Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/9cKiyAHPjJwydx1Sn0fRW92DeC0.roa
File: 9cKiyAHPjJwydx1Sn0fRW92DeC0.roa (raw, json)
Hash identifier: aAVLzcp2ecEstknYtBFIYXla+cPAFKcEctZPATbl0nc=
Subject key identifier: F5:C2:A2:C8:01:CF:8C:9C:32:77:1D:52:9F:47:D1:5B:DD:83:78:2D
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 0216F4
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/9cKiyAHPjJwydx1Sn0fRW92DeC0.roa
Signing time: Mon 23 May 2022 13:19:30 +0000
ROA not before: Mon 23 May 2022 13:19:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205940
IP address blocks: 185.201.140.0/23 maxlen: 23
185.201.142.0/24 maxlen: 24
2a0a:c540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136948 (0x216f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: May 23 13:19:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5c2a2c801cf8c9c32771d529f47d15bdd83782d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:0a:81:06:91:32:f6:12:8d:78:e2:b6:7a:
39:1d:c2:91:c0:e9:86:af:a0:9a:b6:72:49:4c:af:
84:19:90:b1:30:9c:47:37:3d:57:77:af:4e:67:30:
72:c5:e9:94:f8:98:08:44:1b:50:85:7e:4c:14:3f:
f6:ce:68:4c:6c:b7:33:89:49:2b:8c:99:fd:cc:85:
81:21:cb:e0:ba:43:64:5e:ba:5b:29:3f:bf:18:9f:
95:89:fe:08:e1:c3:60:91:ba:6f:f2:93:28:c5:0b:
bf:b6:50:a4:5e:e6:f6:50:29:b0:50:73:05:f7:e1:
ae:83:0c:c6:06:ae:a0:de:5b:e6:e2:a6:d5:01:b8:
9d:29:63:5f:22:c3:27:54:b1:da:3e:86:05:26:9a:
f6:9f:07:3f:64:2b:53:0f:28:b9:98:99:f5:a2:d8:
1f:11:3c:5e:e0:7f:71:19:2e:2a:10:16:98:b5:7a:
c1:e9:46:b1:cd:bf:3a:94:5f:b2:50:52:44:de:03:
aa:ad:1a:b3:3e:c4:e2:7c:0b:23:79:9f:80:07:9e:
02:3d:87:87:4c:f5:12:fe:be:90:f4:d6:84:5d:99:
7f:84:d2:eb:9e:71:9f:6d:50:2f:a9:da:09:1e:86:
e0:81:e2:4f:b6:62:4e:b5:3d:ea:f8:33:be:46:9d:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:A2:C8:01:CF:8C:9C:32:77:1D:52:9F:47:D1:5B:DD:83:78:2D
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/9cKiyAHPjJwydx1Sn0fRW92DeC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.140.0-185.201.142.255
IPv6:
2a0a:c540::/29
Signature Algorithm: sha256WithRSAEncryption
22:12:f0:33:92:6f:60:fa:1d:1b:c3:31:e0:49:85:92:c0:8b:
03:d7:9d:cb:5a:fb:59:f2:cd:28:d9:46:1e:77:7e:39:45:c8:
12:d0:f6:0c:e6:7b:11:e2:45:dc:02:c7:ee:c8:7f:51:15:7b:
4f:3b:ff:e6:51:3e:9e:7b:0b:18:c2:84:c7:45:18:1f:ed:b2:
94:80:73:56:28:75:e7:3e:3d:73:3f:39:98:b3:13:ee:7f:55:
ed:96:93:2a:e0:6d:48:d3:b2:f8:8d:ad:8e:dc:78:75:1c:69:
42:16:3c:a3:51:47:84:02:ef:6b:7f:88:c6:c8:85:f1:6b:98:
72:d7:f5:44:84:3b:da:df:bd:f4:a0:2a:9a:7d:9e:e7:40:0c:
19:b5:fa:d2:42:42:52:a1:52:ce:6d:71:69:a4:16:76:ab:78:
e2:e3:f2:21:ef:2f:cb:65:90:04:25:84:40:ff:d8:55:3a:df:
bc:58:af:49:6d:f9:6a:1f:68:10:61:19:1e:c3:1e:eb:62:96:
bb:f6:60:0c:c9:35:65:0f:5e:7f:6d:c5:5f:0b:3c:7d:92:0b:
c9:4f:82:74:1e:44:53:8c:10:52:aa:86:17:fa:4b:a4:4b:04:
22:5d:48:b1:79:cb:56:c6:6e:f0:c2:f1:ba:39:10:d2:22:10:
8d:55:b2:46
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIDAhb0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
NzE5NGY0YjUyYjlmZjQzM2YyYmYwZDE2YjU4YzExYzdjZjExMzEwHhcNMjIwNTIz
MTMxOTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNWMyYTJjODAxY2Y4
YzljMzI3NzFkNTI5ZjQ3ZDE1YmRkODM3ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk9MKgQaRMvYSjXjitno5HcKRwOmGr6CatnJJTK+EGZCxMJxH
Nz1Xd69OZzByxemU+JgIRBtQhX5MFD/2zmhMbLcziUkrjJn9zIWBIcvgukNkXrpb
KT+/GJ+Vif4I4cNgkbpv8pMoxQu/tlCkXub2UCmwUHMF9+GugwzGBq6g3lvm4qbV
AbidKWNfIsMnVLHaPoYFJpr2nwc/ZCtTDyi5mJn1otgfETxe4H9xGS4qEBaYtXrB
6Uaxzb86lF+yUFJE3gOqrRqzPsTifAsjeZ+AB54CPYeHTPUS/r6Q9NaEXZl/hNLr
nnGfbVAvqdoJHobggeJPtmJOtT3q+DO+Rp2u+wIDAQABo4ICIDCCAhwwHQYDVR0O
BBYEFPXCosgBz4ycMncdUp9H0Vvdg3gtMB8GA1UdIwQYMBaAFClxlPS1K5/0M/K/
DRa1jBHHzxExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
S1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMzLzEv
OWNLaXlBSFBqSnd5ZHgxU24wZlJXOTJEZUMwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84
MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMzLzEvS1hHVTlMVXJuX1F6
OHI4TkZyV01FY2ZQRVRFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYG
CCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5yYwDBAC5yY4wDQQCAAIwBwMF
AyoKxUAwDQYJKoZIhvcNAQELBQADggEBACIS8DOSb2D6HRvDMeBJhZLAiwPXncta
+1nyzSjZRh53fjlFyBLQ9gzmexHiRdwCx+7If1EVe087/+ZRPp57CxjChMdFGB/t
spSAc1Yodec+PXM/OZizE+5/Ve2WkyrgbUjTsviNrY7ceHUcaUIWPKNRR4QC72t/
iMbIhfFrmHLX9USEO9rfvfSgKpp9nudADBm1+tJCQlKhUs5tcWmkFnareOLj8iHv
L8tlkAQlhED/2FU637xYr0lt+WofaBBhGR7DHutilrv2YAzJNWUPXn9txV8LPH2S
C8lPgnQeRFOMEFKqhhf6S6RLBCJdSLF5y1bGbvDC8bo5ENIiEI1VskY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:30 2024 by rpki-client on console-fra.rpki-client.org