Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/qVqkjMOlsP_GR3q7m8wNfd5U0EY.roa
File: qVqkjMOlsP_GR3q7m8wNfd5U0EY.roa (raw, json)
Hash identifier: OQilRyAWmI2EHX/0tK1+aUUXMghqCXu5/yTrtGEnYgc=
Subject key identifier: A9:5A:A4:8C:C3:A5:B0:FF:C6:47:7A:BB:9B:CC:0D:7D:DE:54:D0:46
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 05EC32D0
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/qVqkjMOlsP_GR3q7m8wNfd5U0EY.roa
Signing time: Tue 17 May 2022 11:22:30 +0000
ROA not before: Tue 17 May 2022 11:22:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202914
IP address blocks: 141.98.12.0/24 maxlen: 24
141.98.12.0/22 maxlen: 22
141.98.13.0/24 maxlen: 24
141.98.14.0/23 maxlen: 24
185.121.172.0/22 maxlen: 22
185.121.172.0/23 maxlen: 24
185.121.174.0/24 maxlen: 24
185.121.174.0/23 maxlen: 23
185.121.175.0/24 maxlen: 24
185.150.196.0/22 maxlen: 24
91.210.56.0/22 maxlen: 24
2a0d:3e80::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99365584 (0x5ec32d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: May 17 11:22:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a95aa48cc3a5b0ffc6477abb9bcc0d7dde54d046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:19:4b:af:ce:09:15:8f:0d:0c:5a:a6:ba:
0a:10:92:0d:ac:3d:67:94:63:8c:eb:cf:2d:ee:e1:
a5:d8:a8:6d:16:ec:b0:a7:37:41:13:c1:ff:37:25:
6c:85:23:a0:d3:83:2a:a5:78:dd:29:92:f4:01:c5:
5e:a5:f1:68:bf:53:4c:1a:2a:7a:63:e7:25:eb:de:
4e:26:43:c4:d2:4c:15:7f:9a:16:c8:a6:c5:ea:9f:
ca:4a:34:f1:58:4f:93:bc:be:52:f2:c4:7f:e6:e4:
d3:d4:91:fa:39:b0:2a:17:c2:07:de:fc:ac:05:67:
73:3b:b9:98:61:5f:1e:60:6f:ee:8b:6e:7f:c7:b8:
d4:e6:a3:75:3d:a4:f9:66:f6:61:c2:d4:d1:3d:fd:
b2:7e:9d:f7:06:14:22:65:7e:aa:f5:48:16:b8:52:
c0:f0:4a:3a:02:01:a1:dd:8d:b7:e2:89:a3:52:ea:
4c:43:f9:e9:de:75:5b:a2:1a:42:99:b3:17:83:fd:
aa:5e:b7:6f:cb:c8:8f:72:b2:78:94:a2:fd:0a:32:
f4:8e:2b:48:09:54:b5:01:c0:90:12:57:23:2d:3f:
52:2f:1b:a8:51:27:9c:a3:f9:de:f6:14:1d:d3:09:
ab:ea:03:12:47:28:9b:b7:c3:af:b8:5a:4e:fc:1c:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:A4:8C:C3:A5:B0:FF:C6:47:7A:BB:9B:CC:0D:7D:DE:54:D0:46
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/qVqkjMOlsP_GR3q7m8wNfd5U0EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.56.0/22
141.98.12.0/22
185.121.172.0/22
185.150.196.0/22
IPv6:
2a0d:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
20:98:0f:90:ea:a5:f5:3c:27:79:70:d6:e9:57:2f:48:1b:36:
91:91:25:8e:bb:9a:52:41:9f:ee:66:bb:56:eb:35:36:51:92:
