Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/9Vv9fmfGndhOBx12SRfGhsDZY2c.roa
File: 9Vv9fmfGndhOBx12SRfGhsDZY2c.roa (raw, json)
Hash identifier: i2SS/LoM23iLSAKEchrQTnUuwdTc3CgNmPjH9GNnKKw=
Subject key identifier: F5:5B:FD:7E:67:C6:9D:D8:4E:07:1D:76:49:17:C6:86:C0:D9:63:67
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 72C29A
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/9Vv9fmfGndhOBx12SRfGhsDZY2c.roa
Signing time: Wed 16 Mar 2022 04:13:38 +0000
ROA not before: Wed 16 Mar 2022 04:13:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212661
IP address blocks: 212.146.188.0/24 maxlen: 24
212.146.190.0/24 maxlen: 24
212.146.164.0/22 maxlen: 22
212.146.160.0/24 maxlen: 24
212.146.160.0/22 maxlen: 22
212.146.161.0/24 maxlen: 24
212.146.172.0/24 maxlen: 24
212.146.175.0/24 maxlen: 24
212.146.176.0/22 maxlen: 22
212.146.180.0/22 maxlen: 22
185.123.148.0/24 maxlen: 24
193.3.37.0/24 maxlen: 24
2a06:dac0::/44 maxlen: 44
2a06:dac0:100::/44 maxlen: 44
2a06:dac0:200::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7520922 (0x72c29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Mar 16 04:13:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f55bfd7e67c69dd84e071d764917c686c0d96367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:ef:cc:1d:fc:6c:de:62:55:17:96:df:b6:
2a:3e:d5:f3:aa:9f:7c:3c:8a:f4:1a:3d:84:d1:b0:
50:a0:a2:d2:06:6a:e3:fd:c5:b2:10:30:a7:f9:62:
18:d4:d5:79:31:b3:bf:34:de:7c:97:41:eb:02:0a:
94:6c:39:27:0a:f6:b3:53:20:ec:e7:bb:8d:00:48:
44:6e:78:01:e1:92:67:8d:9a:4c:59:3a:7f:21:10:
fa:1f:df:0b:02:2f:15:fb:af:b4:d7:01:4f:8b:1c:
ff:ef:63:15:92:ad:2f:1a:66:a8:af:e9:cd:3b:16:
66:3e:d1:0a:2b:2a:65:be:cf:23:60:18:e3:76:de:
3c:3a:05:05:e7:cc:eb:5a:0f:4a:a9:bf:49:01:6e:
d3:da:6c:21:46:d4:fc:e5:40:e6:99:bb:54:76:b0:
ea:0c:48:6b:70:e1:a3:25:7d:33:d3:93:42:e2:6a:
36:ad:5c:a4:b9:3d:41:b9:6d:6c:3e:dd:df:3d:b7:
7f:54:ea:76:dc:d0:e1:9b:00:f2:89:34:85:dc:74:
1d:15:ee:c6:a7:f6:4b:43:9c:3d:04:f6:89:31:03:
d1:8f:84:22:7d:99:87:c4:2a:5d:b6:c8:8e:4f:2c:
7e:ea:d6:c9:5e:fd:a2:82:ab:1e:8e:39:5e:94:10:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:FD:7E:67:C6:9D:D8:4E:07:1D:76:49:17:C6:86:C0:D9:63:67
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/9Vv9fmfGndhOBx12SRfGhsDZY2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.148.0/24
193.3.37.0/24
212.146.160.0/21
212.146.172.0/24
212.146.175.0-212.146.183.255
212.146.188.0/24
212.146.190.0/24
IPv6:
2a06:dac0::/44
2a06:dac0:100::/44
2a06:dac0:200::/44
Signature Algorithm: sha256WithRSAEncryption
