Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/SWRe-f3meQ_PVsyoPQ-dGXWq0I4.roa
File: SWRe-f3meQ_PVsyoPQ-dGXWq0I4.roa (raw, json)
Hash identifier: 6TK8E8u3ZtVjLw42A8iX7fgRVj/u9eflHOPpkVKdeNg=
Subject key identifier: 49:64:5E:F9:FD:E6:79:0F:CF:56:CC:A8:3D:0F:9D:19:75:AA:D0:8E
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 1B1E21B1
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/SWRe-f3meQ_PVsyoPQ-dGXWq0I4.roa
Signing time: Sat 01 Jan 2022 10:57:59 +0000
ROA not before: Sat 01 Jan 2022 10:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199087
IP address blocks: 89.190.0.0/19 maxlen: 19
185.151.76.0/22 maxlen: 22
2a03:7c00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454959537 (0x1b1e21b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jan 1 10:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49645ef9fde6790fcf56cca83d0f9d1975aad08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:7e:49:39:78:3b:60:d2:cb:05:71:2d:ff:
5d:b0:91:e5:ef:8b:c4:50:6e:43:d4:36:6d:d2:77:
62:f2:46:b5:65:a9:22:1c:1b:18:d4:bf:f4:f3:79:
ac:6d:2d:b7:97:05:7a:86:9d:75:20:3a:0c:bb:38:
e3:ae:07:88:6b:c2:c3:97:2c:18:61:5b:94:a8:cd:
22:60:2c:f6:3c:6a:2e:73:d1:fd:06:2e:c8:7d:00:
90:d1:18:27:3a:a2:b7:b2:9e:1f:18:f9:c0:cc:be:
05:d6:5b:0f:dc:e4:76:a4:f0:2a:5c:99:f0:41:70:
ca:93:a2:55:1b:a9:52:92:7d:a9:1e:24:c2:31:e7:
1d:95:7a:73:35:c3:3d:73:59:dc:56:05:17:d9:8f:
31:4a:ce:09:c9:bc:a6:e0:69:ab:d2:87:76:e5:e4:
59:ad:00:bb:94:f3:f2:42:92:20:d7:16:18:4e:78:
9f:c1:ae:c9:3a:b7:a8:a9:b9:af:8b:75:38:f5:1b:
ba:b8:d9:3a:ce:49:95:26:95:4b:9b:a9:93:01:37:
34:41:7a:f8:89:99:d3:23:2b:c2:ba:36:2c:36:77:
08:40:05:70:27:26:f6:82:88:74:93:9f:4f:02:cd:
63:87:62:69:1b:6c:d8:59:3a:14:25:71:03:57:6b:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:5E:F9:FD:E6:79:0F:CF:56:CC:A8:3D:0F:9D:19:75:AA:D0:8E
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/SWRe-f3meQ_PVsyoPQ-dGXWq0I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.0.0/19
185.151.76.0/22
IPv6:
2a03:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
83:79:6e:cf:1b:39:35:6f:b6:9d:9d:99:44:16:70:ef:cf:95:
ed:df:be:8c:8b:7d:8e:24:a8:fc:7a:43:28:21:55:84:94:c1:
d4:8f:bb:64:99:84:46:70:a8:79:b9:70:e9:04:d6:b1:0c:48:
b9:7a:eb:6a:01:45:5c:45:5c:df:09:99:86:97:43:ac:6d:5a:
41:df:6a:38:24:51:f8:be:5f:d0:c4:33:4f:43:7f:20:23:27:
67:12:a1:02:94:2c:e6:b9:25:88:19:5d:9b:0b:88:3d:de:1e:
79:4d:76:bf:30:1c:f6:b3:ef:d0:bb:d6:42:1c:95:e9:8b:8a:
53:4b:32:ad:e3:75:cb:41:86:69:0a:da:94:87:16:76:bd:44:
96:5b:2b:53:06:99:03:2f:3d:31:6e:f8:2d:33:be:fb:6c:5a:
75:0e:2d:1c:65:96:44:d2:97:38:53:b0:0c:9e:e4:82:c7:e5:
56:59:10:dc:a0:b9:d8:fb:e3:73:04:f6:02:24:72:c5:bd:78:
75:e7:3e:37:3f:74:dc:40:41:23:e3:4c:0e:c0:b2:de:81:04:
a0:97:b9:77:fa:7f:54:ea:cc:f8:ca:b3:02:51:e1:f9:f8:c4:
c6:49:f8:87:2b:1e:14:a2:3f:7a:b4:f4:35:2b:52:27:51:7f:
a3:e4:d2:4b
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEGx4hsTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
N2Y0MWFlMDc3OWUzN2RlZmM2OWIyYTViMGY3YWI4ZmQ0MGNkM2U3MB4XDTIyMDEw
MTEwNTc1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk2NDVlZjlmZGU2
NzkwZmNmNTZjY2E4M2QwZjlkMTk3NWFhZDA4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKiKfkk5eDtg0ssFcS3/XbCR5e+LxFBuQ9Q2bdJ3YvJGtWWp
IhwbGNS/9PN5rG0tt5cFeoaddSA6DLs4464HiGvCw5csGGFblKjNImAs9jxqLnPR
/QYuyH0AkNEYJzqit7KeHxj5wMy+BdZbD9zkdqTwKlyZ8EFwypOiVRupUpJ9qR4k
wjHnHZV6czXDPXNZ3FYFF9mPMUrOCcm8puBpq9KHduXkWa0Au5Tz8kKSINcWGE54
n8GuyTq3qKm5r4t1OPUburjZOs5JlSaVS5upkwE3NEF6+ImZ0yMrwro2LDZ3CEAF
cCcm9oKIdJOfTwLNY4diaRts2Fk6FCVxA1drRFkCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRJZF75/eZ5D89WzKg9D50ZdarQjjAfBgNVHSMEGDAWgBSH9Brgd5433vxp
sqWw96uP1AzT5zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hfUWE0SGVlTjk3OGFiS2xzUGVyajlRTTAtYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjYvMTg1Y2I1LTQ3NTItNDNiOC04ZTQ2LWM0M2FiMmExMmQ1NS8x
L1NXUmUtZjNtZVFfUFZzeW9QUS1kR1hXcTBJNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYv
MTg1Y2I1LTQ3NTItNDNiOC04ZTQ2LWM0M2FiMmExMmQ1NS8xL2hfUWE0SGVlTjk3
OGFiS2xzUGVyajlRTTAtYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBVm+AAMEArmXTDANBAIAAjAHAwUA
KgN8ADANBgkqhkiG9w0BAQsFAAOCAQEAg3luzxs5NW+2nZ2ZRBZw78+V7d++jIt9
jiSo/HpDKCFVhJTB1I+7ZJmERnCoeblw6QTWsQxIuXrragFFXEVc3wmZhpdDrG1a
Qd9qOCRR+L5f0MQzT0N/ICMnZxKhApQs5rkliBldmwuIPd4eeU12vzAc9rPv0LvW
QhyV6YuKU0syreN1y0GGaQralIcWdr1EllsrUwaZAy89MW74LTO++2xadQ4tHGWW
RNKXOFOwDJ7kgsflVlkQ3KC52PvjcwT2AiRyxb14dec+Nz903EBBI+NMDsCy3oEE
oJe5d/p/VOrM+MqzAlHh+fjExkn4hyseFKI/erT0NStSJ1F/o+TSSw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:12 2023 by rpki-client on console-fra.rpki-client.org