Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b2xkJdo90pob9zTATDWGS0IlFmI.roa
File: b2xkJdo90pob9zTATDWGS0IlFmI.roa (raw, json)
Hash identifier: +glvnIB6w5wtNg4QASYgido+7Uksmm1aEfA+F0EGp+0=
Subject key identifier: 6F:6C:64:25:DA:3D:D2:9A:1B:F7:34:C0:4C:35:86:4B:42:25:16:62
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018319011058C55095A05A839B2993136BC5
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b2xkJdo90pob9zTATDWGS0IlFmI.roa
Signing time: Wed 07 Sep 2022 17:30:43 +0000
ROA not before: Wed 07 Sep 2022 17:30:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 94.198.47.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
185.229.212.0/22 maxlen: 22
185.229.213.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.114.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:19:01:10:58:c5:50:95:a0:5a:83:9b:29:93:13:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 7 17:30:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f6c6425da3dd29a1bf734c04c35864b42251662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:fa:a8:c0:b8:c3:ca:4f:fd:3c:eb:1f:d6:
37:1e:e6:c1:55:b1:2c:0b:e7:ec:cc:cb:30:7d:f4:
b4:8d:94:7b:c0:59:67:7e:ae:c1:9e:d4:23:36:a5:
13:5d:9e:49:a3:8a:42:73:ff:3b:cc:9f:d5:6f:95:
40:3c:12:63:b9:d2:11:8b:93:11:0e:82:c0:b7:8c:
6f:29:21:0e:94:ec:be:82:f3:0e:07:47:66:1d:66:
ac:db:f0:30:33:dc:e1:26:b5:6e:d8:d0:90:8d:a4:
b1:72:a9:ea:c8:19:c8:94:01:53:4f:a0:73:b8:49:
2c:0f:c0:41:d9:db:e3:2a:f9:b3:e9:24:cc:44:92:
b8:41:75:e0:d5:9f:36:4e:c8:ec:25:16:a0:e2:b6:
ca:81:eb:e9:63:96:29:e0:3d:75:01:06:f5:cd:e2:
a5:c3:33:9b:e3:f8:a8:01:84:7c:fb:b1:03:89:77:
34:5d:89:49:ce:72:e4:0e:25:87:49:d2:05:16:54:
0e:87:f1:1c:4b:f9:c9:49:8e:2f:6e:b7:d1:f1:8f:
d6:b9:4e:33:45:d8:f2:8a:16:5e:6d:7e:30:80:7a:
4a:6a:fd:d1:fd:d2:a1:0b:13:b4:97:03:b8:03:dc:
98:f0:31:16:4e:43:d8:48:64:a7:c4:98:f1:4e:93:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:64:25:DA:3D:D2:9A:1B:F7:34:C0:4C:35:86:4B:42:25:16:62
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b2xkJdo90pob9zTATDWGS0IlFmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0-80.66.117.255
80.66.120.0/23
89.42.70.0/24
89.44.150.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.229.212.0/22
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
61:65:fa:fc:88:a1:58:94:48:ba:b6:4f:68:23:e1:2a:28:4c:
57:e4:8b:0a:c8:03:0b:21:c4:8f:c8:b5:1d:07:29:4e:9a:99:
1a:04:4f:3f:c4:fe:36:d7:01:c3:06:d1:30:9f:92:a8:ed:27:
05:67:bd:1d:16:f4:5c:b8:98:e7:92:71:4f:75:76:b2:60:d0:
d8:cf:6d:be:a9:1c:27:03:2d:b4:89:ad:0c:c2:67:4d:09:33:
7c:d5:ab:93:7b:3b:27:f5:10:13:64:bb:63:08:6a:1f:1f:74:
6d:48:2e:b8:fd:f2:5f:de:49:a6:c9:a2:5d:94:1f:4c:6a:6a:
b3:3d:68:44:22:3e:6f:7f:0d:41:de:9a:73:92:27:ab:04:f7:
3b:7c:51:d5:e2:52:30:6c:99:86:4b:64:dc:d2:da:81:0d:07:
0a:44:63:67:b5:9c:74:7c:00:0c:27:6d:93:e2:9e:94:b8:50:
fa:69:79:9e:81:fa:d4:ca:7c:12:0f:89:cc:39:17:eb:bf:15:
a8:2b:fd:76:d5:18:50:64:1b:01:a3:d2:8b:4a:27:7f:f2:a1:
17:bd:08:c6:50:1a:94:71:cd:2d:06:05:dd:a8:f8:f0:61:9d:
de:84:9c:dc:7e:11:66:e1:56:cc:09:da:0b:9f:8b:99:22:c1:
60:3b:30:a0
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYMZARBYxVCVoFqDmymTE2vFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjIwOTA3MTczMDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjZjNjQyNWRhM2RkMjlhMWJmNzM0YzA0YzM1ODY0YjQyMjUxNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVP6qMC4w8pP/TzrH9Y3HubBVbEs
C+fszMswffS0jZR7wFlnfq7BntQjNqUTXZ5Jo4pCc/87zJ/Vb5VAPBJjudIRi5MR
DoLAt4xvKSEOlOy+gvMOB0dmHWas2/AwM9zhJrVu2NCQjaSxcqnqyBnIlAFTT6Bz
uEksD8BB2dvjKvmz6STMRJK4QXXg1Z82TsjsJRag4rbKgevpY5Yp4D11AQb1zeKl
wzOb4/ioAYR8+7EDiXc0XYlJznLkDiWHSdIFFlQOh/EcS/nJSY4vbrfR8Y/WuU4z
RdjyihZebX4wgHpKav3R/dKhCxO0lwO4A9yY8DEWTkPYSGSnxJjxTpPlVQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFG9sZCXaPdKaG/c0wEw1hktCJRZiMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvYjJ4a0pkbzkwcG9iOXpUQVREV0dTMElsRm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBARQQnAD
BAFQQnQDBAFQQngDBABZKkYDBABZLJYDBAFexi4DBAGyEyADBACyEywDBACyEy8D
BAK55dQDBAC58q8wDQYJKoZIhvcNAQELBQADggEBAGFl+vyIoViUSLq2T2gj4Soo
TFfkiwrIAwshxI/ItR0HKU6amRoETz/E/jbXAcMG0TCfkqjtJwVnvR0W9Fy4mOeS
cU91drJg0NjPbb6pHCcDLbSJrQzCZ00JM3zVq5N7Oyf1EBNku2MIah8fdG1ILrj9
8l/eSabJol2UH0xqarM9aEQiPm9/DUHemnOSJ6sE9zt8UdXiUjBsmYZLZNzS2oEN
BwpEY2e1nHR8AAwnbZPinpS4UPppeZ6B+tTKfBIPicw5F+u/Fagr/XbVGFBkGwGj
0otKJ3/yoRe9CMZQGpRxzS0GBd2o+PBhnd6EnNx+EWbhVswJ2gufi5kiwWA7MKA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org