Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wPFtlMfzYtSCKXjGtyg4YJAU_0A.roa
File: wPFtlMfzYtSCKXjGtyg4YJAU_0A.roa (raw, json)
Hash identifier: R3CuTbrDCs67Yga3nuBjarVPi1sPfLJj9UQx8GA8cyw=
Subject key identifier: C0:F1:6D:94:C7:F3:62:D4:82:29:78:C6:B7:28:38:60:90:14:FF:40
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0731B513
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wPFtlMfzYtSCKXjGtyg4YJAU_0A.roa
Signing time: Tue 24 May 2022 09:35:16 +0000
ROA not before: Tue 24 May 2022 09:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12222
IP address blocks: 80.67.64.0/24 maxlen: 24
80.67.65.0/24 maxlen: 24
80.67.70.0/24 maxlen: 24
88.221.208.0/24 maxlen: 24
80.67.73.0/24 maxlen: 24
88.221.209.0/24 maxlen: 24
2.22.60.0/24 maxlen: 24
2.16.37.0/24 maxlen: 24
2.16.36.0/24 maxlen: 24
2.22.226.0/24 maxlen: 24
2.22.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120698131 (0x731b513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: May 24 09:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0f16d94c7f362d4822978c6b72838609014ff40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:c8:a8:8a:4c:71:ea:25:e9:e7:ab:91:ab:
fe:db:22:b0:2c:5d:99:19:e3:02:5c:0e:b2:ed:96:
93:67:fc:61:2f:08:20:3b:2e:aa:d7:19:20:76:f6:
ec:50:dd:b2:64:57:33:61:e5:d2:6b:23:3d:87:41:
06:ab:9c:b9:51:1b:a5:d1:61:72:9c:95:dc:dd:4a:
24:32:17:16:18:64:3f:8f:b9:ef:bf:89:54:6e:9f:
df:7a:43:d8:8b:15:b7:0a:40:f0:37:e4:3c:82:1d:
fd:5e:a8:20:78:fc:ef:7a:cc:e1:9b:4e:c3:92:e9:
4a:84:0b:72:d6:38:2d:9a:b8:da:de:68:40:07:37:
df:22:73:3a:e4:c2:46:82:21:2a:ff:d2:2b:bc:b7:
0f:7b:9b:f3:b7:b8:23:11:0b:5f:da:cb:bb:1b:5e:
45:f5:81:61:72:14:87:50:19:72:0f:00:11:48:9f:
75:ff:ef:b5:2d:3a:94:de:96:b6:f9:0b:bd:1e:4f:
1a:0c:26:6c:e1:a0:df:f5:7e:db:9a:4d:a5:8d:88:
4f:50:40:83:1d:bb:df:d4:1b:4e:70:9d:8e:69:0b:
98:4c:4d:09:7d:60:2a:5b:b7:d5:48:2b:d4:77:05:
3e:e5:a0:5c:2f:9f:2d:82:98:11:93:3c:f8:7c:e4:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:6D:94:C7:F3:62:D4:82:29:78:C6:B7:28:38:60:90:14:FF:40
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wPFtlMfzYtSCKXjGtyg4YJAU_0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.36.0/23
2.22.60.0/24
2.22.226.0/23
80.67.64.0/23
80.67.70.0/24
80.67.73.0/24
88.221.208.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:bc:47:b7:56:8c:5a:31:1c:64:12:6d:95:16:9e:3a:9b:e7:
07:a9:74:1b:0b:f8:52:64:05:b9:39:a6:eb:30:73:2b:29:5d:
