Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/M3882mu7eT6mokY39rIQiSxvE2A.roa
File: M3882mu7eT6mokY39rIQiSxvE2A.roa (raw, json)
Hash identifier: m/Hpp9amoo8CFJPoPSJ0codxelUylVQu6cpwviKptP4=
Subject key identifier: 33:7F:3C:DA:6B:BB:79:3E:A6:A2:46:37:F6:B2:10:89:2C:6F:13:60
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0182BB107B6FAF099EE9138239D8B17534F4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/M3882mu7eT6mokY39rIQiSxvE2A.roa
Signing time: Sat 20 Aug 2022 11:43:15 +0000
ROA not before: Sat 20 Aug 2022 11:43:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/24 maxlen: 24
185.215.245.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
213.173.32.0/22 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:10:7b:6f:af:09:9e:e9:13:82:39:d8:b1:75:34:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 20 11:43:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=337f3cda6bbb793ea6a24637f6b210892c6f1360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:77:11:82:1e:d8:aa:af:72:88:a7:f8:d7:
06:b2:f3:bc:7a:14:60:d2:d2:29:f6:8f:f0:93:63:
0f:bc:d4:c3:55:87:97:df:8c:d9:2d:25:b1:62:ff:
34:ff:e2:2a:3c:32:7c:25:76:90:01:da:f7:a6:d5:
06:9b:63:f0:37:47:23:ef:aa:5b:91:37:91:31:52:
cf:b0:7a:9f:fa:8e:d1:7b:cb:99:13:46:61:b1:a7:
91:43:33:72:24:ea:09:91:7f:47:12:d0:92:91:53:
dc:ae:d4:91:1c:e9:f5:5b:0b:15:6e:88:ed:2b:ff:
c5:2a:14:5f:1f:f8:67:72:0a:d5:b4:86:37:fd:6a:
91:08:3e:a0:7b:d9:43:73:56:e1:fb:ec:2d:e5:74:
0b:ea:66:76:0f:a1:67:9a:a1:4e:b3:a1:71:31:79:
04:5f:a2:91:e3:5f:06:97:df:84:9d:5c:17:4c:56:
3f:86:06:06:4e:7e:40:d4:95:d3:d0:e6:37:8a:0a:
57:74:35:d1:82:59:88:4b:a8:15:c0:d5:75:b6:ed:
61:5b:17:31:17:86:bc:b2:d4:73:9b:e2:58:98:ed:
34:20:54:9b:2c:11:8d:2c:d6:06:58:bb:c5:dc:05:
39:8d:35:93:fe:15:94:03:b9:65:89:b7:1d:27:75:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7F:3C:DA:6B:BB:79:3E:A6:A2:46:37:F6:B2:10:89:2C:6F:13:60
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/M3882mu7eT6mokY39rIQiSxvE2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.24.0/22
185.129.108.0/22
185.215.244.0-185.215.246.255
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
87:c7:f6:c7:86:f5:65:15:48:33:96:ae:4e:29:53:d3:cc:bd:
d1:21:8f:63:d4:ad:19:97:2b:38:7e:fb:0f:c4:73:2e:c9:ed:
56:e2:64:96:d8:ed:76:cc:4f:75:85:3b:cb:0d:6a:f3:d6:8b:
c7:91:c2:ea:c1:b2:14:f6:72:98:70:f6:ec:4d:51:f0:28:00:
21:28:f8:d4:b8:4c:f4:6c:7f:cb:4c:07:51:7b:48:aa:27:d0:
eb:40:10:8d:0c:6c:9e:74:db:67:b6:c9:a6:7d:68:4d:81:d3:
a1:c7:1a:41:13:e3:50:a7:e5:1e:b8:94:0a:86:a2:35:8e:e3:
ea:75:83:2d:55:b3:b9:46:68:ef:1c:6b:b2:26:07:d4:ae:88:
80:96:8f:e0:0e:f1:cc:e1:81:7b:5c:1c:f6:5e:78:db:63:90:
31:92:2f:64:52:12:33:f6:aa:83:5e:37:1a:b9:7f:2f:de:bb:
3b:66:2a:95:2d:81:61:1c:87:f7:7f:b2:e6:0a:25:95:57:8a:
f4:cd:55:da:ac:90:8d:0c:bf:b1:08:4d:d3:f9:ca:68:54:1b:
97:ae:e5:03:13:17:cc:49:bd:59:9b:1b:ec:8e:94:a4:15:02:
6e:ae:06:de:15:d3:04:3a:a9:78:14:33:26:fd:95:6a:2b:ad:
c5:db:f7:85
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYK7EHtvrwme6ROCOdixdTT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjIwODIwMTE0MzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzdmM2NkYTZiYmI3OTNlYTZhMjQ2MzdmNmIyMTA4OTJjNmYxMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ml3EYIe2Kqvcoin+NcGsvO8ehRg
0tIp9o/wk2MPvNTDVYeX34zZLSWxYv80/+IqPDJ8JXaQAdr3ptUGm2PwN0cj76pb
kTeRMVLPsHqf+o7Re8uZE0ZhsaeRQzNyJOoJkX9HEtCSkVPcrtSRHOn1WwsVbojt
K//FKhRfH/hncgrVtIY3/WqRCD6ge9lDc1bh++wt5XQL6mZ2D6FnmqFOs6FxMXkE
X6KR418Gl9+EnVwXTFY/hgYGTn5A1JXT0OY3igpXdDXRglmIS6gVwNV1tu1hWxcx
F4a8stRzm+JYmO00IFSbLBGNLNYGWLvF3AU5jTWT/hWUA7llibcdJ3WcBQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFDN/PNpru3k+pqJGN/ayEIksbxNgMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvTTM4ODJtdTdlVDZtb2tZMzlySVFpU3h2RTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCUnMYAwQC
uYFsMAwDBAK51/QDBAC51/YDBAK53OwDBAC80ZsDBALVrSAwDQYJKoZIhvcNAQEL
BQADggEBAIfH9seG9WUVSDOWrk4pU9PMvdEhj2PUrRmXKzh++w/Ecy7J7VbiZJbY
7XbMT3WFO8sNavPWi8eRwurBshT2cphw9uxNUfAoACEo+NS4TPRsf8tMB1F7SKon
0OtAEI0MbJ5022e2yaZ9aE2B06HHGkET41Cn5R64lAqGojWO4+p1gy1Vs7lGaO8c
a7ImB9SuiICWj+AO8czhgXtcHPZeeNtjkDGSL2RSEjP2qoNeNxq5fy/euztmKpUt
gWEch/d/suYKJZVXivTNVdqskI0Mv7EITdP5ymhUG5eu5QMTF8xJvVmbG+yOlKQV
Am6uBt4V0wQ6qXgUMyb9lWorrcXb94U=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org