Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JWmFKuYQAri924BBy916GYlPThk.roa
File: JWmFKuYQAri924BBy916GYlPThk.roa (raw, json)
Hash identifier: nBV32C5zaku094lI4bHZ4ogymedoph2pv2/861T652g=
Subject key identifier: 25:69:85:2A:E6:10:02:B8:BD:DB:80:41:CB:DD:7A:19:89:4F:4E:19
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 3964A606
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JWmFKuYQAri924BBy916GYlPThk.roa
Signing time: Wed 23 Feb 2022 09:54:40 +0000
ROA not before: Wed 23 Feb 2022 09:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1104
IP address blocks: 145.116.48.0/20 maxlen: 20
194.171.96.0/21 maxlen: 21
145.107.4.0/22 maxlen: 22
145.110.0.0/16 maxlen: 16
145.102.132.0/22 maxlen: 22
145.116.208.0/21 maxlen: 21
2001:610:120::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962897414 (0x3964a606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Feb 23 09:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2569852ae61002b8bddb8041cbdd7a19894f4e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:31:8e:68:e9:2d:16:ee:80:14:1b:04:4c:
cc:89:c2:7a:f2:19:14:d4:e5:8f:2f:16:b2:ae:bc:
eb:54:45:7a:3d:93:0f:ee:a3:61:da:f7:71:4f:57:
cc:f7:0c:e7:c8:7b:4e:34:e6:ee:a0:d0:cf:46:f6:
f0:e2:78:8d:5d:aa:ec:e6:c8:32:c0:92:a5:28:3f:
04:de:68:4e:8b:1c:91:8b:fc:c3:41:e6:b2:50:31:
24:44:53:d1:f0:27:df:90:ca:18:7b:c9:a6:7d:4e:
b1:11:d2:8f:da:5a:a3:19:d5:3a:8e:0e:2e:7c:d6:
31:89:7e:d8:ba:9e:b6:5b:53:fb:fd:38:20:03:34:
d0:08:01:d1:cb:c1:78:25:1f:60:10:e8:ea:6e:63:
c9:5e:37:7e:6b:33:2f:9e:94:7d:c1:47:74:35:c6:
ac:8d:dd:31:43:1e:a3:82:fe:3d:0f:3b:ab:b9:36:
53:dd:96:e2:67:08:45:75:ee:65:63:0f:63:0c:dc:
8b:c2:bf:d6:1a:2e:ab:96:54:15:b8:e7:ba:8a:84:
3b:f4:58:ad:21:2c:8d:25:36:b5:ad:59:1c:50:87:
5e:c6:81:6b:3d:76:00:49:da:82:5a:86:75:4e:9b:
df:4b:7b:17:fd:52:5a:bf:ef:48:b5:c6:22:e4:17:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:85:2A:E6:10:02:B8:BD:DB:80:41:CB:DD:7A:19:89:4F:4E:19
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JWmFKuYQAri924BBy916GYlPThk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.132.0/22
145.107.4.0/22
145.110.0.0/16
145.116.48.0/20
145.116.208.0/21
194.171.96.0/21
IPv6:
2001:610:120::/48
Signature Algorithm: sha256WithRSAEncryption
57:d0:fc:60:77:ac:f1:7f:62:9c:62:0f:89:80:27:7f:cd:ac:
70:da:45:a2:7a:47:60:ba:41:4a:6e:41:97:b8:57:79:ef:83:
03:55:0a:e0:3b:30:8b:aa:45:6c:ee:f2:89:5d:bb:d8:78:ce:
