Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/vyuNY4bEgWLMQLTWpth0LuzNzWk.roa
File: vyuNY4bEgWLMQLTWpth0LuzNzWk.roa (raw, json)
Hash identifier: ROz+oCIhj6gS8+YljI4w+jumjBkU+gH9ifr/5TMmjys=
Subject key identifier: BF:2B:8D:63:86:C4:81:62:CC:40:B4:D6:A6:D8:74:2E:EC:CD:CD:69
Certificate issuer: /CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Certificate serial: 0805D0AD
Authority key identifier: 34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/vyuNY4bEgWLMQLTWpth0LuzNzWk.roa
Signing time: Sat 01 Jan 2022 15:57:38 +0000
ROA not before: Sat 01 Jan 2022 15:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206767
IP address blocks: 185.171.13.0/24 maxlen: 24
185.171.12.0/24 maxlen: 24
185.171.15.0/24 maxlen: 24
185.171.14.0/24 maxlen: 24
2a0d:580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134598829 (0x805d0ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Validity
Not Before: Jan 1 15:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf2b8d6386c48162cc40b4d6a6d8742eeccdcd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:19:c5:97:1c:b8:ee:7b:85:00:b3:14:3a:
32:89:02:37:fe:af:58:3a:da:89:aa:42:3b:6a:dd:
3a:ab:3c:89:b5:6d:ee:55:7f:f6:18:12:b2:c2:de:
4e:25:10:9b:49:a4:ed:1c:10:3d:dc:68:9f:1c:9a:
d7:58:93:cd:a5:23:18:df:81:e7:c8:fc:7b:38:73:
2b:d7:23:3d:54:29:c2:34:cf:12:61:52:9f:f1:d3:
ab:95:91:77:65:e0:b2:8a:2f:1b:f0:a7:ff:63:2b:
9b:1b:62:bd:88:e2:82:53:83:5e:a3:e1:c1:99:16:
43:2a:81:01:84:fc:9a:af:7b:07:f3:21:e9:f9:a8:
0f:65:92:71:ac:d0:ee:a2:b1:c6:66:20:a7:41:82:
be:57:67:ea:69:68:ab:9c:e2:5a:7c:8c:68:9c:2e:
de:61:d2:b1:d0:6b:a1:b9:25:7a:e0:32:8f:27:9e:
c8:ef:22:c1:81:11:f9:28:42:22:78:15:2f:34:62:
56:1b:bd:4a:d0:0b:96:65:0f:59:3c:68:7c:b0:1e:
35:f4:3f:02:23:0d:15:a9:1e:51:26:9c:dc:65:a1:
eb:07:62:a8:8d:7b:a3:ec:27:bd:3e:84:2c:a8:66:
4f:8a:08:d1:8e:be:0a:79:51:4a:7e:f5:3e:65:2c:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:8D:63:86:C4:81:62:CC:40:B4:D6:A6:D8:74:2E:EC:CD:CD:69
X509v3 Authority Key Identifier:
keyid:34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/vyuNY4bEgWLMQLTWpth0LuzNzWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.12.0/22
IPv6:
2a0d:580::/32
Signature Algorithm: sha256WithRSAEncryption
42:3c:1f:c9:d8:32:e0:8a:e5:7b:34:3e:64:ec:de:df:a2:8f:
a8:97:c6:2b:b4:fe:57:60:dc:5c:48:b3:5c:d6:f7:a6:b3:b7:
97:52:8d:75:a4:18:1d:58:87:ae:de:18:cf:04:79:e9:13:f0:
