Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/a13UBzPs_Q3j2aYo5xih_KE7AxE.roa
File: a13UBzPs_Q3j2aYo5xih_KE7AxE.roa (raw, json)
Hash identifier: HKYGcmIIsCxxmkUeybmrFHEEUEulZBMjnkx6vXWwLIg=
Subject key identifier: 6B:5D:D4:07:33:EC:FD:0D:E3:D9:A6:28:E7:18:A1:FC:A1:3B:03:11
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 14F60349
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/a13UBzPs_Q3j2aYo5xih_KE7AxE.roa
Signing time: Sat 01 Jan 2022 13:05:46 +0000
ROA not before: Sat 01 Jan 2022 13:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198731
IP address blocks: 5.1.32.0/21 maxlen: 21
85.184.224.0/22 maxlen: 22
185.64.232.0/22 maxlen: 22
185.45.28.0/22 maxlen: 22
81.173.40.0/23 maxlen: 23
2a00:bc40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351667017 (0x14f60349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jan 1 13:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b5dd40733ecfd0de3d9a628e718a1fca13b0311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:40:13:7a:29:2e:06:78:7d:da:53:46:86:
99:47:ad:25:5b:74:18:47:42:dc:e3:fd:e6:af:4e:
39:30:a2:e7:0e:99:77:a5:6d:25:b2:85:3c:b6:36:
e2:0c:08:b3:d6:34:d5:94:af:bc:f9:7b:12:b8:f5:
29:ef:5d:89:f8:c7:74:bd:c9:50:eb:0f:fe:d0:e2:
89:54:cc:cd:f1:dc:df:2f:43:2a:22:de:8d:85:89:
4d:15:57:eb:98:b5:93:1f:11:34:e2:b4:65:c5:ed:
55:23:4d:a4:93:92:83:33:5a:20:3c:71:41:81:4e:
36:13:d6:f3:6d:8e:65:e1:b5:df:ac:33:dd:e2:a7:
10:d7:cc:0c:39:e7:f9:88:d1:07:2a:d4:80:cb:e3:
bd:6a:6c:30:6f:e7:62:12:45:1f:cf:a5:0a:c5:7f:
af:c0:db:f8:24:d8:33:f9:df:51:cd:46:bf:94:d5:
ad:78:aa:52:da:5f:a6:d4:6b:08:e3:db:4a:c3:86:
a5:d7:fb:57:c2:92:1f:5c:6d:b7:e0:31:42:63:83:
29:81:d7:d6:94:4f:3d:07:fd:76:d6:bb:24:7c:25:
c0:78:87:3b:b2:5e:0d:9f:8a:2e:cf:70:f1:32:31:
23:ea:ed:f5:37:d9:b4:bc:28:c6:a6:7a:1c:c8:29:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:D4:07:33:EC:FD:0D:E3:D9:A6:28:E7:18:A1:FC:A1:3B:03:11
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/a13UBzPs_Q3j2aYo5xih_KE7AxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.32.0/21
81.173.40.0/23
85.184.224.0/22
185.45.28.0/22
185.64.232.0/22
IPv6:
2a00:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
89:46:10:87:79:19:90:98:a3:f9:50:cd:96:66:08:47:19:10:
a3:7b:82:d6:43:08:d1:64:86:0a:65:86:1d:f4:f4:25:1b:be:
71:99:b7:cf:0c:84:69:7b:49:56:2f:4e:e7:3e:bf:bf:23:cf:
35:84:9f:19:34:a8:53:0c:53:eb:a9:67:b2:2b:44:60:58:b6:
44:48:92:28:b9:5a:75:24:37:da:52:83:dd:c1:a2:9a:3b:c7:
e6:50:f6:18:58:d8:58:c9:c1:b8:e4:ab:04:79:83:ad:71:25:
c8:37:a9:f2:ef:5d:64:d4:f4:61:06:b6:8b:b6:51:30:80:4b:
16:e3:6b:a4:66:6a:00:ce:02:9e:73:df:f5:e9:47:0d:c5:79:
6d:a5:59:1f:23:96:2f:f6:6e:c0:bd:4f:d5:a2:e7:9c:e1:d3:
b6:e5:88:77:8a:8a:3e:23:e1:e7:38:52:ba:a9:3d:0b:39:a5:
8a:b5:c7:96:d2:e5:df:80:6e:ef:c6:ae:ed:04:8e:63:e1:a9:
eb:75:4d:a4:67:5d:63:17:99:03:c5:b6:e1:07:04:9d:de:f6:
7e:89:19:8a:85:22:e0:d6:6b:b3:42:d6:a3:61:4e:51:e4:b0:
60:4e:8c:33:f5:78:44:70:14:09:a3:93:af:41:e2:37:2e:87:
ed:fe:0d:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEFPYDSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NWE0MjRjZWUyZmRiMDA3MmI1NDE0MzhkOTEzZDI2NjM2YTliODhiMB4XDTIyMDEw
MTEzMDU0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmI1ZGQ0MDczM2Vj
ZmQwZGUzZDlhNjI4ZTcxOGExZmNhMTNiMDMxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3FQBN6KS4GeH3aU0aGmUetJVt0GEdC3OP95q9OOTCi5w6Z
d6VtJbKFPLY24gwIs9Y01ZSvvPl7Erj1Ke9difjHdL3JUOsP/tDiiVTMzfHc3y9D
KiLejYWJTRVX65i1kx8RNOK0ZcXtVSNNpJOSgzNaIDxxQYFONhPW822OZeG136wz
3eKnENfMDDnn+YjRByrUgMvjvWpsMG/nYhJFH8+lCsV/r8Db+CTYM/nfUc1Gv5TV
rXiqUtpfptRrCOPbSsOGpdf7V8KSH1xtt+AxQmODKYHX1pRPPQf9dta7JHwlwHiH
O7JeDZ+KLs9w8TIxI+rt9TfZtLwoxqZ6HMgpekkCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBRrXdQHM+z9DePZpijnGKH8oTsDETAfBgNVHSMEGDAWgBRlpCTO4v2wBytU
FDjZE9JmNqm4izAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1phUWt6dUw5c0FjclZCUTQyUlBTWmphcHVJcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2YvZWI4MzdiLTNhZTUtNGY2MC04MjliLTJiODAzODI4MzAxNy8x
L2ExM1VCelBzX1EzajJhWW81eGloX0tFN0F4RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Yv
ZWI4MzdiLTNhZTUtNGY2MC04MjliLTJiODAzODI4MzAxNy8xL1phUWt6dUw5c0Fj
clZCUTQyUlBTWmphcHVJcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAwUBIAMEAVGtKAMEAlW44AMEArkt
HAMEArlA6DANBAIAAjAHAwUAKgC8QDANBgkqhkiG9w0BAQsFAAOCAQEAiUYQh3kZ
kJij+VDNlmYIRxkQo3uC1kMI0WSGCmWGHfT0JRu+cZm3zwyEaXtJVi9O5z6/vyPP
NYSfGTSoUwxT66lnsitEYFi2REiSKLladSQ32lKD3cGimjvH5lD2GFjYWMnBuOSr
BHmDrXElyDep8u9dZNT0YQa2i7ZRMIBLFuNrpGZqAM4CnnPf9elHDcV5baVZHyOW
L/ZuwL1P1aLnnOHTtuWId4qKPiPh5zhSuqk9CzmlirXHltLl34Bu78au7QSOY+Gp
63VNpGddYxeZA8W24QcEnd72fokZioUi4NZrs0LWo2FOUeSwYE6MM/V4RHAUCaOT
r0HiNy6H7f4NmQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:43 2024 by rpki-client on console-ams.rpki-client.org