Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/dECV9iZ8RIVxrXZQ1zTxTvsVOko.roa
File: dECV9iZ8RIVxrXZQ1zTxTvsVOko.roa (raw, json)
Hash identifier: ENcKDZcuYW8gY/nrm4QZt2RH5RAz3oyTAw9g8t8PXdE=
Subject key identifier: 74:40:95:F6:26:7C:44:85:71:AD:76:50:D7:34:F1:4E:FB:15:3A:4A
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 3BA7750D
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/dECV9iZ8RIVxrXZQ1zTxTvsVOko.roa
Signing time: Thu 05 May 2022 11:58:31 +0000
ROA not before: Thu 05 May 2022 11:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40980
IP address blocks: 144.208.192.0/22 maxlen: 32
144.208.198.0/23 maxlen: 24
144.208.200.0/22 maxlen: 22
185.50.234.0/24 maxlen: 24
2a01:aea0:dd5::/48 maxlen: 48
2a01:aea0:df5::/48 maxlen: 48
2a01:aea0:df3::/48 maxlen: 48
2a01:aea0:dd3::/48 maxlen: 48
2a01:aea0:df4::/48 maxlen: 48
2a01:aea0:dd4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000830221 (0x3ba7750d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: May 5 11:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=744095f6267c448571ad7650d734f14efb153a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:62:a4:ff:45:bd:4a:9a:eb:84:1a:49:55:
3f:d8:9f:64:4c:da:cd:ed:57:24:b6:31:cc:18:eb:
77:c5:7b:7e:9f:a7:e7:c9:ef:e6:8e:22:26:7c:01:
69:ea:a5:a0:87:b9:e9:4b:6f:c2:cf:13:89:87:ff:
a5:4f:8a:f6:90:91:67:70:a1:5b:ca:ae:3f:e9:5e:
54:ad:72:d9:fe:b3:94:54:c7:79:b9:aa:d7:8d:a7:
c1:66:4b:e8:c7:ce:af:9b:fe:9e:b3:fe:58:db:74:
20:a0:0b:e6:e2:f5:ad:db:bf:43:b0:66:7b:f9:be:
a1:fe:9e:36:0c:3a:9a:72:7a:7c:a0:6e:d4:75:ff:
c4:61:f0:13:fc:76:91:b5:3e:ec:3d:b7:4c:51:d2:
72:c3:45:e2:13:d9:fd:d4:a3:b0:de:b0:97:6f:a5:
63:0b:c6:82:2e:e0:66:62:07:15:48:3c:05:30:33:
73:17:fa:e0:e3:9d:5f:3a:60:cf:43:4d:38:ee:08:
cd:a9:7c:14:48:07:c6:f6:c6:7a:8d:23:c9:dd:69:
7c:0d:a0:a0:7a:68:a3:c5:95:41:a0:02:73:4f:15:
08:7b:39:6e:99:83:6c:70:38:d2:9f:eb:ba:8e:49:
bc:16:63:d7:86:70:4f:27:8c:00:e9:d8:ca:70:a6:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:40:95:F6:26:7C:44:85:71:AD:76:50:D7:34:F1:4E:FB:15:3A:4A
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/dECV9iZ8RIVxrXZQ1zTxTvsVOko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.192.0/22
144.208.198.0-144.208.203.255
185.50.234.0/24
IPv6:
2a01:aea0:dd3::-2a01:aea0:dd5:ffff:ffff:ffff:ffff:ffff
2a01:aea0:df3::-2a01:aea0:df5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:ab:e3:13:d9:91:fa:ba:95:ca:ad:9f:88:cf:53:8a:18:cf:
fc:be:df:f2:49:28:f7:1b:13:42:55:ba:ee:94:70:c4:4f:82:
