Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/Ae3yhZkHxxxeeIVooj4xt57NJYk.roa
File: Ae3yhZkHxxxeeIVooj4xt57NJYk.roa (raw, json)
Hash identifier: +CUtvwEknRPRqMek1cnDwmwyGmUC+7vexdjwK8qnBdg=
Subject key identifier: 01:ED:F2:85:99:07:C7:1C:5E:78:85:68:A2:3E:31:B7:9E:CD:25:89
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 10D15649
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/Ae3yhZkHxxxeeIVooj4xt57NJYk.roa
Signing time: Tue 24 May 2022 11:46:13 +0000
ROA not before: Tue 24 May 2022 11:46:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201565
IP address blocks: 185.91.148.0/23 maxlen: 23
185.91.150.0/23 maxlen: 23
94.176.184.0/23 maxlen: 23
89.35.206.0/23 maxlen: 23
185.59.96.0/22 maxlen: 22
185.11.232.0/22 maxlen: 22
2a03:7e40:4000::/36 maxlen: 36
2a03:7e40:2000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282154569 (0x10d15649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: May 24 11:46:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01edf2859907c71c5e788568a23e31b79ecd2589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:71:2a:70:43:bf:8e:75:47:ea:17:e2:dc:
37:ba:ce:57:f3:59:88:82:9d:bf:f5:19:81:eb:69:
94:ab:23:1a:fa:ec:a8:b1:14:e2:d3:37:e5:8d:3c:
33:29:86:07:48:1c:13:3a:51:82:ab:c3:1b:18:38:
d6:47:e4:e4:fa:0c:f5:0b:17:8d:91:bd:65:c3:9d:
3f:c8:61:20:83:e0:89:87:6f:a8:32:d0:44:14:9c:
37:fd:07:2b:28:95:8f:c1:5e:38:56:75:d5:7f:56:
3d:08:f5:68:8f:30:c9:d9:34:7d:9c:05:8b:79:eb:
cc:7d:8d:c5:ba:49:80:b8:2b:99:1a:6b:31:a3:4b:
9b:50:15:04:03:30:64:bf:8e:b6:87:2d:0f:7f:d2:
87:3d:e4:56:b1:8d:aa:1e:d4:9e:c2:0a:a2:ab:b4:
d2:62:7f:58:9e:ea:ca:86:10:4a:70:ff:f3:c3:df:
45:74:d7:9c:04:43:05:27:b8:fc:f0:0e:ee:1e:a1:
2c:f9:17:ea:b9:ff:54:51:09:ba:ae:9b:97:38:86:
dd:d9:62:73:89:26:6f:5d:7e:10:21:ec:08:13:e3:
b0:98:86:de:7d:d0:30:48:29:48:ae:d5:cd:2d:39:
df:7b:31:c7:e2:36:99:d0:6d:8a:97:23:51:c5:df:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:ED:F2:85:99:07:C7:1C:5E:78:85:68:A2:3E:31:B7:9E:CD:25:89
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/Ae3yhZkHxxxeeIVooj4xt57NJYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.206.0/23
94.176.184.0/23
185.11.232.0/22
185.59.96.0/22
185.91.148.0/22
IPv6:
2a03:7e40:2000::/36
2a03:7e40:4000::/36
Signature Algorithm: sha256WithRSAEncryption
89:07:b8:ce:b1:c1:8f:2c:4f:f9:3b:78:c4:6a:7b:b2:f7:69:
02:f3:80:c8:89:f8:53:50:ff:83:c2:e1:81:3b:09:b3:2b:1f:
35:2b:40:80:ab:87:20:7d:7b:49:9a:11:ce:9d:ae:f9:0d:98:
