Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/V70ogqsJwuNrt_C6Aq9rR6LaDSU.roa
File: V70ogqsJwuNrt_C6Aq9rR6LaDSU.roa (raw, json)
Hash identifier: eFXOpqESwzKjxXvA8ITmRLvBgchIDSbl6MKs2WRZ+Z0=
Subject key identifier: 57:BD:28:82:AB:09:C2:E3:6B:B7:F0:BA:02:AF:6B:47:A2:DA:0D:25
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 17670873
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/V70ogqsJwuNrt_C6Aq9rR6LaDSU.roa
Signing time: Sat 01 Jan 2022 12:58:12 +0000
ROA not before: Sat 01 Jan 2022 12:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201590
IP address blocks: 185.68.32.0/22 maxlen: 22
185.68.32.0/23 maxlen: 23
185.68.34.0/23 maxlen: 23
2a03:2960:ffff::/48 maxlen: 48
2a03:2960::/40 maxlen: 40
2a03:2960:100::/40 maxlen: 40
2a03:2960::/32 maxlen: 32
2a03:2960:fffe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392628339 (0x17670873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Jan 1 12:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57bd2882ab09c2e36bb7f0ba02af6b47a2da0d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:05:da:9f:0f:4c:74:82:8e:b5:f9:7b:0f:
b6:19:0f:38:5f:36:09:8a:2f:a7:82:de:22:d0:59:
4e:b2:93:81:1a:29:ce:53:31:41:f1:45:aa:ad:fd:
f0:21:59:81:80:91:86:16:d2:c1:3e:eb:23:69:47:
c8:5f:95:54:35:fa:98:d0:17:74:45:05:83:f9:d3:
80:0d:6b:d7:ec:b0:b1:fe:b3:3c:d2:50:26:d7:f5:
ad:f9:2f:a8:46:8b:9c:50:7e:47:3a:52:fb:cb:84:
27:78:37:80:57:c9:69:07:27:97:69:21:33:18:69:
54:3a:7e:d3:d9:c4:25:8a:62:03:2b:56:15:6b:f5:
90:73:f2:bb:36:c1:f1:5d:d7:8b:ec:13:f4:48:fa:
bc:1a:aa:53:22:0d:77:7b:23:46:cd:77:98:c3:a0:
e1:e1:71:c7:cb:90:93:cd:23:27:86:60:3c:30:3e:
d7:78:c7:a1:ea:d7:d6:54:8e:25:38:76:79:e3:d2:
53:fc:fe:e4:ee:26:6c:db:e8:1f:72:f5:96:cf:26:
5a:a8:f0:fd:fd:5d:f7:4a:58:5a:b5:a8:56:2a:6e:
f6:81:9a:59:99:68:29:ad:55:4c:31:bf:9e:b7:39:
ed:c7:b5:d2:51:54:9f:5f:d3:71:2a:7c:fa:24:6e:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BD:28:82:AB:09:C2:E3:6B:B7:F0:BA:02:AF:6B:47:A2:DA:0D:25
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/V70ogqsJwuNrt_C6Aq9rR6LaDSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.32.0/22
IPv6:
2a03:2960::/32
Signature Algorithm: sha256WithRSAEncryption
07:f8:7e:45:99:50:51:55:6f:07:40:f1:28:f8:65:68:b2:33:
2d:11:f3:21:55:4b:a4:2b:9b:bc:d3:5b:16:fa:e5:6e:bc:34:
2a:61:fe:8e:76:38:3b:bb:28:b1:06:d8:0f:fe:4b:f2:45:5c:
