Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QLWjy5DPaxOZTA63gpmdn6kInQU.roa
File: QLWjy5DPaxOZTA63gpmdn6kInQU.roa (raw, json)
Hash identifier: 5e/dTaSyl+4l53m0ggrWE6kbwX96Teqvf3+KVqhUslQ=
Subject key identifier: 40:B5:A3:CB:90:CF:6B:13:99:4C:0E:B7:82:99:9D:9F:A9:08:9D:05
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01826A11BBAC71F737B13F2E43A5E70A3A3F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QLWjy5DPaxOZTA63gpmdn6kInQU.roa
Signing time: Thu 04 Aug 2022 18:15:23 +0000
ROA not before: Thu 04 Aug 2022 18:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 94.198.47.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
185.229.212.0/22 maxlen: 22
185.229.213.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.114.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
85.209.75.0/24 maxlen: 24
85.209.74.0/24 maxlen: 24
85.209.73.0/24 maxlen: 24
85.209.72.0/24 maxlen: 24
85.209.72.0/22 maxlen: 22
178.19.33.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6a:11:bb:ac:71:f7:37:b1:3f:2e:43:a5:e7:0a:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 4 18:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40b5a3cb90cf6b13994c0eb782999d9fa9089d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:21:bb:5a:b2:6e:12:43:99:e0:bb:86:f5:78:
43:08:1c:d1:56:06:68:1c:02:79:e9:22:2c:6b:e3:
7c:b9:7a:1d:9c:d0:21:43:c3:98:05:ae:e2:39:33:
0d:c5:de:54:fa:a0:d0:bf:9f:ab:bb:bb:89:35:92:
58:7b:fe:7c:41:23:b8:16:73:a8:95:82:7b:2f:08:
1e:2c:3f:75:57:3e:20:f8:cf:65:9a:99:36:9c:f6:
94:1a:4d:d0:4d:dd:77:13:79:b2:f0:4d:42:88:e5:
97:03:df:70:26:d0:98:fe:d5:41:8c:2c:7b:f2:be:
e8:79:8e:fd:79:b6:82:4e:ca:ff:9b:4b:ed:7c:23:
82:50:b8:d4:82:9a:33:95:72:4c:ae:d2:97:21:e9:
ca:0d:67:95:64:0d:c8:b8:bd:5c:17:a1:ad:c2:f1:
9f:08:c9:9e:cc:2b:c6:83:f3:79:93:be:d6:71:85:
84:98:62:2f:28:a2:d6:65:f7:22:62:51:1c:30:17:
0a:1c:17:fc:50:e3:68:6c:29:48:a6:88:0f:a4:5f:
65:1a:38:24:fd:5a:63:e6:74:75:79:7c:a5:12:ea:
0b:bb:34:41:61:64:35:6d:94:ed:27:de:9b:89:e6:
ca:ed:f4:ae:54:c1:29:a0:6f:18:ab:b8:34:ed:fb:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B5:A3:CB:90:CF:6B:13:99:4C:0E:B7:82:99:9D:9F:A9:08:9D:05
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QLWjy5DPaxOZTA63gpmdn6kInQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0-80.66.117.255
80.66.120.0/23
85.209.72.0/22
89.42.70.0/24
89.44.150.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.229.212.0/22
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
98:34:86:be:8e:69:1e:6c:70:1c:67:79:48:5f:f0:f4:7f:b5:
d1:7c:0c:45:d0:3e:06:a7:c2:6e:a4:e2:a6:29:b3:ab:38:48:
91:2a:d9:76:c8:28:84:3a:ce:d3:fd:f9:db:df:0e:7f:af:04:
b8:cb:b3:fa:d5:d6:0b:15:cd:30:19:61:2c:da:f9:df:3a:e5:
51:2f:2b:9b:8b:ff:e6:96:f2:5a:e9:2d:d3:1a:41:c8:07:9c:
b1:46:3c:b9:42:7e:7e:de:ef:61:23:54:ae:42:ec:ca:36:83:
05:fe:b8:75:a8:60:bf:03:06:49:3b:da:5a:b9:8e:eb:86:41:
e9:2e:11:91:50:73:2a:79:7a:05:75:f4:9c:6a:d0:06:92:80:
18:9c:5f:74:81:4b:60:36:23:0c:3a:af:a1:3d:c5:cf:24:7b:
37:93:38:25:2b:7e:9c:c0:3c:f1:07:2e:76:42:33:6c:2d:eb:
be:4e:c7:2b:84:b0:5b:8c:8a:8e:54:c0:0e:49:1e:03:d5:f5:
6e:7c:7d:51:7b:f6:2a:a3:9b:96:51:e1:83:69:7d:0e:20:2a:
4a:65:25:3c:7c:77:52:41:bc:a5:09:89:e8:a1:ce:08:57:bf:
ca:50:b8:0c:c3:0c:00:7a:b6:aa:69:55:e9:63:b7:81:bc:ea:
9b:9d:41:5f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYJqEbuscfc3sT8uQ6XnCjo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjIwODA0MTgxNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGI1YTNjYjkwY2Y2YjEzOTk0YzBlYjc4Mjk5OWQ5ZmE5MDg5ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iG7WrJuEkOZ4LuG9XhDCBzRVgZo
HAJ56SIsa+N8uXodnNAhQ8OYBa7iOTMNxd5U+qDQv5+ru7uJNZJYe/58QSO4FnOo
lYJ7LwgeLD91Vz4g+M9lmpk2nPaUGk3QTd13E3my8E1CiOWXA99wJtCY/tVBjCx7
8r7oeY79ebaCTsr/m0vtfCOCULjUgpozlXJMrtKXIenKDWeVZA3IuL1cF6GtwvGf
CMmezCvGg/N5k77WcYWEmGIvKKLWZfciYlEcMBcKHBf8UONobClIpogPpF9lGjgk
/Vpj5nR1eXylEuoLuzRBYWQ1bZTtJ96biebK7fSuVMEpoG8Yq7g07fucMwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFEC1o8uQz2sTmUwOt4KZnZ+pCJ0FMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvUUxXank1RFBheE9aVEE2M2dwbWRuNmtJblFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBARQQnAD
BAFQQnQDBAFQQngDBAJV0UgDBABZKkYDBABZLJYDBAFexi4DBAGyEyADBACyEywD
BACyEy8DBAK55dQDBAC58q8wDQYJKoZIhvcNAQELBQADggEBAJg0hr6OaR5scBxn
eUhf8PR/tdF8DEXQPganwm6k4qYps6s4SJEq2XbIKIQ6ztP9+dvfDn+vBLjLs/rV
1gsVzTAZYSza+d865VEvK5uL/+aW8lrpLdMaQcgHnLFGPLlCfn7e72EjVK5C7Mo2
gwX+uHWoYL8DBkk72lq5juuGQekuEZFQcyp5egV19Jxq0AaSgBicX3SBS2A2Iww6
r6E9xc8kezeTOCUrfpzAPPEHLnZCM2wt675OxyuEsFuMio5UwA5JHgPV9W58fVF7
9iqjm5ZR4YNpfQ4gKkplJTx8d1JBvKUJieihzghXv8pQuAzDDAB6tqppVeljt4G8
6pudQV8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org