Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/SLTBfU-qF11FbH4XP6wOIHw3LaI.roa
File: SLTBfU-qF11FbH4XP6wOIHw3LaI.roa (raw, json)
Hash identifier: 4olyJPu9ZcjcOCP4HWquaMAyKHmY35QYOeyCh8MPJbo=
Subject key identifier: 48:B4:C1:7D:4F:AA:17:5D:45:6C:7E:17:3F:AC:0E:20:7C:37:2D:A2
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 0C20CCEE
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/SLTBfU-qF11FbH4XP6wOIHw3LaI.roa
Signing time: Sat 01 Jan 2022 01:51:59 +0000
ROA not before: Sat 01 Jan 2022 01:51:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44668
IP address blocks: 193.168.55.0/24 maxlen: 24
176.122.88.0/21 maxlen: 21
91.202.104.0/22 maxlen: 22
193.194.112.0/22 maxlen: 22
77.87.40.0/21 maxlen: 21
195.18.28.0/22 maxlen: 22
185.255.48.0/22 maxlen: 22
195.5.126.0/24 maxlen: 24
193.168.51.0/24 maxlen: 24
2a0c:5940::/48 maxlen: 48
2a0c:5940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203476206 (0xc20ccee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Jan 1 01:51:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48b4c17d4faa175d456c7e173fac0e207c372da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:67:ca:e3:5a:fc:41:35:50:c7:3c:15:7b:
1f:74:cb:0c:c9:88:2a:1b:a7:6f:dd:c6:af:79:be:
21:7b:f6:4e:07:26:cb:24:25:e2:2d:d5:3a:7b:b1:
b0:a3:59:52:77:7e:f3:30:76:35:bd:21:b4:22:cb:
ba:72:19:f5:19:ed:7d:d1:1c:a6:3b:dc:4b:a9:bd:
c8:c0:46:b6:82:63:fc:8f:26:20:73:0e:61:3f:cd:
2a:4b:19:d0:58:9b:ca:96:62:ae:87:bf:d5:dc:01:
52:b5:55:9c:c6:ed:57:89:0f:bb:89:77:0e:b1:ff:
81:53:a0:76:83:47:1a:ad:1e:5f:e3:f8:2b:89:76:
3f:d1:61:2a:82:b1:85:c2:0e:7d:d8:cb:6a:a1:c0:
2a:74:70:f2:a1:a7:ed:48:2c:3a:e0:16:77:53:1d:
9f:73:9c:2f:63:91:8b:75:5e:e4:5f:eb:44:04:70:
26:80:44:9e:17:9b:c8:1d:99:02:d6:b3:26:a1:4e:
be:28:37:ec:cf:e2:dc:fc:53:f7:6a:19:9e:08:43:
d0:12:26:aa:c7:68:0a:ab:2b:ca:2a:d8:be:eb:02:
08:53:50:d2:29:c9:10:60:f0:f3:a0:05:5e:b3:06:
fb:50:3b:1e:2b:bf:57:78:00:a8:b4:dd:e7:e5:6b:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B4:C1:7D:4F:AA:17:5D:45:6C:7E:17:3F:AC:0E:20:7C:37:2D:A2
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/SLTBfU-qF11FbH4XP6wOIHw3LaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.40.0/21
91.202.104.0/22
176.122.88.0/21
185.255.48.0/22
193.168.51.0/24
193.168.55.0/24
193.194.112.0/22
195.5.126.0/24
195.18.28.0/22
IPv6:
2a0c:5940::/29
Signature Algorithm: sha256WithRSAEncryption
65:a8:51:69:5b:73:f6:c0:3f:88:d0:61:a6:1f:b1:cd:dd:d8:
aa:f7:2b:10:a4:33:6b:f4:70:5b:75:5d:49:51:2d:af:67:ac:
