Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/u6atGvjJ4iD-Kup7m07JIdo1YsE.roa
File: u6atGvjJ4iD-Kup7m07JIdo1YsE.roa (raw, json)
Hash identifier: A9ZXEx1vM7L0u6U0N3OnzFwuhzZIUt3ug0DsLgnJEZA=
Subject key identifier: BB:A6:AD:1A:F8:C9:E2:20:FE:2A:EA:7B:9B:4E:C9:21:DA:35:62:C1
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 0184C42132E4ABC6A00B5747B6574C1EA6DE
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/u6atGvjJ4iD-Kup7m07JIdo1YsE.roa
Signing time: Tue 29 Nov 2022 16:03:40 +0000
ROA not before: Tue 29 Nov 2022 16:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.9.156.0/24 maxlen: 24
185.9.157.0/24 maxlen: 24
185.9.158.0/24 maxlen: 24
185.118.142.0/24 maxlen: 24
178.20.224.0/24 maxlen: 24
185.118.143.0/24 maxlen: 24
178.20.225.0/24 maxlen: 24
178.20.226.0/24 maxlen: 24
185.118.140.0/24 maxlen: 24
178.20.229.0/24 maxlen: 24
178.20.230.0/24 maxlen: 24
178.20.231.0/24 maxlen: 24
178.20.227.0/24 maxlen: 24
178.20.228.0/24 maxlen: 24
37.123.96.0/24 maxlen: 24
37.123.97.0/24 maxlen: 24
37.123.98.0/24 maxlen: 24
37.123.99.0/24 maxlen: 24
37.123.100.0/24 maxlen: 24
37.123.101.0/24 maxlen: 24
37.123.102.0/24 maxlen: 24
37.123.103.0/24 maxlen: 24
2a00:9bc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:21:32:e4:ab:c6:a0:0b:57:47:b6:57:4c:1e:a6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Nov 29 16:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bba6ad1af8c9e220fe2aea7b9b4ec921da3562c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:60:cf:f9:d2:c5:79:06:e6:30:19:75:0c:
3c:ee:15:f7:86:84:95:93:e5:33:94:39:84:33:be:
a9:06:8d:d5:ec:e2:53:60:1f:b8:b6:69:13:4e:b8:
a7:04:0e:da:7c:65:57:98:43:24:ee:83:0d:b9:5a:
9d:d0:41:68:63:0f:53:c2:f4:ba:ef:c2:87:51:f2:
34:26:0e:b1:f9:24:96:3a:0a:61:a0:28:db:28:8d:
a7:ee:62:45:6c:10:b9:4f:c7:7e:93:ff:4e:95:cf:
29:7b:24:75:4e:70:30:05:17:77:fb:d1:b3:d4:a5:
c8:bc:2a:1c:28:f5:53:f0:86:52:fd:16:c6:48:e2:
f0:9a:4b:80:4a:1e:b5:18:ad:dd:49:17:86:bd:80:
14:c2:0d:96:de:89:10:f5:7a:da:a6:5e:d6:ef:45:
25:a1:61:0e:ea:5a:44:54:47:49:43:b5:32:4e:e8:
0f:8e:8d:d5:93:6b:21:eb:e5:f7:8a:fa:28:2b:83:
30:07:3b:7a:07:96:0f:01:aa:7f:a9:ee:ec:42:e6:
4d:ac:50:fe:f0:6e:52:83:b0:c1:93:6a:b4:7d:bb:
cc:1a:d6:e3:5d:02:96:0d:e9:71:e0:a8:66:a3:08:
4e:4a:7c:87:58:f4:8c:4b:59:a8:28:9f:87:14:4d:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:AD:1A:F8:C9:E2:20:FE:2A:EA:7B:9B:4E:C9:21:DA:35:62:C1
