Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gS4_fZPItnRRfCYWjnOoy0p1eFI.roa
File: gS4_fZPItnRRfCYWjnOoy0p1eFI.roa (raw, json)
Hash identifier: 0+g2NjKhBcuBp3OJ8NSEmBSExamTOuoDHjw0lHiKzwM=
Subject key identifier: 81:2E:3F:7D:93:C8:B6:74:51:7C:26:16:8E:73:A8:CB:4A:75:78:52
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018484A750EC2CBCBC3A94CE5CE583C43EA4
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gS4_fZPItnRRfCYWjnOoy0p1eFI.roa
Signing time: Thu 17 Nov 2022 08:14:28 +0000
ROA not before: Thu 17 Nov 2022 08:14:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 185.95.102.0/23 maxlen: 24
185.95.101.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
185.81.172.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.96.38.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
185.97.1.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:a7:50:ec:2c:bc:bc:3a:94:ce:5c:e5:83:c4:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 17 08:14:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=812e3f7d93c8b674517c26168e73a8cb4a757852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:f1:c0:1e:2e:c6:f8:0d:fe:04:30:f4:b5:
63:ed:2c:51:a5:c0:d5:09:8d:d2:86:0f:6d:76:0e:
fc:5e:c9:3c:5d:ed:03:d0:bd:13:6d:38:9d:1e:f7:
c5:01:8a:62:4c:a9:25:80:77:b7:58:93:f2:68:eb:
a3:0f:8c:d0:7f:94:83:23:5f:6e:aa:3c:93:09:c0:
93:46:05:61:33:08:03:50:dd:61:66:49:25:4c:90:
bf:8a:20:cd:88:b1:fd:aa:ab:e2:87:0a:2b:c6:47:
3f:da:d6:f3:95:98:f7:a8:5a:95:40:88:28:56:32:
cc:28:7d:a1:77:12:f1:e7:fd:50:33:cf:73:ab:a0:
2d:68:3b:39:05:a6:71:da:2d:fd:88:8d:01:1c:30:
36:8f:46:06:cf:3f:fe:78:f5:32:c9:0f:92:63:cd:
d9:16:50:05:21:5e:f7:81:2b:fd:c3:79:0e:22:f4:
49:98:f9:10:50:ea:5b:95:a4:2a:b9:0d:d0:47:63:
eb:13:10:b0:e6:87:f9:af:a2:ed:6c:43:3b:09:0e:
2a:9f:5b:fc:f8:39:4b:5b:ab:42:95:7d:c9:11:e2:
a0:90:a1:02:42:2f:11:2b:36:5a:f1:b7:1f:0b:ab:
5b:9b:62:26:10:2d:d1:d3:7e:e7:99:29:4e:12:84:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:3F:7D:93:C8:B6:74:51:7C:26:16:8E:73:A8:CB:4A:75:78:52
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gS4_fZPItnRRfCYWjnOoy0p1eFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.172.0-185.81.174.255
185.81.184.0/24
185.81.187.0/24
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
185.96.38.0/24
185.96.80.0/24
185.97.1.0/24
185.97.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f0:3c:9a:67:3c:fa:c7:53:98:94:6b:2c:2a:b3:46:6b:49:
28:9d:d3:1d:c0:4b:c4:bc:2c:f4:df:27:ea:cb:94:e7:27:9e:
e8:d2:b4:07:7a:61:4f:59:b4:80:9d:f3:e4:5f:e9:87:7d:2d:
b0:fd:03:1d:a3:90:ed:bd:a2:ee:ab:29:22:84:54:f9:8e:af:
f1:93:10:22:8a:f0:3b:b8:49:b2:8f:f7:6d:f2:72:7e:f3:7d:
81:68:26:9a:4d:46:2d:25:ef:fd:94:1e:a9:0e:28:f6:95:4b:
32:a5:ea:5f:35:16:fc:39:e3:86:0a:7c:33:e1:bf:97:0e:d9:
06:80:a6:4d:8c:d4:b0:36:31:5c:af:4c:8c:8c:80:fb:d7:c3:
e7:a3:ce:7e:23:84:24:4c:a7:94:cd:7e:6d:48:ce:a1:c0:0e:
f2:b8:bf:61:22:ac:30:8a:7d:01:aa:9f:fd:e7:11:18:5d:33:
34:48:e3:99:81:90:03:78:a5:b8:51:c4:05:56:f7:3f:b3:7e:
2f:f1:81:85:62:ea:54:ad:e3:66:c0:04:80:8a:57:fc:67:58:
77:6b:17:20:e3:68:65:f1:28:07:85:24:e5:c2:ec:41:0e:ae:
5b:c8:2d:6f:34:9d:4b:a7:30:c8:27:fa:56:46:f4:a7:da:ec:
bf:72:6a:ac
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYSEp1DsLLy8OpTOXOWDxD6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjIxMTE3MDgxNDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTJlM2Y3ZDkzYzhiNjc0NTE3YzI2MTY4ZTczYThjYjRhNzU3ODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldPxwB4uxvgN/gQw9LVj7SxRpcDV
CY3Shg9tdg78Xsk8Xe0D0L0TbTidHvfFAYpiTKklgHe3WJPyaOujD4zQf5SDI19u
qjyTCcCTRgVhMwgDUN1hZkklTJC/iiDNiLH9qqvihworxkc/2tbzlZj3qFqVQIgo
VjLMKH2hdxLx5/1QM89zq6AtaDs5BaZx2i39iI0BHDA2j0YGzz/+ePUyyQ+SY83Z
FlAFIV73gSv9w3kOIvRJmPkQUOpblaQquQ3QR2PrExCw5of5r6LtbEM7CQ4qn1v8
+DlLW6tClX3JEeKgkKECQi8RKzZa8bcfC6tbm2ImEC3R037nmSlOEoTnrwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFIEuP32TyLZ0UXwmFo5zqMtKdXhSMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvZ1M0X2ZaUEl0blJSZkNZV2puT295MHAxZUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBAK5UawD
BAC5Ua4DBAC5UbgDBAC5UbsDBAG5WWgDBAK5WWwwDAMEALlfZQMEA7lfYAMEALlg
JgMEALlgUAMEALlhAQMEALlhAzANBgkqhkiG9w0BAQsFAAOCAQEADvA8mmc8+sdT
mJRrLCqzRmtJKJ3THcBLxLws9N8n6suU5yee6NK0B3phT1m0gJ3z5F/ph30tsP0D
HaOQ7b2i7qspIoRU+Y6v8ZMQIorwO7hJso/3bfJyfvN9gWgmmk1GLSXv/ZQeqQ4o
9pVLMqXqXzUW/Dnjhgp8M+G/lw7ZBoCmTYzUsDYxXK9MjIyA+9fD56POfiOEJEyn
lM1+bUjOocAO8ri/YSKsMIp9Aaqf/ecRGF0zNEjjmYGQA3iluFHEBVb3P7N+L/GB
hWLqVK3jZsAEgIpX/GdYd2sXIONoZfEoB4Uk5cLsQQ6uW8gtbzSdS6cwyCf6Vkb0
p9rsv3JqrA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org