Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/LfDTvfJaUD6Bx6fEtlDQkuMUwhk.roa
File: LfDTvfJaUD6Bx6fEtlDQkuMUwhk.roa (raw, json)
Hash identifier: S095Dw9Z/rvi216I+aBk4VM1FlSJTHL8WDHDpMMAW/s=
Subject key identifier: 2D:F0:D3:BD:F2:5A:50:3E:81:C7:A7:C4:B6:50:D0:92:E3:14:C2:19
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 18E9AF2C
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/LfDTvfJaUD6Bx6fEtlDQkuMUwhk.roa
Signing time: Sat 01 Jan 2022 07:58:31 +0000
ROA not before: Sat 01 Jan 2022 07:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200449
IP address blocks: 185.65.148.0/22 maxlen: 32
178.248.232.0/21 maxlen: 32
185.94.108.0/22 maxlen: 32
2a03:70c0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417967916 (0x18e9af2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Jan 1 07:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2df0d3bdf25a503e81c7a7c4b650d092e314c219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:1c:5b:cb:64:00:98:4d:6e:f4:07:56:3b:
fa:f0:d2:fb:45:3c:23:fc:78:b6:1c:2b:b9:e5:1a:
f3:c1:1a:f6:80:87:47:85:92:20:a7:c7:ee:48:16:
95:5d:6a:5e:85:35:1d:f8:3b:7d:63:3c:48:b0:ba:
12:b0:32:09:bc:7d:85:83:4f:c2:5b:11:2f:cc:5b:
99:65:62:0f:10:bb:40:67:d7:ed:92:f6:50:44:f7:
91:02:b7:a4:42:8d:02:28:2e:cc:a2:68:43:0f:cd:
32:94:dd:b6:63:a9:84:a8:b9:3e:f6:8b:bf:70:85:
93:98:07:40:02:29:1e:82:29:5e:f2:19:21:9e:7a:
8a:96:4b:e2:32:dd:57:02:6d:92:27:9c:72:2f:06:
25:32:75:5d:b6:48:29:e5:de:b5:f9:fc:42:b7:24:
b3:90:4f:dc:0b:0d:76:2e:75:4e:97:0f:09:d9:36:
5e:3d:7d:cd:1e:99:7f:44:95:b2:cf:b0:5b:ed:74:
fd:11:3a:c6:66:7b:66:66:b8:c9:7d:bf:dc:d6:01:
7f:d7:01:bf:1b:fc:38:8c:c0:66:da:08:4c:74:ae:
58:5d:9b:6c:78:3d:46:63:53:39:47:88:4f:d9:60:
c2:b6:d9:8b:a2:dd:69:eb:50:2e:70:1b:48:be:be:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:D3:BD:F2:5A:50:3E:81:C7:A7:C4:B6:50:D0:92:E3:14:C2:19
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/LfDTvfJaUD6Bx6fEtlDQkuMUwhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.232.0/21
185.65.148.0/22
185.94.108.0/22
IPv6:
2a03:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:08:2d:6d:5d:b4:ed:e1:35:92:b0:df:2a:13:a4:66:2a:eb:
12:13:93:ed:40:f1:22:37:b2:82:f8:5b:17:43:71:92:0f:47:
31:fd:45:b2:42:0e:49:84:74:96:19:12:a5:ca:0e:e0:1b:05:
cb:36:53:dc:6c:13:7c:36:84:53:c1:d0:06:ad:40:8c:ab:23:
07:d6:79:b1:80:bd:a4:4a:0a:42:2e:e9:c1:14:a6:d6:82:4e:
f2:77:3e:60:80:ee:94:bb:33:bc:95:d0:12:44:44:bd:70:fe:
0c:c5:54:ad:e3:f3:9c:8d:ab:68:69:74:5d:36:27:23:16:14:
8b:97:ba:4c:d9:9d:42:bf:43:bd:a9:0d:e2:3b:f0:20:30:7c:
ff:b3:e7:88:12:2e:e8:22:2f:99:43:9a:7f:58:21:1b:a7:47:
d0:71:1e:b9:5b:ba:a6:48:4d:45:46:e6:20:3f:b9:21:f5:41:
13:15:c4:83:2e:fb:85:05:00:e7:cc:b8:b3:40:1f:90:ad:53:
99:b1:60:11:0f:f4:70:ff:3c:10:84:cd:02:a3:c8:5c:45:38:
3c:99:76:6b:bf:b6:95:c6:e6:b9:8d:f3:0f:39:9c:2c:86:41:
37:ce:11:44:0b:90:45:04:3f:e9:e0:b4:bc:02:32:ff:93:69:
38:33:1f:26
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEGOmvLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MmI2MTBjZDQzYmFmY2VkOTE0ODBmYWJmZGNhYWU4MjA0OWZiZjcxMB4XDTIyMDEw
MTA3NTgzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmRmMGQzYmRmMjVh
NTAzZTgxYzdhN2M0YjY1MGQwOTJlMzE0YzIxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOI3HFvLZACYTW70B1Y7+vDS+0U8I/x4thwrueUa88Ea9oCH
R4WSIKfH7kgWlV1qXoU1Hfg7fWM8SLC6ErAyCbx9hYNPwlsRL8xbmWViDxC7QGfX
7ZL2UET3kQK3pEKNAiguzKJoQw/NMpTdtmOphKi5PvaLv3CFk5gHQAIpHoIpXvIZ
IZ56ipZL4jLdVwJtkiecci8GJTJ1XbZIKeXetfn8Qrcks5BP3AsNdi51TpcPCdk2
Xj19zR6Zf0SVss+wW+10/RE6xmZ7Zma4yX2/3NYBf9cBvxv8OIzAZtoITHSuWF2b
bHg9RmNTOUeIT9lgwrbZi6LdaetQLnAbSL6+iQkCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBQt8NO98lpQPoHHp8S2UNCS4xTCGTAfBgNVHSMEGDAWgBQCthDNQ7r87ZFI
D6v9yq6CBJ+/cTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FyWVF6VU82X08yUlNBLXJfY3F1Z2dTZnYzRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvZTNkZWNjLTNlZjctNGNiMi04MWQxLTkwMTNjYTk5NmIxNi8x
L0xmRFR2ZkphVUQ2Qng2ZkV0bERRa3VNVXdoay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
ZTNkZWNjLTNlZjctNGNiMi04MWQxLTkwMTNjYTk5NmIxNi8xL0FyWVF6VU82X08y
UlNBLXJfY3F1Z2dTZnYzRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA7L46AMEArlBlAMEArlebDANBAIA
AjAHAwUAKgNwwDANBgkqhkiG9w0BAQsFAAOCAQEAsggtbV207eE1krDfKhOkZirr
EhOT7UDxIjeygvhbF0Nxkg9HMf1FskIOSYR0lhkSpcoO4BsFyzZT3GwTfDaEU8HQ
Bq1AjKsjB9Z5sYC9pEoKQi7pwRSm1oJO8nc+YIDulLszvJXQEkREvXD+DMVUrePz
nI2raGl0XTYnIxYUi5e6TNmdQr9DvakN4jvwIDB8/7PniBIu6CIvmUOaf1ghG6dH
0HEeuVu6pkhNRUbmID+5IfVBExXEgy77hQUA58y4s0AfkK1TmbFgEQ/0cP88EITN
AqPIXEU4PJl2a7+2lcbmuY3zDzmcLIZBN84RRAuQRQQ/6eC0vAIy/5NpODMfJg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org