Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/RKdVzdY4f3pGHvbMFdqwB_BaNs4.roa
File: RKdVzdY4f3pGHvbMFdqwB_BaNs4.roa (raw, json)
Hash identifier: yVwkCqMjJCobFA9WUzt4EqJUJOM4g6/qvpoqLebuvBs=
Subject key identifier: 44:A7:55:CD:D6:38:7F:7A:46:1E:F6:CC:15:DA:B0:07:F0:5A:36:CE
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0182EB494DBFE8C27D4FC20B6162C227A5A6
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/RKdVzdY4f3pGHvbMFdqwB_BaNs4.roa
Signing time: Mon 29 Aug 2022 20:27:05 +0000
ROA not before: Mon 29 Aug 2022 20:27:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 185.95.102.0/23 maxlen: 24
185.95.101.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.96.38.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
185.97.1.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
185.81.172.0/23 maxlen: 24
185.75.132.0/23 maxlen: 24
185.88.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:eb:49:4d:bf:e8:c2:7d:4f:c2:0b:61:62:c2:27:a5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 29 20:27:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44a755cdd6387f7a461ef6cc15dab007f05a36ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:62:6f:33:8f:c3:53:1c:4c:30:3b:29:56:
d0:03:29:5d:5c:56:40:2a:ee:9d:f9:13:97:6e:af:
2c:69:66:a8:3c:70:73:cc:d1:2f:00:24:39:d2:4d:
60:2c:dd:36:ac:55:84:de:9b:f7:a8:eb:ba:d3:e2:
6f:8b:7d:b0:17:e1:9d:83:54:cb:1e:d6:42:93:4f:
65:c9:be:59:79:e9:12:4d:db:7c:9d:67:99:69:b9:
d0:4e:22:81:10:2e:b7:b7:e8:a2:52:28:85:bf:47:
2b:2c:b1:70:fd:39:c1:55:d2:e3:32:a0:d2:f3:f2:
82:22:19:7d:e8:b0:90:08:88:48:57:dc:73:c6:66:
53:85:9b:59:df:91:9e:56:56:54:52:33:d0:d2:ed:
8a:be:12:a5:7f:30:45:2d:40:53:cc:b4:8a:46:ad:
6c:9f:cc:de:0c:02:be:08:ed:85:42:9e:31:de:f7:
0f:d6:30:a2:f8:8c:c5:6b:09:2b:43:27:b1:fc:f4:
7c:02:44:78:e5:ce:9a:76:74:19:42:17:d2:22:a7:
6a:6a:17:d0:62:38:af:23:b7:92:3b:d7:ea:2f:e4:
9e:46:3e:08:c0:e9:0f:87:e4:d4:94:75:82:49:9a:
2a:af:b6:96:70:6b:89:c6:4c:f8:34:57:a8:7d:28:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A7:55:CD:D6:38:7F:7A:46:1E:F6:CC:15:DA:B0:07:F0:5A:36:CE
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/RKdVzdY4f3pGHvbMFdqwB_BaNs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.132.0/23
185.81.172.0-185.81.174.255
185.81.184.0/24
185.81.187.0/24
185.88.38.0/24
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
185.96.38.0/24
185.96.80.0/24
185.97.1.0/24
185.97.3.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8e:e0:d9:c8:84:60:97:db:a5:94:4f:7d:b0:3c:d0:23:d0:
6b:e6:6f:c9:73:44:b7:85:0a:5e:0e:4a:57:5e:1b:5c:6b:68:
95:90:1e:cf:26:b7:84:86:ee:6f:65:66:ef:30:ac:12:03:ab:
c1:d8:8b:fa:b3:93:45:f6:18:1e:9b:1f:4e:9e:38:68:7a:31:
e0:ed:95:55:94:41:03:2d:f0:ee:45:f7:54:b1:ed:1f:fe:0b:
da:63:1c:c2:93:cf:69:9e:67:81:56:8f:d6:a7:65:99:73:5d:
39:f3:05:3f:eb:c1:5a:32:0f:56:18:3a:31:e6:12:23:fb:6f:
75:7b:52:fe:31:1b:98:1e:0d:55:1a:b3:cd:96:e3:0b:91:61:
70:de:0e:cf:c4:1c:cd:d1:b0:62:7a:af:98:b7:9b:ff:2c:19:
56:ca:ca:10:3d:9e:cf:95:1f:44:38:50:f8:95:65:1f:bc:25:
e7:4a:9f:d1:3e:ac:c1:ba:93:4c:da:9a:62:cd:01:7b:10:b0:
eb:e0:c4:fe:90:47:f8:01:f1:bc:6f:37:fb:c5:8c:d5:ba:8a:
3a:55:7f:86:09:c7:9d:66:b2:d9:0b:19:4c:de:49:1c:5f:12:
a7:da:25:82:76:48:26:5f:b8:18:59:4c:66:fc:4c:7a:ac:f9:
56:7a:08:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAYLrSU2/6MJ9T8ILYWLCJ6WmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjIwODI5MjAyNzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGE3NTVjZGQ2Mzg3ZjdhNDYxZWY2Y2MxNWRhYjAwN2YwNWEzNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjghibzOPw1McTDA7KVbQAyldXFZA
Ku6d+ROXbq8saWaoPHBzzNEvACQ50k1gLN02rFWE3pv3qOu60+Jvi32wF+Gdg1TL
HtZCk09lyb5ZeekSTdt8nWeZabnQTiKBEC63t+iiUiiFv0crLLFw/TnBVdLjMqDS
8/KCIhl96LCQCIhIV9xzxmZThZtZ35GeVlZUUjPQ0u2KvhKlfzBFLUBTzLSKRq1s
n8zeDAK+CO2FQp4x3vcP1jCi+IzFawkrQyex/PR8AkR45c6adnQZQhfSIqdqahfQ
YjivI7eSO9fqL+SeRj4IwOkPh+TUlHWCSZoqr7aWcGuJxkz4NFeofShgTwIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFESnVc3WOH96Rh72zBXasAfwWjbOMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvUktkVnpkWTRmM3BHSHZiTUZkcXdCX0JhTnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQBuUuEMAwD
BAK5UawDBAC5Ua4DBAC5UbgDBAC5UbsDBAC5WCYDBAG5WWgDBAK5WWwwDAMEALlf
ZQMEA7lfYAMEALlgJgMEALlgUAMEALlhAQMEALlhAzANBgkqhkiG9w0BAQsFAAOC
AQEAcI7g2ciEYJfbpZRPfbA80CPQa+ZvyXNEt4UKXg5KV14bXGtolZAezya3hIbu
b2Vm7zCsEgOrwdiL+rOTRfYYHpsfTp44aHox4O2VVZRBAy3w7kX3VLHtH/4L2mMc
wpPPaZ5ngVaP1qdlmXNdOfMFP+vBWjIPVhg6MeYSI/tvdXtS/jEbmB4NVRqzzZbj
C5FhcN4Oz8QczdGwYnqvmLeb/ywZVsrKED2ez5UfRDhQ+JVlH7wl50qf0T6swbqT
TNqaYs0BexCw6+DE/pBH+AHxvG83+8WM1bqKOlV/hgnHnWay2QsZTN5JHF8Sp9ol
gnZIJl+4GFlMZvxMeqz5VnoIuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org