Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/1E6YWw9t6tmJjieQjtH4IOsalx0.roa
File: 1E6YWw9t6tmJjieQjtH4IOsalx0.roa (raw, json)
Hash identifier: //4Oc+c2I1lK0CBWI84l/uAd+4Xar6XD47U+4NUcb5E=
Subject key identifier: D4:4E:98:5B:0F:6D:EA:D9:89:8E:27:90:8E:D1:F8:20:EB:1A:97:1D
Certificate issuer: /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial: 03C7D3FB
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/1E6YWw9t6tmJjieQjtH4IOsalx0.roa
Signing time: Sat 01 Jan 2022 14:57:11 +0000
ROA not before: Sat 01 Jan 2022 14:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199666
IP address blocks: 185.127.220.0/23 maxlen: 23
185.127.222.0/23 maxlen: 23
146.247.64.0/24 maxlen: 24
146.247.64.0/22 maxlen: 22
146.247.66.0/24 maxlen: 24
146.247.70.0/24 maxlen: 24
146.247.70.0/23 maxlen: 23
146.247.67.0/24 maxlen: 24
146.247.68.0/23 maxlen: 23
146.247.68.0/24 maxlen: 24
146.247.65.0/24 maxlen: 24
146.247.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63427579 (0x3c7d3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Validity
Not Before: Jan 1 14:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d44e985b0f6dead9898e27908ed1f820eb1a971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:b7:ea:76:4b:fe:68:5c:e7:de:6f:a9:64:
a4:48:8e:15:4f:be:93:bd:99:15:a6:57:95:84:26:
6e:a6:47:67:a4:6a:c9:e0:21:ff:da:af:62:b3:45:
36:f9:a8:6c:65:ef:84:b4:77:50:8e:86:85:6e:ed:
c7:ad:74:df:5e:1c:bb:79:8d:91:38:1e:73:3a:50:
a4:15:98:e2:92:be:b7:16:8d:48:1e:cb:d3:5e:31:
f8:97:06:29:02:ab:98:0e:6a:5e:97:3b:e1:3d:df:
89:ce:1f:28:d1:81:34:54:c0:f3:1f:1a:8e:03:2a:
e2:24:0c:e1:5a:f5:6c:c3:58:60:b0:b7:4c:fb:54:
9e:ec:10:4f:12:a7:49:fc:64:1a:38:84:db:11:91:
3c:14:20:42:50:d3:a5:ca:df:4c:dd:0f:4c:05:aa:
b9:01:3c:ae:1b:5b:3b:e1:ea:d8:b6:1f:dc:48:c5:
52:18:ad:71:37:dc:52:56:86:65:84:eb:b7:38:6c:
fd:ac:e0:fe:6c:e3:6b:6e:60:f5:5a:1c:b1:e1:a2:
76:5b:20:8e:69:0a:d7:07:ea:dc:7d:b4:db:94:e5:
c9:ce:4c:fc:c9:c0:4d:b4:6f:3d:fd:2f:86:31:6a:
2d:de:6e:e9:ce:4f:db:66:47:62:47:76:06:cd:30:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4E:98:5B:0F:6D:EA:D9:89:8E:27:90:8E:D1:F8:20:EB:1A:97:1D
X509v3 Authority Key Identifier:
keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/1E6YWw9t6tmJjieQjtH4IOsalx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.64.0/21
185.127.220.0/22
Signature Algorithm: sha256WithRSAEncryption
62:aa:37:27:7f:d2:3e:4d:1f:0d:51:53:95:f7:d9:f3:5e:50:
65:a1:b8:b4:0b:bd:ed:5a:0d:c2:2d:f6:5e:63:52:49:57:a1:
38:d5:7d:ab:55:11:9e:ba:3a:0b:1a:84:1a:0c:73:6a:36:d2:
63:82:46:1c:0f:8f:62:33:c5:15:32:08:b6:be:5e:e9:1c:75:
ce:3a:9b:b6:01:98:eb:87:97:31:c3:84:2c:68:31:e5:63:c4:
8a:02:d1:ad:13:e8:33:d4:c7:c2:69:05:b1:02:56:8e:39:d1:
41:9a:c1:20:30:92:73:48:d3:cc:4d:ef:40:07:75:dd:f2:75:
1a:24:99:24:e8:d1:84:f2:32:05:53:70:70:cb:8f:63:80:dd:
f5:84:b6:03:ed:52:95:1a:b7:cc:e9:1c:97:49:5b:9c:d4:6b:
17:49:25:4d:8b:c7:61:06:59:51:d3:1d:31:ee:a4:29:5a:b3:
53:5f:42:c5:17:27:cc:16:a9:a2:37:ac:96:5c:bc:b6:8f:ed:
63:14:82:ad:86:4e:ca:1c:58:ae:d3:21:8b:4b:a6:3d:a7:f7:
e3:ab:73:3e:d8:58:06:90:9f:7c:2f:b2:c9:8b:6a:6f:08:ad:
d5:01:62:c0:de:7c:bf:df:fd:93:2d:2c:47:c4:52:ed:25:8a:
4a:9e:15:f2
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA8fT+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
Y2RjMDdmZGE2ZjRkNTViN2M4MTgyYzkyOWEzYzRhYzNjMGE4MmZkMB4XDTIyMDEw
MTE0NTcxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDQ0ZTk4NWIwZjZk
ZWFkOTg5OGUyNzkwOGVkMWY4MjBlYjFhOTcxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL5Zt+p2S/5oXOfeb6lkpEiOFU++k72ZFaZXlYQmbqZHZ6Rq
yeAh/9qvYrNFNvmobGXvhLR3UI6GhW7tx610314cu3mNkTgeczpQpBWY4pK+txaN
SB7L014x+JcGKQKrmA5qXpc74T3fic4fKNGBNFTA8x8ajgMq4iQM4Vr1bMNYYLC3
TPtUnuwQTxKnSfxkGjiE2xGRPBQgQlDTpcrfTN0PTAWquQE8rhtbO+Hq2LYf3EjF
UhitcTfcUlaGZYTrtzhs/azg/mzja25g9VocseGidlsgjmkK1wfq3H2025Tlyc5M
/MnATbRvPf0vhjFqLd5u6c5P22ZHYkd2Bs0wabkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTUTphbD23q2YmOJ5CO0fgg6xqXHTAfBgNVHSMEGDAWgBQM3Af9pvTVW3yB
gskpo8SsPAqC/TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ROd0hfYWIwMVZ0OGdZTEpLYVBFckR3S2d2MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvZmYxMDc4LWQxOTYtNDZhNS1hNzQxLWVkMzFlNDNmMWUwOC8x
LzFFNllXdzl0NnRtSmppZVFqdEg0SU9zYWx4MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
ZmYxMDc4LWQxOTYtNDZhNS1hNzQxLWVkMzFlNDNmMWUwOC8xL0ROd0hfYWIwMVZ0
OGdZTEpLYVBFckR3S2d2MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA5L3QAMEArl/3DANBgkqhkiG9w0B
AQsFAAOCAQEAYqo3J3/SPk0fDVFTlffZ815QZaG4tAu97VoNwi32XmNSSVehONV9
q1URnro6CxqEGgxzajbSY4JGHA+PYjPFFTIItr5e6Rx1zjqbtgGY64eXMcOELGgx
5WPEigLRrRPoM9THwmkFsQJWjjnRQZrBIDCSc0jTzE3vQAd13fJ1GiSZJOjRhPIy
BVNwcMuPY4Dd9YS2A+1SlRq3zOkcl0lbnNRrF0klTYvHYQZZUdMdMe6kKVqzU19C
xRcnzBapojeslly8to/tYxSCrYZOyhxYrtMhi0umPaf346tzPthYBpCffC+yyYtq
bwit1QFiwN58v9/9ky0sR8RS7SWKSp4V8g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:41 2023 by rpki-client on console-ams.rpki-client.org