Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_QTkr3hMdC_xMTkedf7fuznjkBs.roa
File: _QTkr3hMdC_xMTkedf7fuznjkBs.roa (raw, json)
Hash identifier: CDbgcmQt92EnDIdyLikSlVXN1H6zxDv9lSdnlnuf/6E=
Subject key identifier: FD:04:E4:AF:78:4C:74:2F:F1:31:39:1E:75:FE:DF:BB:39:E3:90:1B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0546A1CE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_QTkr3hMdC_xMTkedf7fuznjkBs.roa
Signing time: Wed 25 May 2022 07:57:13 +0000
ROA not before: Wed 25 May 2022 07:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 94.198.47.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
185.229.212.0/22 maxlen: 22
185.229.213.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88515022 (0x546a1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 25 07:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd04e4af784c742ff131391e75fedfbb39e3901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:6f:43:a3:72:22:89:6a:6a:36:8a:0b:d2:
bf:ff:51:03:d0:a4:6a:e9:80:bb:fb:95:99:1f:ce:
54:c5:0a:5a:62:29:b6:74:9e:53:3f:ec:84:d5:b7:
b7:7b:1b:1a:d9:0d:12:55:d8:c6:b3:7b:a9:43:a7:
2a:f7:a9:f1:6e:b8:1d:c6:78:41:c5:fd:e7:4c:33:
dd:30:83:9e:2f:64:73:35:78:ab:24:fc:cb:a2:87:
09:f2:8f:51:29:3c:4e:1b:3c:e2:27:0d:cc:a0:5d:
0f:79:c0:fa:89:b8:49:33:35:a4:0a:5c:c7:fc:2d:
0c:89:0c:6d:0f:98:31:7e:1f:0d:a1:ab:f3:a6:6b:
b1:b2:20:c9:2b:e7:b2:e1:63:d8:8f:a8:36:f8:63:
14:15:a8:c0:a7:89:5a:87:13:18:f7:3d:6b:65:eb:
96:1e:26:b5:79:e3:ef:8a:05:8a:e9:f3:c0:4c:1e:
12:41:3b:8e:60:98:2f:1f:4c:28:72:2a:27:19:16:
8d:87:88:69:4d:7b:f4:15:15:05:93:dd:42:a0:d4:
ac:5e:43:4b:34:81:5d:bd:b7:fb:e2:b8:19:b2:63:
74:1a:d1:e3:b5:8a:07:61:36:f7:c9:8a:60:34:25:
2e:00:36:e9:f2:35:11:8e:7b:be:00:fd:fc:dc:34:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:04:E4:AF:78:4C:74:2F:F1:31:39:1E:75:FE:DF:BB:39:E3:90:1B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_QTkr3hMdC_xMTkedf7fuznjkBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0/23
80.66.115.0/24
80.66.120.0/23
89.42.70.0/24
89.44.150.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.229.212.0/22
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9f:61:73:2b:af:7e:ad:41:39:ca:9f:1f:81:91:ba:a7:0d:
23:63:25:b1:3c:f8:66:72:3b:95:3d:03:13:d2:d0:23:d3:7b:
55:15:93:0b:62:14:13:84:a1:87:4d:8f:36:36:69:61:47:92:
98:a0:8d:20:fa:1f:16:ea:de:d1:59:1e:4c:aa:dd:2a:39:f7:
c0:8d:71:a1:2f:7d:26:25:16:de:7f:e8:1c:81:6e:f8:50:03:
b9:7b:f8:f2:8c:36:93:cb:88:ad:d3:98:8b:1e:e8:f6:19:5d:
74:cd:71:cd:3f:76:ee:34:48:7a:2f:10:b1:57:de:fe:c5:cc:
41:68:92:e3:55:d8:13:f3:13:b9:52:82:7c:c0:8e:b4:31:fe:
87:72:39:a8:12:19:5a:a7:ed:f9:21:b9:27:13:ec:6b:16:67:
f9:ca:73:f9:e3:17:81:db:25:0b:4c:ee:03:04:89:0d:8f:15:
72:4a:6f:b2:ed:30:9a:c6:8e:42:38:99:08:6d:08:b4:08:43:
94:c4:79:a0:00:dc:22:f8:2c:f5:0b:0f:c4:9e:ed:8f:c8:b5:
f9:23:d0:e7:43:fc:72:e5:4f:b5:69:cb:81:c3:a0:69:2c:2f:
23:84:43:95:55:99:a8:9a:be:2d:b9:3b:a6:94:ef:68:65:c3:
2c:39:31:d2
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIEBUahzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDUy
NTA3NTcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmQwNGU0YWY3ODRj
NzQyZmYxMzEzOTFlNzVmZWRmYmIzOWUzOTAxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJlSb0OjciKJamo2igvSv/9RA9CkaumAu/uVmR/OVMUKWmIp
tnSeUz/shNW3t3sbGtkNElXYxrN7qUOnKvep8W64HcZ4QcX950wz3TCDni9kczV4
qyT8y6KHCfKPUSk8Ths84icNzKBdD3nA+om4STM1pApcx/wtDIkMbQ+YMX4fDaGr
86ZrsbIgySvnsuFj2I+oNvhjFBWowKeJWocTGPc9a2Xrlh4mtXnj74oFiunzwEwe
EkE7jmCYLx9MKHIqJxkWjYeIaU179BUVBZPdQqDUrF5DSzSBXb23++K4GbJjdBrR
47WKB2E298mKYDQlLgA26fI1EY57vgD9/Nw0+AkCAwEAAaOCAkUwggJBMB0GA1Ud
DgQWBBT9BOSveEx0L/ExOR51/t+7OeOQGzAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L19RVGtyM2hNZENfeE1Ua2VkZjdmdXpuamtCcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBb
BggrBgEFBQcBBwEB/wRMMEowSAQCAAEwQgMEAVBCcAMEAFBCcwMEAVBCeAMEAFkq
RgMEAFkslgMEAV7GLgMEAbITIAMEALITLAMEALITLwMEArnl1AMEALnyrzANBgkq
hkiG9w0BAQsFAAOCAQEAXp9hcyuvfq1BOcqfH4GRuqcNI2MlsTz4ZnI7lT0DE9LQ
I9N7VRWTC2IUE4Shh02PNjZpYUeSmKCNIPofFure0VkeTKrdKjn3wI1xoS99JiUW
3n/oHIFu+FADuXv48ow2k8uIrdOYix7o9hlddM1xzT927jRIei8QsVfe/sXMQWiS
41XYE/MTuVKCfMCOtDH+h3I5qBIZWqft+SG5JxPsaxZn+cpz+eMXgdslC0zuAwSJ
DY8Vckpvsu0wmsaOQjiZCG0ItAhDlMR5oADcIvgs9QsPxJ7tj8i1+SPQ50P8cuVP
tWnLgcOgaSwvI4RDlVWZqJq+Lbk7ppTvaGXDLDkx0g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org