Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/X6WOAg3Tb_rOi5xjIBJDmamMXH4.roa
File: X6WOAg3Tb_rOi5xjIBJDmamMXH4.roa (raw, json)
Hash identifier: vQcYuzJBOnqtU7FFF2xR1LTWaSkwGml1eAFfFtfqO5I=
Subject key identifier: 5F:A5:8E:02:0D:D3:6F:FA:CE:8B:9C:63:20:12:43:99:A9:8C:5C:7E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 083C443C
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/X6WOAg3Tb_rOi5xjIBJDmamMXH4.roa
Signing time: Sat 01 Jan 2022 07:56:16 +0000
ROA not before: Sat 01 Jan 2022 07:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208102
IP address blocks: 212.22.71.0/24 maxlen: 24
212.22.66.0/24 maxlen: 24
185.126.181.0/24 maxlen: 24
212.22.85.0/24 maxlen: 24
212.22.93.0/24 maxlen: 24
212.22.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138167356 (0x83c443c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fa58e020dd36fface8b9c6320124399a98c5c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:26:b0:37:5a:14:81:29:90:ee:99:c9:c4:
2f:d9:8c:84:02:0c:e5:f1:3f:92:1e:99:31:52:f2:
42:bd:53:5e:0a:14:30:9d:d2:78:5e:8f:0f:6e:08:
d1:71:0c:c5:d5:f6:40:12:aa:86:c7:af:c5:7a:7a:
3c:e4:93:44:a5:cd:b1:6a:4c:92:d0:bd:85:6a:ea:
71:12:53:bb:4b:a0:96:b5:44:a8:31:0f:fb:3e:3c:
8c:1c:75:b9:85:7d:3b:d7:dc:52:2a:95:5a:c8:08:
d8:e9:3d:ab:1a:b0:f0:fa:04:21:88:17:81:58:49:
6a:e6:56:25:11:32:da:43:98:04:34:d6:7b:98:38:
39:24:4b:85:b8:c3:7c:bc:0a:55:c5:c7:da:5f:bc:
1a:26:3d:9e:c9:fb:c7:38:49:e7:fa:0d:68:85:30:
e7:c6:f1:f4:06:83:9b:3e:3a:0c:08:33:ea:72:be:
58:33:8b:d7:7a:2b:69:c4:4e:22:38:04:db:37:e7:
e2:52:2a:26:ee:14:52:72:f6:14:4a:8b:7b:6b:14:
87:46:dc:c6:db:e1:7b:4c:9c:e3:ba:13:fd:28:f6:
d0:da:a6:98:cc:f6:30:07:c1:a3:43:94:1f:6a:9b:
2c:d5:dc:4b:12:52:6a:29:46:28:e5:0d:60:81:be:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:8E:02:0D:D3:6F:FA:CE:8B:9C:63:20:12:43:99:A9:8C:5C:7E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/X6WOAg3Tb_rOi5xjIBJDmamMXH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
212.22.66.0/24
212.22.71.0/24
212.22.85.0/24
212.22.92.0/23
Signature Algorithm: sha256WithRSAEncryption
62:64:ac:fb:31:b5:0d:40:bc:85:6f:72:3a:a6:94:46:87:70:
b9:9c:61:b4:ed:9d:1a:96:cd:85:8d:47:0d:77:2a:8c:ab:83:
3e:18:2d:39:ad:15:c0:ae:e2:96:8e:38:8c:1c:88:2b:31:45:
74:67:5e:7a:0c:f8:e8:65:8d:b8:e1:c2:72:91:8d:16:f8:bc:
d5:f4:b6:58:bb:2c:af:3f:b1:51:96:d4:1a:51:46:bf:4d:6e:
d7:fa:23:6c:e7:3f:5b:37:9f:d5:05:00:c8:a5:ba:d7:15:1d:
31:0a:26:64:64:1f:79:72:c9:1f:33:c0:b7:4e:d3:ac:30:cb:
f2:cf:2c:b2:9f:15:bf:15:91:50:e4:8e:5d:c7:18:17:28:28:
f8:c2:07:0f:d8:68:f9:e1:c5:92:a9:0b:d1:15:21:b5:76:62:
43:e7:a3:88:27:38:3e:f6:17:cd:a4:b3:eb:93:27:0b:9a:93:
db:aa:f9:17:dc:2c:00:86:75:8f:8e:74:23:a0:09:12:22:5d:
5b:9f:30:44:92:b9:f1:59:d2:e3:56:93:1b:ba:85:29:34:89:
87:75:db:94:1f:9e:44:76:94:f5:ca:36:73:57:0e:53:a9:89:
d5:5c:b8:62:49:ea:4d:b8:d8:b4:be:23:a3:7b:c5:5f:08:02:
41:bb:cb:9c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIECDxEPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDYzNjUzNTViNjY1NTY0YTIxMGMzNThjNjhhMDExN2I3ZmJlYjlhMB4XDTIyMDEw
MTA3NTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZhNThlMDIwZGQz
NmZmYWNlOGI5YzYzMjAxMjQzOTlhOThjNWM3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqqJrA3WhSBKZDumcnEL9mMhAIM5fE/kh6ZMVLyQr1TXgoU
MJ3SeF6PD24I0XEMxdX2QBKqhsevxXp6POSTRKXNsWpMktC9hWrqcRJTu0uglrVE
qDEP+z48jBx1uYV9O9fcUiqVWsgI2Ok9qxqw8PoEIYgXgVhJauZWJREy2kOYBDTW
e5g4OSRLhbjDfLwKVcXH2l+8GiY9nsn7xzhJ5/oNaIUw58bx9AaDmz46DAgz6nK+
WDOL13oracROIjgE2zfn4lIqJu4UUnL2FEqLe2sUh0bcxtvhe0yc47oT/Sj20Nqm
mMz2MAfBo0OUH2qbLNXcSxJSailGKOUNYIG+vpMCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBRfpY4CDdNv+s6LnGMgEkOZqYxcfjAfBgNVHSMEGDAWgBR0Y2U1W2ZVZKIQ
w1jGigEXt/vrmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RHTmxOVnRtVldTaUVNTll4b29CRjdmNzY1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvYWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8x
L1g2V09BZzNUYl9yT2k1eGpJQkpEbWFtTVhINC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
YWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8xL2RHTmxOVnRtVldT
aUVNTll4b29CRjdmNzY1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEALl+tQMEANQWQgMEANQWRwMEANQW
VQMEAdQWXDANBgkqhkiG9w0BAQsFAAOCAQEAYmSs+zG1DUC8hW9yOqaURodwuZxh
tO2dGpbNhY1HDXcqjKuDPhgtOa0VwK7ilo44jByIKzFFdGdeegz46GWNuOHCcpGN
Fvi81fS2WLssrz+xUZbUGlFGv01u1/ojbOc/Wzef1QUAyKW61xUdMQomZGQfeXLJ
HzPAt07TrDDL8s8ssp8VvxWRUOSOXccYFygo+MIHD9ho+eHFkqkL0RUhtXZiQ+ej
iCc4PvYXzaSz65MnC5qT26r5F9wsAIZ1j450I6AJEiJdW58wRJK58VnS41aTG7qF
KTSJh3XblB+eRHaU9co2c1cOU6mJ1Vy4YknqTbjYtL4jo3vFXwgCQbvLnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org