Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/uqxKfNFtmC4bjNYT-2RdE2nIlac.roa
File: uqxKfNFtmC4bjNYT-2RdE2nIlac.roa (raw, json)
Hash identifier: WVdnLVxQs2EuFWiHIat7zQVTDtekOnzW1oGRJgpjn24=
Subject key identifier: BA:AC:4A:7C:D1:6D:98:2E:1B:8C:D6:13:FB:64:5D:13:69:C8:95:A7
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 0B3DF171
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/uqxKfNFtmC4bjNYT-2RdE2nIlac.roa
Signing time: Sat 01 Jan 2022 13:03:52 +0000
ROA not before: Sat 01 Jan 2022 13:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 185.242.206.0/24 maxlen: 24
185.242.205.0/24 maxlen: 24
185.242.204.0/24 maxlen: 24
185.242.207.0/24 maxlen: 24
93.115.92.0/22 maxlen: 24
93.115.80.0/22 maxlen: 24
93.115.80.0/21 maxlen: 24
93.115.88.0/22 maxlen: 22
93.114.40.0/21 maxlen: 24
93.114.41.0/24 maxlen: 24
93.114.42.0/24 maxlen: 24
93.114.46.0/24 maxlen: 24
93.114.45.0/24 maxlen: 24
5.254.0.0/24 maxlen: 24
5.254.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188608881 (0xb3df171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Jan 1 13:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baac4a7cd16d982e1b8cd613fb645d1369c895a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:69:8c:5c:e2:4e:35:09:5e:39:0c:3a:ea:
41:0b:3b:19:4b:81:50:67:80:cc:bc:6a:61:f8:e0:
62:f6:01:db:24:ea:c1:6c:4b:ce:67:8d:56:55:59:
4c:8e:e2:09:84:dc:4c:bc:c1:b7:cf:b7:36:af:43:
59:2c:13:a4:ca:da:08:86:90:b9:03:80:ab:27:f6:
8b:cd:73:32:d4:30:1f:8a:bc:b1:31:4c:6e:03:14:
1a:02:ee:cf:0e:f2:8a:49:e9:bb:2e:80:4e:f3:9c:
7d:28:1d:d7:ab:15:dc:f4:d0:d5:0a:eb:a7:ae:ef:
37:ea:52:91:a9:46:fe:a1:4e:e8:e1:30:88:64:81:
53:51:4d:89:aa:48:57:2e:cb:15:c0:a3:66:83:b0:
64:0d:c3:ee:cc:5e:8a:a9:da:08:10:ff:e3:80:db:
4c:9e:de:6b:79:82:74:6b:ad:53:e2:db:d1:b9:0c:
f8:5d:0d:92:e6:8c:53:47:d4:7e:a8:9e:ef:3d:76:
b0:43:bc:00:a8:05:ee:d1:31:27:41:86:e0:fa:2d:
29:61:74:da:85:78:6e:78:47:d1:49:a1:35:1c:8b:
5a:46:4f:0c:e9:36:c5:a7:e9:e2:91:00:76:6c:45:
49:17:72:cf:cb:92:47:37:66:18:b1:f4:4c:3c:4b:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:4A:7C:D1:6D:98:2E:1B:8C:D6:13:FB:64:5D:13:69:C8:95:A7
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/uqxKfNFtmC4bjNYT-2RdE2nIlac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.0.0/17
93.114.40.0/21
93.115.80.0/20
185.242.204.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f1:de:b7:94:7b:b4:8c:bd:72:7f:6f:36:65:1f:1c:e3:a2:
c0:fa:d0:bf:6a:02:2e:8d:7f:76:9c:aa:84:8d:e7:7c:a7:75:
