Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/1-j1mDrTv1BhpEg8HJNac84GFkr4.roa
File: 1-j1mDrTv1BhpEg8HJNac84GFkr4.roa (raw, json)
Hash identifier: pn6/oL+xsj338c6cFgeBwGHWt5RJPjElIKgKrsOUDaI=
Subject key identifier: FA:3D:66:0E:B4:EF:D4:18:69:12:0F:07:24:D6:9C:F3:81:85:92:BE
Certificate issuer: /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial: 01842E1AF6ECD41E2BFA824744BEFE44CE82
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/1-j1mDrTv1BhpEg8HJNac84GFkr4.roa
Signing time: Mon 31 Oct 2022 12:53:49 +0000
ROA not before: Mon 31 Oct 2022 12:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3238
IP address blocks: 213.204.32.0/19 maxlen: 24
79.133.0.0/19 maxlen: 19
194.110.176.0/20 maxlen: 20
212.17.160.0/19 maxlen: 24
194.112.0.0/20 maxlen: 20
82.199.160.0/19 maxlen: 24
2a00:5500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:1a:f6:ec:d4:1e:2b:fa:82:47:44:be:fe:44:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
Validity
Not Before: Oct 31 12:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa3d660eb4efd41869120f0724d69cf3818592be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:22:cf:11:dc:00:fa:b7:d0:43:be:cd:5b:
50:4c:e6:bc:dc:23:63:57:ae:54:f7:23:9a:2d:39:
e5:a1:64:69:2d:91:5b:67:67:cc:67:81:12:22:49:
d8:0b:54:24:78:5e:99:03:6d:66:6b:39:bb:04:3d:
b2:09:7a:ae:06:d0:67:1a:bd:89:38:3b:2c:b9:5c:
1e:3a:26:5f:78:21:dd:5a:28:a7:94:03:f6:59:46:
28:7d:00:73:99:02:60:2b:73:a6:0d:6a:a5:94:13:
22:78:18:39:04:23:a3:77:19:66:ec:29:5c:0e:1f:
6c:64:b7:c9:30:03:8a:82:dc:bc:8f:1c:df:da:4b:
ab:18:e0:01:7c:cd:47:df:e3:2d:c1:cf:8d:0a:c5:
64:80:08:e0:ea:1a:4b:1b:95:f6:1b:e2:97:cf:80:
4b:48:70:bd:3c:63:45:92:10:08:42:5a:de:7c:87:
72:3c:41:ab:0c:ed:09:e0:45:68:ce:d5:68:1d:10:
9b:02:2b:9b:71:85:89:7f:bd:38:aa:cc:f1:11:c5:
ca:03:5b:9c:12:28:c1:26:00:66:a9:44:99:7b:4d:
77:12:01:66:64:14:01:b0:47:e9:98:9e:76:be:71:
90:66:08:47:68:36:25:03:24:c5:56:d1:9c:a2:cb:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:66:0E:B4:EF:D4:18:69:12:0F:07:24:D6:9C:F3:81:85:92:BE
X509v3 Authority Key Identifier:
keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/1-j1mDrTv1BhpEg8HJNac84GFkr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.0.0/19
82.199.160.0/19
194.110.176.0/20
194.112.0.0/20
212.17.160.0/19
213.204.32.0/19
IPv6:
2a00:5500::/32
Signature Algorithm: sha256WithRSAEncryption
8f:86:90:74:bd:cc:c6:eb:6f:33:99:c1:03:49:30:44:9f:7b:
fc:8d:54:f3:c4:66:d3:55:b7:c7:ce:dc:e0:1f:4b:7b:46:08:
