vgMEAMKSdjA9BAIAAjA3AwkAIAEH+AAIAAADCQAgAQf4AAgABQMJACABB/gACAAQ
AwkAIAEH+AAIACADCQAgAQf4ACwQADANBgkqhkiG9w0BAQsFAAOCAQEASJlUEwdr
iRsHhieMwJ6AY0VTIr7aNtAEf9M3Veul97VU4FuCpeqYGKZ5FOsl9/Yccc8HL1bv
yj7wzdh4M3IY/vj235W0nVZdZ2ygAj3s4G4LBvv1vOGgNDITq0R6qWtV9FaEf06/
SgIN/ytez0WmPAejftR+Je5nGPfbVPhMnQlKgH34F/3epAyOwNWSiEL9Bx/re28b
Gq+H8J3U6IrDY7tGjG8PKbFmvHPxbAXmXOfRhJOUB32m90GFJrJrRrZBJE0oQOdj
OsimgZpUFkcrSbmvAhJfPDHYrwxoVLnI4i6z8Xei1x2XM6Kqpv7SYytcx9ua8q51
5poaGwFGbQPtCg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:02 2023 by rpki-client on console-ams.rpki-client.org