Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/yQHtjXw-uf9HrKAliu4wFgasu3A.roa
File: yQHtjXw-uf9HrKAliu4wFgasu3A.roa (raw, json)
Hash identifier: FEf25iqHtT+ewynDYqfO8BsZtdwRQ8mnHGe1K57DAxA=
Subject key identifier: C9:01:ED:8D:7C:3E:B9:FF:47:AC:A0:25:8A:EE:30:16:06:AC:BB:70
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 0C4D2A51
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/yQHtjXw-uf9HrKAliu4wFgasu3A.roa
Signing time: Mon 28 Mar 2022 08:31:15 +0000
ROA not before: Mon 28 Mar 2022 08:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24796
IP address blocks: 193.201.40.0/24 maxlen: 24
193.24.29.0/24 maxlen: 24
185.33.110.0/23 maxlen: 23
185.33.108.0/23 maxlen: 23
185.33.108.0/24 maxlen: 24
185.33.108.0/22 maxlen: 22
185.33.109.0/24 maxlen: 24
2a0f:80::/32 maxlen: 32
2001:7f8:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206383697 (0xc4d2a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Mar 28 08:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c901ed8d7c3eb9ff47aca0258aee301606acbb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:7d:40:a9:ba:20:07:b8:31:92:b1:4c:93:
60:86:2b:98:43:7f:bb:f3:3a:26:cf:ff:1f:bd:94:
d4:3f:58:bf:6f:50:7c:02:97:5e:1e:a7:96:2e:91:
24:c5:23:43:12:ef:86:83:36:5f:a4:11:18:59:15:
e6:3d:80:1c:e0:a2:60:1c:e2:95:38:6b:04:55:7c:
0f:01:42:b5:64:2d:ce:95:83:43:f2:5a:0f:56:db:
76:29:63:62:12:13:d5:f8:e2:2c:8e:a9:58:bc:db:
13:eb:f4:83:64:6d:85:42:c3:b9:8e:e0:a9:ea:17:
db:6e:bd:e6:8a:56:d3:1f:53:a6:f5:26:ae:e3:9a:
03:42:23:f9:09:45:25:fd:30:71:9b:37:6c:9b:31:
6e:c2:78:8f:f1:2b:a7:02:9f:a4:4e:ae:c6:6c:6f:
0a:03:ef:d6:35:51:15:59:4a:30:5f:70:ff:13:41:
71:4f:0b:01:7e:29:d4:df:ba:cb:ba:f8:f9:9c:ce:
6f:a2:10:e8:b8:6e:33:18:ed:bd:83:b7:14:30:c5:
96:a7:06:8b:d7:d3:fe:f3:25:2c:1d:45:8e:40:3e:
47:6e:f6:32:37:16:4f:0e:05:92:8d:b3:19:f9:24:
c9:24:69:ed:d2:a1:b0:e9:44:91:61:94:bf:20:59:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:ED:8D:7C:3E:B9:FF:47:AC:A0:25:8A:EE:30:16:06:AC:BB:70
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/yQHtjXw-uf9HrKAliu4wFgasu3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.108.0/22
193.24.29.0/24
193.201.40.0/24
IPv6:
2001:7f8:10::/48
2a0f:80::/32
Signature Algorithm: sha256WithRSAEncryption
ba:77:ee:ca:cb:1d:db:6b:a9:4a:d3:bf:b8:a6:d0:8a:5f:fb:
c4:aa:32:5e:a6:93:5e:d4:67:2d:0a:a6:47:36:94:3f:90:4f:
fb:de:88:be:83:0b:db:47:a5:38:63:18:f6:30:dc:55:14:cd:
