Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/yWV6ZxFmWENNQImubYrKmp3QEFg.roa
File: yWV6ZxFmWENNQImubYrKmp3QEFg.roa (raw, json)
Hash identifier: yt4igGFSecDsE265PQKqG27IKBc+jNIqyh1gcinizXI=
Subject key identifier: C9:65:7A:67:11:66:58:43:4D:40:89:AE:6D:8A:CA:9A:9D:D0:10:58
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 0B5A93F3
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/yWV6ZxFmWENNQImubYrKmp3QEFg.roa
Signing time: Sat 01 Jan 2022 12:06:11 +0000
ROA not before: Sat 01 Jan 2022 12:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 185.4.132.0/22 maxlen: 24
185.138.40.0/22 maxlen: 24
2a02:c500::/29 maxlen: 29
2a07:8c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190485491 (0xb5a93f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Jan 1 12:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9657a67116658434d4089ae6d8aca9a9dd01058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:78:34:d4:89:ba:75:ce:e9:87:03:0c:1a:
15:d4:21:99:3b:e4:49:8b:4b:38:36:21:ac:07:93:
9f:df:af:22:2c:bc:c2:20:7f:d1:a7:ca:e1:b0:59:
b8:81:5e:ba:1c:75:dd:e0:33:9a:af:61:26:cc:23:
94:d1:a6:5c:24:3d:2d:6e:6d:0e:89:e9:ba:ab:70:
82:7b:35:83:cd:c7:c3:04:08:24:df:4c:6a:61:95:
1e:5c:35:e7:82:97:56:7c:5a:5a:3c:20:84:96:33:
c0:7c:7d:45:cb:fc:9c:77:09:2c:20:ae:e4:3b:69:
fc:84:97:e3:d3:dd:c0:95:ac:6d:25:ce:f4:86:49:
82:b0:e3:c7:d4:88:5c:01:6f:e0:3e:ea:07:34:99:
87:58:a7:6c:b7:98:01:5c:c8:33:4b:e7:2e:44:e4:
9e:50:94:3c:52:da:4a:f1:de:5d:d4:97:b4:bc:aa:
80:4f:e9:8e:e1:99:03:fe:81:bc:a1:47:bd:82:c1:
45:c7:77:ec:60:e6:8f:e6:fb:2d:c9:49:b7:50:a8:
2c:63:0b:e9:c9:b4:9c:81:9c:5e:fe:0a:47:45:02:
ce:6f:65:9e:8a:a9:3b:04:36:15:91:d9:d9:f2:c0:
b1:aa:c6:cd:43:f9:4a:4d:f4:b2:76:ee:cf:02:7d:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:7A:67:11:66:58:43:4D:40:89:AE:6D:8A:CA:9A:9D:D0:10:58
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/yWV6ZxFmWENNQImubYrKmp3QEFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.132.0/22
185.138.40.0/22
IPv6:
2a02:c500::/29
2a07:8c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:0a:27:9d:1a:dc:58:35:cf:47:f2:3f:2c:9e:b2:d0:a1:f2:
1a:00:ce:28:9b:9b:0c:75:c2:64:f0:dd:60:39:8a:e4:75:18:
46:4c:74:1e:2e:02:5e:c3:42:7a:92:61:af:a3:77:be:d3:17:
e8:b4:88:6d:ca:9f:81:e4:41:7d:0a:94:22:8d:39:e6:eb:37:
4e:a2:5c:5e:82:0c:c8:57:ea:8b:4d:0f:48:ef:b7:69:ed:88:
c1:dd:c6:b7:31:07:b6:c1:54:81:49:6d:7d:4d:eb:f0:af:c5:
01:29:3e:f1:8d:be:29:b7:e7:f6:16:3c:a0:e7:18:15:90:9d:
55:e2:a1:ff:4f:dc:f2:0f:41:58:29:32:88:d5:bf:d9:d2:81:
eb:47:df:3f:9f:ba:fc:24:2c:a1:0b:0b:14:bf:2b:38:85:15:
7e:5c:4e:77:2e:f0:11:72:f3:ac:47:74:00:58:9f:68:6b:0a:
c9:47:81:3c:ab:e6:7b:1b:76:fa:c7:bc:a5:21:ed:e5:3d:ad:
ee:52:0b:b8:38:2d:91:a4:5d:84:74:4a:c5:ad:41:7f:e1:73:
71:cb:c7:79:55:ed:6f:6c:a9:f7:8b:16:48:76:29:71:ce:9b:
c1:03:2a:ff:a8:dd:b1:de:62:05:df:79:16:2a:b2:ff:1b:f3:
5a:fa:de:8e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEC1qT8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTQ2MjNmNzZiZDViYjJkZjBhZjY2ZjM2MGZmNzRmZjFjMDBkYjAyMB4XDTIyMDEw
MTEyMDYxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzk2NTdhNjcxMTY2
NTg0MzRkNDA4OWFlNmQ4YWNhOWE5ZGQwMTA1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnPeDTUibp1zumHAwwaFdQhmTvkSYtLODYhrAeTn9+vIiy8
wiB/0afK4bBZuIFeuhx13eAzmq9hJswjlNGmXCQ9LW5tDonpuqtwgns1g83HwwQI
JN9MamGVHlw154KXVnxaWjwghJYzwHx9Rcv8nHcJLCCu5Dtp/ISX49PdwJWsbSXO
9IZJgrDjx9SIXAFv4D7qBzSZh1inbLeYAVzIM0vnLkTknlCUPFLaSvHeXdSXtLyq
gE/pjuGZA/6BvKFHvYLBRcd37GDmj+b7LclJt1CoLGML6cm0nIGcXv4KR0UCzm9l
noqpOwQ2FZHZ2fLAsarGzUP5Sk30snbuzwJ94ocCAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBTJZXpnEWZYQ01Aia5tisqandAQWDAfBgNVHSMEGDAWgBRqRiP3a9W7LfCv
ZvNg/3T/HADbAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FrWWo5MnZWdXkzd3IyYnpZUDkwX3h3QTJ3SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvNTk5NTI4LWI4OWQtNDQwMi1hODA4LTZjODMyMDUwZTc3YS8x
L3lXVjZaeEZtV0VOTlFJbXViWXJLbXAzUUVGZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
NTk5NTI4LWI4OWQtNDQwMi1hODA4LTZjODMyMDUwZTc3YS8xL2FrWWo5MnZWdXkz
d3IyYnpZUDkwX3h3QTJ3SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7
BggrBgEFBQcBBwEB/wQsMCowEgQCAAEwDAMEArkEhAMEArmKKDAUBAIAAjAOAwUD
KgLFAAMFAyoHCMAwDQYJKoZIhvcNAQELBQADggEBAJwKJ50a3Fg1z0fyPyyestCh
8hoAziibmwx1wmTw3WA5iuR1GEZMdB4uAl7DQnqSYa+jd77TF+i0iG3Kn4HkQX0K
lCKNOebrN06iXF6CDMhX6otND0jvt2ntiMHdxrcxB7bBVIFJbX1N6/CvxQEpPvGN
vim35/YWPKDnGBWQnVXiof9P3PIPQVgpMojVv9nSgetH3z+fuvwkLKELCxS/KziF
FX5cTncu8BFy86xHdABYn2hrCslHgTyr5nsbdvrHvKUh7eU9re5SC7g4LZGkXYR0
SsWtQX/hc3HLx3lV7W9sqfeLFkh2KXHOm8EDKv+o3bHeYgXfeRYqsv8b81r63o4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:24 2023 by rpki-client on console-fra.rpki-client.org