Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/vKs6HDcaD4wgKOcY5npam_ilqOU.roa
File: vKs6HDcaD4wgKOcY5npam_ilqOU.roa (raw, json)
Hash identifier: QHnyziICWfGwCxfk2EKaTrTClG+Z8POjN0LycP68LyA=
Subject key identifier: BC:AB:3A:1C:37:1A:0F:8C:20:28:E7:18:E6:7A:5A:9B:F8:A5:A8:E5
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 01842EEBB48A38E25CF4B7739D918D81B05B
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/vKs6HDcaD4wgKOcY5npam_ilqOU.roa
Signing time: Mon 31 Oct 2022 16:41:49 +0000
ROA not before: Mon 31 Oct 2022 16:41:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12307
IP address blocks: 185.119.104.0/23 maxlen: 23
185.119.104.0/24 maxlen: 24
185.119.107.0/24 maxlen: 24
2a06:8a07::/32 maxlen: 32
2a06:8a00::/29 maxlen: 29
2a06:8a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:eb:b4:8a:38:e2:5c:f4:b7:73:9d:91:8d:81:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Oct 31 16:41:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcab3a1c371a0f8c2028e718e67a5a9bf8a5a8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:0c:88:6a:5b:d1:20:19:9a:1b:07:45:48:
56:73:60:10:ff:0c:02:80:1a:4d:1d:f0:9e:34:0a:
f8:09:82:1f:de:6a:06:27:5e:78:70:f1:ee:e1:b9:
fb:22:82:c2:9c:dd:98:2a:ae:45:dd:87:19:c8:9a:
cb:eb:98:57:4d:04:dc:0b:02:7f:29:0f:db:bf:75:
b1:b2:ef:aa:38:98:af:1c:9c:01:d9:57:da:27:4f:
52:3f:db:49:e2:5f:ca:ca:8b:53:b2:b1:3b:4d:bd:
be:31:ff:50:1a:ed:03:e3:94:36:3f:40:d5:ae:30:
14:12:70:50:ff:c2:e1:f3:24:12:8c:8e:c0:e1:0e:
17:e6:08:23:b9:b8:ee:87:91:d1:a1:86:d6:4b:8a:
d1:db:a1:1c:3e:79:1d:01:d3:bc:8e:ff:91:bc:8f:
fe:d4:b6:4e:05:87:28:5d:56:f0:ba:b2:34:fa:75:
93:e6:cd:d0:73:6d:65:82:6b:4b:0c:08:04:b0:14:
44:f2:02:8f:23:41:01:e0:11:1d:43:45:bc:24:0f:
89:bd:85:3d:a1:a4:77:7e:b3:d3:e7:2e:2e:f3:77:
44:64:7a:ee:1c:5c:7a:6b:07:48:95:58:a5:04:6f:
b9:df:c5:e0:96:ed:17:36:08:c3:3a:bb:a7:4f:bf:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:3A:1C:37:1A:0F:8C:20:28:E7:18:E6:7A:5A:9B:F8:A5:A8:E5
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/vKs6HDcaD4wgKOcY5npam_ilqOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.104.0/23
185.119.107.0/24
IPv6:
2a06:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
51:fa:c0:cb:4d:89:e5:76:7c:d0:70:91:41:74:4f:e3:62:2d:
75:93:19:b8:3e:5a:37:5d:2c:0a:1d:7e:52:fb:e3:65:c2:2a:
cd:aa:26:8a:94:87:b7:b6:15:e8:17:e4:49:e4:87:8f:eb:7e:
65:93:9f:4b:57:bf:3b:c2:f5:82:0e:e8:fb:10:4e:14:55:0f:
0c:73:cd:35:cf:6c:43:8e:60:56:0f:3b:16:99:36:a6:e3:ea:
56:de:aa:2c:95:36:69:54:96:ad:12:aa:8e:3b:97:6f:34:48:
68:97:f2:45:14:fa:23:11:eb:c9:19:b4:63:d6:a6:6c:64:a5:
eb:18:74:b9:38:cb:e9:3d:f8:ec:9b:08:56:ff:64:a8:6e:83:
c7:84:87:95:d5:4c:fa:3a:8f:b4:ee:d7:e5:50:b5:13:ad:4e:
87:b2:5c:10:0d:a5:2d:ad:be:24:05:7b:ab:0d:57:1f:a2:3c:
17:35:0c:5a:e0:47:6f:1f:eb:d9:f6:8a:4f:38:4c:ca:03:11:
e5:82:08:9f:5f:a2:b0:61:ff:f4:e5:5f:40:6b:00:89:36:87:
26:d9:fe:5a:76:4d:2f:17:b5:76:8b:4a:a9:cf:7c:41:08:da:
73:ac:7f:0f:be:39:ee:8e:d0:9f:f9:3e:a4:ec:53:77:64:fa:
db:e8:a4:2c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYQu67SKOOJc9LdznZGNgbBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNGU1OWEyMjNmNGJjYjgyMzQ5MmZiMTA5NmMzYTgyMzEw
YzAzZGEwHhcNMjIxMDMxMTY0MTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2FiM2ExYzM3MWEwZjhjMjAyOGU3MThlNjdhNWE5YmY4YTVhOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKYMiGpb0SAZmhsHRUhWc2AQ/wwC
gBpNHfCeNAr4CYIf3moGJ154cPHu4bn7IoLCnN2YKq5F3YcZyJrL65hXTQTcCwJ/
KQ/bv3Wxsu+qOJivHJwB2VfaJ09SP9tJ4l/KyotTsrE7Tb2+Mf9QGu0D45Q2P0DV
rjAUEnBQ/8Lh8yQSjI7A4Q4X5ggjubjuh5HRoYbWS4rR26EcPnkdAdO8jv+RvI/+
1LZOBYcoXVbwurI0+nWT5s3Qc21lgmtLDAgEsBRE8gKPI0EB4BEdQ0W8JA+JvYU9
oaR3frPT5y4u83dEZHruHFx6awdIlVilBG+538Xglu0XNgjDOrunT7/KqwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLyrOhw3Gg+MICjnGOZ6Wpv4pajlMB8GA1UdIwQY
MBaAFDBOWaIj9Ly4I0kvsQlsOoIxDAPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTct
MzQ0Y2M1MDJmMWJkLzEvdktzNkhEY2FENHdnS09jWTVucGFtX2lscU9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTctMzQ0Y2M1MDJmMWJk
LzEvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuXdoAwQA
uXdrMA0EAgACMAcDBQMqBooAMA0GCSqGSIb3DQEBCwUAA4IBAQBR+sDLTYnldnzQ
cJFBdE/jYi11kxm4Plo3XSwKHX5S++NlwirNqiaKlIe3thXoF+RJ5IeP635lk59L
V787wvWCDuj7EE4UVQ8Mc801z2xDjmBWDzsWmTam4+pW3qoslTZpVJatEqqOO5dv
NEhol/JFFPojEevJGbRj1qZsZKXrGHS5OMvpPfjsmwhW/2SoboPHhIeV1Uz6Oo+0
7tflULUTrU6HslwQDaUtrb4kBXurDVcfojwXNQxa4EdvH+vZ9opPOEzKAxHlggif
X6KwYf/05V9AawCJNocm2f5adk0vF7V2i0qpz3xBCNpzrH8PvjnujtCf+T6k7FN3
ZPrb6KQs
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:13 2023 by rpki-client on console-fra.rpki-client.org