cc:fd:0f:79:f0:4f:19:a4:c0:ad:42:f6:0a:25:8d:40:78:b1:
ef:d8:f3:0d:af:79:4b:13:6e:81:53:13:9e:08:a4:5b:14:4b:
4c:17:a7:18:f8:15:45:f7:f1:64:4c:16:f6:0f:93:0c:75:46:
c2:93:72:a4:54:6b:0f:fa:21:5c:ea:b4:99:53:91:74:dd:2d:
b3:62:42:48:cf:be:be:e4:13:dd:e1:b5:12:d5:c3:52:3f:96:
bd:3a:e9:4c:29:13:b8:02:db:c5:19:5f:c1:c4:8e:74:7e:58:
9a:18:d9:4b:f5:07:df:27:d2:03:10:ca:cd:45:7d:75:f9:6d:
b6:c9:c2:54:97:86:f7:1f:c4:95:c8:e8:f4:21:89:18:4f:64:
77:78:72:bc:9b:8e:98:f7:f2:fa:ce:3f:e7:e4:b4:24:ee:01:
b7:be:39:fd:22:a8:8e:9b:39:28:be:32:c5:4a:95:73:ea:43:
82:38:72:6a:2a:f3:05:4b:32:29:2d:e8:37:6a:67:9b:c6:27:
74:6b:c1:3c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEDE0qUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjNkYWVmODkzMDZhNzVmMGI4ODE5MTQ0MDc0MmE3MjBhZmIzZjIwMB4XDTIyMDMy
ODA4MzExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzkwMWVkOGQ3YzNl
YjlmZjQ3YWNhMDI1OGFlZTMwMTYwNmFjYmI3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ6MfUCpuiAHuDGSsUyTYIYrmEN/u/M6Js//H72U1D9Yv29Q
fAKXXh6nli6RJMUjQxLvhoM2X6QRGFkV5j2AHOCiYBzilThrBFV8DwFCtWQtzpWD
Q/JaD1bbdiljYhIT1fjiLI6pWLzbE+v0g2RthULDuY7gqeoX22695opW0x9TpvUm
ruOaA0Ij+QlFJf0wcZs3bJsxbsJ4j/ErpwKfpE6uxmxvCgPv1jVRFVlKMF9w/xNB
cU8LAX4p1N+6y7r4+ZzOb6IQ6LhuMxjtvYO3FDDFlqcGi9fT/vMlLB1FjkA+R272
MjcWTw4Fko2zGfkkySRp7dKhsOlEkWGUvyBZUDkCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBTJAe2NfD65/0esoCWK7jAWBqy7cDAfBgNVHSMEGDAWgBQ7Pa74kwanXwuI
GRRAdCpyCvs/IDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L096MnUtSk1HcDE4TGlCa1VRSFFxY2dyN1B5QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvZjE1MGIxLTQzYjktNDkxMS1hMDA1LWFhY2FkODZjNjE3ZC8x
L3lRSHRqWHctdWY5SHJLQWxpdTR3Rmdhc3UzQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
ZjE1MGIxLTQzYjktNDkxMS1hMDA1LWFhY2FkODZjNjE3ZC8xL096MnUtSk1HcDE4
TGlCa1VRSFFxY2dyN1B5QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwGAQCAAEwEgMEArkhbAMEAMEYHQMEAMHJKDAWBAIA
AjAQAwcAIAEH+AAQAwUAKg8AgDANBgkqhkiG9w0BAQsFAAOCAQEAunfuyssd22up
StO/uKbQil/7xKoyXqaTXtRnLQqmRzaUP5BP+96IvoML20elOGMY9jDcVRTNzP0P
efBPGaTArUL2CiWNQHix79jzDa95SxNugVMTngikWxRLTBenGPgVRffxZEwW9g+T
DHVGwpNypFRrD/ohXOq0mVORdN0ts2JCSM++vuQT3eG1EtXDUj+WvTrpTCkTuALb
xRlfwcSOdH5YmhjZS/UH3yfSAxDKzUV9dflttsnCVJeG9x/Elcjo9CGJGE9kd3hy
vJuOmPfy+s4/5+S0JO4Bt745/SKojps5KL4yxUqVc+pDgjhyairzBUsyKS3oN2pn
m8YndGvBPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:50 2024 by rpki-client on console-ams.rpki-client.org