55:18:97:a9:50:68:8a:28:26:c2:5d:6d:ec:2d:2d:c0:58:31:
48:2c:1c:cf:9f:05:05:f0:d1:57:4d:73:31:dc:bb:6d:4a:db:
61:45:3f:e9:2e:61:79:5e:8f:60:5c:dc:7d:db:22:14:4d:93:
64:96:44:3d:14:c5:8a:b3:a8:fc:b1:39:49:0c:c9:10:31:fe:
1c:a0:50:ce:35:cd:e1:b0:18:0a:d5:cd:88:5e:40:80:d1:b4:
14:b5:77:20:5e:9d:e6:33:4d:33:38:64:0a:ce:e2:70:49:7b:
fc:a0:02:cb:7a:74:31:8d:7e:9e:57:2d:e5:b3:3e:15:87:ed:
57:cb:54:0a:59:10:bd:c8:e8:42:91:d5:2c:89:d7:4e:ab:52:
c5:1f:aa:aa:f5:2c:e9:f0:ad:cd:8a:0f:50:2c:9e:58:48:24:
c1:c2:ca:4e:95:fa:80:6c:84:61:a1:f2:ed:dd:01:d3:4e:af:
83:4f:ea:5d:56:72:99:7f:7a:9e:1c:65:5f:f8:79:ca:97:9d:
ef:c0:13:8b:c1:7c:4a:4b:db:0d:2a:ea:8c:73:7c:cc:8c:6d:
2e:c3:a8:6d
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECz3xcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OTdiNDRjNGE3OTMxYzY2YTZmZjllOTJkYmIzMmNhNzIzZDRjY2Y3MB4XDTIyMDEw
MTEzMDM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFhYzRhN2NkMTZk
OTgyZTFiOGNkNjEzZmI2NDVkMTM2OWM4OTVhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmdaYxc4k41CV45DDrqQQs7GUuBUGeAzLxqYfjgYvYB2yTq
wWxLzmeNVlVZTI7iCYTcTLzBt8+3Nq9DWSwTpMraCIaQuQOAqyf2i81zMtQwH4q8
sTFMbgMUGgLuzw7yiknpuy6ATvOcfSgd16sV3PTQ1Qrrp67vN+pSkalG/qFO6OEw
iGSBU1FNiapIVy7LFcCjZoOwZA3D7sxeiqnaCBD/44DbTJ7ea3mCdGutU+Lb0bkM
+F0NkuaMU0fUfqie7z12sEO8AKgF7tExJ0GG4PotKWF02oV4bnhH0UmhNRyLWkZP
DOk2xafp4pEAdmxFSRdyz8uSRzdmGLH0TDxLrS8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBS6rEp80W2YLhuM1hP7ZF0TaciVpzAfBgNVHSMEGDAWgBRZe0TEp5McZqb/
npLbsyynI9TM9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dYdEV4S2VUSEdhbV81NlMyN01zcHlQVXpQYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvOTVmZjhmLTY2YmMtNGIxMS05OGYwLTBhYjIxYjJmMjc1NC8x
L3VxeEtmTkZ0bUM0YmpOWVQtMlJkRTJuSWxhYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
OTVmZjhmLTY2YmMtNGIxMS05OGYwLTBhYjIxYjJmMjc1NC8xL1dYdEV4S2VUSEdh
bV81NlMyN01zcHlQVXpQYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBwX+AAMEA11yKAMEBF1zUAMEArny
zDANBgkqhkiG9w0BAQsFAAOCAQEAgPHet5R7tIy9cn9vNmUfHOOiwPrQv2oCLo1/
dpyqhI3nfKd1VRiXqVBoiigmwl1t7C0twFgxSCwcz58FBfDRV01zMdy7bUrbYUU/
6S5heV6PYFzcfdsiFE2TZJZEPRTFirOo/LE5SQzJEDH+HKBQzjXN4bAYCtXNiF5A
gNG0FLV3IF6d5jNNMzhkCs7icEl7/KACy3p0MY1+nlct5bM+FYftV8tUClkQvcjo
QpHVLInXTqtSxR+qqvUs6fCtzYoPUCyeWEgkwcLKTpX6gGyEYaHy7d0B006vg0/q
XVZymX96nhxlX/h5yped78ATi8F8SkvbDSrqjHN8zIxtLsOobQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:29 2023 by rpki-client on console-fra.rpki-client.org