Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/DSBnriiGPDlyQHky5rXckhLJKpA.roa
File: DSBnriiGPDlyQHky5rXckhLJKpA.roa (raw, json)
Hash identifier: /whMqceZDb2/pWabawg/DuVhUdNu4xFg3bkCKXupw7k=
Subject key identifier: 0D:20:67:AE:28:86:3C:39:72:40:79:32:E6:B5:DC:92:12:C9:2A:90
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0A553CDC
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/DSBnriiGPDlyQHky5rXckhLJKpA.roa
Signing time: Thu 12 May 2022 10:58:02 +0000
ROA not before: Thu 12 May 2022 10:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8280
IP address blocks: 185.51.132.0/22 maxlen: 24
185.51.135.0/24 maxlen: 24
185.51.133.0/24 maxlen: 24
46.227.56.0/21 maxlen: 24
46.227.58.0/24 maxlen: 32
46.227.57.0/24 maxlen: 24
46.227.60.0/24 maxlen: 24
46.227.61.0/24 maxlen: 32
46.227.59.0/24 maxlen: 24
46.227.63.0/24 maxlen: 24
46.227.62.0/24 maxlen: 24
78.108.32.0/20 maxlen: 24
78.108.37.0/24 maxlen: 24
78.108.36.0/24 maxlen: 24
78.108.38.0/24 maxlen: 24
78.108.33.0/24 maxlen: 24
78.108.32.0/24 maxlen: 24
78.108.35.0/24 maxlen: 24
78.108.34.0/24 maxlen: 24
78.108.40.0/24 maxlen: 24
78.108.39.0/24 maxlen: 24
78.108.42.0/24 maxlen: 24
78.108.41.0/24 maxlen: 24
78.108.44.0/24 maxlen: 24
78.108.43.0/24 maxlen: 24
78.108.45.0/24 maxlen: 24
78.108.47.0/24 maxlen: 24
78.108.46.0/24 maxlen: 24
2001:1548:7006::/48 maxlen: 48
2001:1548:7001::/48 maxlen: 48
2001:1548::/29 maxlen: 29
2001:1548:7010::/48 maxlen: 48
2001:1548:7009::/48 maxlen: 48
2001:1548:7004::/48 maxlen: 48
2001:1548:7007::/48 maxlen: 48
2001:1548:7002::/48 maxlen: 48
2001:1548:7011::/48 maxlen: 48
2001:1548:7005::/48 maxlen: 48
2001:1548:7000::/48 maxlen: 48
2001:1548:7003::/48 maxlen: 48
2001:1548:7008::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173358300 (0xa553cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: May 12 10:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d2067ae28863c3972407932e6b5dc9212c92a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:97:6d:70:3b:29:6a:ce:14:2b:f9:40:5d:
a9:8f:b0:a1:6d:44:fa:bd:5e:dd:c9:46:35:87:2c:
c0:da:79:37:23:5d:27:63:3b:7c:16:1e:3f:03:d0:
a1:6e:a2:17:63:70:75:10:a2:88:9d:2d:25:f4:c6:
70:bc:ed:ab:67:71:e2:e4:e2:6a:c2:d8:b6:33:40:
dc:e1:a8:ad:5f:79:9f:19:ad:e6:0d:48:62:66:7d:
9d:d8:10:41:a7:a2:41:48:48:f9:a6:69:78:f2:17:
f6:77:c5:a6:94:34:f0:ea:65:de:48:39:29:eb:f2:
f2:cc:b9:c2:2c:eb:46:7f:c2:cd:58:92:93:a1:9a:
ca:22:36:1d:e1:b0:6d:f9:f9:1d:14:2b:f2:9a:1f:
91:44:88:04:87:12:2e:06:63:16:4b:72:64:8a:4f:
d8:7a:84:34:fb:07:f8:f8:a4:b1:4d:1d:47:fc:9e:
78:f1:a1:b8:45:e6:af:98:93:0d:5e:76:78:39:09:
94:67:8b:22:52:3e:1c:a8:3e:61:1a:04:a3:71:78:
16:e4:01:88:db:18:c3:07:87:ca:0e:29:1d:e7:f7:
56:4b:0d:b5:dc:44:3e:5f:0a:65:e2:47:04:5a:ef:
9a:7b:4b:76:56:65:cd:c7:6d:29:31:01:f2:78:11:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:20:67:AE:28:86:3C:39:72:40:79:32:E6:B5:DC:92:12:C9:2A:90