4c:13:50:48:35:26:b5:f8:e4:18:b6:02:b5:e0:fe:07:d5:b5:
3e:f1:86:36:23:fc:a4:0d:77:02:6e:c0:09:47:1b:80:f0:48:
c0:7d:d4:b3:6f:fe:78:b8:eb:99:84:46:58:80:05:01:22:15:
f6:7e:9b:11:49:62:5e:fe:bb:48:68:06:d0:da:1e:bc:a9:31:
c0:8b:eb:3f:de:90:47:22:6d:5c:e1:3e:38:d6:2a:f2:5a:aa:
19:ad:b8:bc:0e:b2:22:49:ea:24:46:94:72:6e:82:06:2c:84:
e1:c5:87:24:29:e7:d0:40:fc:dd:1c:c4:d2:dc:0a:7e:ad:94:
a2:d8:62:76:d4:26:51:fd:54:1f:cd:e0:63:7f:bb:d1:cc:cc:
84:27:63:25:a5:45:76:9c:6b:d7:0c:cb:6b:22:0f:0b:3f:ff:
75:fd:93:bb:4d:b0:27:e4:3a:c9:0e:f3:76:d3:cf:4d:a5:64:
02:4b:e2:3a:f7:30:c9:2e:f0:65:8b:26:cf:7c:98:ad:07:07:
cc:1a:42:b4:2c:f4:e0:d6:4f:1b:3d:04:0f:ea:43:a3:be:54:
24:53:66:3b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBewy0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OWRjZjFlODk3ZTU5OGVjM2YxYWI2MGJkNDQzMzI4NzI2ZGVkYWU0MB4XDTIyMDUx
NzExMjIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk1YWE0OGNjM2E1
YjBmZmM2NDc3YWJiOWJjYzBkN2RkZTU0ZDA0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRoGUuvzgkVjw0MWqa6ChCSDaw9Z5RjjOvPLe7hpdiobRbs
sKc3QRPB/zclbIUjoNODKqV43SmS9AHFXqXxaL9TTBoqemPnJeveTiZDxNJMFX+a
Fsimxeqfyko08VhPk7y+UvLEf+bk09SR+jmwKhfCB978rAVnczu5mGFfHmBv7otu
f8e41OajdT2k+Wb2YcLU0T39sn6d9wYUImV+qvVIFrhSwPBKOgIBod2Nt+KJo1Lq
TEP56d51W6IaQpmzF4P9ql63b8vIj3KyeJSi/Qoy9I4rSAlUtQHAkBJXIy0/Ui8b
qFEnnKP53vYUHdMJq+oDEkcom7fDr7haTvwciTECAwEAAaOCAiowggImMB0GA1Ud
DgQWBBSpWqSMw6Ww/8ZHerubzA193lTQRjAfBgNVHSMEGDAWgBQJ3PHol+WY7D8a
tgvUQzKHJt7a5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Nkeng2SmZsbU93X0dyWUwxRU15aHliZTJ1US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvOWJjNGNjLWI2NDYtNDcwMS04OTc1LTYyM2UxOTlmZGJlOS8x
L3FWcWtqTU9sc1BfR1IzcTdtOHdOZmQ1VTBFWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
OWJjNGNjLWI2NDYtNDcwMS04OTc1LTYyM2UxOTlmZGJlOS8xL0Nkeng2SmZsbU93
X0dyWUwxRU15aHliZTJ1US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAlvSOAMEAo1iDAMEArl5rAMEArmW
xDANBAIAAjAHAwUDKg0+gDANBgkqhkiG9w0BAQsFAAOCAQEAIJgPkOql9TwneXDW
6VcvSBs2kZEljruaUkGf7ma7Vus1NlGSTBNQSDUmtfjkGLYCteD+B9W1PvGGNiP8
pA13Am7ACUcbgPBIwH3Us2/+eLjrmYRGWIAFASIV9n6bEUliXv67SGgG0NoevKkx
wIvrP96QRyJtXOE+ONYq8lqqGa24vA6yIknqJEaUcm6CBiyE4cWHJCnn0ED83RzE
0twKfq2UothidtQmUf1UH83gY3+70czMhCdjJaVFdpxr1wzLayIPCz//df2Tu02w
J+Q6yQ7zdtPPTaVkAkviOvcwyS7wZYsmz3yYrQcHzBpCtCz04NZPGz0ED+pDo75U
JFNmOw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:37 2023 by rpki-client on console-ams.rpki-client.org