17:f9:ef:c9:d4:61:75:de:7f:03:3b:cd:4b:59:1e:73:00:d7:
d0:84:a7:68:72:1d:1d:63:56:03:38:05:ce:03:d0:1d:5b:69:
29:e9:1f:0f:9f:5a:0f:6a:4d:b0:89:39:2b:20:2a:6c:4f:ef:
2c:b0:c6:b6:b8:a9:95:55:58:f9:27:e7:d3:ce:3a:65:d6:66:
95:22:67:9f:d8:0e:ab:ba:59:3c:41:69:96:15:7a:99:0b:98:
a5:08:1c:30:e2:bd:40:75:df:1a:2e:cd:d7:21:81:4f:80:3e:
39:d3:1f:07:1a:a0:27:59:88:cf:1c:da:cc:58:3d:6d:d5:06:
5f:6c:21:3a:30:d0:be:e4:ed:2d:3e:80:8d:79:06:54:3d:42:
b3:34:f9:d5:ca:72:82:3b:9d:b0:6d:74:e1:78:21:04:ce:45:
38:b2:87:42:65:52:74:f9:d2:27:98:be:8c:3e:08:34:43:7d:
cb:fc:b7:0e:c3:9b:de:13:3f:73:35:12:bb:df:f9:f8:e1:6e:
e1:19:49:06:1a:8d:cf:17:b5:49:62:17:be:b5:93:23:2d:22:
b3:5f:42:75
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYQuGvbs1B4r+oJHRL7+RM6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTYzYzQyNmQxYWFlNGVkMWU3ZjU5NTM2NzQ5MDIyMDg5
ZTg0NzkwHhcNMjIxMDMxMTI1MzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTNkNjYwZWI0ZWZkNDE4NjkxMjBmMDcyNGQ2OWNmMzgxODU5MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgekizxHcAPq30EO+zVtQTOa83CNj
V65U9yOaLTnloWRpLZFbZ2fMZ4ESIknYC1QkeF6ZA21mazm7BD2yCXquBtBnGr2J
ODssuVweOiZfeCHdWiinlAP2WUYofQBzmQJgK3OmDWqllBMieBg5BCOjdxlm7Clc
Dh9sZLfJMAOKgty8jxzf2kurGOABfM1H3+Mtwc+NCsVkgAjg6hpLG5X2G+KXz4BL
SHC9PGNFkhAIQlrefIdyPEGrDO0J4EVoztVoHRCbAiubcYWJf704qszxEcXKA1uc
EijBJgBmqUSZe013EgFmZBQBsEfpmJ52vnGQZghHaDYlAyTFVtGcosvNmQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFPo9Zg6079QYaRIPByTWnPOBhZK+MB8GA1UdIwQY
MBaAFJ5WPEJtGq5O0ef1lTZ0kCIInoR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxZOFFtMGFyazdSNV9XVk5uU1FJZ2llaEhrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81NWQ1OTUtZDBiYy00YmEyLTgwYTAt
YWZiY2YzNjZiYjA3LzEvMS1qMW1EclR2MUJocEVnOEhKTmFjODRHRmtyNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDIvNTVkNTk1LWQwYmMtNGJhMi04MGEwLWFmYmNmMzY2YmIw
Ny8xL25sWThRbTBhcms3UjVfV1ZOblNRSWdpZWhIay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEBU+FAAME
BVLHoAMEBMJusAMEBMJwAAMEBdQRoAMEBdXMIDANBAIAAjAHAwUAKgBVADANBgkq
hkiG9w0BAQsFAAOCAQEAj4aQdL3MxutvM5nBA0kwRJ97/I1U88Rm01W3x87c4B9L
e0YIF/nvydRhdd5/AzvNS1kecwDX0ISnaHIdHWNWAzgFzgPQHVtpKekfD59aD2pN
sIk5KyAqbE/vLLDGtriplVVY+Sfn0846ZdZmlSJnn9gOq7pZPEFplhV6mQuYpQgc
MOK9QHXfGi7N1yGBT4A+OdMfBxqgJ1mIzxzazFg9bdUGX2whOjDQvuTtLT6AjXkG
VD1CszT51cpygjudsG104XghBM5FOLKHQmVSdPnSJ5i+jD4INEN9y/y3DsOb3hM/
czUSu9/5+OFu4RlJBhqNzxe1SWIXvrWTIy0is19CdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:51 2023 by rpki-client on console-ams.rpki-client.org