Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/bNod27O1DzLQkWAsjuEbu42BM_0.roa
File: bNod27O1DzLQkWAsjuEbu42BM_0.roa (raw, json)
Hash identifier: qN+z+LFVtgRNU2wcEo5vbN/1gm3qQ7HCTktHTCtiThk=
Subject key identifier: 6C:DA:1D:DB:B3:B5:0F:32:D0:91:60:2C:8E:E1:1B:BB:8D:81:33:FD
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 06DB6905
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/bNod27O1DzLQkWAsjuEbu42BM_0.roa
Signing time: Sat 01 Jan 2022 06:55:29 +0000
ROA not before: Sat 01 Jan 2022 06:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25593
IP address blocks: 217.19.48.0/20 maxlen: 20
89.107.168.0/21 maxlen: 21
46.19.176.0/21 maxlen: 21
93.188.168.0/21 maxlen: 21
185.48.44.0/22 maxlen: 22
212.67.32.0/20 maxlen: 20
185.48.46.0/24 maxlen: 24
2a00:1a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115042565 (0x6db6905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jan 1 06:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cda1ddbb3b50f32d091602c8ee11bbb8d8133fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:e8:44:27:13:79:ab:4c:8a:86:b1:28:64:
d5:ac:99:e0:2b:2a:64:f6:3e:51:3d:7b:63:4d:f8:
0e:d9:08:3b:ab:c3:f2:6c:6f:22:71:b2:c3:53:51:
5b:50:95:18:0f:61:b7:be:5d:0d:21:f9:37:be:3a:
b0:12:e0:b9:8d:fe:56:78:44:65:a8:71:e7:ad:76:
c8:20:fe:85:fe:73:71:95:a1:8c:90:36:18:1c:7c:
f3:9e:af:13:94:ae:03:69:e6:d6:e8:88:63:19:e0:
23:75:b4:a4:01:0c:fb:e1:25:c5:48:72:35:92:bf:
45:ed:a1:0d:ea:a4:58:8c:ae:18:80:92:3d:89:00:
51:cf:49:89:b0:d2:98:32:6f:d7:81:8f:e5:84:41:
2a:b3:c8:49:56:f4:18:28:c5:eb:78:28:6d:0f:92:
5d:3a:d7:07:2a:77:80:05:2a:a7:5e:7d:bd:99:78:
4e:6e:df:a7:40:9c:b5:c4:47:a4:f2:9a:19:e0:1d:
ac:3a:a9:ed:c0:b6:1c:85:35:6d:0b:5d:c8:ec:d4:
e8:39:41:82:02:93:20:74:b8:96:87:09:46:d1:f4:
4d:06:b0:d6:2b:ab:14:5d:19:0a:20:0d:33:df:b1:
5d:3a:e6:04:d9:eb:7a:f9:24:c7:0c:08:fa:a1:12:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:1D:DB:B3:B5:0F:32:D0:91:60:2C:8E:E1:1B:BB:8D:81:33:FD
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/bNod27O1DzLQkWAsjuEbu42BM_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.176.0/21
89.107.168.0/21
93.188.168.0/21
185.48.44.0/22
212.67.32.0/20
217.19.48.0/20
IPv6:
2a00:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
95:6f:44:12:d8:ac:ff:f1:c1:d1:50:7e:76:05:d7:fc:6e:05:
67:5d:97:1a:98:ae:3c:21:2d:16:26:de:77:9b:01:50:fd:26:
d7:f4:6b:f0:7c:55:26:19:25:30:94:28:54:d4:b8:c5:54:d5:
