Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/p8N22Y3zZcrkVO-ed6r1PaOZ6ag.roa
File: p8N22Y3zZcrkVO-ed6r1PaOZ6ag.roa (raw, json)
Hash identifier: S2jCVIKW/yMIRBJEPRl8jS4KVReXiALgsCnuereasdI=
Subject key identifier: A7:C3:76:D9:8D:F3:65:CA:E4:54:EF:9E:77:AA:F5:3D:A3:99:E9:A8
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0649FB78
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/p8N22Y3zZcrkVO-ed6r1PaOZ6ag.roa
Signing time: Tue 22 Mar 2022 16:45:34 +0000
ROA not before: Tue 22 Mar 2022 16:45:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105511800 (0x649fb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 22 16:45:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7c376d98df365cae454ef9e77aaf53da399e9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:69:d7:96:0d:bb:ce:bb:91:c4:e8:64:12:
1a:06:67:69:d9:17:5b:93:56:84:cb:2d:74:d3:4f:
b0:68:72:fb:1f:c8:34:0e:46:e6:a7:2c:46:19:4c:
dd:f5:2d:03:b9:8a:ff:5d:28:b6:30:fc:5b:ea:bf:
f9:cb:7a:c7:11:35:5a:35:73:97:69:3c:8e:fb:60:
4b:cc:76:6e:46:04:50:22:ab:dd:52:86:d1:a4:cd:
d0:53:8f:0e:f6:55:19:ea:48:47:40:95:6e:71:9f:
d4:48:92:85:e4:cc:4f:1e:ad:e8:71:37:39:dd:a9:
6b:ce:99:e7:40:b1:0d:56:77:8a:f2:f7:5f:c5:79:
f7:05:64:52:82:50:a0:2c:ee:ff:3a:74:52:0d:b8:
44:f0:70:64:ab:d2:3c:24:5a:a9:27:b1:6e:83:88:
9f:46:65:21:d1:75:b2:0f:8d:fc:27:25:c5:df:6c:
5c:71:d9:9a:c1:ce:ed:4e:2d:e7:36:77:36:bf:21:
01:53:03:b3:a9:e2:e6:4a:17:11:7b:66:e8:4f:87:
07:db:5c:60:f2:7d:98:8a:e4:20:f7:a3:49:95:81:
1d:82:cf:28:71:96:34:91:58:46:66:59:08:65:c0:
07:46:64:af:de:d2:2d:c8:51:0d:76:3d:9f:1c:86:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:76:D9:8D:F3:65:CA:E4:54:EF:9E:77:AA:F5:3D:A3:99:E9:A8
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/p8N22Y3zZcrkVO-ed6r1PaOZ6ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:42:1c:93:40:27:60:7f:7b:0c:0d:ff:26:5d:d4:66:da:00:
e2:65:49:e0:79:5d:74:68:d0:86:38:db:d0:4a:28:a1:39:0f:
83:86:f7:6d:0b:7b:09:eb:ea:f5:9e:12:29:95:c8:db:52:9c:
83:6f:27:e3:00:02:7a:cd:43:08:82:08:d9:28:24:12:82:68:
6c:bc:90:f0:14:84:88:79:55:6d:ef:a9:a5:fd:03:e3:d5:b9:
e7:0c:14:8c:f7:12:3a:8e:c5:be:58:e5:4b:bd:89:23:e8:f3:
ea:ca:b5:c0:7c:93:b1:ce:e0:46:db:3c:74:8e:27:7c:62:a2:
46:d5:f0:d9:27:e3:c7:70:22:e9:76:08:9d:c0:3e:68:ce:6f:
04:65:5c:2c:8f:08:c3:c9:4a:0e:fc:62:23:a9:2f:fb:c1:e2:
e0:31:a6:11:95:cd:33:72:f3:95:ed:66:34:4b:33:09:75:e4:
d2:71:b1:7c:97:48:0c:68:4d:e8:75:77:52:78:68:2b:e4:22:
11:8c:02:b1:68:8a:60:a9:9c:1a:be:cd:d7:5b:f4:0f:39:74:
c1:6b:8e:51:70:43:f0:3d:22:65:67:91:83:95:0b:30:bc:55:
04:15:e3:9d:01:f6:ad:5d:cf:03:93:ed:7d:13:51:2c:42:1e:
aa:8b:ba:de
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBkn7eDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2NmMzg4NGI3ODAwN2EyNWRiZTJlMmNlZjBjYzczYjY5OTIxZjg4MB4XDTIyMDMy
MjE2NDUzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTdjMzc2ZDk4ZGYz
NjVjYWU0NTRlZjllNzdhYWY1M2RhMzk5ZTlhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHBadeWDbvOu5HE6GQSGgZnadkXW5NWhMstdNNPsGhy+x/I
NA5G5qcsRhlM3fUtA7mK/10otjD8W+q/+ct6xxE1WjVzl2k8jvtgS8x2bkYEUCKr
3VKG0aTN0FOPDvZVGepIR0CVbnGf1EiSheTMTx6t6HE3Od2pa86Z50CxDVZ3ivL3
X8V59wVkUoJQoCzu/zp0Ug24RPBwZKvSPCRaqSexboOIn0ZlIdF1sg+N/Cclxd9s
XHHZmsHO7U4t5zZ3Nr8hAVMDs6ni5koXEXtm6E+HB9tcYPJ9mIrkIPejSZWBHYLP
KHGWNJFYRmZZCGXAB0Zkr97SLchRDXY9nxyGhusCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSnw3bZjfNlyuRU7553qvU9o5npqDAfBgNVHSMEGDAWgBTnzziEt4AHol2+
LizvDMc7aZIfiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU4ODRoTGVBQjZKZHZpNHM3d3pITzJtU0g0Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8x
L3A4TjIyWTN6WmNya1ZPLWVkNnIxUGFPWjZhZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8xLzU4ODRoTGVBQjZK
ZHZpNHM3d3pITzJtU0g0Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFvkDQMEAFvkDwMEAl6aIAMEAF6a
JjANBgkqhkiG9w0BAQsFAAOCAQEAPEIck0AnYH97DA3/Jl3UZtoA4mVJ4HlddGjQ
hjjb0EoooTkPg4b3bQt7Cevq9Z4SKZXI21Kcg28n4wACes1DCIII2SgkEoJobLyQ
8BSEiHlVbe+ppf0D49W55wwUjPcSOo7FvljlS72JI+jz6sq1wHyTsc7gRts8dI4n
fGKiRtXw2Sfjx3Ai6XYIncA+aM5vBGVcLI8Iw8lKDvxiI6kv+8Hi4DGmEZXNM3Lz
le1mNEszCXXk0nGxfJdIDGhN6HV3UnhoK+QiEYwCsWiKYKmcGr7N11v0Dzl0wWuO
UXBD8D0iZWeRg5ULMLxVBBXjnQH2rV3PA5PtfRNRLEIeqou63g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org