70:c0:b6:be:07:e1:f6:b1:d7:6c:53:8d:5b:5a:bd:76:b6:a7:
78:a9:ff:af:4a:71:c0:32:81:d9:94:ae:7b:97:d0:df:e5:39:
ec:5c:bf:c2:db:df:07:dc:f9:a5:c8:5c:fd:4e:9e:1f:4c:95:
6d:91:64:db:07:a2:71:e1:24:d0:ee:5d:25:f1:4d:50:98:96:
36:58:82:51:81:1b:ad:ef:ee:2c:bc:8e:a3:be:65:3f:e4:bc:
ce:c7:4a:da:09:15:78:52:2e:f0:5b:4b:b4:fa:59:ff:2c:56:
25:c0:84:03:cf:1d:a8:7c:65:5e:01:3d:a7:75:69:64:29:25:
c0:7a:d2:de:b5:f9:2f:66:7f:35:ef:0b:24:18:cb:0e:dd:24:
a6:1c:a5:11:88:29:e3:f1:62:d1:6c:c7:0e:45:d9:e6:1e:1f:
df:f0:a2:51:b0:7a:15:a1:f8:cf:2d:e6:be:3d:a0:05:b7:69:
0b:d8:16:11:5a:fd:7f:67:22:96:8f:44:5c:a9:56:4e:82:f4:
01:f5:65:3b:b4:bb:68:16:4d:91:5b:5e:09:0d:e8:7b:57:0e:
28:53:4f:79
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIEDCDM7jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
N2VhZDI5ODg5ZGJmNjJmMzk4ZjY0YmM2MTQ5MTY2NzMwNTZkNDVlMB4XDTIyMDEw
MTAxNTE1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhiNGMxN2Q0ZmFh
MTc1ZDQ1NmM3ZTE3M2ZhYzBlMjA3YzM3MmRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtHZ8rjWvxBNVDHPBV7H3TLDMmIKhunb93Gr3m+IXv2Tgcm
yyQl4i3VOnuxsKNZUnd+8zB2Nb0htCLLunIZ9RntfdEcpjvcS6m9yMBGtoJj/I8m
IHMOYT/NKksZ0FibypZiroe/1dwBUrVVnMbtV4kPu4l3DrH/gVOgdoNHGq0eX+P4
K4l2P9FhKoKxhcIOfdjLaqHAKnRw8qGn7UgsOuAWd1Mdn3OcL2ORi3Ve5F/rRARw
JoBEnhebyB2ZAtazJqFOvig37M/i3PxT92oZnghD0BImqsdoCqsryirYvusCCFNQ
0inJEGDw86AFXrMG+1A7Hiu/V3gAqLTd5+VrexUCAwEAAaOCAkgwggJEMB0GA1Ud
DgQWBBRItMF9T6oXXUVsfhc/rA4gfDctojAfBgNVHSMEGDAWgBQH6tKYidv2LzmP
ZLxhSRZnMFbUXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ItclNtSW5iOWk4NWoyUzhZVWtXWnpCVzFGNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvNmFiY2QxLWVlZWUtNDZkNS05ZjZjLWRmNjg3MWUyZjczNS8x
L1NMVEJmVS1xRjExRmJINFhQNndPSUh3M0xhSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
NmFiY2QxLWVlZWUtNDZkNS05ZjZjLWRmNjg3MWUyZjczNS8xL0ItclNtSW5iOWk4
NWoyUzhZVWtXWnpCVzFGNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBe
BggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEA01XKAMEAlvKaAMEA7B6WAMEArn/
MAMEAMGoMwMEAMGoNwMEAsHCcAMEAMMFfgMEAsMSHDANBAIAAjAHAwUDKgxZQDAN
BgkqhkiG9w0BAQsFAAOCAQEAZahRaVtz9sA/iNBhph+xzd3YqvcrEKQza/RwW3Vd
SVEtr2escMC2vgfh9rHXbFONW1q9draneKn/r0pxwDKB2ZSue5fQ3+U57Fy/wtvf
B9z5pchc/U6eH0yVbZFk2weiceEk0O5dJfFNUJiWNliCUYEbre/uLLyOo75lP+S8
zsdK2gkVeFIu8FtLtPpZ/yxWJcCEA88dqHxlXgE9p3VpZCklwHrS3rX5L2Z/Ne8L
JBjLDt0kphylEYgp4/Fi0WzHDkXZ5h4f3/CiUbB6FaH4zy3mvj2gBbdpC9gWEVr9
f2cilo9EXKlWToL0AfVlO7S7aBZNkVteCQ3oe1cOKFNPeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-fra.rpki-client.org