Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RtRd5kdyaw24BDVwfsnj2FRUVLM.roa
File: RtRd5kdyaw24BDVwfsnj2FRUVLM.roa (raw, json)
Hash identifier: D+Ga/eHgdE1YurDd01a/TKvNv6p+Ztl+18J/lceaxNg=
Subject key identifier: 46:D4:5D:E6:47:72:6B:0D:B8:04:35:70:7E:C9:E3:D8:54:54:54:B3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 07B20E9D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RtRd5kdyaw24BDVwfsnj2FRUVLM.roa
Signing time: Sat 01 Jan 2022 05:57:04 +0000
ROA not before: Sat 01 Jan 2022 05:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200923
IP address blocks: 188.255.218.0/24 maxlen: 24
93.186.74.0/23 maxlen: 23
93.186.76.0/24 maxlen: 24
93.186.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129109661 (0x7b20e9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 05:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46d45de647726b0db80435707ec9e3d8545454b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:df:4d:09:a6:6a:31:de:df:ff:dc:93:71:
7c:c5:ed:e5:bf:3f:6e:54:b5:62:74:c3:75:e8:3e:
74:8a:e1:5f:32:22:c9:f0:f5:7d:0d:3e:8d:8e:03:
91:f8:78:5c:e6:8e:6a:63:c8:f0:c5:04:f1:86:a1:
34:8a:90:16:38:ca:15:53:e8:65:49:a6:85:b1:82:
e2:85:dc:05:37:3b:6e:4b:f4:b0:80:5b:fa:9c:58:
28:55:68:93:00:97:f6:84:47:96:05:7e:e0:09:5e:
cc:ac:ed:ba:39:b0:f0:ce:ca:b1:76:f3:7c:69:15:
b8:d3:a5:e9:3a:61:1b:66:70:df:33:6a:c7:9b:4f:
4a:c5:bc:b7:d6:29:87:5d:f1:1f:b7:1a:1e:6c:bf:
87:98:28:bc:e8:03:65:dc:aa:80:c8:8d:ec:ed:1f:
f7:50:42:01:ba:32:8c:f1:d5:c2:2e:d1:60:d9:02:
ff:1d:1e:02:7c:92:03:7f:40:47:83:ad:a5:af:cf:
ef:41:a8:98:f9:ed:e5:5c:95:f2:e4:dc:f2:4f:87:
9e:78:93:a1:b6:b4:52:63:de:6c:09:d5:60:8e:14:
28:4d:4e:d1:07:90:a0:2a:fc:41:98:0f:ce:25:89:
d3:d7:ba:d2:be:79:f9:d6:0f:f7:6c:58:19:cb:ab:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:5D:E6:47:72:6B:0D:B8:04:35:70:7E:C9:E3:D8:54:54:54:B3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RtRd5kdyaw24BDVwfsnj2FRUVLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.74.0-93.186.76.255
93.186.78.0/24
188.255.218.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fb:51:65:2f:7a:cf:7a:36:4c:b9:ee:e6:e6:4f:e1:65:c6:
19:94:fd:a6:3e:74:df:24:e4:a3:83:a3:34:fd:94:fc:95:1a:
6b:f9:70:d0:fa:2c:16:a2:a6:f1:05:36:49:44:a5:3f:7e:59:
76:42:91:84:21:fd:4b:f3:04:9e:dc:f6:5a:69:86:83:33:aa:
ec:73:7a:02:37:b7:89:8d:ea:90:12:b6:92:c0:3b:8e:48:65:
dd:46:a5:01:de:f0:42:7d:81:bc:d6:a4:47:1e:fa:6f:30:59:
6a:33:c1:f2:2c:4e:7a:26:c1:17:cf:06:72:4a:4e:d3:bf:de:
66:6a:ca:77:e8:e1:b0:bd:8c:86:57:2a:61:c0:43:e5:b4:52:
b6:16:f8:22:29:c9:42:d6:a1:93:22:92:d1:4c:8e:7a:ad:84:
73:57:01:7a:64:77:aa:63:08:10:02:ce:a7:77:20:6b:17:c1:
09:4a:54:4a:c0:8b:d8:a1:a8:33:f0:9d:47:ad:f4:c6:b5:c6:
69:75:27:54:2c:fc:75:4a:1b:85:3c:09:ea:39:cd:2a:d0:02:
63:c2:63:1c:81:d5:72:16:6e:d3:25:40:ae:43:3d:32:59:ac:
e8:8e:57:ab:af:a7:ac:fc:8a:ab:78:ab:b7:15:fe:0d:79:c0:
99:ee:3d:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEB7IOnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDEw
MTA1NTcwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDZkNDVkZTY0Nzcy
NmIwZGI4MDQzNTcwN2VjOWUzZDg1NDU0NTRiMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALgU300Jpmox3t//3JNxfMXt5b8/blS1YnTDdeg+dIrhXzIi
yfD1fQ0+jY4Dkfh4XOaOamPI8MUE8YahNIqQFjjKFVPoZUmmhbGC4oXcBTc7bkv0
sIBb+pxYKFVokwCX9oRHlgV+4AlezKztujmw8M7KsXbzfGkVuNOl6TphG2Zw3zNq
x5tPSsW8t9Yph13xH7caHmy/h5govOgDZdyqgMiN7O0f91BCAboyjPHVwi7RYNkC
/x0eAnySA39AR4Otpa/P70GomPnt5VyV8uTc8k+HnniToba0UmPebAnVYI4UKE1O
0QeQoCr8QZgPziWJ09e60r55+dYP92xYGcurmzECAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBRG1F3mR3JrDbgENXB+yePYVFRUszAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L1J0UmQ1a2R5YXcyNEJEVndmc25qMkZSVVZMTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQBXbpKAwQAXbpMAwQAXbpOAwQA
vP/aMA0GCSqGSIb3DQEBCwUAA4IBAQAj+1FlL3rPejZMue7m5k/hZcYZlP2mPnTf
JOSjg6M0/ZT8lRpr+XDQ+iwWoqbxBTZJRKU/fll2QpGEIf1L8wSe3PZaaYaDM6rs
c3oCN7eJjeqQEraSwDuOSGXdRqUB3vBCfYG81qRHHvpvMFlqM8HyLE56JsEXzwZy
Sk7Tv95masp36OGwvYyGVyphwEPltFK2FvgiKclC1qGTIpLRTI56rYRzVwF6ZHeq
YwgQAs6ndyBrF8EJSlRKwIvYoagz8J1HrfTGtcZpdSdULPx1ShuFPAnqOc0q0AJj
wmMcgdVyFm7TJUCuQz0yWazojlerr6es/IqreKu3Ff4NecCZ7j2g
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org