Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/rVx6NuSmCDNzEFCRVcAzYp2ojtI.roa
File: rVx6NuSmCDNzEFCRVcAzYp2ojtI.roa (raw, json)
Hash identifier: ekKMZNqJao1NiOHnBWwsqp2VP8kmEnnhObTpLIRAc8Q=
Subject key identifier: AD:5C:7A:36:E4:A6:08:33:73:10:50:91:55:C0:33:62:9D:A8:8E:D2
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1D40BF60
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/rVx6NuSmCDNzEFCRVcAzYp2ojtI.roa
Signing time: Thu 12 May 2022 09:49:02 +0000
ROA not before: Thu 12 May 2022 09:49:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6282
IP address blocks: 77.36.24.0/22 maxlen: 22
93.120.0.0/21 maxlen: 21
64.43.100.0/22 maxlen: 22
64.43.104.0/22 maxlen: 22
64.43.108.0/22 maxlen: 22
64.43.112.0/22 maxlen: 22
64.43.116.0/22 maxlen: 22
64.43.124.0/22 maxlen: 22
193.36.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490782560 (0x1d40bf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 12 09:49:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad5c7a36e4a608337310509155c033629da88ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:96:c2:20:bd:84:19:34:c6:fb:73:a0:21:
58:0f:cf:3e:3d:64:a6:fc:14:a4:81:d3:a0:ea:a7:
38:dd:88:7a:56:b9:d6:94:60:e8:97:71:6d:91:f1:
53:42:0b:1c:be:42:84:62:40:82:8d:0a:39:0e:f2:
c5:f2:1e:ef:b8:d2:44:77:3e:79:1e:8c:c5:0c:19:
11:48:63:9b:95:79:e0:1a:ec:88:f7:cf:ce:9c:1e:
29:81:17:e2:c7:17:47:89:16:c7:a8:ba:4c:50:c5:
96:c7:7e:56:57:3e:7b:57:71:9a:7d:6a:83:e3:94:
d6:71:f6:9d:a6:17:3a:48:0b:8f:96:b4:b2:2a:73:
f3:fb:4b:2d:be:04:35:a0:b4:4e:a5:0b:b2:ef:3c:
a0:4b:89:46:66:f3:8d:64:a5:3f:28:54:78:51:26:
5d:67:c9:5b:8a:40:bd:3c:03:e2:3a:b7:d1:16:10:
44:64:c6:47:e5:38:d7:e0:f2:4c:74:33:3d:9a:53:
d0:0f:6f:74:70:46:80:8f:9d:90:d9:1b:11:fb:22:
13:80:ec:76:70:6e:39:0c:61:11:6c:3b:2c:38:9c:
0a:2b:af:2a:f5:83:20:c1:f0:c7:94:22:8c:97:27:
68:45:c5:59:ce:da:1c:39:ef:8c:e0:0d:b7:b4:05:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5C:7A:36:E4:A6:08:33:73:10:50:91:55:C0:33:62:9D:A8:8E:D2
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/rVx6NuSmCDNzEFCRVcAzYp2ojtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.100.0-64.43.119.255
64.43.124.0/22
77.36.24.0/22
93.120.0.0/21
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:e7:92:46:96:fd:0f:21:e4:73:c3:a8:09:de:aa:6d:33:b6:
07:b0:b5:cd:3b:88:d2:bd:ad:dc:1b:3a:56:10:58:10:c4:ad:
04:5d:db:fa:a8:fa:b6:3b:46:2c:48:67:15:68:25:fd:f8:16:
3a:4f:64:41:d7:94:6d:2c:49:69:5e:b5:c7:34:31:f2:95:eb:
90:34:5c:1a:0d:53:04:2f:32:29:d9:5e:ab:b1:45:ee:28:4d:
b9:e7:f4:87:e6:f0:01:c2:87:59:e7:0f:b6:02:3d:e2:03:58:
4b:3f:d7:b4:a6:fd:9a:76:79:33:04:6c:2d:bb:c4:42:e9:8c:
80:a2:0f:8e:82:89:39:37:c9:f0:3f:4a:ea:13:f6:23:55:1f:
e7:e5:11:b3:52:8f:80:0c:94:d1:cb:b5:93:0b:36:c7:64:86:
c8:2f:6b:aa:22:73:4f:2b:a6:49:54:a1:cc:bc:39:6e:6c:bc:
a8:f3:dc:db:9a:aa:06:41:ae:f7:d8:4f:9a:a7:a3:31:3d:c1:
cb:95:1c:3b:89:7a:69:0c:d9:2b:5c:20:fc:3d:25:a0:25:5f:
f2:e9:4c:ce:a5:a5:bc:8d:21:78:b7:8d:61:f9:61:fd:04:3e:
aa:07:3e:1b:52:18:a3:9e:59:19:0c:7e:ee:c7:dd:ec:8a:de:
e9:07:0d:4f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEHUC/YDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljYmJkNWMyY2Y0MTk1Y2M2ZWM3ZjIxZjYwNzU4MWEwMjI0ZGFhMB4XDTIyMDUx
MjA5NDkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQ1YzdhMzZlNGE2
MDgzMzczMTA1MDkxNTVjMDMzNjI5ZGE4OGVkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANsUlsIgvYQZNMb7c6AhWA/PPj1kpvwUpIHToOqnON2Iela5
1pRg6JdxbZHxU0ILHL5ChGJAgo0KOQ7yxfIe77jSRHc+eR6MxQwZEUhjm5V54Brs
iPfPzpweKYEX4scXR4kWx6i6TFDFlsd+Vlc+e1dxmn1qg+OU1nH2naYXOkgLj5a0
sipz8/tLLb4ENaC0TqULsu88oEuJRmbzjWSlPyhUeFEmXWfJW4pAvTwD4jq30RYQ
RGTGR+U41+DyTHQzPZpT0A9vdHBGgI+dkNkbEfsiE4DsdnBuOQxhEWw7LDicCiuv
KvWDIMHwx5QijJcnaEXFWc7aHDnvjOANt7QFOdECAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBStXHo25KYIM3MQUJFVwDNinaiO0jAfBgNVHSMEGDAWgBQ0nLvVws9Blcxu
x/IfYHWBoCJNqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8x
L3JWeDZOdVNtQ0ROekVGQ1JWY0F6WXAyb2p0SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
Y2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8xL05KeTcxY0xQUVpY
TWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJjAMAwQCQCtkAwQDQCtwAwQCQCt8AwQC
TSQYAwQDXXgAAwQCwSTMMA0GCSqGSIb3DQEBCwUAA4IBAQBt55JGlv0PIeRzw6gJ
3qptM7YHsLXNO4jSva3cGzpWEFgQxK0EXdv6qPq2O0YsSGcVaCX9+BY6T2RB15Rt
LElpXrXHNDHyleuQNFwaDVMELzIp2V6rsUXuKE255/SH5vABwodZ5w+2Aj3iA1hL
P9e0pv2adnkzBGwtu8RC6YyAog+Ogok5N8nwP0rqE/YjVR/n5RGzUo+ADJTRy7WT
CzbHZIbIL2uqInNPK6ZJVKHMvDlubLyo89zbmqoGQa732E+ap6MxPcHLlRw7iXpp
DNkrXCD8PSWgJV/y6UzOpaW8jSF4t41h+WH9BD6qBz4bUhijnlkZDH7ux93sit7p
Bw1P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org