Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/QNPccnR0mleQ4baQyXJuJZH8tXA.roa
File: QNPccnR0mleQ4baQyXJuJZH8tXA.roa (raw, json)
Hash identifier: c8g57Wi47+Ar0lEYcCXpskq+eIJJ9P59TrqtsNgt9+4=
Subject key identifier: 40:D3:DC:72:74:74:9A:57:90:E1:B6:90:C9:72:6E:25:91:FC:B5:70
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 09501D7B
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/QNPccnR0mleQ4baQyXJuJZH8tXA.roa
Signing time: Thu 03 Feb 2022 18:18:08 +0000
ROA not before: Thu 03 Feb 2022 18:18:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198651
IP address blocks: 185.220.176.0/24 maxlen: 24
185.220.179.0/24 maxlen: 24
185.220.177.0/24 maxlen: 24
185.220.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156245371 (0x9501d7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Feb 3 18:18:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40d3dc7274749a5790e1b690c9726e2591fcb570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:bd:21:d3:5d:64:80:6a:d3:ac:61:75:0c:
3c:86:23:60:28:61:36:dd:d7:87:68:47:2c:4b:33:
ad:97:cf:34:8a:fc:cf:0a:29:d3:c6:52:93:81:78:
28:2b:33:79:a1:1b:7c:33:bc:2c:f9:ce:2b:10:9e:
21:8f:a8:33:f0:06:b4:a7:8f:ff:6d:75:63:a3:b5:
4e:a9:5e:77:04:a6:b6:f6:f1:6a:cf:3f:1b:fb:7e:
c9:8f:cc:53:8e:c9:16:47:fc:14:93:9c:d6:57:69:
9a:c8:0e:af:4c:22:4d:47:80:21:9f:f4:f0:a1:f1:
53:eb:e3:39:33:3b:be:2b:6e:d6:19:aa:4e:25:9d:
9a:e2:e8:3d:5f:22:48:f1:f9:12:ba:04:95:57:ef:
64:27:11:0b:9e:1c:69:55:f7:05:ca:48:24:21:37:
25:64:2d:ef:27:6d:d2:31:e7:0d:51:96:fb:72:01:
15:4a:91:ca:f3:4b:5b:60:96:61:bc:d5:f3:b3:5d:
48:b0:51:1d:f6:19:22:da:38:08:71:9d:35:60:55:
3f:61:63:d6:d1:db:69:19:16:8c:51:cc:7f:07:8d:
01:c7:47:43:c9:27:40:66:67:2d:fa:68:02:5e:be:
16:00:d1:02:0b:da:4c:bd:8e:7a:63:e3:cc:c2:6a:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:DC:72:74:74:9A:57:90:E1:B6:90:C9:72:6E:25:91:FC:B5:70
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/QNPccnR0mleQ4baQyXJuJZH8tXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.176.0/22
Signature Algorithm: sha256WithRSAEncryption
92:09:c8:03:8d:e3:6c:a1:e4:15:04:71:8e:c0:ce:45:fa:0f:
c0:ba:97:c4:b6:8a:dc:d3:17:ce:43:2f:35:cd:86:9e:45:3f:
ea:f5:2b:5d:0e:28:2d:b5:00:97:e0:38:f1:1d:f7:1d:59:13:
04:99:0d:5a:99:46:ff:c8:d6:f2:60:74:13:76:4d:5b:33:bd:
c7:6f:22:28:66:cc:f0:06:d0:7b:74:da:ae:62:4c:e2:ce:f7:
4c:c5:92:6f:6b:00:0a:57:d3:4a:f5:45:fc:d7:ee:2b:83:c8:
eb:12:a1:57:b2:cb:f9:79:ed:de:ce:d1:19:e8:95:c6:0b:a5:
90:c3:be:8c:e9:cd:be:d9:f0:cf:fd:7c:e5:9f:21:ac:21:32:
af:0c:37:55:45:21:25:79:b5:79:fe:05:12:3d:96:0e:05:e6:
d7:8f:2d:e2:b8:b3:0e:6c:f3:9c:5c:b0:4c:d2:3f:0a:4a:8c:
48:40:91:0c:8e:15:65:f4:e9:c2:1d:1a:dc:fc:f8:7e:80:48:
94:5a:f1:66:01:ec:7e:c8:dc:79:1e:20:f6:a3:ba:11:72:7f:
51:81:e7:09:7d:3f:14:ba:0a:52:98:11:47:a0:8e:b1:e6:cd:
20:15:73:e2:fb:e6:73:43:82:84:55:e4:d4:11:e6:94:d7:d9:
b6:f3:20:20
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECVAdezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2M0NzhkZDljY2Q2MTYyZjgyNDg4YWM2ZmM1MGMyMWQzNjlmMmEwMB4XDTIyMDIw
MzE4MTgwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDBkM2RjNzI3NDc0
OWE1NzkwZTFiNjkwYzk3MjZlMjU5MWZjYjU3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANpovSHTXWSAatOsYXUMPIYjYChhNt3Xh2hHLEszrZfPNIr8
zwop08ZSk4F4KCszeaEbfDO8LPnOKxCeIY+oM/AGtKeP/211Y6O1TqledwSmtvbx
as8/G/t+yY/MU47JFkf8FJOc1ldpmsgOr0wiTUeAIZ/08KHxU+vjOTM7vitu1hmq
TiWdmuLoPV8iSPH5EroElVfvZCcRC54caVX3BcpIJCE3JWQt7ydt0jHnDVGW+3IB
FUqRyvNLW2CWYbzV87NdSLBRHfYZIto4CHGdNWBVP2Fj1tHbaRkWjFHMfweNAcdH
Q8knQGZnLfpoAl6+FgDRAgvaTL2OemPjzMJqqO8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRA09xydHSaV5DhtpDJcm4lkfy1cDAfBgNVHSMEGDAWgBTMxHjdnM1hYvgk
iKxvxQwh02nyoDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pNUjQzWnpOWVdMNEpJaXNiOFVNSWROcDhxQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvZWUzZTNmLTNhNDUtNDNlYi1hNWRlLTQyODU5OTgzOTJkMy8x
L1FOUGNjblIwbWxlUTRiYVF5WEp1SlpIOHRYQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
ZWUzZTNmLTNhNDUtNDNlYi1hNWRlLTQyODU5OTgzOTJkMy8xL3pNUjQzWnpOWVdM
NEpJaXNiOFVNSWROcDhxQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArncsDANBgkqhkiG9w0BAQsFAAOC
AQEAkgnIA43jbKHkFQRxjsDORfoPwLqXxLaK3NMXzkMvNc2GnkU/6vUrXQ4oLbUA
l+A48R33HVkTBJkNWplG/8jW8mB0E3ZNWzO9x28iKGbM8AbQe3TarmJM4s73TMWS
b2sAClfTSvVF/NfuK4PI6xKhV7LL+Xnt3s7RGeiVxgulkMO+jOnNvtnwz/185Z8h
rCEyrww3VUUhJXm1ef4FEj2WDgXm148t4rizDmzznFywTNI/CkqMSECRDI4VZfTp
wh0a3Pz4foBIlFrxZgHsfsjceR4g9qO6EXJ/UYHnCX0/FLoKUpgRR6COsebNIBVz
4vvmc0OChFXk1BHmlNfZtvMgIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:58 2024 by rpki-client on console-fra.rpki-client.org