Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oVdmdgIQw_KszSQK72wdj4okpwQ.roa
File: oVdmdgIQw_KszSQK72wdj4okpwQ.roa (raw, json)
Hash identifier: Gt/VXV0MlB1WsGXrtENDZH0idtFe9XfAPODPHYcSR6Q=
Subject key identifier: A1:57:66:76:02:10:C3:F2:AC:CD:24:0A:EF:6C:1D:8F:8A:24:A7:04
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 3709802F
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oVdmdgIQw_KszSQK72wdj4okpwQ.roa
Signing time: Sat 01 Jan 2022 11:00:24 +0000
ROA not before: Sat 01 Jan 2022 11:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 109.248.168.0/23 maxlen: 24
188.130.208.0/23 maxlen: 24
109.248.6.0/23 maxlen: 24
95.182.110.0/24 maxlen: 24
95.182.108.0/24 maxlen: 24
109.248.33.0/24 maxlen: 24
109.248.42.0/24 maxlen: 24
109.248.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923369519 (0x3709802f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 11:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a15766760210c3f2accd240aef6c1d8f8a24a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4a:d2:ae:c7:1d:88:f9:e3:71:2a:f2:6f:fc:
a0:f3:83:54:99:dd:8a:c2:3e:81:b6:78:cd:7c:1b:
b0:de:1e:d6:03:b6:c1:14:69:ac:12:b4:47:e5:68:
73:81:34:15:08:a9:b7:03:10:d1:53:c8:d5:66:30:
19:e4:3c:75:19:6b:f9:a8:2e:df:04:45:03:98:fe:
2d:20:eb:b4:dc:0f:bb:66:13:bd:91:74:b0:e9:ea:
ad:36:0d:6e:5e:bc:0b:35:4b:51:78:24:2b:32:f8:
a7:45:10:2b:a3:e5:0a:e6:48:9a:d7:b1:5b:78:cf:
25:71:43:89:8b:af:80:09:2f:cf:21:80:0b:87:02:
d1:20:e8:c0:9b:fd:6c:cb:fd:46:91:53:08:d3:18:
3e:8e:7d:67:66:3d:9e:ef:4d:9e:ac:99:fe:e8:20:
0b:35:3b:73:a4:84:7e:c2:41:a4:6b:f6:4c:b5:69:
a3:cd:26:0c:bd:28:06:43:97:4b:8e:83:ee:7d:fe:
e5:57:8b:8c:e8:c6:36:5c:ea:84:b2:3e:c7:f4:b7:
bc:fb:93:1b:63:b6:31:d0:14:d5:42:61:b3:1b:0c:
e8:71:98:07:c5:bf:be:cc:21:a0:f8:f3:01:80:00:
50:20:2c:6c:7a:32:7e:e9:59:8e:2b:53:60:d1:c7:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:57:66:76:02:10:C3:F2:AC:CD:24:0A:EF:6C:1D:8F:8A:24:A7:04
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oVdmdgIQw_KszSQK72wdj4okpwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.108.0/24
95.182.110.0/24
109.248.6.0/23
109.248.33.0/24
109.248.42.0/24
109.248.45.0/24
109.248.168.0/23
188.130.208.0/23
Signature Algorithm: sha256WithRSAEncryption
49:72:53:ba:af:9e:ee:10:ef:e5:8d:1e:ad:5e:31:60:11:ed:
5f:82:d7:8a:f7:f7:f8:4a:24:c8:fe:80:e5:af:78:ae:cd:87:
5e:5c:e4:65:35:47:bc:20:8b:67:d5:3f:c5:a4:e0:2a:84:b1:
74:7b:84:ab:63:12:6c:14:d5:ed:80:8d:95:58:6a:16:77:20:
f4:df:bd:e2:11:88:d4:4f:59:9a:df:68:04:05:f0:dd:76:54:
ed:84:f3:09:16:f9:f9:43:49:35:f6:21:d1:23:1c:33:f7:fd:
51:31:9b:47:81:93:a6:7d:eb:bd:3d:25:4c:00:5d:e8:ea:34:
61:7b:05:ce:37:0f:de:df:03:4a:55:13:d5:d2:d4:6b:77:97:
e0:6e:1c:01:cc:d5:49:ed:5f:8d:b7:66:08:ac:e6:4b:ad:09:
36:e7:4a:fc:89:dd:ca:07:19:20:34:a0:24:3d:d6:7f:87:f5:
a1:b3:fd:4d:55:ea:dd:25:8e:0d:5d:13:55:75:4e:f8:9f:1a:
44:e4:15:e4:1a:85:f0:ed:4e:a1:b4:b3:d2:fc:c6:89:40:90:
9d:25:52:25:ab:f2:47:f2:d6:5e:23:3b:32:32:21:5c:7d:53:
47:e3:16:15:f3:c9:ef:87:f2:e4:e2:be:07:bf:d3:8b:b3:75:
30:ac:78:f5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIENwmALzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODViODU3NzA2ZGFjNTRlMjBjYTBkMTFiZDY0MTZjYjYzNDIwM2I0MB4XDTIyMDEw
MTExMDAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTE1NzY2NzYwMjEw
YzNmMmFjY2QyNDBhZWY2YzFkOGY4YTI0YTcwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPNK0q7HHYj543Eq8m/8oPODVJndisI+gbZ4zXwbsN4e1gO2
wRRprBK0R+Voc4E0FQiptwMQ0VPI1WYwGeQ8dRlr+agu3wRFA5j+LSDrtNwPu2YT
vZF0sOnqrTYNbl68CzVLUXgkKzL4p0UQK6PlCuZImtexW3jPJXFDiYuvgAkvzyGA
C4cC0SDowJv9bMv9RpFTCNMYPo59Z2Y9nu9NnqyZ/uggCzU7c6SEfsJBpGv2TLVp
o80mDL0oBkOXS46D7n3+5VeLjOjGNlzqhLI+x/S3vPuTG2O2MdAU1UJhsxsM6HGY
B8W/vswhoPjzAYAAUCAsbHoyfulZjitTYNHHeOcCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBShV2Z2AhDD8qzNJArvbB2PiiSnBDAfBgNVHSMEGDAWgBSIW4V3BtrFTiDK
DRG9ZBbLY0IDtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lGdUZkd2JheFU0Z3lnMFJ2V1FXeTJOQ0E3US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMzIxY2RjLTIxNDMtNGI1Yy05NzMzLTE2Njk5Yzk2ZGQ1ZS8x
L29WZG1kZ0lRd19Lc3pTUUs3MndkajRva3B3US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MzIxY2RjLTIxNDMtNGI1Yy05NzMzLTE2Njk5Yzk2ZGQ1ZS8xL2lGdUZkd2JheFU0
Z3lnMFJ2V1FXeTJOQ0E3US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAF+2bAMEAF+2bgMEAW34BgMEAG34
IQMEAG34KgMEAG34LQMEAW34qAMEAbyC0DANBgkqhkiG9w0BAQsFAAOCAQEASXJT
uq+e7hDv5Y0erV4xYBHtX4LXivf3+EokyP6A5a94rs2HXlzkZTVHvCCLZ9U/xaTg
KoSxdHuEq2MSbBTV7YCNlVhqFncg9N+94hGI1E9Zmt9oBAXw3XZU7YTzCRb5+UNJ
NfYh0SMcM/f9UTGbR4GTpn3rvT0lTABd6Oo0YXsFzjcP3t8DSlUT1dLUa3eX4G4c
AczVSe1fjbdmCKzmS60JNudK/IndygcZIDSgJD3Wf4f1obP9TVXq3SWODV0TVXVO
+J8aROQV5BqF8O1OobSz0vzGiUCQnSVSJavyR/LWXiM7MjIhXH1TR+MWFfPJ74fy
5OK+B7/Ti7N1MKx49Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org