0e:a6:f8:e3:56:a8:e2:d1:e2:63:1c:d4:2f:39:7d:b5:a0:0e:
cc:00:76:bb:1f:dc:89:dd:d8:25:68:9d:b1:4d:2d:ff:3a:fe:
67:d6:41:1c:0e:c7:39:3c:fb:b8:ff:ff:7b:95:89:a9:b3:e8:
33:59:df:35:85:3c:14:83:34:76:30:b4:4d:ef:3c:aa:31:fd:
79:29:9c:00:1f:79:9e:06:e4:b7:33:f3:3a:87:7e:ea:54:1f:
82:ef:c2:b9:f4:51:0a:10:60:7d:6f:7d:a4:ed:80:d3:9f:2a:
0b:a4:d9:b8:69:57:88:9a:85:80:f9:b9:8b:e2:e8:46:2d:8b:
b0:e0:32:8e:a8:c9:f7:ed:05:56:60:c0:d3:53:68:2e:1e:5d:
d0:a1:5a:a8:bd:c5:b9:a3:c3:c6:52:c1:b5:1f:96:64:82:2a:
67:2e:9f:ca:c8:7c:e9:f7:cc:6c:71:93:a8:6d:3c:0b:d5:80:
bf:8f:66:03:0f:f3:4e:07:57:c6:f1:33:e8:ce:1a:61:70:8d:
dc:bd:21:6a:29:ef:df:0d:f1:41:16:69:d0:85:89:4d:c6:bb:
66:48:64:b8
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEBzG1EzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YjVmY2JiZWE0ODkzN2E0NDJiYWJkYjMzMDIxMzJjNGJjOWJkNmFhMB4XDTIyMDUy
NDA5MzUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzBmMTZkOTRjN2Yz
NjJkNDgyMjk3OGM2YjcyODM4NjA5MDE0ZmY0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMaXyKiKTHHqJennq5Gr/tsisCxdmRnjAlwOsu2Wk2f8YS8I
IDsuqtcZIHb27FDdsmRXM2Hl0msjPYdBBqucuVEbpdFhcpyV3N1KJDIXFhhkP4+5
77+JVG6f33pD2IsVtwpA8DfkPIId/V6oIHj873rM4ZtOw5LpSoQLctY4LZq42t5o
QAc33yJzOuTCRoIhKv/SK7y3D3ub87e4IxELX9rLuxteRfWBYXIUh1AZcg8AEUif
df/vtS06lN6WtvkLvR5PGgwmbOGg3/V+25pNpY2IT1BAgx2739QbTnCdjmkLmExN
CX1gKlu31Ugr1HcFPuWgXC+fLYKYEZM8+HzkvmECAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBTA8W2Ux/Ni1IIpeMa3KDhgkBT/QDAfBgNVHSMEGDAWgBRrX8u+pIk3pEK6
vbMwITLEvJvWqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ExX0x2cVNKTjZSQ3VyMnpNQ0V5eEx5YjFxby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvMDQyMTg4LWRmYjYtNGFkNC05MWE0LTg4ZDFjYWM5ZTRmMS8x
L3dQRnRsTWZ6WXRTQ0tYakd0eWc0WUpBVV8wQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
MDQyMTg4LWRmYjYtNGFkNC05MWE0LTg4ZDFjYWM5ZTRmMS8xL2ExX0x2cVNKTjZS
Q3VyMnpNQ0V5eEx5YjFxby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAQIQJAMEAAIWPAMEAQIW4gMEAVBD
QAMEAFBDRgMEAFBDSQMEAVjd0DANBgkqhkiG9w0BAQsFAAOCAQEAp7xHt1aMWjEc
ZBJtlRaeOpvnB6l0Gwv4UmQFuTmm6zBzKyldDqb441ao4tHiYxzULzl9taAOzAB2
ux/cid3YJWidsU0t/zr+Z9ZBHA7HOTz7uP//e5WJqbPoM1nfNYU8FIM0djC0Te88
qjH9eSmcAB95ngbktzPzOod+6lQfgu/CufRRChBgfW99pO2A058qC6TZuGlXiJqF
gPm5i+LoRi2LsOAyjqjJ9+0FVmDA01NoLh5d0KFaqL3FuaPDxlLBtR+WZIIqZy6f
ysh86ffMbHGTqG08C9WAv49mAw/zTgdXxvEz6M4aYXCN3L0hainv3w3xQRZp0IWJ
Tca7ZkhkuA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org