44:bb:46:73:62:67:60:16:9f:5d:ae:c5:3a:16:64:ca:25:a4:
31:f7:d9:5e:23:a6:a1:ae:52:76:5e:17:1b:7d:9c:3b:36:21:
36:c2:93:99:6f:70:14:17:d9:43:52:68:43:13:bc:76:4b:35:
ce:0d:52:f2:b9:ae:1f:ee:e5:73:15:f8:f3:c1:d4:dd:5d:a0:
f4:28:76:b5:74:f5:6e:12:ea:20:98:6d:1e:e4:f7:e5:60:90:
cd:b2:1b:ea:f1:8d:9a:87:df:b0:75:d6:f1:64:b9:14:f8:57:
1e:a3:15:f6:da:05:d9:f2:5d:0f:e1:d0:a0:c1:3c:b6:5f:eb:
e2:d7:bb:b7:b5:0c:15:48:71:24:a3:9f:c4:d5:e4:e9:2b:8a:
c9:90:bf:a8:9e:12:06:3a:9c:32:17:09:0f:ce:f8:96:43:56:
ec:82:b3:e0:e8:2d:ac:15:37:0b:aa:ab:f2:54:e9:02:cb:92:
b6:51:2b:98:55:44:e9:6e:f1:7b:84:48:57:7d:af:67:45:14:
77:8f:4a:dc
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIEOWSmBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzczZGIxNzc5NWQyYmYxYjRiNTM0NWM1YjI5MzkwZGJhZjQ1MjNlMB4XDTIyMDIy
MzA5NTQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjU2OTg1MmFlNjEw
MDJiOGJkZGI4MDQxY2JkZDdhMTk4OTRmNGUxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMuqMY5o6S0W7oAUGwRMzInCevIZFNTljy8Wsq6861RFej2T
D+6jYdr3cU9XzPcM58h7TjTm7qDQz0b28OJ4jV2q7ObIMsCSpSg/BN5oTosckYv8
w0HmslAxJERT0fAn35DKGHvJpn1OsRHSj9paoxnVOo4OLnzWMYl+2LqetltT+/04
IAM00AgB0cvBeCUfYBDo6m5jyV43fmszL56UfcFHdDXGrI3dMUMeo4L+PQ87q7k2
U92W4mcIRXXuZWMPYwzci8K/1houq5ZUFbjnuoqEO/RYrSEsjSU2ta1ZHFCHXsaB
az12AEnaglqGdU6b30t7F/1SWr/vSLXGIuQXq7kCAwEAAaOCAjcwggIzMB0GA1Ud
DgQWBBQlaYUq5hACuL3bgEHL3XoZiU9OGTAfBgNVHSMEGDAWgBQXc9sXeV0r8bS1
NFxbKTkNuvRSPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YzUGJGM2xkS19HMHRUUmNXeWs1RGJyMFVqNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvZjc3Y2JkLTg5M2ItNDYxNi05ZDc2LTU0ODYxZjIzMjQ5ZC8x
L0pXbUZLdVlRQXJpOTI0QkJ5OTE2R1lsUFRoay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
Zjc3Y2JkLTg5M2ItNDYxNi05ZDc2LTU0ODYxZjIzMjQ5ZC8xL0YzUGJGM2xkS19H
MHRUUmNXeWs1RGJyMFVqNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBN
BggrBgEFBQcBBwEB/wQ+MDwwKQQCAAEwIwMEApFmhAMEApFrBAMDAJFuAwQEkXQw
AwQDkXTQAwQDwqtgMA8EAgACMAkDBwAgAQYQASAwDQYJKoZIhvcNAQELBQADggEB
AFfQ/GB3rPF/YpxiD4mAJ3/NrHDaRaJ6R2C6QUpuQZe4V3nvgwNVCuA7MIuqRWzu
8oldu9h4zkS7RnNiZ2AWn12uxToWZMolpDH32V4jpqGuUnZeFxt9nDs2ITbCk5lv
cBQX2UNSaEMTvHZLNc4NUvK5rh/u5XMV+PPB1N1doPQodrV09W4S6iCYbR7k9+Vg
kM2yG+rxjZqH37B11vFkuRT4Vx6jFfbaBdnyXQ/h0KDBPLZf6+LXu7e1DBVIcSSj
n8TV5OkrismQv6ieEgY6nDIXCQ/O+JZDVuyCs+DoLawVNwuqq/JU6QLLkrZRK5hV
ROlu8XuESFd9r2dFFHePStw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org