Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/Skpqi9WWygYcFTzx1diagPTvV3s.roa
File: Skpqi9WWygYcFTzx1diagPTvV3s.roa (raw, json)
Hash identifier: gSwhoF3i7+4AnLdRSYbngqNZZGvmWpB2KFRk0H81sxg=
Subject key identifier: 4A:4A:6A:8B:D5:96:CA:06:1C:15:3C:F1:D5:D8:9A:80:F4:EF:57:7B
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 0680DE45
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/Skpqi9WWygYcFTzx1diagPTvV3s.roa
Signing time: Sat 01 Jan 2022 13:58:30 +0000
ROA not before: Sat 01 Jan 2022 13:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62412
IP address blocks: 185.183.220.0/22 maxlen: 24
193.202.122.0/24 maxlen: 24
193.31.68.0/22 maxlen: 24
45.150.216.0/22 maxlen: 24
188.214.240.0/23 maxlen: 24
185.36.208.0/23 maxlen: 24
2a0b:1f80::/29 maxlen: 64
2a0b:2f80::/29 maxlen: 64
2a0f:4f00::/29 maxlen: 64
2a0f:f940::/29 maxlen: 64
2a0d:5fc0::/29 maxlen: 64
2a04:6c00::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109108805 (0x680de45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Jan 1 13:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a4a6a8bd596ca061c153cf1d5d89a80f4ef577b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:47:35:c3:44:d8:eb:23:77:d1:5a:4e:b6:
bf:d2:93:69:65:cf:ee:be:4c:8e:25:86:b3:f8:31:
27:44:6a:23:0e:01:10:b8:ef:57:29:bf:87:bc:43:
dc:aa:b4:3e:4a:88:8b:93:45:64:c9:10:ff:da:43:
18:5c:d8:61:7f:45:39:a1:d8:d9:ea:4a:4c:a1:a2:
e9:79:a1:6a:ef:cc:cf:05:12:9d:54:81:53:58:c2:
5b:f0:e3:f5:72:83:a2:05:c4:ac:bc:28:13:0b:1a:
fa:1e:6f:e5:63:2d:58:53:98:c0:d5:03:6f:7a:5b:
e0:31:39:c7:34:b1:57:bd:bc:34:51:63:82:c6:1d:
f7:f8:d7:6a:f3:4a:ce:99:8c:e5:d4:3b:ed:f4:aa:
b3:e5:8e:c5:28:6b:b1:0e:55:f6:06:88:cf:44:a5:
6a:93:9a:56:f0:d8:a3:10:83:57:89:f6:2d:53:c5:
04:f6:2e:29:88:53:4b:df:d7:62:91:a2:f6:d1:75:
4e:a2:2b:5b:a0:05:91:09:94:b3:e5:17:1c:5c:ab:
f2:f9:16:db:d2:ca:07:19:06:09:28:6d:82:fe:2a:
13:3e:40:85:06:dc:c0:d3:e9:d8:22:af:c0:9c:4a:
1e:04:e1:91:f8:40:8d:a0:74:58:e9:da:67:e2:a4:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:6A:8B:D5:96:CA:06:1C:15:3C:F1:D5:D8:9A:80:F4:EF:57:7B
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/Skpqi9WWygYcFTzx1diagPTvV3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.216.0/22
185.36.208.0/23
185.183.220.0/22
188.214.240.0/23
193.31.68.0/22
193.202.122.0/24
IPv6:
2a04:6c00::/29
2a0b:1f80::/29
2a0b:2f80::/29
2a0d:5fc0::/29
2a0f:4f00::/29
2a0f:f940::/29
Signature Algorithm: sha256WithRSAEncryption
9b:fa:b8:29:fb:b7:b8:8f:27:1e:67:7f:f7:23:da:b5:41:23:
2a:90:9b:f4:29:39:0d:8a:0e:2e:60:ff:bb:d2:17:98:34:b0:
