Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/ipBL96cBtRE-QDH3u-tc6URMUmE.roa
File: ipBL96cBtRE-QDH3u-tc6URMUmE.roa (raw, json)
Hash identifier: Euvcco8jOgHPGnNHtgcPC9KmQ441jx8RILgl3ivDffw=
Subject key identifier: 8A:90:4B:F7:A7:01:B5:11:3E:40:31:F7:BB:EB:5C:E9:44:4C:52:61
Certificate issuer: /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial: 0E836D3B
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/ipBL96cBtRE-QDH3u-tc6URMUmE.roa
Signing time: Sat 01 Jan 2022 08:55:39 +0000
ROA not before: Sat 01 Jan 2022 08:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 185.155.64.0/24 maxlen: 24
185.155.67.0/24 maxlen: 24
185.187.182.0/24 maxlen: 24
176.98.223.0/24 maxlen: 24
185.187.181.0/24 maxlen: 24
176.98.220.0/24 maxlen: 24
185.187.183.0/24 maxlen: 24
185.187.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243494203 (0xe836d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Validity
Not Before: Jan 1 08:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a904bf7a701b5113e4031f7bbeb5ce9444c5261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:d9:03:77:de:f9:98:dc:1f:c0:0b:2c:e8:
49:f7:91:71:5a:85:0a:2d:07:bb:67:da:8c:5e:17:
27:e0:36:53:44:dc:af:a9:92:82:a6:9f:e5:48:9e:
55:1c:ed:44:a7:39:14:d7:df:0e:c2:c3:4a:de:96:
8f:06:80:a4:e2:63:6e:b7:07:b2:82:ab:c9:01:5e:
32:37:7a:cb:55:00:9b:1b:09:80:e0:fd:dd:26:0f:
6b:05:9c:cd:0a:26:05:7f:8c:1a:2c:97:33:ea:a5:
26:6e:e2:0e:29:8d:cc:aa:71:98:cd:82:f7:38:56:
98:15:dc:42:10:f6:77:a2:6b:da:3b:7d:2c:ed:a7:
29:be:99:05:53:6a:26:4b:3b:11:9e:b5:28:7b:b1:
03:d5:03:6e:1c:68:79:e8:39:36:1d:ab:be:39:da:
43:d1:60:04:9a:07:f7:07:2d:2e:fd:82:c6:22:49:
d8:b2:3b:71:bb:aa:ba:02:81:cb:72:81:c1:0b:11:
cf:7d:ec:9b:02:8d:1d:65:c4:70:59:7e:0d:4a:a4:
7f:70:68:69:ca:30:ae:cc:d7:ee:14:bb:d9:a6:3d:
18:06:3a:a5:1d:4e:39:f5:df:fa:d7:f5:2d:e2:79:
50:7a:f5:f8:45:8b:3f:8e:f8:92:76:0e:85:46:4f:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:4B:F7:A7:01:B5:11:3E:40:31:F7:BB:EB:5C:E9:44:4C:52:61
X509v3 Authority Key Identifier:
keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/ipBL96cBtRE-QDH3u-tc6URMUmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.220.0/24
176.98.223.0/24
185.155.64.0/24
185.155.67.0/24
185.187.180.0/22
Signature Algorithm: sha256WithRSAEncryption
66:3e:d4:d2:df:82:50:f6:52:70:80:5c:6b:f9:f4:ad:17:c9:
e5:aa:31:23:0c:09:a8:22:f1:fa:a0:1d:19:78:d3:77:bd:2f:
a5:ac:46:aa:b5:1f:6f:f3:32:04:06:d8:dc:bb:61:04:b0:ca:
02:38:fb:1c:62:80:ba:10:99:49:83:ad:26:95:39:13:f4:9f:
d1:43:d5:5b:c3:c3:ed:99:b2:f6:e1:ea:06:5d:11:81:8d:c3:
7f:9c:68:51:a6:e4:e0:40:1f:52:0b:85:0d:15:53:da:d5:c6:
5f:c7:a6:e2:76:75:d3:1b:6c:fa:ac:93:7e:90:c6:dc:c7:9f:
d7:13:65:32:39:12:e9:30:80:29:2b:cb:52:4e:f2:b8:84:87:
1c:e8:45:6d:b2:db:1f:70:98:ad:1b:3d:91:60:6a:f5:59:27:
46:76:10:95:6b:f7:6a:19:a9:c2:a3:97:e0:58:db:35:eb:77:
20:d0:9c:ca:61:99:2e:f4:53:2e:88:8a:42:57:b4:5a:e7:78:
e4:24:21:f5:dc:ba:bd:e7:73:ba:08:1f:be:45:ba:89:13:64:
ba:ce:88:a0:e7:a2:24:96:1f:39:76:20:f3:70:76:42:11:59:
ac:18:84:c6:61:2a:91:5c:59:01:67:83:af:a0:2f:5f:ef:e7:
36:da:e6:5b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEDoNtOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
M2FiOGY0NGZjMzU2MDk2YjhlNjU2ZmM4NzM5ODcxZWMwMGQxZjEyMB4XDTIyMDEw
MTA4NTUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGE5MDRiZjdhNzAx
YjUxMTNlNDAzMWY3YmJlYjVjZTk0NDRjNTI2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3k2QN33vmY3B/ACyzoSfeRcVqFCi0Hu2fajF4XJ+A2U0Tc
r6mSgqaf5UieVRztRKc5FNffDsLDSt6WjwaApOJjbrcHsoKryQFeMjd6y1UAmxsJ
gOD93SYPawWczQomBX+MGiyXM+qlJm7iDimNzKpxmM2C9zhWmBXcQhD2d6Jr2jt9
LO2nKb6ZBVNqJks7EZ61KHuxA9UDbhxoeeg5Nh2rvjnaQ9FgBJoH9wctLv2CxiJJ
2LI7cbuqugKBy3KBwQsRz33smwKNHWXEcFl+DUqkf3BoacowrszX7hS72aY9GAY6
pR1OOfXf+tf1LeJ5UHr1+EWLP474knYOhUZPPTUCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSKkEv3pwG1ET5AMfe761zpRExSYTAfBgNVHSMEGDAWgBTDq49E/DVglrjm
VvyHOYcewA0fEjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3c2dVBSUHcxWUphNDVsYjhoem1ISHNBTkh4SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNmU3NGU2LTI2MDMtNDcxMS1hY2UxLTc1YWUxZTZkOWMzMS8x
L2lwQkw5NmNCdFJFLVFESDN1LXRjNlVSTVVtRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NmU3NGU2LTI2MDMtNDcxMS1hY2UxLTc1YWUxZTZkOWMzMS8xL3c2dVBSUHcxWUph
NDVsYjhoem1ISHNBTkh4SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEALBi3AMEALBi3wMEALmbQAMEALmb
QwMEArm7tDANBgkqhkiG9w0BAQsFAAOCAQEAZj7U0t+CUPZScIBca/n0rRfJ5aox
IwwJqCLx+qAdGXjTd70vpaxGqrUfb/MyBAbY3LthBLDKAjj7HGKAuhCZSYOtJpU5
E/Sf0UPVW8PD7Zmy9uHqBl0RgY3Df5xoUabk4EAfUguFDRVT2tXGX8em4nZ10xts
+qyTfpDG3Mef1xNlMjkS6TCAKSvLUk7yuISHHOhFbbLbH3CYrRs9kWBq9VknRnYQ
lWv3ahmpwqOX4FjbNet3INCcymGZLvRTLoiKQle0Wud45CQh9dy6vedzuggfvkW6
iRNkus6IoOeiJJYfOXYg83B2QhFZrBiExmEqkVxZAWeDr6AvX+/nNtrmWw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org