51:bf:54:4b:3b:f1:2c:3f:e1:a3:80:79:01:fc:62:ab:5e:97:
cf:1f:f5:fa:39:99:58:27:f3:66:ee:2b:3c:43:bf:4f:17:bc:
a0:aa:6c:60:71:f9:c9:e1:09:f7:8b:64:8e:19:19:cd:c4:26:
bd:c8:48:f3:5a:14:f5:eb:40:dc:26:3e:21:ca:ec:c8:6d:1b:
52:bd:2e:8e:08:b9:27:41:3b:45:69:af:91:e0:30:8a:f8:fc:
d8:ee:31:aa:17:9e:8b:c1:48:d4:1e:3c:03:4c:88:e1:f7:a6:
c5:7e:50:d5:74:9e:be:ba:d8:cd:67:ca:47:6a:92:b5:0a:58:
15:ee:d2:5b:27:01:d0:ca:5b:ec:f6:1f:91:69:ca:6d:0e:1f:
02:89:23:14:0d:f1:c6:59:6c:c7:c0:54:0e:10:7a:61:ce:84:
34:ed:30:40:a2:d7:cd:9b:75:41:18:2f:5d:9a:25:ec:30:ff:
2f:db:a1:f1:07:ca:60:74:06:ad:8b:80:96:ca:b6:96:40:be:
5f:9b:4b:4f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEF2cIczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZjM3NWJjNmM4MTEwZjFhZDczM2RmNzdhY2ZiYjFkNmVjNDY1Y2I4MB4XDTIyMDEw
MTEyNTgxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdiZDI4ODJhYjA5
YzJlMzZiYjdmMGJhMDJhZjZiNDdhMmRhMGQyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIaZBdqfD0x0go61+XsPthkPOF82CYovp4LeItBZTrKTgRop
zlMxQfFFqq398CFZgYCRhhbSwT7rI2lHyF+VVDX6mNAXdEUFg/nTgA1r1+ywsf6z
PNJQJtf1rfkvqEaLnFB+RzpS+8uEJ3g3gFfJaQcnl2khMxhpVDp+09nEJYpiAytW
FWv1kHPyuzbB8V3Xi+wT9Ej6vBqqUyINd3sjRs13mMOg4eFxx8uQk80jJ4ZgPDA+
13jHoerX1lSOJTh2eePSU/z+5O4mbNvoH3L1ls8mWqjw/f1d90pYWrWoVipu9oGa
WZloKa1VTDG/nrc57ce10lFUn1/TcSp8+iRukOsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRXvSiCqwnC42u38LoCr2tHotoNJTAfBgNVHSMEGDAWgBSPN1vGyBEPGtcz
33es+7HW7EZcuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2p6ZGJ4c2dSRHhyWE05OTNyUHV4MXV4R1hMZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvNzg2OGE1LWQ1MDAtNGFlMS1iM2I3LTgwOTg1MWEwNmI2YS8x
L1Y3MG9ncXNKd3VOcnRfQzZBcTlyUjZMYURTVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
Nzg2OGE1LWQ1MDAtNGFlMS1iM2I3LTgwOTg1MWEwNmI2YS8xL2p6ZGJ4c2dSRHhy
WE05OTNyUHV4MXV4R1hMZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlEIDANBAIAAjAHAwUAKgMpYDAN
BgkqhkiG9w0BAQsFAAOCAQEAB/h+RZlQUVVvB0DxKPhlaLIzLRHzIVVLpCubvNNb
Fvrlbrw0KmH+jnY4O7sosQbYD/5L8kVcUb9USzvxLD/ho4B5Afxiq16Xzx/1+jmZ
WCfzZu4rPEO/Txe8oKpsYHH5yeEJ94tkjhkZzcQmvchI81oU9etA3CY+IcrsyG0b
Ur0ujgi5J0E7RWmvkeAwivj82O4xqheei8FI1B48A0yI4femxX5Q1XSevrrYzWfK
R2qStQpYFe7SWycB0Mpb7PYfkWnKbQ4fAokjFA3xxllsx8BUDhB6Yc6ENO0wQKLX
zZt1QRgvXZol7DD/L9uh8QfKYHQGrYuAlsq2lkC+X5tLTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:35 2024 by rpki-client on console-ams.rpki-client.org