Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/VSE6nSiT3Kk1T5ZEZB-9saQENw8.roa
File: VSE6nSiT3Kk1T5ZEZB-9saQENw8.roa (raw, json)
Hash identifier: ri/dgdUavdpA75148vlNbsdxJVfdb0vi/uqovy+ClNU=
Subject key identifier: 55:21:3A:9D:28:93:DC:A9:35:4F:96:44:64:1F:BD:B1:A4:04:37:0F
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 111EA011
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/VSE6nSiT3Kk1T5ZEZB-9saQENw8.roa
Signing time: Sat 01 Jan 2022 14:04:46 +0000
ROA not before: Sat 01 Jan 2022 14:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 217.146.219.0/24 maxlen: 24
217.146.223.0/24 maxlen: 24
185.82.166.0/23 maxlen: 23
79.132.204.0/24 maxlen: 24
79.132.200.0/22 maxlen: 22
79.132.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287219729 (0x111ea011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 14:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55213a9d2893dca9354f9644641fbdb1a404370f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:6c:7d:b3:6b:18:72:c9:69:57:4d:eb:d4:
fd:de:98:de:e1:cf:5e:4a:b4:7e:be:22:db:9b:d3:
44:4b:db:fc:fc:3c:45:cc:27:16:5e:31:8e:12:ba:
c9:25:a1:53:4f:c5:5f:c7:4f:fb:bd:fa:e8:61:51:
1e:72:f4:56:dd:11:0e:b7:d1:d8:bb:e8:af:7a:0e:
35:fc:a8:0a:0b:d0:94:be:f0:11:d4:9d:c0:80:3c:
42:a8:df:3e:93:85:8d:4f:d7:95:48:64:42:5e:fb:
dd:cd:c8:4c:3c:51:ba:dd:b3:fc:a9:8e:5d:93:bd:
43:04:00:5c:3a:2f:fd:59:a0:76:ff:a6:8a:f5:ca:
68:b1:a8:67:c3:01:2e:7f:5e:de:90:1c:d3:35:ce:
d5:98:de:99:25:e4:56:a0:fe:a9:57:8f:39:e8:ef:
49:d1:5f:82:c7:8a:63:76:54:25:95:b5:02:a4:f8:
3e:a8:e7:92:7f:3e:83:c5:27:c2:38:e1:fa:0e:85:
ec:06:3f:5b:38:ad:db:56:90:e0:ed:f8:9c:51:be:
70:e2:76:4f:74:21:32:81:7b:89:4e:61:1b:af:43:
41:74:ae:3c:e9:a2:2f:19:47:00:41:a2:a9:ef:23:
9c:4f:5d:4e:a6:8c:6d:cb:ef:8c:a7:95:64:20:33:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:3A:9D:28:93:DC:A9:35:4F:96:44:64:1F:BD:B1:A4:04:37:0F
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/VSE6nSiT3Kk1T5ZEZB-9saQENw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.200.0-79.132.204.255
79.132.209.0/24
185.82.166.0/23
217.146.219.0/24
217.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
03:61:e0:80:b0:66:26:bc:7d:9f:e8:8a:ec:f7:17:7c:ce:39:
71:e2:60:36:cd:bb:db:a0:4c:d1:f4:18:66:c6:e9:32:7a:72:
3d:65:82:f2:81:95:d4:18:b2:af:40:6d:79:61:8a:1a:42:6d:
5e:ba:df:14:46:a6:b7:6d:df:ad:05:fc:94:27:b5:42:50:20:
f4:66:5d:1b:7a:b8:96:55:f1:76:0e:93:94:4b:10:94:3b:c9:
cb:ff:6b:c8:70:0d:cf:07:eb:7e:21:5b:48:9f:e2:77:28:09:
b8:13:60:e8:61:61:03:1f:fe:79:b7:e3:c5:2d:51:01:d4:89:
29:bc:18:20:b4:91:02:e3:fc:45:fd:ab:99:a8:9c:85:d6:55:
3e:86:c0:a9:5f:eb:46:8d:9d:e8:7f:42:94:c2:f8:6d:74:f0:
1d:89:c4:db:2f:72:30:68:28:74:bd:94:d1:60:f7:93:61:4e:
75:18:84:53:f7:4c:3f:90:6e:7b:08:42:6c:4f:5c:57:9a:dc:
4f:7c:a9:55:60:aa:bd:a2:fc:9c:6d:17:26:85:d2:55:1f:1c:
8b:f6:a9:30:65:71:0f:a5:5e:d5:ee:cc:70:d0:83:21:b7:2b:
78:e4:b4:ed:5d:c8:24:a5:e0:e4:9d:30:c6:31:28:01:4b:ff:
e3:53:1f:e0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEER6gETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY5OGM0YjYxMmFmZWUyY2JiMWNkZDUwOWU0ZjAyNDZmYmI4MGUxMB4XDTIyMDEw
MTE0MDQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTUyMTNhOWQyODkz
ZGNhOTM1NGY5NjQ0NjQxZmJkYjFhNDA0MzcwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI7+bH2zaxhyyWlXTevU/d6Y3uHPXkq0fr4i25vTREvb/Pw8
RcwnFl4xjhK6ySWhU0/FX8dP+7366GFRHnL0Vt0RDrfR2Lvor3oONfyoCgvQlL7w
EdSdwIA8QqjfPpOFjU/XlUhkQl773c3ITDxRut2z/KmOXZO9QwQAXDov/Vmgdv+m
ivXKaLGoZ8MBLn9e3pAc0zXO1ZjemSXkVqD+qVePOejvSdFfgseKY3ZUJZW1AqT4
Pqjnkn8+g8Unwjjh+g6F7AY/Wzit21aQ4O34nFG+cOJ2T3QhMoF7iU5hG69DQXSu
POmiLxlHAEGiqe8jnE9dTqaMbcvvjKeVZCAzj0cCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBRVITqdKJPcqTVPlkRkH72xpAQ3DzAfBgNVHSMEGDAWgBRbaYxLYSr+4sux
zdUJ5PAkb7uA4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cybU1TMkVxX3VMTHNjM1ZDZVR3SkctN2dPRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvYzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8x
L1ZTRTZuU2lUM0trMVQ1WkVaQi05c2FRRU53OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
YzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8xL1cybU1TMkVxX3VM
THNjM1ZDZVR3SkctN2dPRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJjAMAwQDT4TIAwQAT4TMAwQAT4TRAwQB
uVKmAwQA2ZLbAwQA2ZLfMA0GCSqGSIb3DQEBCwUAA4IBAQADYeCAsGYmvH2f6Irs
9xd8zjlx4mA2zbvboEzR9BhmxukyenI9ZYLygZXUGLKvQG15YYoaQm1eut8URqa3
bd+tBfyUJ7VCUCD0Zl0beriWVfF2DpOUSxCUO8nL/2vIcA3PB+t+IVtIn+J3KAm4
E2DoYWEDH/55t+PFLVEB1IkpvBggtJEC4/xF/auZqJyF1lU+hsCpX+tGjZ3of0KU
wvhtdPAdicTbL3IwaCh0vZTRYPeTYU51GIRT90w/kG57CEJsT1xXmtxPfKlVYKq9
ovycbRcmhdJVHxyL9qkwZXEPpV7V7sxw0IMhtyt45LTtXcgkpeDknTDGMSgBS//j
Ux/g
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org