ff:9a:8d:1a:0e:44:a5:ff:75:c4:0f:40:60:5a:0c:5b:a0:0b:
13:d7:f0:47:f6:f6:c6:84:d5:bf:56:c3:69:26:42:1e:57:5e:
7c:64:96:14:ed:10:92:2f:22:a9:85:22:f3:5a:3b:84:60:7f:
39:be:41:fc:78:ee:52:63:d0:10:41:5d:12:61:85:3d:3b:1a:
3b:2b:3a:83:0f:12:97:e9:81:6a:2e:8f:51:44:68:82:e0:0f:
6b:90:f4:c0:7d:2e:11:e0:8f:98:1c:7d:51:01:96:a3:d8:bc:
5c:04:7b:d7:2a:fe:78:38:e3:4b:9a:2d:e1:72:c0:c8:54:f5:
f2:79:40:24:e2:c5:59:61:8a:aa:d4:9b:ec:ca:b9:93:66:19:
8a:71:78:1d:3e:69:12:e7:ca:68:4e:6f:0d:05:82:54:e2:db:
06:35:93:63:4a:d7:93:6a:1a:ac:18:c5:38:65:33:96:76:a3:
fc:aa:62:57:6a:d6:3e:0b:20:15:1a:8c:5a:e9:81:7e:50:9d:
1a:95:0f:0e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECAXQrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDA2YTEyZWNjNTNhMjUxYTc1Y2U3YmFjYWFjOWU0MWFlZThiNGNhMB4XDTIyMDEw
MTE1NTczOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmYyYjhkNjM4NmM0
ODE2MmNjNDBiNGQ2YTZkODc0MmVlY2NkY2Q2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqXGcWXHLjue4UAsxQ6MokCN/6vWDraiapCO2rdOqs8ibVt
7lV/9hgSssLeTiUQm0mk7RwQPdxonxya11iTzaUjGN+B58j8ezhzK9cjPVQpwjTP
EmFSn/HTq5WRd2XgsoovG/Cn/2MrmxtivYjiglODXqPhwZkWQyqBAYT8mq97B/Mh
6fmoD2WScazQ7qKxxmYgp0GCvldn6mloq5ziWnyMaJwu3mHSsdBrobkleuAyjyee
yO8iwYER+ShCIngVLzRiVhu9StALlmUPWTxofLAeNfQ/AiMNFakeUSac3GWh6wdi
qI17o+wnvT6ELKhmT4oI0Y6+CnlRSn71PmUs3SUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS/K41jhsSBYsxAtNam2HQu7M3NaTAfBgNVHSMEGDAWgBQ0BqEuzFOiUadc
57rKrJ5Brui0yjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05BYWhMc3hUb2xHblhPZTZ5cXllUWE3b3RNby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzIvODdmOTJlLTRlNjctNGFjOS05NmM1LWE3NzliYWFhNzU5OS8x
L3Z5dU5ZNGJFZ1dMTVFMVFdwdGgwTHV6TnpXay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIv
ODdmOTJlLTRlNjctNGFjOS05NmM1LWE3NzliYWFhNzU5OS8xL05BYWhMc3hUb2xH
blhPZTZ5cXllUWE3b3RNby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmrDDANBAIAAjAHAwUAKg0FgDAN
BgkqhkiG9w0BAQsFAAOCAQEAQjwfydgy4IrlezQ+ZOze36KPqJfGK7T+V2DcXEiz
XNb3prO3l1KNdaQYHViHrt4YzwR56RPw/5qNGg5Epf91xA9AYFoMW6ALE9fwR/b2
xoTVv1bDaSZCHldefGSWFO0Qki8iqYUi81o7hGB/Ob5B/HjuUmPQEEFdEmGFPTsa
Oys6gw8Sl+mBai6PUURoguAPa5D0wH0uEeCPmBx9UQGWo9i8XAR71yr+eDjjS5ot
4XLAyFT18nlAJOLFWWGKqtSb7Mq5k2YZinF4HT5pEufKaE5vDQWCVOLbBjWTY0rX
k2oarBjFOGUzlnaj/KpiV2rWPgsgFRqMWumBflCdGpUPDg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:53 2023 by rpki-client on console-fra.rpki-client.org