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/u6atGvjJ4iD-Kup7m07JIdo1YsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.96.0/21
178.20.224.0/21
185.9.156.0-185.9.158.255
185.118.140.0/24
185.118.142.0/23
IPv6:
2a00:9bc0::/32
Signature Algorithm: sha256WithRSAEncryption
54:f3:dd:f8:eb:c7:3a:10:3f:ca:db:4b:56:07:1d:23:3b:36:
8f:b4:4c:c4:be:bf:76:de:26:32:7e:42:bf:9f:15:23:72:43:
83:f4:7e:b9:89:f4:d4:fe:e5:b0:f5:ef:90:c3:f4:39:ef:5f:
ae:c2:51:17:3e:47:48:31:90:62:93:65:8b:33:7c:ce:87:b9:
4b:46:22:95:86:97:f2:3c:4f:39:bc:7f:e0:1d:22:ff:fe:fb:
32:8b:d9:21:d5:aa:23:e5:34:d2:ea:7a:a3:4b:7c:0f:82:68:
b6:f9:19:f4:47:f0:b1:ca:69:83:4f:2a:57:fd:a9:b6:24:43:
50:c3:33:55:14:2a:38:01:0b:5e:9f:4d:69:66:af:c3:bc:e9:
20:93:b7:43:bf:30:07:69:54:87:21:05:3b:37:70:0c:a8:e2:
09:bf:36:ca:7a:60:4a:bf:ea:e5:cc:f9:6e:66:ba:41:a3:54:
1f:48:ed:ca:ee:23:db:15:79:e3:23:a4:04:8c:67:c2:28:0f:
17:a0:3d:72:32:d5:4e:ec:bb:31:94:80:cf:c7:b9:99:a9:b5:
00:53:82:bd:35:99:e5:3f:9b:27:26:c7:cb:d8:b0:10:0b:2e:
7b:b2:44:76:a1:39:d1:5a:60:6c:bc:90:4b:32:16:e5:e4:cb:
9e:55:11:de
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYTEITLkq8agC1dHtldMHqbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjIxMTI5MTYwMzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmE2YWQxYWY4YzllMjIwZmUyYWVhN2I5YjRlYzkyMWRhMzU2MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwZgz/nSxXkG5jAZdQw87hX3hoSV
k+UzlDmEM76pBo3V7OJTYB+4tmkTTrinBA7afGVXmEMk7oMNuVqd0EFoYw9TwvS6
78KHUfI0Jg6x+SSWOgphoCjbKI2n7mJFbBC5T8d+k/9Olc8peyR1TnAwBRd3+9Gz
1KXIvCocKPVT8IZS/RbGSOLwmkuASh61GK3dSReGvYAUwg2W3okQ9Xrapl7W70Ul
oWEO6lpEVEdJQ7UyTugPjo3Vk2sh6+X3ivooK4MwBzt6B5YPAap/qe7sQuZNrFD+
8G5Sg7DBk2q0fbvMGtbjXQKWDelx4KhmowhOSnyHWPSMS1moKJ+HFE0wMQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFLumrRr4yeIg/irqe5tOySHaNWLBMB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvdTZhdEd2ako0aUQtS3VwN20wN0pJZG8xWXNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDJXtgAwQD
shTgMAwDBAK5CZwDBAC5CZ4DBAC5dowDBAG5do4wDQQCAAIwBwMFACoAm8AwDQYJ
KoZIhvcNAQELBQADggEBAFTz3fjrxzoQP8rbS1YHHSM7No+0TMS+v3beJjJ+Qr+f
FSNyQ4P0frmJ9NT+5bD175DD9DnvX67CURc+R0gxkGKTZYszfM6HuUtGIpWGl/I8
Tzm8f+AdIv/++zKL2SHVqiPlNNLqeqNLfA+CaLb5GfRH8LHKaYNPKlf9qbYkQ1DD
M1UUKjgBC16fTWlmr8O86SCTt0O/MAdpVIchBTs3cAyo4gm/Nsp6YEq/6uXM+W5m
ukGjVB9I7cruI9sVeeMjpASMZ8IoDxegPXIy1U7suzGUgM/HuZmptQBTgr01meU/
mycmx8vYsBALLnuyRHahOdFaYGy8kEsyFuXky55VEd4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:24 2024 by rpki-client on console-ams.rpki-client.org