a2:f6:62:cb:67:b7:b4:ea:d3:32:7c:7e:36:db:6b:8e:c7:86:
c7:56:26:f2:7a:c2:4e:20:c3:4d:bf:03:3f:11:a9:4d:07:71:
82:c4:22:f2:4a:a3:dd:4b:ef:cc:21:c0:6c:32:df:c7:68:c5:
dc:3f:f6:2c:30:ed:60:bc:4b:09:a2:de:b5:a4:3c:60:60:a3:
22:94:47:8b:07:fd:a3:51:77:74:cd:89:05:55:ed:d6:fa:63:
08:5f:c1:ad:c2:dc:60:65:49:fd:07:6b:a5:59:2e:05:a9:56:
a6:39:b7:38:a6:ed:bb:44:85:f9:72:91:3f:25:90:45:d1:c4:
7b:56:81:2a:5c:6b:90:d0:5b:bc:f8:54:87:f3:89:38:3d:68:
46:34:a6:40:35:17:50:d4:84:48:4e:98:3a:10:f3:bd:b1:c1:
ad:11:5e:6f:28:f4:53:2b:f9:8e:f9:c9:77:5c:dd:ea:24:c8:
0e:9e:6d:c3:79:c1:f9:59:26:08:48:58:0c:24:40:25:82:1c:
75:90:c3:fa:ab:6a:b4:4d:94:df:20:1c:a8:95:5e:b8:28:33:
23:c1:c6:63
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIEO6d1DTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTM5YWZlYmFjZTg5OWE4ZWUwYmI0ZjhiYjQ0NzVmZTI0N2ExNTI4MB4XDTIyMDUw
NTExNTgzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzQ0MDk1ZjYyNjdj
NDQ4NTcxYWQ3NjUwZDczNGYxNGVmYjE1M2E0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdiYqT/Rb1KmuuEGklVP9ifZEzaze1XJLYxzBjrd8V7fp+n
58nv5o4iJnwBaeqloIe56Utvws8TiYf/pU+K9pCRZ3ChW8quP+leVK1y2f6zlFTH
ebmq142nwWZL6MfOr5v+nrP+WNt0IKAL5uL1rdu/Q7Bme/m+of6eNgw6mnJ6fKBu
1HX/xGHwE/x2kbU+7D23TFHScsNF4hPZ/dSjsN6wl2+lYwvGgi7gZmIHFUg8BTAz
cxf64OOdXzpgz0NNOO4Izal8FEgHxvbGeo0jyd1pfA2goHpoo8WVQaACc08VCHs5
bpmDbHA40p/ruo5JvBZj14ZwTyeMAOnYynCm82sCAwEAAaOCAk0wggJJMB0GA1Ud
DgQWBBR0QJX2JnxEhXGtdlDXNPFO+xU6SjAfBgNVHSMEGDAWgBSlOa/rrOiZqO4L
tPi7RHX+JHoVKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BUbXY2NnpvbWFqdUM3VDR1MFIxX2lSNkZTZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvOThjNGVlLTJmNTktNDVhNy1hZGI2LTc0MTM5NTkxMzEyZS8x
L2RFQ1Y5aVo4UklWeHJYWlExelR4VHZzVk9rby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
OThjNGVlLTJmNTktNDVhNy1hZGI2LTc0MTM5NTkxMzEyZS8xL3BUbXY2NnpvbWFq
dUM3VDR1MFIxX2lSNkZTZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj
BggrBgEFBQcBBwEB/wRUMFIwIAQCAAEwGgMEApDQwDAMAwQBkNDGAwQCkNDIAwQA
uTLqMC4EAgACMCgwEgMHACoBrqAN0wMHASoBrqAN1DASAwcAKgGuoA3zAwcBKgGu
oA30MA0GCSqGSIb3DQEBCwUAA4IBAQBbq+MT2ZH6upXKrZ+Iz1OKGM/8vt/ySSj3
GxNCVbrulHDET4Ki9mLLZ7e06tMyfH4222uOx4bHVibyesJOIMNNvwM/EalNB3GC
xCLySqPdS+/MIcBsMt/HaMXcP/YsMO1gvEsJot61pDxgYKMilEeLB/2jUXd0zYkF
Ve3W+mMIX8GtwtxgZUn9B2ulWS4FqVamObc4pu27RIX5cpE/JZBF0cR7VoEqXGuQ
0Fu8+FSH84k4PWhGNKZANRdQ1IRITpg6EPO9scGtEV5vKPRTK/mO+cl3XN3qJMgO
nm3DecH5WSYISFgMJEAlghx1kMP6q2q0TZTfIByolV64KDMjwcZj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org