6a:83:db:af:b4:5a:ef:37:d7:fa:0e:6f:44:d0:50:05:d1:95:
72:b5:f5:52:95:a2:6c:8f:84:ad:4c:94:86:b5:51:52:fe:3b:
69:27:71:65:4e:cc:25:a2:f0:6e:5d:da:24:58:a3:94:15:b3:
c0:e9:7f:cb:37:a7:7a:af:55:e6:42:9c:f0:af:a7:5f:f9:72:
f9:0e:4d:03:6b:3a:d7:36:d0:98:dc:3d:68:83:9c:7a:de:23:
a1:1e:2f:06:95:44:d6:46:63:df:22:98:0c:8d:10:7a:57:1b:
06:ab:e9:12:76:50:cb:54:a0:c7:1c:9b:0d:77:2a:a7:bd:31:
6d:ed:34:96:ff:a8:18:38:63:f2:55:36:df:58:21:41:54:5e:
87:2f:e9:05:38:51:46:66:cc:49:04:56:bc:fb:53:2a:52:2a:
be:2b:75:83:69:ca:2d:5e:3c:48:66:3a:e5:dd:8a:82:8e:b8:
19:20:b8:95:55:91:3c:ab:34:e7:a9:b6:b6:b4:6e:f3:74:d2:
5d:24:ee:16:dd:a6:9d:e4:d2:ba:af:de:de:1e:e0:f2:b6:a3:
dd:06:c1:89:6f:29:dc:87:34:90:03:0e:48:9e:e4:a2:a2:31:
51:b2:b1:b9:a6:a4:09:96:6f:fe:a2:de:84:34:4a:e9:74:3a:
1e:b2:6b:63
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDcsKaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
YzYyM2VmYmZjMTI0NzEyMTYyMjQwY2JhMDJhNGRhMWQ0ZGNlYTMwHhcNMjIwMzE2
MDQxMzM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNTViZmQ3ZTY3YzY5
ZGQ4NGUwNzFkNzY0OTE3YzY4NmMwZDk2MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqB3vzB38bN5iVReW37YqPtXzqp98PIr0Gj2E0bBQoKLSBmrj
/cWyEDCn+WIY1NV5MbO/NN58l0HrAgqUbDknCvazUyDs57uNAEhEbngB4ZJnjZpM
WTp/IRD6H98LAi8V+6+01wFPixz/72MVkq0vGmaor+nNOxZmPtEKKyplvs8jYBjj
dt48OgUF58zrWg9Kqb9JAW7T2mwhRtT85UDmmbtUdrDqDEhrcOGjJX0z05NC4mo2
rVykuT1BuW1sPt3fPbd/VOp23NDhmwDyiTSF3HQdFe7Gp/ZLQ5w9BPaJMQPRj4Qi
fZmHxCpdtsiOTyx+6tbJXv2igqsejjlelBB7IwIDAQABo4ICWDCCAlQwHQYDVR0O
BBYEFPVb/X5nxp3YTgcddkkXxobA2WNnMB8GA1UdIwQYMBaAFHrGI++/wSRxIWIk
DLoCpNodTc6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4LzEv
OVZ2OWZtZkduZGhPQngxMlNSZkdoc0RaWTJjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9j
NzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4LzEvZXNZajc3X0JKSEVo
WWlRTXVnS2syaDFOenFNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG4G
CCsGAQUFBwEHAQH/BF8wXTA4BAIAATAyAwQAuXuUAwQAwQMlAwQD1JKgAwQA1JKs
MAwDBADUkq8DBAPUkrADBADUkrwDBADUkr4wIQQCAAIwGwMHBCoG2sAAAAMHBCoG
2sABAAMHBCoG2sACADANBgkqhkiG9w0BAQsFAAOCAQEAaoPbr7Ra7zfX+g5vRNBQ
BdGVcrX1UpWibI+ErUyUhrVRUv47aSdxZU7MJaLwbl3aJFijlBWzwOl/yzeneq9V
5kKc8K+nX/ly+Q5NA2s61zbQmNw9aIOcet4joR4vBpVE1kZj3yKYDI0QelcbBqvp
EnZQy1SgxxybDXcqp70xbe00lv+oGDhj8lU231ghQVRehy/pBThRRmbMSQRWvPtT
KlIqvit1g2nKLV48SGY65d2Kgo64GSC4lVWRPKs056m2trRu83TSXSTuFt2mneTS
uq/e3h7g8raj3QbBiW8p3Ic0kAMOSJ7koqIxUbKxuaakCZZv/qLehDRK6XQ6HrJr
Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:15 2024 by rpki-client on console-fra.rpki-client.org