6e:33:d5:45:af:96:bb:22:76:87:9d:c2:aa:81:c4:86:d1:eb:
72:72:c7:4b:c0:a1:a0:d9:74:de:bb:62:d7:a5:4f:4d:3c:82:
40:69:57:47:1b:7c:d3:c5:8c:b1:2a:29:76:f3:e5:74:7f:d7:
bc:b0:c9:78:45:28:f5:76:78:bf:76:dd:b9:7b:4d:4a:ad:7a:
14:e1:fc:e8:d1:fc:6f:19:2b:29:99:6f:ec:23:00:63:43:1c:
9a:52:59:be:06:64:37:19:1a:7e:2b:dc:92:68:e4:47:92:0e:
99:db:8e:4f:c0:bd:38:68:c3:0d:be:f9:c8:c2:6e:b2:cc:c0:
08:d5:a6:a8:43:18:d5:49:6c:02:cd:4d:c8:6d:96:da:ea:67:
4f:34:f7:ba:35:8c:c4:51:e2:ef:46:f1:00:b7:45:75:f4:df:
a2:c2:4c:20:03:10:21:0b:4c:42:25:b5:99:e7:c1:3b:b1:7a:
9d:50:2c:f5:4c:a8:33:01:a6:78:93:71:64:ce:8c:03:0b:75:
66:03:2c:95:cb:a3:79:48:71:7e:b9:d6:78:75:95:18:95:cf:
8b:61:a6:e1
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIEBoDeRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ODk5YWVhNTZmNTBmZjhmNDM0MmNiZWUyYWYyZjI4OGExNjhjOTMwMB4XDTIyMDEw
MTEzNTgzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE0YTZhOGJkNTk2
Y2EwNjFjMTUzY2YxZDVkODlhODBmNGVmNTc3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALb/RzXDRNjrI3fRWk62v9KTaWXP7r5MjiWGs/gxJ0RqIw4B
ELjvVym/h7xD3Kq0PkqIi5NFZMkQ/9pDGFzYYX9FOaHY2epKTKGi6Xmhau/MzwUS
nVSBU1jCW/Dj9XKDogXErLwoEwsa+h5v5WMtWFOYwNUDb3pb4DE5xzSxV728NFFj
gsYd9/jXavNKzpmM5dQ77fSqs+WOxShrsQ5V9gaIz0SlapOaVvDYoxCDV4n2LVPF
BPYuKYhTS9/XYpGi9tF1TqIrW6AFkQmUs+UXHFyr8vkW29LKBxkGCShtgv4qEz5A
hQbcwNPp2CKvwJxKHgThkfhAjaB0WOnaZ+KkMKcCAwEAAaOCAlswggJXMB0GA1Ud
DgQWBBRKSmqL1ZbKBhwVPPHV2JqA9O9XezAfBgNVHSMEGDAWgBT4ma6lb1D/j0NC
y+4q8vKIoWjJMDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtSm11cFc5UV80OURRc3Z1S3ZMeWlLRm95VEEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzQ2LzJjMmU2MS03Mjc5LTQ4M2MtODQ3NS05YmYxOWQ4NDIyMGYv
MS9Ta3BxaTlXV3lnWWNGVHp4MWRpYWdQVHZWM3Mucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2
LzJjMmU2MS03Mjc5LTQ4M2MtODQ3NS05YmYxOWQ4NDIyMGYvMS8xLUptdXBXOVFf
NDlEUXN2dUt2THlpS0ZveVRBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MG8GCCsGAQUFBwEHAQH/BGAwXjAqBAIAATAkAwQCLZbYAwQBuSTQAwQCubfcAwQB
vNbwAwQCwR9EAwQAwcp6MDAEAgACMCoDBQMqBGwAAwUDKgsfgAMFAyoLL4ADBQMq
DV/AAwUDKg9PAAMFAyoP+UAwDQYJKoZIhvcNAQELBQADggEBAJv6uCn7t7iPJx5n
f/cj2rVBIyqQm/QpOQ2KDi5g/7vSF5g0sG4z1UWvlrsidoedwqqBxIbR63Jyx0vA
oaDZdN67YtelT008gkBpV0cbfNPFjLEqKXbz5XR/17ywyXhFKPV2eL923bl7TUqt
ehTh/OjR/G8ZKymZb+wjAGNDHJpSWb4GZDcZGn4r3JJo5EeSDpnbjk/AvThoww2+
+cjCbrLMwAjVpqhDGNVJbALNTchtltrqZ08097o1jMRR4u9G8QC3RXX036LCTCAD
ECELTEIltZnnwTuxep1QLPVMqDMBpniTcWTOjAMLdWYDLJXLo3lIcX651nh1lRiV
z4thpuE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:03 2023 by rpki-client on console-ams.rpki-client.org