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/DSBnriiGPDlyQHky5rXckhLJKpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.56.0/21
78.108.32.0/20
185.51.132.0/22
IPv6:
2001:1548::/29
Signature Algorithm: sha256WithRSAEncryption
07:63:a1:9e:e4:93:a0:11:4b:77:23:35:8d:35:02:d7:1f:c6:
89:64:f0:6c:de:c7:12:43:3d:c2:32:dd:83:5a:cc:7a:fe:81:
cd:ce:17:35:73:a9:b9:ac:24:db:a3:f2:ef:dc:b1:05:66:aa:
47:3a:d6:7e:47:0f:38:83:6e:41:bc:30:41:46:e2:d3:1e:c5:
db:c0:ed:e7:ae:bf:3c:bb:dd:c9:79:30:ac:51:19:1b:e4:a1:
bc:ca:c3:ef:3e:77:18:6e:1c:fc:5d:8e:6d:2a:6a:70:e8:c0:
f2:9c:42:e9:2e:a4:25:88:6f:8a:eb:a8:6f:ca:b0:15:3e:43:
77:91:8d:6d:05:d6:15:14:72:92:01:b9:62:ba:3d:fc:b4:4f:
37:4c:fd:39:20:8d:ab:6d:1b:39:07:bb:dd:7f:82:74:a3:b5:
98:a2:b2:20:01:67:74:66:10:a9:80:b8:7c:18:aa:b5:38:8d:
6f:2a:ef:46:a2:36:d9:fe:7c:f8:a9:24:4e:46:b4:7e:96:63:
62:f2:23:55:bc:02:4f:d1:5d:76:13:b3:5c:fd:71:b5:1c:5a:
70:0a:88:25:d4:91:71:05:78:ba:7b:a5:d6:df:2f:62:53:76:
68:68:7b:54:5d:0f:e1:a3:35:8c:e0:fe:34:d1:ac:02:02:18:
50:b5:c4:6e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEClU83DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZjQwZmRkODJhMGZkZjNiNzBiZTE4MjIxZWViYTYwZDgwMWVkN2JmMB4XDTIyMDUx
MjEwNTgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQyMDY3YWUyODg2
M2MzOTcyNDA3OTMyZTZiNWRjOTIxMmM5MmE5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALaWl21wOylqzhQr+UBdqY+woW1E+r1e3clGNYcswNp5NyNd
J2M7fBYePwPQoW6iF2NwdRCiiJ0tJfTGcLztq2dx4uTiasLYtjNA3OGorV95nxmt
5g1IYmZ9ndgQQaeiQUhI+aZpePIX9nfFppQ08Opl3kg5Kevy8sy5wizrRn/CzViS
k6GayiI2HeGwbfn5HRQr8pofkUSIBIcSLgZjFktyZIpP2HqENPsH+PiksU0dR/ye
ePGhuEXmr5iTDV52eDkJlGeLIlI+HKg+YRoEo3F4FuQBiNsYwweHyg4pHef3VksN
tdxEPl8KZeJHBFrvmntLdlZlzcdtKTEB8ngR96kCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBQNIGeuKIY8OXJAeTLmtdySEskqkDAfBgNVHSMEGDAWgBTPQP3YKg/fO3C+
GCIe66YNgB7XvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3owRDkyQ29QM3p0d3ZoZ2lIdXVtRFlBZTE3OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNzkyNzM3LTZhMDItNDI0Yi04MmNiLWEyOWNlN2RhMTBmZC8x
L0RTQm5yaWlHUERseVFIa3k1clhja2hMSktwQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NzkyNzM3LTZhMDItNDI0Yi04MmNiLWEyOWNlN2RhMTBmZC8xL3owRDkyQ29QM3p0
d3ZoZ2lIdXVtRFlBZTE3OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAy7jOAMEBE5sIAMEArkzhDANBAIA
AjAHAwUDIAEVSDANBgkqhkiG9w0BAQsFAAOCAQEAB2OhnuSToBFLdyM1jTUC1x/G
iWTwbN7HEkM9wjLdg1rMev6Bzc4XNXOpuawk26Py79yxBWaqRzrWfkcPOINuQbww
QUbi0x7F28Dt566/PLvdyXkwrFEZG+ShvMrD7z53GG4c/F2ObSpqcOjA8pxC6S6k
JYhviuuob8qwFT5Dd5GNbQXWFRRykgG5Yro9/LRPN0z9OSCNq20bOQe73X+CdKO1
mKKyIAFndGYQqYC4fBiqtTiNbyrvRqI22f58+KkkTka0fpZjYvIjVbwCT9FddhOz
XP1xtRxacAqIJdSRcQV4unul1t8vYlN2aGh7VF0P4aM1jOD+NNGsAgIYULXEbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org