Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/Yx0lVBwCLl3Oh7odIQeeuy_B9AA.roa
File: Yx0lVBwCLl3Oh7odIQeeuy_B9AA.roa (raw, json)
Hash identifier: SpBXIOscnfpBFCvOfdEBwjwgGE5rDaCkrrpuhqvCJAw=
Subject key identifier: 63:1D:25:54:1C:02:2E:5D:CE:87:BA:1D:21:07:9E:BB:2F:C1:F4:00
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 0181F6BDEDD6BB8D7728F307A650D2A7A773
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/Yx0lVBwCLl3Oh7odIQeeuy_B9AA.roa
Signing time: Wed 13 Jul 2022 08:47:31 +0000
ROA not before: Wed 13 Jul 2022 08:47:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61369
IP address blocks: 88.202.208.0/22 maxlen: 24
88.212.156.0/22 maxlen: 24
185.8.132.0/22 maxlen: 24
83.151.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:bd:ed:d6:bb:8d:77:28:f3:07:a6:50:d2:a7:a7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jul 13 08:47:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=631d25541c022e5dce87ba1d21079ebb2fc1f400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:25:6f:05:01:32:e0:3c:41:60:db:08:13:
ce:c2:71:3a:f1:41:24:82:a0:c1:39:92:79:34:98:
fc:69:96:b7:d8:6a:17:bd:d0:f7:31:cb:e7:5b:4c:
f4:a9:2b:00:cc:9f:eb:66:5d:c0:b2:75:b4:00:05:
8b:71:81:64:fe:df:d4:00:1a:5d:85:3e:c5:19:43:
cd:b9:bb:90:08:bf:0b:71:3e:f2:a4:12:06:e2:12:
ed:04:36:53:28:bf:f3:44:27:65:6b:8e:d9:c9:0e:
11:b0:02:aa:0b:df:1c:4f:e9:a8:1d:55:50:3c:e3:
90:81:43:cb:f1:ca:21:7b:a6:1e:8d:f2:98:b3:b2:
50:db:2a:21:be:73:6a:8c:66:39:61:2e:c7:d3:28:
4e:02:f8:9d:20:18:9f:18:75:f1:92:fe:7c:39:5d:
8b:07:5f:f6:d8:cb:93:d4:aa:d0:3a:1c:ce:49:35:
b0:73:9a:f1:10:70:01:0a:12:dd:f3:0c:96:80:6a:
84:1e:7d:d3:3d:5f:b8:ae:5b:eb:29:92:36:db:46:
30:53:4e:5b:cd:b4:68:ff:90:46:a1:05:a1:49:cb:
1b:f2:81:55:c1:c3:34:ec:1d:f9:29:f0:d8:82:be:
9b:d2:03:29:4a:5b:ca:3b:29:18:0f:e9:24:99:70:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:25:54:1C:02:2E:5D:CE:87:BA:1D:21:07:9E:BB:2F:C1:F4:00
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/Yx0lVBwCLl3Oh7odIQeeuy_B9AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0/22
88.212.156.0/22
185.8.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:ab:30:bd:89:e9:6f:e1:76:f6:9b:c5:c5:3c:0c:c4:8b:39:
21:57:f5:e2:17:1e:e7:64:0e:8e:d6:48:cd:50:cd:45:36:0d:
cc:ad:ea:81:cc:8e:4b:65:2f:06:eb:34:3b:cf:60:87:97:03:
7e:a9:3e:8b:2e:ea:9f:a5:b3:c2:c1:e4:5a:72:0d:fa:ee:51:
0b:5a:ff:c1:cb:8d:05:ea:2e:7d:cb:1b:1c:cf:72:26:d0:24:
5f:0e:ef:75:9c:f7:c6:a8:ef:a0:b1:18:c8:e1:7b:8d:95:46:
96:c8:89:0e:b6:1f:8c:c8:e6:7d:a2:d8:72:49:d7:0a:81:3c:
ca:6f:43:f8:1c:01:48:20:e9:54:11:77:fa:86:1a:a8:ce:63:
8c:3d:01:a3:37:b5:cd:55:14:f2:c7:7d:31:ac:ba:59:87:cf:
16:7f:e0:5c:ae:45:4a:d8:e5:c3:22:89:26:1b:36:93:58:8e:
49:34:dd:61:ce:6e:9c:22:e3:e0:df:f6:cf:6d:e2:55:1a:09:
91:42:2e:4f:eb:c8:84:2f:af:33:b1:cd:e2:f0:70:12:ea:24:
d3:35:6b:f5:58:ee:23:67:db:f5:9f:5b:73:37:b0:51:8e:f2:
3a:f7:30:05:87:d8:a5:eb:aa:12:0b:5f:aa:28:e5:b1:d4:01:
3b:82:78:9b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYH2ve3Wu413KPMHplDSp6dzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj
MzQxNDYwHhcNMjIwNzEzMDg0NzMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzFkMjU1NDFjMDIyZTVkY2U4N2JhMWQyMTA3OWViYjJmYzFmNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyglbwUBMuA8QWDbCBPOwnE68UEk
gqDBOZJ5NJj8aZa32GoXvdD3McvnW0z0qSsAzJ/rZl3AsnW0AAWLcYFk/t/UABpd
hT7FGUPNubuQCL8LcT7ypBIG4hLtBDZTKL/zRCdla47ZyQ4RsAKqC98cT+moHVVQ
POOQgUPL8cohe6YejfKYs7JQ2yohvnNqjGY5YS7H0yhOAvidIBifGHXxkv58OV2L
B1/22MuT1KrQOhzOSTWwc5rxEHABChLd8wyWgGqEHn3TPV+4rlvrKZI220YwU05b
zbRo/5BGoQWhScsb8oFVwcM07B35KfDYgr6b0gMpSlvKOykYD+kkmXAuIQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGMdJVQcAi5dzoe6HSEHnrsvwfQAMB8GA1UdIwQY
MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvWXgwbFZCd0NMbDNPaDdvZElRZWV1eV9COUFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCU5fAAwQC
WMrQAwQCWNScAwQCuQiEMA0GCSqGSIb3DQEBCwUAA4IBAQCxqzC9ielv4Xb2m8XF
PAzEizkhV/XiFx7nZA6O1kjNUM1FNg3MreqBzI5LZS8G6zQ7z2CHlwN+qT6LLuqf
pbPCweRacg367lELWv/By40F6i59yxscz3Im0CRfDu91nPfGqO+gsRjI4XuNlUaW
yIkOth+MyOZ9othySdcKgTzKb0P4HAFIIOlUEXf6hhqozmOMPQGjN7XNVRTyx30x
rLpZh88Wf+BcrkVK2OXDIokmGzaTWI5JNN1hzm6cIuPg3/bPbeJVGgmRQi5P68iE
L68zsc3i8HAS6iTTNWv1WO4jZ9v1n1tzN7BRjvI69zAFh9il66oSC1+qKOWx1AE7
gnib
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:39 2024 by rpki-client on console-fra.rpki-client.org