Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/KC6hUSAklyCxNB3HsPsAOy-BEH4.roa
File: KC6hUSAklyCxNB3HsPsAOy-BEH4.roa (raw, json)
Hash identifier: A8FeQpP0QS7Y5V3kQyH5McR674sW3sV6UPc8s4iLczo=
Subject key identifier: 28:2E:A1:51:20:24:97:20:B1:34:1D:C7:B0:FB:00:3B:2F:81:10:7E
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 327EC5A2
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/KC6hUSAklyCxNB3HsPsAOy-BEH4.roa
Signing time: Sat 01 Jan 2022 11:03:35 +0000
ROA not before: Sat 01 Jan 2022 11:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197453
IP address blocks: 185.196.116.0/24 maxlen: 24
91.200.86.0/23 maxlen: 23
185.162.232.0/24 maxlen: 24
213.5.224.0/23 maxlen: 23
178.57.80.0/21 maxlen: 21
185.9.84.0/22 maxlen: 22
178.57.88.0/22 maxlen: 22
46.183.176.0/21 maxlen: 21
178.57.95.0/24 maxlen: 24
178.57.93.0/24 maxlen: 24
185.195.243.0/24 maxlen: 24
2a01:bc40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847168930 (0x327ec5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 1 11:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=282ea15120249720b1341dc7b0fb003b2f81107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:1e:50:6a:20:92:b7:a0:cc:81:a0:23:40:
98:62:bf:7c:f7:8a:58:52:72:d5:30:86:d7:be:eb:
07:a0:f1:14:e3:8f:58:03:83:bf:bd:10:99:eb:36:
d7:88:c9:ad:92:9d:80:74:58:02:a4:98:be:a4:98:
b3:f4:bc:f2:85:a5:3f:2b:23:e3:9b:29:74:55:8f:
4b:bd:d6:58:db:65:1a:10:02:cd:9d:e8:46:65:9f:
a1:52:50:65:b6:e5:30:54:4e:7f:e8:e3:88:45:80:
30:fc:35:8f:9f:5a:e6:fe:32:8a:e7:9b:0c:7b:81:
32:d4:0f:1a:be:44:ea:29:ec:e5:02:e4:19:a0:66:
fc:8c:71:ed:99:d7:fe:f8:a9:18:22:c7:6a:68:09:
c5:71:6e:ab:53:6c:3c:d3:86:23:b1:a7:df:cf:1c:
08:20:42:66:9f:c1:a4:8c:aa:80:4b:33:07:50:22:
4f:dc:38:59:94:ef:3a:71:0b:0f:37:9e:15:6d:c4:
2b:cd:8f:f0:72:d0:a3:44:c9:32:71:a5:d6:a9:36:
d6:50:50:5a:e6:4c:ca:1a:c9:b3:d0:4c:0e:e4:05:
b6:56:e2:e6:9a:b4:66:25:f4:80:51:cf:76:de:9f:
a2:ec:3e:c1:f5:16:d6:e1:96:5e:02:12:bc:ea:c9:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:A1:51:20:24:97:20:B1:34:1D:C7:B0:FB:00:3B:2F:81:10:7E
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/KC6hUSAklyCxNB3HsPsAOy-BEH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.176.0/21
91.200.86.0/23
178.57.80.0-178.57.91.255
178.57.93.0/24
178.57.95.0/24
185.9.84.0/22
185.162.232.0/24
185.195.243.0/24
185.196.116.0/24
213.5.224.0/23
IPv6:
2a01:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
06:b1:0e:0b:b2:a9:59:d3:1c:3a:07:9c:c7:d1:8c:41:f9:e3:
25:4b:2d:1b:6f:8f:bc:d7:64:79:61:59:93:50:87:09:d6:cc:
fa:2a:bd:57:c5:16:95:59:ce:01:1a:34:9c:24:80:2a:eb:7f:
9e:bf:07:8e:ee:77:17:49:9b:92:73:8b:43:5b:4b:96:4a:53:
37:8d:16:f5:fe:df:7f:c9:88:51:7b:a6:92:3d:4b:2b:b1:24:
30:3c:58:5a:49:a3:95:fe:32:6b:86:6a:1c:f1:37:78:c0:fe:
32:6c:43:dd:f9:90:69:b5:87:51:c6:66:f8:6a:c1:4a:b1:a4:
f1:6a:a4:c0:3b:9d:02:6f:59:0b:01:58:0b:91:90:56:20:1e:
86:7b:f6:cd:e6:d6:87:72:ab:c4:19:bd:ee:f7:08:46:e4:08:
1f:10:b6:51:31:ea:df:bd:66:31:97:91:52:6f:f1:28:d3:aa:
f0:53:c0:6d:e8:b0:70:17:97:6f:4e:f1:11:11:6b:fe:e5:54:
02:6c:3c:f9:10:98:f0:cd:20:e3:9e:a7:17:36:79:1b:a6:a8:
5c:07:40:74:92:2f:08:9c:d3:6b:3b:31:67:0d:f4:05:90:d1:
9d:8a:f6:ae:d9:d0:be:6a:33:61:9a:1c:d6:ce:29:d5:f7:34:
f9:1d:86:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIEMn7FojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ZmUzZDg4MmM5M2UzOGU4YjZhMjg2YTMxNzdkYzE3ZTk5YWM3MB4XDTIyMDEw
MTExMDMzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjgyZWExNTEyMDI0
OTcyMGIxMzQxZGM3YjBmYjAwM2IyZjgxMTA3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANRUHlBqIJK3oMyBoCNAmGK/fPeKWFJy1TCG177rB6DxFOOP
WAODv70Qmes214jJrZKdgHRYAqSYvqSYs/S88oWlPysj45spdFWPS73WWNtlGhAC
zZ3oRmWfoVJQZbblMFROf+jjiEWAMPw1j59a5v4yiuebDHuBMtQPGr5E6ins5QLk
GaBm/Ixx7ZnX/vipGCLHamgJxXFuq1NsPNOGI7Gn388cCCBCZp/BpIyqgEszB1Ai
T9w4WZTvOnELDzeeFW3EK82P8HLQo0TJMnGl1qk21lBQWuZMyhrJs9BMDuQFtlbi
5pq0ZiX0gFHPdt6fouw+wfUW1uGWXgISvOrJXccCAwEAAaOCAlYwggJSMB0GA1Ud
DgQWBBQoLqFRICSXILE0Hcew+wA7L4EQfjAfBgNVHSMEGDAWgBTEaf49iCyT446L
aihqMXfcF+maxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbi1QWWdzay1PT2kyb29hakYzM0JmcG1zYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvYzQ3NWFiLWZkZDUtNDkyZi04MTNhLTYxZDlhMjNmMzQxMS8x
L0tDNmhVU0FrbHlDeE5CM0hzUHNBT3ktQkVINC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
YzQ3NWFiLWZkZDUtNDkyZi04MTNhLTYxZDlhMjNmMzQxMS8xL3hHbi1QWWdzay1P
T2kyb29hakYzM0JmcG1zYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBs
BggrBgEFBQcBBwEB/wRdMFswSgQCAAEwRAMEAy63sAMEAVvIVjAMAwQEsjlQAwQC
sjlYAwQAsjldAwQAsjlfAwQCuQlUAwQAuaLoAwQAucPzAwQAucR0AwQB1QXgMA0E
AgACMAcDBQAqAbxAMA0GCSqGSIb3DQEBCwUAA4IBAQAGsQ4LsqlZ0xw6B5zH0YxB
+eMlSy0bb4+812R5YVmTUIcJ1sz6Kr1XxRaVWc4BGjScJIAq63+evweO7ncXSZuS
c4tDW0uWSlM3jRb1/t9/yYhRe6aSPUsrsSQwPFhaSaOV/jJrhmoc8Td4wP4ybEPd
+ZBptYdRxmb4asFKsaTxaqTAO50Cb1kLAVgLkZBWIB6Ge/bN5taHcqvEGb3u9whG
5AgfELZRMerfvWYxl5FSb/Eo06rwU8Bt6LBwF5dvTvEREWv+5VQCbDz5EJjwzSDj
nqcXNnkbpqhcB0B0ki8InNNrOzFnDfQFkNGdivau2dC+ajNhmhzWzinV9zT5HYae
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:50 2023 by rpki-client on console-fra.rpki-client.org