f5:a5:35:33:c8:69:60:09:bf:8a:60:af:f7:c8:3b:0f:94:cc:
af:69:9d:f8:60:ca:38:2d:58:b4:66:e1:fd:73:92:63:d2:ec:
6a:a0:50:5c:7b:98:fe:00:3c:c6:62:6f:bc:51:71:42:47:1d:
77:5d:1c:8e:99:23:92:31:82:dc:0f:be:70:3a:47:fe:fe:1b:
fc:a4:cf:85:3f:38:34:0c:05:38:67:92:34:ca:ff:ca:ec:9d:
53:2c:e7:b9:c5:d7:7b:d2:35:3b:28:1b:4e:42:a3:67:3e:31:
4b:27:8d:e6:47:d5:61:03:55:4f:dc:05:60:82:c5:1b:72:99:
61:9e:52:aa:46:5c:1c:12:7a:94:93:9e:a6:de:d7:be:8c:b7:
56:39:81:4f:f3:f7:0c:50:e2:6e:2c:bb:c7:bf:41:29:00:2b:
4c:2b:32:ee:83:f5:42:d3:ac:6a:ca:81:80:01:3f:1a:9a:aa:
80:de:e8:9c:7d:59:8f:bb:78:94:f6:96:d9:ad:cd:e3:6b:d8:
89:2b:59:20
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIEENFWSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZjM2OGZlYjllNTUzYmRkMTMxNTYyNTg0YTMzNTNiMWQ3NTU1YzUwMB4XDTIyMDUy
NDExNDYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDFlZGYyODU5OTA3
YzcxYzVlNzg4NTY4YTIzZTMxYjc5ZWNkMjU4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO5pcSpwQ7+OdUfqF+LcN7rOV/NZiIKdv/UZgetplKsjGvrs
qLEU4tM35Y08MymGB0gcEzpRgqvDGxg41kfk5PoM9QsXjZG9ZcOdP8hhIIPgiYdv
qDLQRBScN/0HKyiVj8FeOFZ11X9WPQj1aI8wydk0fZwFi3nrzH2NxbpJgLgrmRpr
MaNLm1AVBAMwZL+OtoctD3/Shz3kVrGNqh7UnsIKoqu00mJ/WJ7qyoYQSnD/88Pf
RXTXnARDBSe4/PAO7h6hLPkX6rn/VFEJuq6blziG3dlic4kmb11+ECHsCBPjsJiG
3n3QMEgpSK7VzS0533sxx+I2mdBtipcjUcXf4XkCAwEAAaOCAjkwggI1MB0GA1Ud
DgQWBBQB7fKFmQfHHF54hWiiPjG3ns0liTAfBgNVHSMEGDAWgBSPNo/rnlU73RMV
YlhKM1Ox11VcUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2p6YVA2NTVWTzkwVEZXSllTak5Uc2RkVlhGQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvMDU0N2NiLWM1ZGMtNGUyZi1hZmY3LTNlY2E3ZGYyYWU1Ny8x
L0FlM3loWmtIeHh4ZWVJVm9vajR4dDU3TkpZay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
MDU0N2NiLWM1ZGMtNGUyZi1hZmY3LTNlY2E3ZGYyYWU1Ny8xL2p6YVA2NTVWTzkw
VEZXSllTak5Uc2RkVlhGQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBP
BggrBgEFBQcBBwEB/wRAMD4wJAQCAAEwHgMEAVkjzgMEAV6wuAMEArkL6AMEArk7
YAMEArlblDAWBAIAAjAQAwYEKgN+QCADBgQqA35AQDANBgkqhkiG9w0BAQsFAAOC
AQEAiQe4zrHBjyxP+Tt4xGp7svdpAvOAyIn4U1D/g8LhgTsJsysfNStAgKuHIH17
SZoRzp2u+Q2Y9aU1M8hpYAm/imCv98g7D5TMr2md+GDKOC1YtGbh/XOSY9LsaqBQ
XHuY/gA8xmJvvFFxQkcdd10cjpkjkjGC3A++cDpH/v4b/KTPhT84NAwFOGeSNMr/
yuydUyznucXXe9I1OygbTkKjZz4xSyeN5kfVYQNVT9wFYILFG3KZYZ5SqkZcHBJ6
lJOept7Xvoy3VjmBT/P3DFDibiy7x79BKQArTCsy7oP1QtOsasqBgAE/GpqqgN7o
nH1Zj7t4lPaW2a3N42vYiStZIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:28 2024 by rpki-client on console-ams.rpki-client.org