64:46:d8:e1:b0:de:77:43:4a:63:04:1f:b8:4d:b8:42:db:27:
44:9a:fc:f6:13:da:2d:41:68:a3:70:68:f5:5c:7d:3b:94:33:
dc:75:94:cc:55:f4:61:df:34:83:3a:15:a1:58:32:6b:73:5c:
5c:bb:6f:38:93:46:77:84:fc:3e:68:eb:69:95:74:2a:71:10:
05:f5:30:18:f2:c8:7e:d7:13:b7:58:fc:7a:17:09:31:51:0d:
27:54:29:38:5e:e0:63:1a:dd:c9:63:0c:f0:7f:e8:d3:fe:bf:
27:bb:db:6a:fc:82:cb:67:0d:6d:6b:91:6b:65:4c:f1:0f:b4:
d9:2c:33:45:28:c8:be:85:ee:4c:d4:41:bf:e5:87:c5:c8:9b:
ac:a0:86:35:ed:58:b4:ab:81:ba:17:64:47:20:63:b7:ca:95:
0c:de:19:7e:e1:ad:22:f7:ca:48:be:b9:cf:32:c4:4c:e6:c3:
74:46:41:91:77:77:d0:bd:15:f1:b5:12:76:9e:0e:fe:0a:38:
22:80:ff:81
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIEBttpBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MjMwYjY1ZDYxMTZkNGI2MGQzNmZkZjdiNmM2ZDVlNWI5NTQ2MzllMB4XDTIyMDEw
MTA2NTUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmNkYTFkZGJiM2I1
MGYzMmQwOTE2MDJjOGVlMTFiYmI4ZDgxMzNmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ9C6EQnE3mrTIqGsShk1ayZ4CsqZPY+UT17Y034DtkIO6vD
8mxvInGyw1NRW1CVGA9ht75dDSH5N746sBLguY3+VnhEZahx5612yCD+hf5zcZWh
jJA2GBx8856vE5SuA2nm1uiIYxngI3W0pAEM++ElxUhyNZK/Re2hDeqkWIyuGICS
PYkAUc9JibDSmDJv14GP5YRBKrPISVb0GCjF63gobQ+SXTrXByp3gAUqp159vZl4
Tm7fp0CctcRHpPKaGeAdrDqp7cC2HIU1bQtdyOzU6DlBggKTIHS4locJRtH0TQaw
1iurFF0ZCiANM9+xXTrmBNnrevkkxwwI+qESiKsCAwEAAaOCAjYwggIyMB0GA1Ud
DgQWBBRs2h3bs7UPMtCRYCyO4Ru7jYEz/TAfBgNVHSMEGDAWgBRSMLZdYRbUtg02
/fe2xtXluVRjnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VqQzJYV0VXMUxZTk52MzN0c2JWNWJsVVk1NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvZmFkZmY2LTVjYzAtNDY5NC05YzYyLTEzNThjMmI1ZDU0MS8x
L2JOb2QyN08xRHpMUWtXQXNqdUVidTQyQk1fMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
ZmFkZmY2LTVjYzAtNDY5NC05YzYyLTEzNThjMmI1ZDU0MS8xL1VqQzJYV0VXMUxZ
Tk52MzN0c2JWNWJsVVk1NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEAy4TsAMEA1lrqAMEA128qAMEArkw
LAMEBNRDIAMEBNkTMDANBAIAAjAHAwUAKgAaADANBgkqhkiG9w0BAQsFAAOCAQEA
lW9EEtis//HB0VB+dgXX/G4FZ12XGpiuPCEtFibed5sBUP0m1/Rr8HxVJhklMJQo
VNS4xVTVZEbY4bDed0NKYwQfuE24QtsnRJr89hPaLUFoo3Bo9Vx9O5Qz3HWUzFX0
Yd80gzoVoVgya3NcXLtvOJNGd4T8PmjraZV0KnEQBfUwGPLIftcTt1j8ehcJMVEN
J1QpOF7gYxrdyWMM8H/o0/6/J7vbavyCy2cNbWuRa2VM8Q+02SwzRSjIvoXuTNRB
v+WHxcibrKCGNe1YtKuBuhdkRyBjt8qVDN4ZfuGtIvfKSL65zzLETObDdEZBkXd3
0L0V8bUSdp4O/go4IoD/gQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:20 2024 by rpki-client on console-ams.rpki-client.org